Netgear S3300-28X (GS728TX) 24x1GE - Manuals

5 S3300 Smart Managed Pro Switch Configure OUI-Based Auto-VoIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155Display Auto-VoIP Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156 Spanning Tree Protocol . . . . . . . . . . . . . . . ...

6 S3300 Smart Managed Pro Switch VLAN Routing Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215 Configure Router Discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216 Configure and View Routes . . . . . . . . . ....

7 S3300 Smart Managed Pro Switch Storm Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266Port Security Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267Port Security Interface Configuration ....

8 S3300 Smart Managed Pro Switch Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318Port Detailed Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 319EAP Statistics. . . . . . . . . ...

9 1 1. Getting Started This manual describes how to configure and operate the ProSAFE ® S3300 Smart Switch family by using the web-based graphical user interface (GUI). The manual describes the software configuration procedures and explains the options available within those procedures. The S3300 sw...

Getting Started 11 S3300 Smart Managed Pro Switch Getting Started with the NETGEAR Switch This chapter provides an overview of starting your NETGEAR switch and accessing the user interface. It also leads you through the steps to use the Smart Control Center (SCC) application, which can be downloaded...

Getting Started 12 S3300 Smart Managed Pro Switch Switch Management Interface The NETGEAR switch contains an embedded web server and management software for managing and monitoring switch functions. The NETGEAR switch functions as a simple switch without the management software. However, you can use...

Getting Started 13 S3300 Smart Managed Pro Switch Connect the Switch to the Network To enable remote management of the switch through a web browser or SNMP, you must connect the switch to the network and configure it with network information (an IP address, subnet mask, and default gateway). The swi...

Getting Started 14 S3300 Smart Managed Pro Switch Discover a Switch in a Network with a DHCP Server This section describes how to set up your switch in a network that has a DHCP server. The DHCP client on the switch is enabled by default. When you connect it to your network, the DHCP server will aut...

Getting Started 15 S3300 Smart Managed Pro Switch Figure 2. Smart Control Center - Device List 7. Select your switch by clicking the line that displays the switch, then click the Web Browser Access button. The Smart Control Center launches a browser that displays the login screen of the selected dev...

Getting Started 16 S3300 Smart Managed Pro Switch Discover a Switch in a Network without a DHCP Server This section describes how to use the Smart Control Center to set up your switch in a network without a DHCP server. If your network has no DHCP service, you must assign a static IP address to your...

Getting Started 17 S3300 Smart Managed Pro Switch Figure 3. Smart Control Center - Configure Device 9. Type your password to continue with the configuration change. Tip: You must enter the current password every time you use the Smart Control Center to update the switch setting. The default password...

Getting Started 18 S3300 Smart Managed Pro Switch The method to change the IP address on an administrative system varies depending on the operating system version. You need Windows Administrator privileges to change these settings. The following procedures show how to change the static IP address on...

Getting Started 19 S3300 Smart Managed Pro Switch Figure 5. Local Area Connection Properties Window 4. Select the Internet Protocol Version 4 (TCP/IPv4) option, and then click the Properties button. The Internet Protocol Version 4 (TCP/IPv4) Properties window appears. 5. Select the Use the following...

Getting Started 20 S3300 Smart Managed Pro Switch WARNING: When you change the IP address of your administrative system, you lose your connection to the rest of the network. Be sure to write down your current network address settings before you change them. Figure 6. IP Address Settings 6. Click the...

Getting Started 21 S3300 Smart Managed Pro Switch Access the Management Interface from a Web Browser To access the switch management interface, use one of the following methods: • From the Smart Control Center, select the switch and click the Web Browser Access button. For more information, see the ...

Getting Started 22 S3300 Smart Managed Pro Switch • Microsoft Edge • Mozilla Firefox versions 40, 46.0.1 • Chrome version 45 • Safari on Windows OS 5.1, 6.0 • Safari on Mac OS 8.0  To log on to the web interface: 1. Open a web browser and enter the IP address of the switch in the web browser addres...

Getting Started 23 S3300 Smart Managed Pro Switch Navigation Tabs, Configuration Menus, and Screen Menu The navigation tabs along the top of the web interface give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which feature you con...

Getting Started 24 S3300 Smart Managed Pro Switch Device View The Device View is a Java ® applet that displays the ports on the switch. This graphic provides an alternate way to navigate to configuration and monitoring options. The graphic also provides information about device ports, current config...

Getting Started 26 S3300 Smart Managed Pro Switch Figure 13. Device View S3300-52X Port Menu If you click the graphic but do not click a specific port, the main menu appears, as Figure 14, Device View Main Menu shows. This menu contains the same option as the navigation menu at the top of the screen...

Getting Started 27 S3300 Smart Managed Pro Switch Power/Status LED The Power LED is a bicolor LED that serves as an indicator of power and diagnostic status. The following indications are given by the following LED states: • A solid green LED indicates that the power is supplied to the switch and op...

Getting Started 29 S3300 Smart Managed Pro Switch Use SNMPv3 The switch software supports the configuration of SNMP groups and users that can manage traps that the SNMP agent generates. The switch uses both standard public MIBs for standard functionality and private MIBs that support additional swit...

Getting Started 30 S3300 Smart Managed Pro Switch Interface Naming Convention The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. All the physical ports are as follows: • S3300-28X. The ProSafe S3300-28X Smart switch is a stackable s...

Getting Started 32 S3300 Smart Managed Pro Switch Configuring Interface Settings For some features that allow you to configure interface settings, you can apply the same settings simultaneously to any of the following: • A single port • Multiple ports • All ports • A single LAG • Multiple LAGs • All...

Getting Started 36 S3300 Smart Managed Pro Switch 4. Click the Apply button. The settings you configure in the heading row are applied to all ports and LAGs. Online Help The Help main navigation tab of the web management interface provides access to the menus that are described in the following sect...

Getting Started 37 S3300 Smart Managed Pro Switch Registration To qualify for product updates and product warranty, NETGEAR encourages you to register your product. The first time that you connect to the switch while it is connected to the Internet, you have the option to register your product. At a...

38 2 2. Configure System Information Use the features you access from the System navigation tab to define the switch’s relationship to its environment. The System navigation tab provides access to the configuration menus described in the following sections: • Management on page 39 • Device View on p...

Configure System Information 39 S3300 Smart Managed Pro Switch Management This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information. From the Management configuration menu...

Configure System Information 40 S3300 Smart Managed Pro Switch 2. Define the following fields: • System Name . Enter the name you want to use to identify this switch. You can use up to 255 alphanumeric characters. The factory default is blank. • System Location . Enter the location of this switch. Y...

Configure System Information 41 S3300 Smart Managed Pro Switch Figure 21. System Information - Temperature Sensors Status The following table describes the status information displayed in the Temperature Sensors section of the System Information screen. Table 5. System Information - Temperature Sens...

Configure System Information 42 S3300 Smart Managed Pro Switch Power Supplies This screen shows the power supplies status. Figure 23. System Information - Power Supplies Status The following table describes the status information displayed in the Power Supplies section of the System Information scre...

Configure System Information 43 S3300 Smart Managed Pro Switch The following table describes the information displayed in the Versions section of the System Information screen. Table 8. System Information - Versions Information Fields Field Description Unit No. The unit number of the switch. Model N...

Configure System Information 44 S3300 Smart Managed Pro Switch Figure 25. System CPU Status - Unit CPU Utilization Table 9 describes the information that the System CPU Status screen displays. Table 9. System CPU Status > CPU Memory Status Field Description CPU Memory Status Total System Memory T...

Configure System Information 45 S3300 Smart Managed Pro Switch Figure 26. CPU Threshold The CPU Threshold screen allows you to configure thresholds that, when crossed, trigger a notification. The notification is done via SNMP trap and SYSLOG messages. 1. Define the CPU Threshold fields listed in Tab...

Configure System Information 46 S3300 Smart Managed Pro Switch  To display the USB Device Information page: 1. Select System > Management > USB Device Information. 2. The USB Device Information screen displays as shown in Figure 27, USB Device Information . 3. Click Update to update the infor...

Configure System Information 47 S3300 Smart Managed Pro Switch Slot Information Use the Slot Information screen to display details about the different slots in the different units in the switch stack.  To display the Slot Information: Select System > Management > Slot Information. Table 12 de...

Configure System Information 48 S3300 Smart Managed Pro Switch Click Update to update the page with the latest information on the switch. IP Configuration Use the IP Configuration screen to configure network information for the management interface, which is the logical interface used for in-band co...

Configure System Information 49 S3300 Smart Managed Pro Switch • Static IP Address . Specifies that the IP address, subnet mask, and default gateway must be manually configured. Enter this information in the fields below this radio button. 3. If you selected the Static IP Address option, configure t...

Configure System Information 50 S3300 Smart Managed Pro Switch IPv6 Network Configuration Use the IPv6 Network Configuration screen to configure the IPv6 network interface, which is the logical interface used for in-band connectivity with the switch through all of the switch’s front-panel ports. The...

Configure System Information 51 S3300 Smart Managed Pro Switch features to acquire an IPv6 address. Auto configuration can be enabled only when DHCPv6 is not enabled on any of the management interfaces. • DHCPv6 . Next to Current Network Configuration Protocol, select DHCPv6 to enable the DHCPv6 cli...

Configure System Information 52 S3300 Smart Managed Pro Switch IPv6 Network Neighbor Use the IPv6 Network Neighbor screen to view information about the IPv6 neighbors the device has discovered through the network interface by using the Neighbor Discovery Protocol (NDP).  To display the IPv6 Network...

Configure System Information 53 S3300 Smart Managed Pro Switch Time The switch supports the Simple Network Time Protocol (SNTP). You can also set the system time manually. SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a ne...

Configure System Information 55 S3300 Smart Managed Pro Switch 4. If the SNTP client mode is Unicast , use the SNTP Server Configuration screen to add the IP address or DNS name of one or more SNTP servers for the switch to poll. For more information, see SNTP Server Configuration on page 57. 5. In ...

Configure System Information 56 S3300 Smart Managed Pro Switch Figure 33. Time > SNTP Global Status The following table describes the SNTP Global Status fields. Table 14. Time Configuration status fields Field Description Version Specifies the SNTP version the client supports. Supported Mode Spec...

Configure System Information 58 S3300 Smart Managed Pro Switch Figure 34. SNTP Server Configuration 2. From the Server Type list, select the type of SNTP address to enter in the Address field, which is either an IP address (IPv4) or hostname (DNS). 3. In the Address field, specify the IP address or ...

Configure System Information 59 S3300 Smart Managed Pro Switch  To remove an SNTP server: 1. Select the check box next to the configured server to remove. 2. Click the Delete button.  To change the settings for an existing SNTP server: 1. Select the check box next to the configured server. 2. Spec...

Configure System Information 61 S3300 Smart Managed Pro Switch - Day . Use this field to configure the end day. - Month . Use this field to configure the end month. - Hours . Use this field to configure the end hours. - Minutes . Use this field to configure the end minutes. 4. In the Offset field, s...

Configure System Information 62 S3300 Smart Managed Pro Switch Configure Auto-DoS The Auto- DoS Configuration screen lets you automatically enable all the DoS features available on the switch, except for the L4 Port attack. For information about the types of DoS attacks the switch can monitor and bl...

Configure System Information 63 S3300 Smart Managed Pro Switch Figure 37. Denial of Service Configuration 2. Select the types of DoS attacks for the switch to monitor and block and configure any associated values: • Denial of Service Min TCP Header Size . Specify the minimum TCP header size allowed....

Configure System Information 64 S3300 Smart Managed Pro Switch • Denial of Service Max ICMPv6 Packet Size . Specify the maximum IPv6 ICMP packet size allowed. If ICMPv6 DoS prevention is enabled, the switch will drop IPv6 ICMP ping packets that have a size greater than this configured maximum ICMPv6...

Configure System Information 65 S3300 Smart Managed Pro Switch Configure DNS Use this screen to configure global DNS settings and DNS server information.  To configure the global DNS settings: 1. Select System > Management > DNS > DNS Configuration . Figure 38. DNS Configuration 2. Specify...

Configure System Information 66 S3300 Smart Managed Pro Switch The Dynamic Host Configuration table shows host name-to-IP address entries that the switch has learned. The following table describes the dynamic host fields: Table 16. Dynamically learned host name mapping information Field Description ...

Configure System Information 67 S3300 Smart Managed Pro Switch  To change the host name or IP address in an entry: 1. Select the check box next to the entry to update. 2. Enter the new information in the appropriate field. 3. Click the Apply button. Green Ethernet Use this screen to configure Green...

Configure System Information 68 S3300 Smart Managed Pro Switch Figure 41. Green Ethernet Interface Configuration 2. Select one or more ports to configure. • To configure a single port, select the check box associated with it, or type the port number in the Go To Interface field and click the Go butt...

Configure System Information 72 S3300 Smart Managed Pro Switch  To display Green Ethernet mode settings for a Remote Device Figure 43. Remote Device Information 1. From the Interface list, select the interface. Table 18, Green Ethernet Local Device Information displays the following non-configurabl...

Configure System Information 73 S3300 Smart Managed Pro Switch Figure 44. Green Ethernet Summary Table 19, Green Ethernet statistics summary describes the information the Green Ethernet Statistics Summary table displays. Table 19. Green Ethernet statistics summary Field Description Current Power Con...

Table 20. Green Ethernet feature summary Field Description Unit The unit ID number, which is always 1. Green Features supported on this unit The Green Ethernet features the switch supports. Configure System Information 74 S3300 Smart Managed Pro Switch Table 20, Green Ethernet feature summary descri...

Configure System Information 75 S3300 Smart Managed Pro Switch Figure 45. Green Ethernet LPI History 2. In the Sampling Interval field, specify the frequency, in seconds, at which EEE LPI history. 3. In the Max Samples to keep field, specify the maximum number of LPI samples to keep in the history b...

Configure System Information 76 S3300 Smart Managed Pro Switch Device View For Device View information, see Device View on page 24. License Some switch features require a special license in order to be active. If a license is not active, the feature associated with the license is not available and c...

Configure System Information 77 S3300 Smart Managed Pro Switch Switch Stack Configuration Stacking Overview A stackable switch is a switch that is a fully functional operating standalone, but can also be set-up to operate together with up to six switches, with this group of switches showing the char...

Configure System Information 78 S3300 Smart Managed Pro Switch the ability to synchronize the software on the stack unit with the software that is running on the stack manager. Normally, the software is automatically distributed to all units in the stack after downloading new code, but there can be ...

Configure System Information 79 S3300 Smart Managed Pro Switch Note: NETGEAR recommends assigning the highest priority value to the switch that you prefer to be the stack manager. This ensures that the switch is re-elected as stack manager if a re-election occurs. • The switch with the higher MAC ad...

Configure System Information 80 S3300 Smart Managed Pro Switch b. All stacking functionalities of the S3300 extend to these two M4300 platforms. However, Non-Stop Forwarding (NSF) is not supported. c. Either S3300 or M4300 can be stack master or standby. d. CLI under the console port is not supporte...

Configure System Information 81 S3300 Smart Managed Pro Switch Stack Sample Mode  To configure the stack sampling parameters: 1. Select the Stack Sample Mode . The global status management mode which can be: • Cumulative. This tracks the sum of received time stamp offsets cumulatively. • History . ...

Configure System Information 82 S3300 Smart Managed Pro Switch highest priority value will be chosen to become primary unit. If the value is set to 0, then that switch unit never participates in Manager Election. 5. Select the Management Status. Indicates whether the selected switch is the managemen...

Configure System Information 83 S3300 Smart Managed Pro Switch Table 25. Basic Stack Table 26. Field Description Unit ID The Unit ID of the specific switch. Switch Description The description for the unit that can be configured by the user. Serial Number The unique box serial number for this switch....

Configure System Information 84 S3300 Smart Managed Pro Switch Figure 47. Advanced Stack Status The following table describes the non-configurable Advanced Stack Status data that is displayed. Click Refresh to update the page with the latest information on the switch. Table 27. Advanced Stack Status...

Configure System Information 85 S3300 Smart Managed Pro Switch Advanced Stack-Port Configuration  To configure a Stack-port: 1. Click System > Stacking > Advanced > Stack-port Configuration. Figure 48. Stack-Port Configuration 2. Select either the Unit ID or All . • Select the Unit ID fiel...

Configure System Information 86 S3300 Smart Managed Pro Switch Advanced Stack-Port Diagnostics  To display Stack-port diagnostics: Use the Stack-port Diagnostics page to display the diagnostics for all the stack-ports in the given stack. 1. Click System > Stacking > Advanced > Stack-port D...

Configure System Information 88 S3300 Smart Managed Pro Switch The behavior of Firmware Synchronization is the same whether the system is powered on after connecting all the new members or if a new member is adding during the running operation of the stack. Stack Firmware Synchronization starts only...

Configure System Information 90 S3300 Smart Managed Pro Switch PoE Use this screen to configure a few system-level PoE parameters per unit. In other words, the parameters are specific to the whole unit, not specific to any port(s). 1. Select System > PoE > Basic > PoE Configuration . Figure...

Configure System Information 91 S3300 Smart Managed Pro Switch Advanced PoE Configuration The Advanced > PoE Configuration screen displays the same table as the Basic > PoE Configuration screen described above. However the Advanced screen allows you to configure a host of PoE parameters specif...

Configure System Information 93 S3300 Smart Managed Pro Switch • 4pt 802.3af + legacy . 4-Point Resistive Detection in 802.3af mode, followed by Legacy Detection, is done. • Legacy . Only Legacy Detection is done. The factory default is IEEE 802. 9. Assign a Timer Schedule to the port. Select None t...

Configure System Information 95 S3300 Smart Managed Pro Switch SNMP This section describes how to configure the Simple Network Management Protocol (SNMP) version 1 and SNMP version 2 information on the switch. For information about configuring the SNMPv3 administrative profile, see Use SNMPv3 on pag...

Configure System Information 96 S3300 Smart Managed Pro Switch If you select Enable, the community name must be unique among all valid community names or the set request will be rejected. If you select Disable, the community name will become invalid. 7. Click the Add button.  To modify an existing ...

Configure System Information 97 S3300 Smart Managed Pro Switch 3. Click the Apply button.  To delete an SNMP trap recipient: 1. Select the check box next to the recipient to remove. 2. Click the Delete button. Trap Flags Use the Trap Flags screen to enable or disable traps the switch can send to an...

Configure System Information 98 S3300 Smart Managed Pro Switch SNMP Supported MIBS This screen displays a list of all MIBs supported by the switch. To view the supported MIBs, select System > SNMP > SNMP V1/V2 > Supported MIBs. The following table describes the fields on the screen. Table 3...

Configure System Information 99 S3300 Smart Managed Pro Switch • Inventory management, enabling network administrators to track their network devices and determine their characteristics (manufacturer, software and hardware versions, serial or asset number). LLDP Configuration Use the LLDP Configurat...

Configure System Information 100 S3300 Smart Managed Pro Switch LLDP Port Settings Use the LLDP Port Settings screen to specify per-interface LLDP settings.  To configure LLDP port settings: 1. Select System > LLDP > Advanced > LLDP Port Settings . Figure 57. LLDP Port Settings 2. Select o...

Configure System Information 101 S3300 Smart Managed Pro Switch information includes the system name, system description, system capabilities, and port description. For information about how to configure the system name, see Management on page 39. For information about how to configure the port desc...

Table 34. LLDP-MED network policy information Field Description Network Policy Number The policy number. Application The media application type associated with the policy, which can be one of the following: • Unknown • Voice • Guest Voice • Guest Voice Signaling • Softphone Voice • Video Conferencin...

Configure System Information 103 S3300 Smart Managed Pro Switch Figure 59. LLDP-MED Port Settings 2. From the Port list, select the port to configure. 3. Use the lists to enable or disable the following LLDP-MED settings for the selected port: • LLDP-MED Status . The administrative status of LLDP-ME...

Configure System Information 104 S3300 Smart Managed Pro Switch Figure 60. LLDP-MED Neighbors Information 2. In the LLDP-MED Interface Selection section of the window, the Interface field lists all the ports on which LLDP-MED is enabled. Select the interface from the Interface list to display inform...

Configure System Information 106 S3300 Smart Managed Pro Switch Local Information Use the LLDP Local Information screen to view the data that each port advertises through LLDP. To view local LLDP information, select System > Advanced > LLDP > Local Information . Note: The screen includes on...

Configure System Information 110 S3300 Smart Managed Pro Switch Neighbors Information Use the LLDP Neighbors Information screen to view the data that a specified interface has received from other LLDP-enabled systems. To view LLDP information received from a neighbor device, select System > Advan...

Configure System Information 113 S3300 Smart Managed Pro Switch Services This section describes how to configure the DHCP L2 Relay, DHCP snooping, DHCPv6 snooping, and Dynamic ARP Inspection (DAI) features on the switch. DHCP snooping and DAI are layer 2 security features that examine traffic to hel...

Configure System Information 114 S3300 Smart Managed Pro Switch 4. Click the Cancel button to cancel the configuration on the screen, and reset the data displayed on the screen to the latest value of the switch. DHCP L2 Relay VLAN Configuration Use this screen to configure the DHCP L2 Relay VLAN. Fi...

Configure System Information 115 S3300 Smart Managed Pro Switch DHCP L2 Relay Interface Configuration Use this screen to view and configure the DHCP L2 Relay Interface. Figure 65. DHCP L2 Relay Interface Configuration  To configure DHCP L2 Relay Interface settings: 1. Select System  > Services ...

Configure System Information 116 S3300 Smart Managed Pro Switch Figure 66. DHCP L2 Relay Interface Statistics Table 40 describes the non-configurable data that is displayed. Table 40. DHCP L2 Relay Interface Statistics Field Description Interface The interface from which the DHCP message is received...

Configure System Information 117 S3300 Smart Managed Pro Switch trusted interface is an interface that is configured to receive only messages from within the network. DHCP snooping acts like a firewall between untrusted hosts and DHCP servers. It also provides way to differentiate between untrusted ...

Configure System Information 118 S3300 Smart Managed Pro Switch Interface Configuration Use the DHCP Snooping Interface Configuration screen to view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded. If a port is configured as untrust...

Configure System Information 119 S3300 Smart Managed Pro Switch If the incoming rate of DHCP packets exceeds the value of this object for consecutively burst interval seconds, the port will be shut down. If this value is N/A, then the burst interval has no meaning, and rate limiting is disabled. 6. ...

Configure System Information 120 S3300 Smart Managed Pro Switch The DHCP Snooping Dynamic Binding Configuration table shows information about the DHCP bindings that have been learned on each interface on which DHCP snooping is enabled. Table 41 describes the dynamic bindings information. Table 41. D...

Configure System Information 121 S3300 Smart Managed Pro Switch 3. In the Write Delay field, specify the amount of time to wait between writing bindings information to persistent storage. The delay allows the device to collect as many entries as possible (new and removed) before writing them to the ...

Configure System Information 122 S3300 Smart Managed Pro Switch DHCPv6 Snooping DHCPv6 snooping is a useful feature that provides security by filtering untrusted DHCP messages and by building and maintaining a DHCP snooping binding table. An untrusted message is a message that is received from outsi...

Configure System Information 125 S3300 Smart Managed Pro Switch a. Specify the Remote IP Address of the TFTP server on which the snooping database is stored when Remote is selected. b. Specify the Remote File Name of the DHCPv6 snooping bindings database in which the bindings are stored when Remote ...

Configure System Information 126 S3300 Smart Managed Pro Switch Dynamic ARP Inspection Dynamic ARP Inspection (DAI) is a security feature that rejects invalid and malicious ARP packets. DAI prevents a class of man-in-the-middle attacks where an unfriendly station intercepts traffic for other station...

Configure System Information 128 S3300 Smart Managed Pro Switch d. Click the Apply button. Configure a DAI ACL DAI relies on the information in the DHCP snooping bindings database to validate ARP packets. For networks that use static IP addresses and do not use DHCP, DAI access control lists (ACLs) ...

Configure System Information 129 S3300 Smart Managed Pro Switch 8. Click the Add button. 9. Repeat Step 6 through Step 8 to add the second rule. You can add up to 20 static IP address-MAC address mappings to a DAI ACL. Figure 76. DAI Rule Table 10. Select System  > Services > Dynamic ARP Insp...

Configure System Information 130 S3300 Smart Managed Pro Switch since the target MAC address is unspecified in ARP requests. You can also enable IP address checking. When this option is enabled, DAI drops ARP packets with an invalid IP address. The following IP addresses are considered invalid: • 0....

Configure System Information 131 S3300 Smart Managed Pro Switch Figure 79. Dynamic ARP Inspection Statistics 2. Click Clear to clear all DAI statistics. 3. Click Refresh to refresh the data on the page with the latest information on the switch. Table 45, Dynamic ARP Inspection (DAI) statistics descr...

Configure System Information 132 S3300 Smart Managed Pro Switch Timer Schedule The NETGEAR Smart Switch provides timer schedules for use with PoE/PoE+. To use Timer Schedules with PoE/PoE+, you first define a timer schedule on the System > Timer Schedule screen. Then you associate the timer sched...

Configure System Information 133 S3300 Smart Managed Pro Switch The following table describes the non-configurable fields on the Timer Schedule Global Configuration page. Table 46. Timer Schedule Information Field Description Time Schedule Status Specifies if the current status of the timer schedule...

135 3 3. Configuring Switching Use the features you access from the Switching tab to define Layer 2 features. The Switching tab contains links to the features described in the following sections. • Ports on page 136 • Link Aggregation Groups on page 139 • VLANs on page 144 • Auto-VoIP Configuration ...

Configuring Switching 136 S3300 Smart Managed Pro Switch Ports The screens you access from the Ports menu allow you to view and monitor the physical port information for the ports available on the switch. The Ports menu contains links described in the following sections. • Port Configuration Port Co...

Configuring Switching 138 S3300 Smart Managed Pro Switch elapses, or the utilization returns to a specified low threshold, the switch enables the port to again transmit frames. The factory default is Disabled . When flow control is disabled, the switch does not generate PAUSE frames. The switch also...

Configuring Switching 139 S3300 Smart Managed Pro Switch Link Aggregation Groups Link aggregation groups (LAGs), which are also known as port channels, allow you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single li...

Configuring Switching 141 S3300 Smart Managed Pro Switch across the units. In such a scenario, when this feature is enabled, any known unicast traffic sent to the LAG uses only the LAG interface on the local unit. This ensures that the known unicast traffic, destined to the LAG, does not cross the e...

Configuring Switching 142 S3300 Smart Managed Pro Switch LAG Membership Use the LAG Membership screen to select two or more full-duplex Ethernet links to be aggregated together to form a link aggregation group (LAG), which is also known as a port channel. The switch can treat the port channel as if ...

Configuring Switching 143 S3300 Smart Managed Pro Switch LACP Configuration The LACP configuration screen is used to set the LACP system priority.  To configure LACP: 1. Select Switching  > LAG > Advanced > LACP Configuration . 2. In the LACP System Priority field, specify the device’s li...

Configuring Switching 144 S3300 Smart Managed Pro Switch VLANs Adding virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a VLAN switch forwards traffic based on the Layer 2 header, which is fast, and like a router, it partitions th...

Configuring Switching 145 S3300 Smart Managed Pro Switch Basic VLAN Configuration Use the VLAN Configuration screen to define VLAN groups stored in the VLAN membership table. The switch supports up to 256 VLANs. The default VLAN (1), voice VLAN (2) and auto-video VLAN (3) are created by default, and...

Configuring Switching 146 S3300 Smart Managed Pro Switch VLAN Membership Configuration Use this screen to configure VLAN port membership for a particular VLAN. You can select the Group operation through this screen.  To configure VLAN membership for individual ports and LAGs: 1. Select Switching  ...

Configuring Switching 147 S3300 Smart Managed Pro Switch  To configure the same VLAN membership settings for all ports and LAGs: 1. Select Switching  > VLAN > Advanced > VLAN Membership . 2. In the VLAN ID list, select the VLAN to which you want to add ports. 3. In the Group Operations li...

Configuring Switching 148 S3300 Smart Managed Pro Switch Port VLAN ID Configuration The Port PVID Configuration screen lets you assign a port VLAN ID (PVID) to an interface. There are certain requirements for a PVID: • All ports must have a defined PVID. • If no other value is specified, the default...

Configuring Switching 150 S3300 Smart Managed Pro Switch Protocol-Based VLAN Group Configuration Protocol-based VLAN can be used to define filtering criteria for untagged packets. By default, if you do not configure any port (IEEE 802.1Q) or protocol-based VLANs, untagged packets are assigned to VLA...

Configuring Switching 151 S3300 Smart Managed Pro Switch 2. Click the Delete button. Protocol-Based VLAN Group Membership The Protocol-Based VLAN Group Membership screen is used to define a protocol-based VLAN group.  To set up protocol-based VLAN group membership: 1. Select Switching  > VLAN &...

Configuring Switching 152 S3300 Smart Managed Pro Switch 5. If the interface mode is VLAN ID or Dot1p, specify the VLAN ID or 802.1p priority value in the Value field. This field is valid only when VLAN ID or dot1p is selected as the interface mode. 6. From the CoS Override Mode list, specify the Co...

Configuring Switching 153 S3300 Smart Managed Pro Switch GARP Port Configuration  To configure a GARP port: 1. Select Switching  > VLAN > Advanced > GARP Port Configuration . The GARP Port Configuration table is displayed. 2. To navigate the page, select one of the following links. For mo...

Configuring Switching 154 S3300 Smart Managed Pro Switch Auto-VoIP Configuration Voice over Internet Protocol (VoIP) enables telephone calls over a data network. Because voice traffic is typically more time-sensitive than data traffic, the Auto VoIP feature helps provide a classification mechanism f...

Configuring Switching 155 S3300 Smart Managed Pro Switch Configure OUI-Based Auto-VoIP With Organizationally Unique Identifier (OUI)-based Auto VoIP, voice prioritization is provided based on OUI bits. From the OUI-based link, you can access the following pages: • OUI-Based Properties on page 155 • ...

Configuring Switching 156 S3300 Smart Managed Pro Switch authority. The switch comes preconfigured with the following OUIs that identify the IP phone manufacturer: • 00:01:E3: SIEMENS • 00:03:6B: CISCO1 • 00:12:43: CISCO2 • 00:0F:E2: H3C • 00:60:B9: NITSUKO • 00:D0:1E: PINTEL • 00:E0:75: VERILINK • ...

Configuring Switching 158 S3300 Smart Managed Pro Switch Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops. Spanning tree versions supported include Common S...

Configuring Switching 159 S3300 Smart Managed Pro Switch STP Configuration The STP Configuration screen contains fields for enabling STP on the switch.  To configure STP settings on the switch: 1. Select Switching > STP > Basic > STP Configuration . 2. Next to Spanning Tree State, specify ...

Configuring Switching 160 S3300 Smart Managed Pro Switch CST Configuration Use the CST Configuration screen to configure Common Spanning Tree (CST) and Internal Spanning Tree on the switch.  To configure CST settings: 1. Select Switching > STP > Advanced > CST Configuration . 2. Specify va...

Configuring Switching 161 S3300 Smart Managed Pro Switch The following MSTP status information is displayed on the Spanning Tree CST Configuration screen. Table 51. MSTP status information Field Description MST ID Table consisting of the MST instances (including the CST) and the corresponding VLAN I...

Configuring Switching 162 S3300 Smart Managed Pro Switch • STP Status . Enable or disable the Spanning Tree Protocol Administrative Mode associated with the port or port channel. • Fast Link . Specifies if the specified port is an Edge Port with the CST. Possible values are Enable or Disable. The de...

Table 53. CST port status information Field Description Interface The port associated with the VLAN(s) associated with the CST. Port Role Each MST bridge port that is enabled is assigned a port role for each spanning tree. The port role will be one of the following values: Root Port, Designated Port...

Configuring Switching 165 S3300 Smart Managed Pro Switch MST Configuration Use the Spanning Tree MST Configuration screen to configure Multiple Spanning Tree (MST) on the switch.  To configure an MST instance: 1. Select Switching > STP > Advanced > MST Configuration . 2. Configure the MST ...

Configuring Switching 166 S3300 Smart Managed Pro Switch MST Port Configuration Use the MST Port Configuration screen to configure and display Multiple Spanning Tree (MST) settings on a specific port on the switch. A port can become Diagnostically Disabled (D-Disable) when DOT1S experiences a severe...

Configuring Switching 168 S3300 Smart Managed Pro Switch STP Statistics Use the Spanning Tree Statistics screen to view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To display the Spanning Tree Statistics screen, select Switching ...

Configuring Switching 169 S3300 Smart Managed Pro Switch Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups for IPv4 multicast are identified by class D addresses, which range from 224.0.0.0 to 239.255.255.255. Host groups for IPv6 multicast are identified by the...

Configuring Switching 170 S3300 Smart Managed Pro Switch MFDB Statistics This screen displays the MFDB statistics for the system.  To view the MFDB statistics: Select Switching  > Multicast > MFDB > MFDB Statistics . The MFDB Statistics screen displays the information shown in the followi...

Configuring Switching 171 S3300 Smart Managed Pro Switch Auto-Video Use this screen to configure the Auto-Video parameters.  To configure Auto-Video: 1. Select Switching  > Multicast > Auto-Video . 2. Select one of the following radio buttons: • Select the Disable radio button to globally di...

Configuring Switching 172 S3300 Smart Managed Pro Switch IGMP Snooping Configuration Use the IGMP Snooping Configuration screen to configure the parameters for IGMP snooping. These parameters are used to build forwarding lists for multicast traffic.  To configure IGMP snooping: 1. Select Switching ...

Configuring Switching 173 S3300 Smart Managed Pro Switch 3. Configure the IGMP snooping values for the selected ports or LAGs: • Admin Mode . Select the interface mode for the selected interface for IGMP snooping for the switch from the menu. The default is Disable. • Host Timeout . Specify the amou...

Configuring Switching 174 S3300 Smart Managed Pro Switch IGMP Snooping VLAN Configuration Use the IGMP Snooping VLAN Configuration screen to configure IGMP snooping settings for VLANs on the system.  To configure IGMP snooping settings for VLANs: 1. Select Switching  > Multicast > IGMP Snoop...

Configuring Switching 175 S3300 Smart Managed Pro Switch Multicast Router Configuration If a multicast router is attached to the switch, its existence can be learned dynamically. You can also statically configure an interface as a multicast router interface, which is an interface that faces a multic...

Configuring Switching 176 S3300 Smart Managed Pro Switch IGMP Snooping Querier IGMP snooping requires that one central switch or router periodically query all end-devices on the network to announce their multicast memberships. This central device is the IGMP querier. The IGMP query responses, known ...

Configuring Switching 177 S3300 Smart Managed Pro Switch IGMP Snooping Querier VLAN Configuration  To create a new VLAN ID for IGMP snooping: 1. Select Switching  > Multicast > IGMP Snooping Querier > Querier VLAN Configuration . 2. From the VLAN ID list, select New Entry and complete the...

Configuring Switching 178 S3300 Smart Managed Pro Switch MLD Snooping MLD is a protocol used by IPv6 multicast routers to discover the presence of multicast listeners (nodes wishing to receive IPv6 multicast packets) on its directly attached links and to discover which multicast packets are of inter...

Configuring Switching 179 S3300 Smart Managed Pro Switch MLD Interface Configuration For MLD snooping to be active on an interface, it must be enabled both globally and on the interface (physical or LAG).  To configure an interface for MLD snooping: 1. Select Switching  > Multicast > MLD Sno...

Configuring Switching 180 S3300 Smart Managed Pro Switch MLD VLAN Configuration MLD snooping can be enabled on a per VLAN basis. It is necessary to keep track of the interfaces that are participating in a VLAN in order to apply or remove configurations.  To configure the MLD VLAN: 1. Select Switchi...

Configuring Switching 182 S3300 Smart Managed Pro Switch 5. In the Query Interval field, specify the time interval in seconds between periodic queries sent by the snooping querier. The Query Interval must be a value in the range of 1–1800 seconds. The default value is 60. 6. In the Querier Expiry In...

Configuring Switching 183 S3300 Smart Managed Pro Switch The following table describes the MLD snooping querier status information on the screen. Table 64. Field Description Operational State Specifies the operational state of the IGMP snooping querier on a VLAN: • Querier. The snooping switch is th...

Configuring Switching 184 S3300 Smart Managed Pro Switch MVR Configuration IGMP snooping helps limit multicast traffic when member ports are in the same VLAN; however, when ports belong to different VLANs, a copy of the multicast stream is sent to each VLAN that has member ports in the multicast gro...

Configuring Switching 186 S3300 Smart Managed Pro Switch MVR Group Configuration Use the MVR Group Configuration screen to create and manage MVR groups on the switch. In this example, five MVR groups are created. To create multiple MVR groups in the same step, the groups must have contiguous IP addr...

Configuring Switching 187 S3300 Smart Managed Pro Switch MVR Interface Configuration Use the MVR Interface Configuration screen to configure the ports that belong to the MVR groups and their roles within the groups.  To configure the MVR interfaces: 1. Select Switching > MVR > Advanced > M...

Configuring Switching 188 S3300 Smart Managed Pro Switch MVR Statistics Use the MVR Statistics screen to view information about the IGMP messages and IGMP packages the switch has transmitted. To view MVR statistics, select Switching > MVR > Advanced > MVR Statistics . The following table de...

Configuring Switching 189 S3300 Smart Managed Pro Switch Address Table The address table maintains a list of MAC addresses after having received a packet from this MAC address. The transparent bridging function uses the forwarding database entries to determine how to forward a received frame. The Ad...

Configuring Switching 190 S3300 Smart Managed Pro Switch Dynamic Address Configuration Use the Dynamic Addresses screen to set the amount of time to keep a learned MAC address entry in the forwarding database. The forwarding database contains static entries, which are never aged out, and dynamically...

Configuring Switching 191 S3300 Smart Managed Pro Switch Static MAC Address Use the Static MAC Address Configuration screen to configure and view static MAC addresses on an interface.  To add a static MAC address: 1. Select Switching  > Address Table > Advanced > Static MAC Address . 2. F...

Configuring Switching 192 S3300 Smart Managed Pro Switch Multiple Registration Protocol Configuration 1 Note: The Multiple Registration Protocol (MRP) feature is only supported on a standalone S3300 switch. Standalone here means that all four stack ports are running in Ethernet mode. Multiple Regist...

Configuring Switching 193 S3300 Smart Managed Pro Switch With MRP, network attributes are declared, registered, withdrawn, and removed completely dynamically without any user intervention. This dynamic nature is especially useful in networks where: • Network attributes are likely to change frequentl...

Configuring Switching 194 S3300 Smart Managed Pro Switch MRP Configuration Use the MRP Configuration screen to configure global MRP settings for the switch.  To configure global MRP settings: 1. Select Switching > MRP > Basic > MRP Configuration . 2. Next to MVRP Mode, select Enable to ena...

Configuring Switching 195 S3300 Smart Managed Pro Switch MRP Port Settings Use the MRP Port Settings screen to configure the per-port MRP mode and timer settings. The timers control when and how often various messages are transmitted on each interface.  To configure the MRP port parameters: 1. Sele...

Configuring Switching 196 S3300 Smart Managed Pro Switch MMRP Statistics The MMRP Statistics screen displays information regarding the MMRP frames transmitted and received by the switch and by each interface. To view the MMRP Statistics screen, select Switching > MRP > Advanced > MMRP Stati...

Configuring Switching 197 S3300 Smart Managed Pro Switch MVRP Statistics The MVRP Statistics screen displays information regarding the MVRP frames transmitted and received by the switch and by each interface. To view the MVRP Statistics screen, select Switching > MRP > Advanced > MVRP Stati...

Configuring Switching 198 S3300 Smart Managed Pro Switch MSRP Statistics The MSRP Statistics screen displays information about the MSRP frames transmitted and received by the switch and by each interface. To view the MMRP Statistics screen, select Switching > MRP > Advanced > MSRP Statistic...

Configuring Switching 199 S3300 Smart Managed Pro Switch MSRP Reservation Parameters Use the MSRP Reservation Parameters screen to view information about the talker, listener, and intermediate device status for the devices involved in each MSRP stream flowing through the switch. To view the MSRP Res...

Configuring Switching 200 S3300 Smart Managed Pro Switch Qav Parameters Use the Qav Parameters screen to configure and view the per-port IEEE 802.1Qav settings. The IEEE 802.1Qav standard supports time-sensitive traffic streams by pacing all switch traffic, including legacy asynchronous Ethernet tra...

Configuring Switching 202 S3300 Smart Managed Pro Switch 802.1AS 1 Note: The 802.1AS feature is only supported on a standalone S3300 switch. Standalone here means that all four stack ports are running in Ethernet mode. The IEEE 802.1AS standard specifies the protocol and procedures used to ensure th...

Configuring Switching 203 S3300 Smart Managed Pro Switch The following table shows the non-configurable information on the 802.1AS Configuration screen. 802.1AS (EAV) in a Stacking Environment If all the four Uplink ports are configured in Stacking mode, then the EAV pages are disabled and the 802.1...

Configuring Switching 204 S3300 Smart Managed Pro Switch In a similar manner, if EAV is enabled, then the stack port pages are disabled. When stack ports are not configured (in other words, the 10G ports are configured as Ethernet) and EAV is enabled globally: 1. Configure the Uplink ports in Ethern...

Configuring Switching 205 S3300 Smart Managed Pro Switch Figure 93. Stack Configuration is Unavailable 802.1AS Port Settings Use the 802.1AS Port Settings screen to configure and view per-port 802.1AS settings.  To configure the 802.1AS port settings: 1. Select Switching > 802.1AS > Advanced ...

Configuring Switching 206 S3300 Smart Managed Pro Switch 8. In the Announce Interval field, specify the desired transmission rate of ANNOUNCE messages. This value is the logarithm to the base 2 of the mean time interval between successive ANNOUNCE messages sent on this interface. The configured init...

Configuring Switching 207 S3300 Smart Managed Pro Switch The following table describes the non-configurable information on the 802.1AS Port Settings screen. 802.1AS Statistics The 802.1AS Statistics screen displays information regarding the 802.1AS messages transmitted and received by each interface...

209 4 4. Configuring Routing The switch supports IP routing. Use the menus under the Routing tab to manage routing on the system. When a packet enters the switch, the destination MAC address is checked to see if it matches any of the configured routing interfaces. If it does, then the switch searche...

Configuring Routing 210 S3300 Smart Managed Pro Switch Configure IP Settings For information about how to configure and display IP routing data, see the following sections: • IP Configuration on page 210 • VLAN Routing Wizard on page 214 • IP Statistics on page 211 IP Configuration Use the IP Config...

Configuring Routing 211 S3300 Smart Managed Pro Switch IP Statistics The statistics reported on the IP Statistics screen are as specified in RFC 1213. To display the IP statistics screen, select Routing > IP > Statistics . The following table describes the IP statistics information displayed o...

Configuring Routing 214 S3300 Smart Managed Pro Switch Configure VLAN Routing You can configure the switch software with some ports supporting VLANs and some supporting routing. You can also configure the software to allow traffic on a VLAN to be treated as if the VLAN were a router port. When a por...

Configuring Routing 215 S3300 Smart Managed Pro Switch 6. Click the box under each port or LAG to add to the VLAN as a VLAN member. Each port or LAG has three modes: • T(Tagged) . Select the ports on which all frames transmitted for this VLAN will be tagged. The ports that are selected will be inclu...

Configuring Routing 216 S3300 Smart Managed Pro Switch Configure Router Discovery The Router Discovery protocol is used by hosts to identify operational routers on the subnet. Router discovery messages are of two types: router advertisements and router solicitations. The protocol mandates that every...

Configuring Routing 217 S3300 Smart Managed Pro Switch Configure and View Routes From the Route Configuration screen, you can configure static and default routes and view the routes that the switch has already learned.  To configure a static route: 1. Select Routing > Route Configuration . 2. Fr...

Configuring Routing 218 S3300 Smart Managed Pro Switch The Route Status table provides information about the static routes configured on the switch and the dynamic routes the switch has learned.  To delete one or more static routes: 1. Select the check box next to each route to remove. 2. Click the...

Configuring Routing 219 S3300 Smart Managed Pro Switch Configure ARP The address resolution protocol (ARP) associates a layer 2 MAC address with a layer 3 IPv4 address. Switch software features both dynamic and manual ARP configuration. With manual ARP configuration, you can statically add entries i...

Configuring Routing 220 S3300 Smart Managed Pro Switch ARP Cache Use the ARP Cache screen to view entries in the ARP table, a table of the remote connections most recently seen by this switch. To display entries in the ARP table, select Routing > ARP > Basic > ARP Cache . The following tabl...

Configuring Routing 221 S3300 Smart Managed Pro Switch Create a Static ARP Entry Use this screen to add a static entry to the ARP table.  To add an entry to the ARP table: 1. Select Routing > ARP > Advanced > ARP Create . 2. In the IP Address field, specify the IP address to add. It must b...

Configuring Routing 222 S3300 Smart Managed Pro Switch Remove an ARP Entry From the ARP Cache Use this screen to remove certain entries from the ARP Table.  To remove entries from the ARP table: 1. Select Routing > ARP > Advanced > ARP Entry Management . 2. From the Remove From Table list,...

223 5 5. Configuring Quality of Service In a typical switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria. When a packet...

Configuring Quality of Service 224 S3300 Smart Managed Pro Switch Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffSe...

Configuring Quality of Service 226 S3300 Smart Managed Pro Switch CoS Interface Configuration Use the CoS Interface Configuration screen to configure the trust mode for one or more interfaces and to apply an interface shaping rate to all interfaces or to a specific interface.  To configure CoS sett...

Configuring Quality of Service 227 S3300 Smart Managed Pro Switch Interface Queue Configuration Use the Interface Queue Configuration screen to define what a particular queue does by configuring switch egress queues. User-configurable parameters control the amount of bandwidth used by the queue, the...

Configuring Quality of Service 228 S3300 Smart Managed Pro Switch 802.1p to Queue Mapping Use this screen to view or change which internal traffic classes are mapped to the 802.1p priority class values in Ethernet frames the device receives. The priority-to-traffic class mappings can be applied glob...

Configuring Quality of Service 229 S3300 Smart Managed Pro Switch Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-ba...

Configuring Quality of Service 230 S3300 Smart Managed Pro Switch Diffserv Configuration Use the DiffServ Configuration screen to display DiffServ general status group information, which includes the current administrative mode setting as well as the current and maximum number of rows in each of the...

Configuring Quality of Service 231 S3300 Smart Managed Pro Switch Class Configuration Use the Class Configuration screen to add a new DiffServ class name, or to rename or delete an existing class. The screen also allows you to define the criteria to associate with a DiffServ class. As packets are re...

Configuring Quality of Service 234 S3300 Smart Managed Pro Switch IPv6 Class Configuration The IPv6 Class Configuration feature extends the existing QoS ACL and DiffServ functionality by providing support for IPv6 packet classification. An Ethernet IPv6 packet is distinguished from an IPv4 packet by...

Configuring Quality of Service 235 S3300 Smart Managed Pro Switch The same set of fields described for IPv6 ACL classification are also supported as match criteria for DiffServ classes. Prior to the introduction of IPv6 class rule fields, any layer 3 or layer 4 item was interpreted as a field in an ...

Configuring Quality of Service 238 S3300 Smart Managed Pro Switch Service Configuration Use the Service Configuration screen to activate a policy on an interface.  To attach a DiffServ policy to an interface: 1. Select QoS > DiffServ > Advanced > Service Configuration . 2. Select the inter...

240 6 6. Managing Device Security Use the features available from the Security navigation tab to configure management security settings for port, user, and server security. The Security tab contains links to the features described in the following sections. • Management Security Settings on page 241...

Managing Device Security 241 S3300 Smart Managed Pro Switch Management Security Settings From the Management Security menu, you can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS+) settings, and auth...

Managing Device Security 242 S3300 Smart Managed Pro Switch Note: In you have forgotten the password and are unable to log in to the switch management interface, press the Factory Defaults button on the front panel of the switch for more than 1 second. The device reboots, and all switch settings, in...

Managing Device Security 243 S3300 Smart Managed Pro Switch RADIUS Configuration RADIUS servers provide additional security for networks. The RADIUS server maintains a user database, which contains per-user authentication information. The switch passes information to the configured RADIUS server, wh...

Managing Device Security 244 S3300 Smart Managed Pro Switch RADIUS Server Configuration Use the RADIUS Server Configuration screen to view and configure various settings for the current RADIUS server configured on the system.  To add a primary RADIUS server with a shared secret: 1. Select Security ...

Managing Device Security 245 S3300 Smart Managed Pro Switch  To modify settings for a RADIUS server that is already configured on the switch: 1. Select the check box next to the server IP address. 2. Update the desired fields for the selected server. 3. Click the Apply button.  To delete a configu...

Managing Device Security 246 S3300 Smart Managed Pro Switch You must select Yes before you can configure the RADIUS secret. After you add the RADIUS accounting server, this field indicates whether the shared secret for this server has been configured. 5. In the Secret field, type the shared secret t...

Managing Device Security 247 S3300 Smart Managed Pro Switch Configure TACACS+ TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. TACACS+ provides the following services: • Authentication . Provides authentication d...

Managing Device Security 248 S3300 Smart Managed Pro Switch The priority determines the order in which the TACACS+ servers are contacted when attempting to authenticate a user. A value of 0 is the highest priority. 4. (Optionally) In the Port field, specify the authentication port value for TACAS+ s...

Managing Device Security 249 S3300 Smart Managed Pro Switch Authentication List Configuration Use the Authentication List screen to configure the default login list. A login list specifies one or more authentication methods to validate switch or port access for the admin user. Note: Admin is the onl...

Managing Device Security 250 S3300 Smart Managed Pro Switch 7. Click the Apply button. HTTPS Authentication List Use the HTTPS Authentication List to configure the default login list for secure HTTP (HTTPS).  To configure the HTTPS authentication method for the defaultList: 1. Select Security > ...

Managing Device Security 251 S3300 Smart Managed Pro Switch  To change the Dot1x authentication method for the defaultList: 1. Select Security > Management Security > Authentication List > Dot1x Authentication List . 2. Select the check box next to the dot1xList name. 3. From the list in t...

Managing Device Security 252 S3300 Smart Managed Pro Switch Configuring Management Access From the Access menu, you can configure HTTP and secure HTTP access to the switch management interface. You can also configure access control profiles and access rules. The Access menu contains links to the fea...

Managing Device Security 253 S3300 Smart Managed Pro Switch Secure HTTP Configuration Secure HTTP enables the transmission of HTTP over an encrypted Secure Sockets Layer (SSL) or Transport Layer Security (TLS) connection. When you manage the switch by using the web management interface, secure HTTP ...

Managing Device Security 254 S3300 Smart Managed Pro Switch Certificate Management Use this screen to generate or delete certificates.  To generate an SSL certificate: 1. Select Security > Access > HTTPS > Certificate Management . From the Certificate Present field, a Yes or No status disp...

Managing Device Security 255 S3300 Smart Managed Pro Switch The default is IPv4. 4. In the TFTP Server IP field, specify the address of the TFTP server. The address can be an IP address in standard x.x.x.x format or a hostname. The hostname must start with a letter of the alphabet. Make sure that th...

Managing Device Security 256 S3300 Smart Managed Pro Switch Access Control Access control allows you to configure a profile and set access rules. Access Profile Configuration Use the Access Profile Configuration screen to set up a security access profile.  To configure an access profile: 1. Select ...

Managing Device Security 257 S3300 Smart Managed Pro Switch 2. From the Rule Type field, select the action to be performed when the rules selected are matched. A permit rule allows access by traffic that matches the rule criteria. A deny rule blocks traffic that matches the rule criteria. 3. From th...

Managing Device Security 258 S3300 Smart Managed Pro Switch Port Authentication In port-based authentication mode, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restriction...

Managing Device Security 261 S3300 Smart Managed Pro Switch The following table describes the 802.1X status information available on the screen.  To initialize the 802.1X state machine on a port : 1. Select the check box associated with the port to initialize. 2. Click the Initialize button. The 80...

Managing Device Security 262 S3300 Smart Managed Pro Switch 2. Click the Reauthenticate button. The selected port is forced to restart the authentication process.This button is available only if the control mode is auto . If the button is not selectable, it will be grayed out. When this button is pr...

Managing Device Security 263 S3300 Smart Managed Pro Switch Client Summary This screen displays information about supplicant devices that are connected to the local authenticator ports. If there are no active 802.1X sessions, the table is empty. To access the Client Summary screen, select Security &...

Managing Device Security 264 S3300 Smart Managed Pro Switch Traffic Control From the Traffic Control menu, you can configure MAC Filters, Storm Control, Port Security, and Protected Port settings. The Traffic Control menu contains links to the features described in the following sections. • MAC Filt...

Managing Device Security 265 S3300 Smart Managed Pro Switch If a packet with the MAC address and VLAN ID you specify is received on a port that is not in the list, it will be dropped. 6. From the list of Destination Port Members, select the ports to include in the outbound filter. Packets with the M...

Managing Device Security 266 S3300 Smart Managed Pro Switch Storm Control A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses can overload network resources and/or cause the network to ...

Managing Device Security 267 S3300 Smart Managed Pro Switch Port Security Configuration Use the Port Security feature to lock one or more ports on the system. When a port is locked, only packets with an allowable source MAC addresses can be forwarded. All other packets are discarded.  To configure ...

Managing Device Security 268 S3300 Smart Managed Pro Switch • Port Security . Enable or Disable the port security feature for the selected port. The default is Disable. • Max Allowed Dynamically Learned MAC . Specify the maximum number of dynamically learned MAC addresses on the selected interface. ...

Managing Device Security 269 S3300 Smart Managed Pro Switch Protected Ports Membership If a port is configured as protected, it does not forward traffic to any other protected port on the switch, but it will forward traffic to unprotected ports. Use the Protected Ports Membership screen to configure...

Managing Device Security 270 S3300 Smart Managed Pro Switch Configure Access Control Lists Access control lists (ACLs) ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow con...

Managing Device Security 271 S3300 Smart Managed Pro Switch ACL Wizard The ACL Wizard helps you to create a simple ACL and apply it to the selected ports easily and quickly. First, you can select an ACL type. Then, you can add an ACL rule to this ACL, and a rule can be applied this ACL on the select...

Managing Device Security 272 S3300 Smart Managed Pro Switch 6. Specify the additional match criteria for the selected ACL type. The rest of the rule match criteria fields available for configuration depend on the selected ACL type. For information about the possible match criteria fields, see Table ...

Managing Device Security 273 S3300 Smart Managed Pro Switch In Figure 99 on page 273, the ACL rule is configured to check for packet matches on ports 8, 9, 13, and LAG 1. Packets that have a source address in the 192.168.3.0/24 network are permitted to be forwarded by the interfaces. All other packe...

Managing Device Security 274 S3300 Smart Managed Pro Switch MAC ACL A MAC ACL consists of a set of rules which are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken and the additional rules are not checked for a ...

Managing Device Security 277 S3300 Smart Managed Pro Switch MAC Binding Configuration When an ACL is bound to an interface, all the rules that have been defined are applied to the selected interface. Use the MAC Binding Configuration screen to assign MAC ACL lists to ACL priorities and interfaces. ...

Managing Device Security 278 S3300 Smart Managed Pro Switch MAC Binding Table Use the MAC Binding Table screen to view or delete the MAC ACL bindings. The following table describes the information displayed in the MAC Binding Table. Table 96. MAC binding table information Field Description Interface...

Managing Device Security 279 S3300 Smart Managed Pro Switch IP ACL IP ACLs allow network managers to define classification actions and rules for specific ingress ports. Packets can be filtered on ingress (inbound) ports only. If the filter rules match, then some actions can be taken, including dropp...

Managing Device Security 280 S3300 Smart Managed Pro Switch IP Rules Use the IP Rules screen to define rules for IP-based standard ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. Note: There is an implicit deny al...

Managing Device Security 282 S3300 Smart Managed Pro Switch subnet mask. A wildcard mask is in essence the inverse of a subnet mask. For example, to apply the rule to all hosts in the 192.168.1.0/24 subnet, enter 0.0.0.255 in the Source IP Mask field. This field is required when you configure a sour...

Managing Device Security 285 S3300 Smart Managed Pro Switch example, to check for an IP TOS value having bits 7 and 5 set and bit 1 clear, where bit 7 is most significant, use a TOS Bits value of a0 and a TOS Mask of 00. 6. Click the Apply button.  To modify the match criteria for an ACL rule: 1. F...

Managing Device Security 286 S3300 Smart Managed Pro Switch IPv6 ACL An IPv6 ACL consists of a set of rules which are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken and the additional rules are not checked for...

Managing Device Security 287 S3300 Smart Managed Pro Switch IPv6 Rules Use the IPv6 Rules screen to configure the rules for the IPv6 Access Control Lists. The IPv6 Access Control Lists are created using the IPv6 Access Control List Configuration screen. By default, no specific value is in effect for...

Managing Device Security 288 S3300 Smart Managed Pro Switch • Assign Queue ID . Specifies the hardware egress queue identifier used to handle all packets matching this IPv6 ACL rule. The valid range of Queue IDs is from 0 to 6. This field is visible for a Permit Action. • Mirror Interface . Specifie...

Managing Device Security 289 S3300 Smart Managed Pro Switch • Flow Label . Flow label is 20-bit number that is unique to an IPv6 packet, used by end stations to signify quality-of-service handling in routers. Flow label can be specified within the range (0 to 1048575). • IPv6 DSCP Service . Specify ...

Managing Device Security 290 S3300 Smart Managed Pro Switch • To remove the selected ACL from a port or LAG, click the box directly below the port or LAG number to clear the selection. A check mark in the box indicates that the ACL is applied to the interface. 5. Click the Apply button. IP Binding T...

292 7 7. Maintenance Use the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains links to the features described in the following sections. • Reset on page 293 • Export (Upload) a File From the Switch on page 294 • Download on page 297 • File Manag...

Maintenance 293 S3300 Smart Managed Pro Switch Reset The Reset menu contains links to the features described in the following sections. • Device Reboot on page 293 • Factory Default on page 293 Device Reboot Use the Device Reboot screen to reboot the switch.  To reboot the switch: 1. Select Mainten...

Maintenance 294 S3300 Smart Managed Pro Switch Export (Upload) a File From the Switch The switch supports system file exports (uploads) from the switch to a remote system by using either TFTP or HTTP. The Export menu contains links to the features described in the following sections. • Export a File...

Maintenance 295 S3300 Smart Managed Pro Switch 3. From the Server Address Type list, select the format to use for the address you type in the TFTP Server Address field. The default is IPv4 . • IPv4 . Indicates that the TFTP server address is an IP address in dotted-decimal format. • DNS . Indicates ...

Maintenance 296 S3300 Smart Managed Pro Switch 2. From the File Type list, specify what type of file you want to export from the switch. The factory default is Text Configuration . • Text Configuration . A text-based configuration file enables you to edit a configured text file (startup-config) offl...

Maintenance 297 S3300 Smart Managed Pro Switch 3. In the File Path field, enter the path for the file to export. You may enter up to 139 characters. The factory default is blank. 4. In the USB File field, specify a destination filename for the file to export. You can enter up to 32 characters. The f...

Maintenance 299 S3300 Smart Managed Pro Switch Note: To download SSH key files, SSH must be administratively disabled, and there can be no active SSH sessions. Note: To download SSL PEM files, SSL must be administratively disabled, and there can be no active SSH sessions. 3. The Image Name field is ...

Maintenance 301 S3300 Smart Managed Pro Switch Note: To download SSL PEM files, SSL must be administratively disabled, and there can be no active SSH sessions. 3. The Image Name field is visible only when File Type - Software is selected. From the Image Name field, select one of the images from the ...

Maintenance 303 S3300 Smart Managed Pro Switch File Management The system maintains two versions of the switch software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded during subsequent switch restarts. This feature reduces sw...

Maintenance 304 S3300 Smart Managed Pro Switch The Current-active field displays the name of the active image. 3. From the Unit Number list, select the specific unit number or All units to configure. 4. (Optionally) In the Image Description field, specify a name for the selected image. 5. Next to Ac...

Maintenance 305 S3300 Smart Managed Pro Switch Troubleshooting Configuration Menu The Maintenance main navigation tab gives access to the Troubleshooting configuration menu. From this menu, you can perform basic troubleshooting functions such as pinging an IPv4 or IPv6 address to check if the switch...

Maintenance 307 S3300 Smart Managed Pro Switch 5. Click Apply to send the ping to the specified address. The switch sends the number of pings specified in the Count field, and the results are displayed below the configurable data in the Results area. • If the ping is successful, you see “Reply From ...

Maintenance 308 S3300 Smart Managed Pro Switch 4. Use Count to enter the number of echo requests you want to send. The range is 1 to 15. The default value is 3. 5. In the Interval field, specify the number of seconds between pings sent. The range is 1 to 60. The default value is 3. 6. In the Datagra...

Maintenance 310 S3300 Smart Managed Pro Switch • IP Address — The source is an IP address that you specify using when sending the Echo request packets. This field is shown when IP Address is selected as the source option. • Interface — The interface to use when sending the Echo request packets. This...

Maintenance 312 S3300 Smart Managed Pro Switch - Interface . The probe packet is sent from a specified interface. If you select this option, the Interface field appears. Use the menu to select the interface from which to send the probe packet. Note: Values configured in the fields above are not save...

Maintenance 313 S3300 Smart Managed Pro Switch Troubleshooting Chart The following table lists symptoms, causes, and solutions of possible problems. Table 99. Troubleshooting chart Symptom Cause Solution Power LED is off. No power is received. Check the power cord connections for the switch at the s...

Maintenance 314 S3300 Smart Managed Pro Switch 3. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Full Memory Dump Use this screen to tell the switch to do a full memory dump to help with troubleshooting. To display the Full Mem...

315 8 8. Monitoring the System Use the features available from the Monitoring navigation tab to view a variety of information about the switch and its ports and to configure how the switch monitors events. The Monitoring tab contains configuration menus described in the following sections. • Ports o...

Monitoring the System 316 S3300 Smart Managed Pro Switch Ports The screens available from the Ports menu contain a variety of information about the number and type of traffic transmitted from and received on the switch. From the Ports menu, you can access links to the features described following se...

Monitoring the System 318 S3300 Smart Managed Pro Switch Port Statistics The Port Statistics screen displays a summary of per-port traffic statistics on the switch.  To access the port summary screen: 1. Select Monitoring > Ports > Port Statistics . 2. Select whether to display physical inter...

Monitoring the System 319 S3300 Smart Managed Pro Switch You can also type the interface number (for example, g7) in the Go To Interface field at the top or bottom of the table and click the Go button. 2. Click the Clear button. Port Detailed Statistics The Port Detailed Statistics screen displays a...

Monitoring the System 325 S3300 Smart Managed Pro Switch EAP Statistics Use the EAP Statistics screen to display information about EAP packets received on a specific port. To display the EAP statistics screen, select Monitoring > Ports > EAP Statistics . The following table describes the EAP s...

Monitoring the System 326 S3300 Smart Managed Pro Switch Cable Test Use the Cable Test screen to display information about the cables connected to switch ports.  To perform the cable test: 1. Select Monitoring > Ports > Cable Test . 2. Select the check box next to each port on which to run th...

Monitoring the System 327 S3300 Smart Managed Pro Switch logging capability includes filtering of messages logged or forwarded based on severity and generating component. The Logs menu contains links to the features described in the following sections. • Memory Logs on page 327 • FLASH Log on page 3...

Monitoring the System 328 S3300 Smart Managed Pro Switch • Critical (2): Critical conditions. • Error (3): Error conditions. • Warning (4): Warning conditions. • Notice (5): Normal but significant conditions. • Informational (6): Informational messages. • Debug (7): Debug-level messages. 5. Click th...

Monitoring the System 332 S3300 Smart Managed Pro Switch Trap Logs Use the Trap Logs screen to view information about the SNMP traps generated on the switch. To view trap log information, select Monitoring > Logs > Trap Logs . The Trap Logs screen displays. The following table describes the Tr...

Monitoring the System 333 S3300 Smart Managed Pro Switch Event Logs Use the Event Logs screen to display the event log, which is used to hold error messages for catastrophic events. After the event is logged and the updated log is saved in flash memory, the switch will be reset. The log can hold at ...

336 A A. Configuration Examples This appendix contains information about: • Virtual Local Area Network Configuration Example on page 337 • Differentiated Services on page 343 • 802.1X Configuration Example on page 347 • MSTP on page 349 • VLAN Routing Interface Configuration Example on page 354 • Sm...

Configuration Examples 337 S3300 Smart Managed Pro Switch Virtual Local Area Network Configuration Example A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can commun...

Configuration Examples 338 S3300 Smart Managed Pro Switch • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged. Inversely, a T for a give...

Configuration Examples 340 S3300 Smart Managed Pro Switch Access Control Lists Access Control Lists (ACLs) ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restri...

Configuration Examples 342 S3300 Smart Managed Pro Switch ports, you must add a new permit rule with the desired match criteria and bind the rule to interfaces 6, 7, and 8. Standard IP ACL Configuration Example The following example shows how to create an IP-based ACL that prevents any IP traffic fr...

Configuration Examples 343 S3300 Smart Managed Pro Switch Differentiated Services Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network deliver the data in a timely fashion, although there is no guarantee that it will. Duri...

Configuration Examples 344 S3300 Smart Managed Pro Switch • Layer 4 protocol (such as TCP or UDP) • Layer 4 source/destination ports • Source/destination IP address From a DiffServ point of view, there are two types of classes: • DiffServ traffic classes • DiffServ service levels/forwarding classes ...

Configuration Examples 345 S3300 Smart Managed Pro Switch • Mark IP DSCP or IP Precedence . Marking/re-marking the DiffServ code point in a packet with the DSCP value representing the service level associated with a particular DiffServ traffic class. Alternatively, the IP Precedence value of the pac...

Configuration Examples 347 S3300 Smart Managed Pro Switch On this network, traffic from streaming applications uses UDP port 4567 as the source and 4568 as the destination. This real-time traffic is time sensitive, so it is assigned to a high-priority hardware queue. By default, data traffic uses ha...

Configuration Examples 348 S3300 Smart Managed Pro Switch is connected can be desirable in order to restrict access to publicly accessible bridge ports or to restrict access to departmental LANs. Access control is achieved by enforcing authentication of supplicants that are attached to an authentica...

Configuration Examples 349 S3300 Smart Managed Pro Switch The Port Control setting for all other ports where authentication is not needed should Authorized. When the Port Control setting is Authorized, the port is unconditionally put in a force-Authorized state and does not require any authenticatio...

Configuration Examples 350 S3300 Smart Managed Pro Switch The difference between the RSTP and the traditional STP (IEEE 802.1D) is the ability to configure and recognize full duplex connectivity and ports that are connected to end stations, resulting in rapid transitioning of the port to the Forward...

Configuration Examples 351 S3300 Smart Managed Pro Switch As there are Multiple Instances of Spanning Tree, there is a MSTP state maintained on a per-port, per-instance basis (or on a per port per VLAN basis: as any VLAN can be in one and only one MSTI or CIST). For example, port A can be forwarding...

Configuration Examples 352 S3300 Smart Managed Pro Switch MSTP Configuration Example This example shows how to create an MSTP instance on the switch. The example network has three different switches that serve different locations in the network. In this example, ports g1–g5 are connected to host sta...

Configuration Examples 353 S3300 Smart Managed Pro Switch Note: Bridge priority values are multiples of 4096. If you do not specify a root bridge and all switches have the same Bridge Priority value, the switch with the lowest MAC address is elected as the root bridge (see CST Configuration on page ...

Configuration Examples 354 S3300 Smart Managed Pro Switch VLAN Routing Interface Configuration Example VLANs divide broadcast domains in a LAN environment. Whenever hosts in one VLAN need to communicate with hosts in another VLAN, the traffic must be routed between them. This is known as inter-VLAN ...

Configuration Examples 356 S3300 Smart Managed Pro Switch Smart M4300/S3300 Firmware Upgrade Procedure This section describes the firmware upgrade procedures in the following typical scenarios: • Bringing Up M4300 and S3300 to Form Mixed Stacking on page 356 • Regular Image Upgrade After Mixed Stack...

Configuration Examples 358 S3300 Smart Managed Pro Switch Note: The 6.6.4.x release will accept configuration from the 6.6.0 or 6.6.1 release. Thus configuration from those previous releases will be accepted on 6.6.4.x. 2. Once the switch is running with 6.6.4.x, configure (if not done already) a ma...

Configuration Examples 359 S3300 Smart Managed Pro Switch The stack should come up with the new 6.6.4 image (such as, 6.6.4.2). Converting the M4300 Units Back Into Fully Managed M4300 Mode The two M4300 units that are part of mixed stacking with S3300 can be brought back to regular M4300 mode (in F...

360 B B. Hardware Specifications and Default Values Switch Specifications The switch conforms to the TCP/IP, UDP, HTTP, ICMP, TFTP, DHCP, IEEE 802.1D, IEEE 802.1p, and IEEE 802.1Q standards. Table 108. S3300 Switch Specifications and Performance Feature Value S3300-28X 24 10/100/1000Mbps 2 10G/1G SF...

Table 109. M4300 Switch Specifications Feature Value M4300-12X12F (XSM4324S) A stackable, fully-managed L2+ Gigabit switch. 24-port Gigabit Ethernet Layer 2 switch. 12 10G Copper ports. 12 10G Fiber ports. These are the existing M4300 series switches that have been reconfigured to act as S3300 switc...