manualshive.com logo in svg

NETGEAR FS700TS, Software Administration Manual

Share
Download
NETGEAR FS700TS Software Administration Manual Download Page 137

FS700TS Smart Switch Software Administration Manual

Managing Security

6-9

v1.0, September 2007

•

Guest VLAN

 – Select whether the Guest VLAN is enabled or disabled on the device. The 

default VLAN cannot be defined as a Guest VLAN. The possible field values are: 

–

Disable – Disable the Guest VLAN on the device. This is the default value.

–

Enable – Enable using a Guest VLAN for unauthorized ports. If a Guest VLAN is 
enabled, the unauthorized port automatically joins the VLAN selected in the VLAN 
List field.

•

Guest VLAN ID 

– Select the guest VLAN ID from the list of the currently defined 

VLANs.

2.

Select Disable or Enable for the 

Port Based Authentication State

 in the provided field.

3.

If you selected Enable for the 

Port Based Authentication State

, then select the 

Authentication Method

 from the list in the provided field.

4.

Select Disable or Enable for the 

Guest VLAN

 status in the provided field.

5.

If you selected Enable for the 

Guest VLAN

 field, then select the 

VLAN ID

 from the list in the 

provided field.

6.

Click 

APPLY

 to update the device.

Advanced

The Port Authentication 

Advanced

 menu contains the following options:

•

“802.1X Configuration”

•

“Port Authentication”

802.1X Configuration

The Advanced 802.1X Configuration screen allows network managers to configure network 
authentication parameters. In addition, Guest VLANs are enabled from the Advanced 802.1X 
configuration screen.

Summary of Contents for FS700TS

Page 1: ...202 10150 02 September 2007 NETGEAR Inc 4500 Great America Parkway Santa Clara CA 95054 USA FS700TS Smart Switch Software Administration Manual ...

Page 2: ...ormation equipment to be used in commercial and or industrial areas and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines that are aimed at preventing radio interference in commercial and or industrial areas Consequently when this equipment is used in a residential area or in an adjacent area thereto radio in...

Page 3: ...TGEAR com support Call Technical Support in North America at 1 888 NETGEAR If you are outside North America please refer to the phone numbers listed on the Support Information Card that was included with your switch Email Technical Support at support NETGEAR com Defective or damaged merchandise can be returned to your point of purchase representative Internet World Wide Web NETGEAR maintains a Wor...

Page 4: ...peration is subject to the following two conditions a This device may not cause harmful interference and b This device must accept any interference received including interference that may cause undesired operation Product and Publication Details Model Number FS700TS Publication Date September 2007 Product Family Smart Switch Product Name FS700TS 10 100 Stackable Smart Switch with Gigabit Ports Ho...

Page 5: ...nagement System Requirements 1 1 Switch Management Interface 1 2 Network with a DHCP Server 1 3 Network without a DHCP Server 1 5 Web Access 1 7 Additional Utilities 1 8 Chapter 2 Introduction to the Web Browser Interface Logging Into the NETGEAR Home Screen 2 1 Using the NETGEAR Web Management System Options 2 3 Chapter 3 Managing System Settings Using the System Settings Utility 3 1 Management 3...

Page 6: ...uring QoS Configuring the Basic and Advanced QoS Settings 5 1 CoS 5 1 Chapter 6 Managing Security Setting Security Configuration Options 6 1 Management Security 6 1 Port Authentication 6 7 Traffic Control 6 13 ACL 6 17 Chapter 7 Monitoring the Switch Setting Monitoring Options 7 1 Logs 7 1 RMON 7 9 Port Mirroring 7 21 Chapter 8 Maintenance Using the Maintenance Options 8 1 Reset 8 1 Upload 8 3 Dow...

Page 7: ...Contents vii v1 0 September 2007 Chapter 9 Online Help Online Help 9 1 Support 9 1 User Guide 9 2 Appendix A Default Settings Index ...

Page 8: ...FS700TS Smart Switch Software Administration Manual viii Contents v1 0 September 2007 ...

Page 9: ...sary to understand and use all of its capabilities Once basic configuration is performed the switch operates using the remaining factory default parameters However a greater level of configuration anywhere from the basic up to the maximum possible will allow your network the full benefit of the switch s features The web interface simplifies this configuration at all levels How to Use This Book Thi...

Page 10: ... paragraphs Typographical Conventions This manual uses the following typographical conventions Formats This manual uses the following formats to highlight special messages Note Refer to the product release notes for the FS700TS Smart Switch Software application level code The release notes detail the platform specific functionality of the Switching SNMP Config and Management packages Italics Empha...

Page 11: ...d a button Double click on a link in the table of contents or index to navigate directly to where the topic is described in the manual A button to access the full NETGEAR Inc online knowledge base for the product model Links to PDF versions of the full manual and individual chapters Danger This is a safety warning Failure to take heed of this notice may result in personal injury or death Product V...

Page 12: ...Click the PDF of This Chapter link at the top left of any page in the chapter you want to print The PDF version of the chapter you were viewing opens in a browser window Click the print icon in the upper left of your browser window Printing a PDF version of the Complete Manual Click the Complete PDF Manual link at the top left of any page in the manual The PDF version of the complete manual opens ...

Page 13: ...Network with a DHCP Server Network without a DHCP Server Web Access Additional Utilities System Requirements The following hardware and software facilities are required to run the applications described in this manual Network facilities Ethernet network with or without DHCP server as appropriate Ethernet cable to connect the switch to a PC For running the SmartWizard Discovery utility and local or...

Page 14: ...r you can monitor the performance of your switch and optimize network configuration Using your browser for example you can set up VLANs traffic priority and configure port trunking In addition NETGEAR provides the SmartWizard Discovery utility with this product This program runs under Microsoft Windows XP or Windows 2000 and provides a front end that discovers the switches on your network segment ...

Page 15: ...mputer 4 Start the SmartWizard Discovery utility 5 Click Discover for the SmartWizard Discovery utility to find your FS700TS 10 100 Stackable Smart Switch with Gigabit Ports You should see a screen similar to that shown below Table 1 1 Switch Management Methods Management Method Features SmartWizard Discovery utility No IP address or subnet mask setup needed Discover all switches on the network Us...

Page 16: ... IP address assigned by the DHCP server You will need this value to access the switch directly from a web browser without using the SmartWizard Discovery utility 7 Select your switch by highlighting the name of the switch Then click Web Access The discovery utility displays a login window similar to the following Figure 1 1 Figure 1 2 ...

Page 17: ...work Parameters If your network has no DHCP service you must assign a static IP address to your switch You can also assign the switch a static IP address even if your network has DHCP service Proceed as follows 1 Connect the FS700TS 10 100 Stackable Smart Switch with Gigabit Ports to your existing network 2 Power on the switch by plugging in the AC DC power adapter The default IP is 192 168 0 239 ...

Page 18: ...ur password and click Set Please ensure that your PC and the FS700TS 10 100 Stackable Smart Switch with Gigabit Ports are in the same subnet Note the settings for later use NIC Setting on the Host that Accesses the FS700TS 10 100 Stackable Smart Switch with Gigabit Ports The settings of your Network Interface Card NIC under MS Windows OS are made with entries into Windows screens similar to the on...

Page 19: ...mask value is identical to that set in the switch The PC IP address must be different from that of the switch but lie in the same subnet 3 Click Web Access in the SmartWizard Discovery utility to enable the management screens as described in the following section Web Access For Web access you can either Select Web Access using the SmartWizard Discovery utility see Network with a DHCP Server or Net...

Page 20: ...must initially configure your host PC to be on a network segment to match the default parameters of the switch which are IP address 192 168 0 239 Subnet Mask 255 255 255 0 You can change the network parameters to match those of your network this procedure is described in Chapter 3 Managing System Settings Your host PC network parameters must then be set to match your network Clicking Web Access on...

Page 21: ...S700TS Smart Switch software is upgradeable and enables your switch to take advantage of improvements and additional features as they become available The upgrade procedure assumes that you have downloaded or otherwise obtained the firmware upgrade and that you have it available as a binary file on your computer This procedure uses the TFTP protocol to implement the transfer from computer to switc...

Page 22: ... locate the file Upgrade Password Enter your password the default password is password 2 Click Apply to apply the settings to the Upgrade Configuration 3 Click Start Upgrade to begin loading the upgrade The system software is automatically loaded to all stacking members The Upgrade State field shows upgrading in progress When the process is complete the switch automatically reboots Exit Click Exit...

Page 23: ... is also provided for many of the basic functions and features of the switch This section introduces the areas of the browser interface and includes the following topics Logging Into the NETGEAR Home Screen Using the NETGEAR Web Management System Options Logging Into the NETGEAR Home Screen Begin your overview of the FS700TS Smart Switch browser interface by logging in 1 Start the application by o...

Page 24: ...nd Secondary Navigation Bars The Primary Navigation Bar contains a list of the different features that can be configured including System Switching QoS Security Monitoring Maintenance and Help Each feature expands to a subset of features that can be configured as part of the Secondary Navigation Bar Left Navigation Tree Located on the left side of the NETGEAR FS700TS web browser interface and mark...

Page 25: ...em Options The FS700TS web browser interface provides the following options Device Management Buttons Provides an explanation of the management buttons in the NETGEAR FS700TS Smart Switch Informational Services Provides access to informational services including technical support online help and device information Using Screen and Table Options Provides an explanation of specific GUI characteristi...

Page 26: ...guide in PDF format For a detailed description of how to access and use these functions see Chapter 9 Online Help Accessing Device Information Each screen of the web browser interface contains a help file with configuration information relating to the selected screen CURRENT MEMBERS Displays current members of a LAG DELETE Deletes information from tables or information windows GO Selects the speci...

Page 27: ... for a screen 1 Click the encircled red Question Mark icon shown in the example below A help window for the screen opens Using Screen and Table Options The NETGEAR FS700TS web browser interface contains screens and tables for configuring devices This section describes the table options Selecting an Entry Adding an Entry Figure 2 3 Figure 2 4 ...

Page 28: ...ry s Select box The selected entry is highlighted and the information appears in the first row which contains the editable fields To select all entries 1 Check the Select box in the first row to select all entries in the table Fields that are unique are grayed out and displayed as read only fields Adding an Entry An entry may be added to the table by creating a new entry or by duplicating an exist...

Page 29: ... first row 2 Click ADD to update the device The new entry is displayed Modifying an Entry An entry may be modified by editing its values in the first row To modify an entry 1 Select the entry to be modified Its contents are displayed in the first row 2 Modify the fields in the first row 3 Click APPLY to update the device Deleting an Entry To delete entries from a table 1 Select the entries to be d...

Page 30: ...gold button basic usage options To view the LAG configuration of the ports of Unit 1 1 Click anywhere on the Unit 1 ports gold button The Unit 1 ports panel is displayed 2 Select the Unit 1 ports to be added as LAG members within the selected LAG by clicking on their respective boxes 3 Click APPLY to update the device Quick Boxes Quick Boxes provide users with flexibility in configuring VLANs for ...

Page 31: ...appears to the left of the Unit 1 ports gold button A T appears in the quick box This sets all Unit 1 ports as Tagged 2 Click on the Unit 1 ports gold button to display the Unit 1 ports which are now all Tagged 3 Click again on the Unit 1 quick box and a U appears in the quick box and in all the port boxes for Unit 1 marking the ports as untagged Figure 2 11 Figure 2 12 Figure 2 13 ...

Page 32: ...t or LAG interface may be selected from a table by using the interface selection row located above the row of column headers Clicking on the unit ID or LAGS displays the ports in the unit or the LAGs To display all ports in a stacking unit 1 Click the unit number in the interface selection row The screen displays a table of all ports in the selected stacking unit To display all interfaces in all s...

Page 33: ...h Software Administration Manual Introduction to the Web Browser Interface 2 11 v1 0 September 2007 To display the LAG table 1 Click LAGS in the interface selection row The screen displays a table of all LAGs Figure 2 16 ...

Page 34: ...ation Manual 2 12 Introduction to the Web Browser Interface v1 0 September 2007 To select an interface 1 Enter the number of the interface in the GO TO INTERFACE box 2 Click GO to select the interface as in the following example Figure 2 17 ...

Page 35: ...MP The description that follows in this chapter describes configuring and managing system settings in the FS700TS Smart Switch Management The Management menu enables configuration of some system parameters the switch IP Address and the system time and contains the following options System Information IP Configuration Time System Information The System Information screen contains parameters for con...

Page 36: ...ter the location where the system is currently running The field may contain 0 160 characters System Contact Enter the name of the contact person The field may contain 0 160 characters System Object ID Displays the vendor s authoritative identification of the network management subsystem contained in the entity Date Time Displays the current date and local time System Up Time Displays the amount o...

Page 37: ...ys the installed device hardware version number Boot Version Displays the current boot version running on the device Software Version Displays the installed software version number 2 Enter the System Name System Location System Contact and Idle Timeout in the provided fields 3 If the displayed Unit Mode needs to be changed check the Change Unit Mode box 4 Click APPLY to update the system settings ...

Page 38: ... address to be configured automatically by the DHCP server Selecting this field disables the IP Address Subnet Mask Gateway and Delete fields Static IP Address Enable the user to define a static IP address IP Address Enter the static IP address used to manage the device Subnet Mask Enter the IP address mask Gateway Enter the default gateway IP address The following option is available Delete Delet...

Page 39: ...clock and the external SNTP clock fails the system time reverts to the local hardware clock To configure the local system time 1 Click System Management Time Time Configuration The Time Configuration screen displays The Time Configuration screen contains the following fields Clock Source Select the source used to set the system clock The possible field values are Local The system time is set local...

Page 40: ...s See SNTP Server Configuration for detailed instructions on configuring the SNTP servers SNTP Server Configuration The SNTP Server Configuration screen allows network administrators to define primary and secondary SNTP servers The system time is first retrieved through the primary SNTP server If the device is unable to retrieve the system time through the primary server the device retrieves the s...

Page 41: ...ields 3 Click APPLY to update the system settings To remove SNTP servers 1 Check the Delete box for each SNTP server that is to be removed 2 Click APPLY to update the system settings Device View The Device View menu option displays the Device View screen which provides a graphic representation of the device including the port and LED statuses To display the Device View screen 1 Click System Device...

Page 42: ...with minimal operational impact in the event of Unit Failure Inter unit Stacking Link Failure Unit Insertion Removal of a Stacking Unit Operation Modes A stack can operate in one of the following modes Standalone Mode Indicates the device is operating as a single unit and is not connected in a stack Stacking Master Manages the stacking configuration for all stack members Secondary Master Operates ...

Page 43: ...l including the case where a unit in the stack fails If a failure occurs in the stacking topology the stack reverts to Chain Stacking Topology In the Chain topology devices operate in a chain formation The system automatically switches to a Stacking Failover topology without any system downtime An SNMP message is automatically generated but no stack management action is required However the stacki...

Page 44: ...t is performed during the configuration process One Master enabled stack member is elected Master and the other Master enabled stack member is elected Secondary Master according to the following decision process If only one Stacking Master enabled unit is present this is the stacking Master If two Stacking Master enabled stacking members are present and one has been manually configured as the Stac...

Page 45: ...erating in standalone mode the unit does not boot For example if a stack member unit IDs 3 6 is separated from the stack due to a topology failure the stacking member is no longer connected to the stack The device can be booted but it cannot be managed through the Stacking Master The network manager can either reset the device defaults or correct the topology failure and reconnect the unit to the ...

Page 46: ...less ports than the previous device the relevant port configuration is applied to the new stack member Switching the Stacking Master The Secondary Master replaces the Stacking Master if one of the following events occur The Stacking Master fails or is removed from the stack Links from the Stacking Master to the stacking members fails A soft switchover is performed via the web interface Switching b...

Page 47: ... The Basic Stack Configuration screen displays The Basic Stack Configuration screen contains the following fields Master Election Select the mode by which the Stacking Master is elected When the stack is powered up and completes the boot up process the Master unit is elected within 0 5 seconds Master election is based on MAC address selection The possible field values are Automatically The Stackin...

Page 48: ...g Advanced menu contains the following options Stack Configuration Stack Management Stack Configuration To configure advanced stacking 1 Click System Stacking Advanced Stack Configuration The Advanced Stack Configuration screen displays The Advanced Stack Configuration screen contains the following fields Master Election Select the mode by which the Stacking Master is elected When the stack is pow...

Page 49: ...u selected Force Master select either 1 or 2 from the stack ID list 4 Select the type of Stacking Ports After Reset 5 Click APPLY to update the device 6 Reset the device for the new settings to take effect See Reset for detailed instructions on resetting the device Stack Management To configure Stack Management 1 Click System Stacking Advanced Stack Management The Stack Management screen displays ...

Page 50: ...k masters 1 Open the Stack Configuration screen 2 Select Force Master and select 2 from the drop down list to switch the stack control to the Secondary Stack Master 3 Click APPLY A confirmation message displays PoE Power over Ethernet PoE provides power to devices over existing LAN cabling without updating or modifying the network infrastructure This removes the limitation of placing network devic...

Page 51: ...guration screen displays The Basic PoE Configuration screen contains the following fields Unit ID Displays the online power unit ID Power Status Displays the online power source status The possible field values are On The power supply unit is functioning Off The power supply unit is not functioning Faulty The power supply unit is functioning but an error has occurred For example a power overload o...

Page 52: ... Usage Threshold in the provided field 3 Select either Enable or Disable in the Traps field 4 Click APPLY to update the device Advanced The PoE Advanced menu contains the following options PoE Configuration PoE Port Configuration PoE Configuration The Advanced PoE Configuration screen contains system PoE information for enabling PoE on the device monitoring the current power usage and enabling PoE...

Page 53: ...f the power used by the connecting device The field value is displayed in Watts System Usage Threshold Enter the percentage of power consumed before an alarm is generated The field value is 1 99 percent The default is 95 percent Traps Select the PoE device trap state The possible field values are Enable Enable PoE traps on the device Disable Disable PoE traps on the device This is the default valu...

Page 54: ...r to the device using the PoE module The Device Discovery Protocol enables the device to discover Powered Devices attached to the device interfaces and to learn their classification This is the default setting Disable Disable the Device Discovery protocol and stops the power supply to the device using the PoE module Priority Level Select the port priority if the power supply is low The field defau...

Page 55: ...ays the port s PoE status The possible field values are On The device is enabled to deliver power via the interface Off The device is disabled for delivering power via the interface Test Fail The powered device test has failed For example a port could not be enabled and cannot be used to deliver power to the powered device Testing The powered device is being tested For example a powered device is ...

Page 56: ...MPv3 including Authentication Provides data integrity and data origin authentication Privacy Protects against the disclosure of message content Cipher Block Chaining CBC is used for encryption Either authentication is enabled on an SNMP message or both authentication and privacy However privacy cannot be enabled without authentication Timeliness Protects against message delay or message redundancy...

Page 57: ...c SNMP community is defined Community String Enter the password used to authenticate the management station to the device Access Mode Select the access rights of the community The possible field values are Read Only Management access is restricted to read only Changes cannot be made to the device configuration and to the community Read Write Management access is read write Changes can be made to t...

Page 58: ...ield in the first row 4 Click ADD to update the device To remove an SNMP community 1 Click System SNMP SNMPv1 v2 Community Configuration The Community Configuration screen displays 2 Select the entry to be removed 3 Click DELETE to remove the entry Trap Configuration The SNMPv1 v2 Trap Configuration screen contains information for defining filters that determine whether traps are sent to specific ...

Page 59: ...e field values are Traps Traps are sent Informs Informs are sent only when SNMPv2 is enabled Community String Enter the community string of the trap manager Notification Version Select the trap type The possible field values are SNMPv1 SNMP Version 1 traps are sent SNMPv2 SNMP Version 2c traps are sent UDP Port Enter the UDP port used to send notifications The default UDP port is 162 Timeout Enter...

Page 60: ...row 3 Click ADD to update the device To remove an SNMP trap 1 Click System SNMP SNMPv1 v2 Trap Configuration The SNMPv1 v2 Trap Configuration screen displays 2 Select the entry to be removed 3 Click DELETE to remove the entry SNMPv3 The SNMPv3 menu contains the following options Engine ID View Name View Content Community Configuration Group Configuration User Configuration Global Trap Configuratio...

Page 61: ... byte in hexadecimal character strings is two hexadecimal digits Each byte digit can be separated by a period or a colon The Engine ID must be defined before SNMPv3 is enabled Use Default Check the box to use the device generated Engine ID The default Engine ID is based on the device MAC address and is defined per standard as First 4 octets First bit 1 the rest is the IANA Enterprise number Fifth ...

Page 62: ...reen contains the following field View Name Enter the user defined view name The view name can contain a maximum of 30 alphanumeric characters 2 Select the entry 3 Enter the View Name field in the first row 4 Click APPLY to update the device To add a new SNMP View Name 1 Click System SNMP SNMPv3 View Name The SNMPv3 View Name screen displays 2 Enter the View Name field in the first row 3 Click ADD...

Page 63: ...ntent screen displays The SNMPv3 View Content screen contains the following fields Views View Name Select the user defined view name The view name can contain a maximum of 30 alphanumeric characters Object ID Subtree Enter the device feature OID View Type Select whether the defined OID branch will be included in or excluded from the selected SNMP view The possible field values are Included The OID...

Page 64: ...ld in the first row 4 Select either Included or Excluded from the View Type provided field in the first row 5 Click ADD to update the device To remove an SNMP OID entry 1 Click System SNMP SNMPv3 View Content The SNMPv3 View Content screen displays 2 Select the View Name from the list in the provided field in the Views table 3 Select the OID entry to be removed 4 Click DELETE to remove the entry C...

Page 65: ...he management station to the device Group Name Select the SNMP group from a list of SNMP groups defined in the SNMP Group Configuration screen 2 Select the SNMP community entry 3 Enter the Management Station and Community String in the provided fields 4 Select the Group Name from the list 5 Click APPLY to update the device To add a new SNMPv3 community 1 Click System SNMP SNMPv3 Community Configur...

Page 66: ...ileges to SNMP groups Groups allow network managers to assign access rights to specific device features or feature aspects To define an SNMP group 1 Click System SNMP SNMPv3 Group Configuration The SNMPv3 Groups screen displays The SNMPv3 Groups screen contains the following fields Group Name Enter the user defined group to which access control rules are applied The field range is up to 30 charact...

Page 67: ...ead write Changes are made to the assigned SNMP view Notify Sends traps for the assigned SNMP view 2 Select the SNMP group entry 3 Select the Security Model and Security Level from the lists in the provided fields in the first row 4 Specify the group access rights for the selected SNMP views in the Operation provided fields in the first row 5 Click APPLY to update the device To add a new SNMPv3 gr...

Page 68: ...tion screen contains the following fields User Name Enter the user name The field range is up to 30 alphanumeric characters Group Name Enter the group name from a list of user defined SNMP groups SNMP groups are defined in the Groups screen Engine ID Select either the local or remote SNMP entity to which the user is connected Changing or removing the local SNMP Engine ID deletes the SNMPv3 user da...

Page 69: ...er Name in the provided field in the first row 4 Select the Group Name and Engine ID from the lists in the provided fields in the first row 5 Specify the Engine ID Value in the provided field in the first row 6 Select the Authentication method from the list in the provided field in the first row 7 If you selected a password method of Authentication enter the Password in the provided field in the f...

Page 70: ...ion parameters To configure SNMP notification global parameters 1 Click System SNMP SNMPv3 Global Trap Configuration The SNMPv3 Global Trap Settings screen displays The SNMPv3 Global Trap Settings screen contains the following fields SNMP Notifications Select whether or not the device can send SNMP notifications The possible field values are Enable Enable SNMP notifications Disable Disable SNMP no...

Page 71: ...t to specific users and the trap type sent SNMP notification filters provide the following services Identifying Management Trap Targets Defining Trap Filtering Selecting Trap Generation Parameters Providing Access Control Checks To define trap station management 1 Click System SNMP SNMPv3 Trap Configuration The SNMPv3 Trap Configuration screen displays The SNMPv3 Trap Configuration screen contains...

Page 72: ... in the provided field in the first row 3 Select either Traps or Informs in the Notification Type provided field in the first row 4 Enter the User Name in the provided field in the first row 5 Select the Security Level from the list in the provided field in the first row 6 Enter the UDP Port in the provided field in the first row 7 Select the Filter Name from the list in the provided field in the ...

Page 73: ...p Filter Name screen permits filtering traps based on OIDs Each OID is linked to a device feature or a portion of a feature The SNMPv3 Trap Filter Name screen also allows network managers to filter notifications To define the SNMPv3 Trap Filter Name 1 Click System SNMP SNMPv3 Trap Filter Name The SNMPv3 Trap Filter Name screen displays The SNMPv3 Trap Filter Name screen contains the following fiel...

Page 74: ... displays 2 Select the trap filter name entry 3 Click DELETE to remove the entry Trap Filter Content The SNMPv3 Trap Filter Content screen permits filtering traps based on OIDs Each OID is linked to a device feature or a portion of a feature The SNMPv3 Trap Filter Content screen also allows network managers to filter notifications To define SNMPv3 Trap Filter settings 1 Click System SNMP SNMPv3 Tr...

Page 75: ...ntry from the OID table 4 Enter the Object ID Subtree in the provided field in the first row 5 Select the Filter Type from the list in the provided field in the first row 6 Click APPLY to update the device To add a new trap filter content entry 1 Click System SNMP SNMPv3 Trap Filter Content The SNMPv3 Trap Filter Content screen displays 2 Select the Filter Name from the list in the provided field ...

Page 76: ...FS700TS Smart Switch Software Administration Manual 3 42 Managing System Settings v1 0 September 2007 ...

Page 77: ...0TS Smart Switch with features under the following main headings Ports LAG VLAN STP Multicast Address Table The description that follows in this chapter describes configuring and managing switching settings in the FS700TS Smart Switch Ports The Ports menu contains the following option Port Configuration Port Configuration The Port Configuration screen contains fields for defining port parameters e...

Page 78: ...tatus Select the port s operational status The possible field values are Up The port is operational Down The port is not operational Reactivate Suspended Select the reactivation status for a port disabled through the locked port security option The possible field values are Enable Enable reactivation Disable Disable reactivation Port Speed Select the data transmission rate for the port The port ty...

Page 79: ...uplex mode and flow control abilities to its partner The possible field values are Enable Auto negotiation is enabled Disable Auto negotiation is disabled Back Pressure Select the back pressure mode of the Port Back Pressure mode is used with half duplex mode to disable ports from receiving messages Back Pressure mode is disabled by default The possible field values are Enable Back pressure mode i...

Page 80: ...ink redundancy Ports added to a LAG lose their individual port configuration When ports are removed from the LAG the original port configuration is applied to the ports Ensure the following when configuring LAGs All ports within a LAG must be of the same media type A VLAN is not configured on the port The port is not assigned to a different LAG Auto negotiation mode is not configured on the port T...

Page 81: ...tains fields for configuring LAG parameters The system supports 8 LAGs and each LAG can contain up to 8 ports To define LAG parameters 1 Click Switching LAG Basic LAG Configuration The Basic LAG Configuration screen displays The Basic LAG Configuration screen contains the following fields Interface Displays the LAG number Description Enter a user defined LAG description Status Select the current l...

Page 82: ...mode of the LAG This field is configurable only when auto negotiation is disabled and the LAG speed is set to 10M or 100M The possible field values are Half The interface supports transmission between the device and the client in only one direction at a time Full The interface supports transmission between the device and its link partner in both directions simultaneously Auto The interface support...

Page 83: ...embership screen allows network managers to assign ports to LAGs To assign ports to LAGs 1 Click Switching LAG Basic LAG Membership The Basic LAG Membership screen displays The Basic LAG Membership screen contains the following fields LAG ID Select the LAG ID LAG Name Displays the user defined LAG name LAG Type Select the LAG type The possible field values are Static The LAG is configured manually...

Page 84: ... LAG 5 Click APPLY to update the device 6 Click CURRENT MEMBERS The Current Members window opens and displays the member ports included in the LAG Advanced The LAG Advanced menu contains the following options LAG Configuration LAG Membership LACP LACP Port Priority LAG Configuration The Advanced LAG Configuration screen contains fields for configuring LAG parameters The system supports 8 LAGs and ...

Page 85: ...lds Interface Displays the LAG number Description Enter a user defined LAG description Status Select the current link operation The possible field values are Up The LAG is currently linked and forwarding traffic Down The LAG is currently not linked Reactivate Suspended Select the action to apply to a suspended LAG The possible field values are Enable Reactivate the suspended LAG Disable Do not rea...

Page 86: ...ice and the client in only one direction at a time Full The interface supports transmission between the device and its link partner in both directions simultaneously Auto The interface supports transmission between the device and the link partner based on the transmission mode of the link partner Auto Negotiation Select the auto negotiation status of the LAG Auto Negotiation is a protocol between ...

Page 87: ...ership The LAG Membership screen displays The Advanced LAG Membership screen contains the following fields LAG ID Select the LAG ID LAG Name Displays the user defined LAG name LAG Type Select the LAG type The possible field values are Static The LAG is configured manually LACP The LAG is configured automatically CURRENT MEMBERS Display current members of a LAG 2 Select the LAG ID and LAG Type 3 Cl...

Page 88: ...atically established by enabling LACP on the relevant links Aggregated ports can be linked into link aggregation port groups Each group is comprised of ports with the same speed The LACP screen contains fields for configuring LACP To configure LACP 1 Click Switching LAG Advanced LACP Configuration The LACP screen displays The LACP screen contains the following field LACP System Priority Enter the ...

Page 89: ...ort Priority screen contains the following fields Interface Displays the interface number to which timeout and priority values are assigned LACP Priority Enter the port priority value The field range is 1 65535 Timeout Select the administrative LACP timeout The possible field values are Long A long timeout value Short A short timeout value 2 Select the interface 3 Enter the LACP Priority and selec...

Page 90: ...hin the LAN a Layer 3 router working at a protocol level is required to allow traffic flow between VLANs Layer 3 routers identify segments and coordinate with VLANs VLANs are Broadcast and Multicast domains Broadcast and Multicast traffic is transmitted only in the VLAN in which the traffic is generated VLAN tagging provides a method of transferring VLAN information between VLAN groups VLAN taggin...

Page 91: ...AN type The possible field values are Static The VLAN is user defined Default The default VLAN ID is 1 It cannot be modified by the user 2 Select the VLAN entry 3 Enter the VLAN ID and VLAN Name in the provided fields in the first row 4 Click APPLY to update the device To add a new VLAN 1 Click Switching VLAN Basic VLAN Configuration The Basic VLAN Configuration screen displays 2 Enter the VLAN ID...

Page 92: ...provides information and global parameters for configuring and working with VLANs To define VLAN properties 1 Click Switching VLAN Advanced VLAN Configuration The Advanced VLAN Configuration screen displays The Advanced VLAN Configuration screen contains the following fields VLAN ID Enter the VLAN ID The field range is 1 4093 VLAN Name Enter the user defined VLAN name Type Displays the VLAN type T...

Page 93: ...uration The Advanced VLAN Configuration screen displays 2 Enter the VLAN ID and VLAN Name in the provided fields in the first row 3 Click ADD to update the device To remove a VLAN 1 Click Switching VLAN Advanced VLAN Configuration The Advanced VLAN Configuration screen displays 2 Select the VLAN entry 3 Click DELETE to remove the entry VLAN Membership The VLAN Membership screen contains a table th...

Page 94: ...AN VLAN Type Displays the VLAN type The possible field values are Static The VLAN is user defined Default The VLAN is the default VLAN The default VLAN is enabled Group Operation Select the VLAN membership for all ports and LAGs The possible field values are Tag All Defines all selected interfaces as tagged VLAN members Packets belonging to the respective VLAN are tagged The packets contain VLAN i...

Page 95: ...elected ports or LAGs to mark them as tagged T or untagged U 4 Click APPLY to update the device To tag or untag all the ports within a stacking unit or all the LAGs 1 Click Switching VLAN Advanced VLAN Membership The VLAN Membership screen displays 2 Click the stacking unit s quick box or the LAG quick box repeatedly if necessary until a T or U appears in the quick box marking all the unit s ports...

Page 96: ...agged Ports screen opens Port PVID Configuration The Port PVID Configuration screen contains parameters for assigning Port VLAN ID PVID values to interfaces All ports must have a defined PVID If no other value is configured the default VLAN PVID is used VLAN ID 1 belongs to the default VLAN which cannot be deleted from the system Once the PVID is changed from 1 to another VLAN ID on an interface t...

Page 97: ...D Enter the PVID value The possible field range is 1 4093 2 Select an interface 3 Enter the PVID in the provided field in the first row 4 Click APPLY to update the device STP Spanning Tree Protocol STP provides tree topography for any arrangement of bridges STP also provides a single path between end stations on a network eliminating loops Loops occur when alternate routes exist between hosts Loop...

Page 98: ...ion screen contains parameters for enabling STP on the device To configure STP on the device 1 Click Switching STP Basic STP Configuration The Basic STP Configuration screen displays The Basic STP Configuration screen contains the following fields Global Settings Spanning Tree State Select the STP state on the device The possible field values are Enable Enable STP on the device Disable Disable STP...

Page 99: ... bridge is not the Root Bridge Max Age secs Displays the device Maximum Age Time The Maximum Age Time is the amount of time in seconds a bridge waits before sending configuration messages The default Maximum Age Time is 20 seconds Forward Delay secs Displays the device Forward Delay Time The Forward Delay Time is the amount of time in seconds a bridge remains in a listening and learning state befo...

Page 100: ...n the device The possible field values are Enable Enable STP on the device Disable Disable STP on the device Status Bridge Identifier Displays the Bridge priority and MAC address Time Since Topology Change Displays the amount of time that has elapsed since the bridge was initialized or reset and the last topographic change that occurred The time is displayed in a day hour minute second format such...

Page 101: ...ore sending configuration messages The default Maximum Age Time is 20 seconds Forward Delay secs Displays the device Forward Delay Time The Forward Delay Time is the amount of time in seconds a bridge remains in a listening and learning state before forwarding packets The default is 15 seconds Hello Time secs Displays the device Hello Time The Hello Time indicates the amount of time in seconds The...

Page 102: ...device Hello Time The Hello Time indicates the amount of time in seconds a Root Bridge waits between configuration messages The default is 2 seconds Max Age Enter the device Maximum Age Time The Maximum Age Time is the amount of time in seconds a bridge waits before sending configuration messages The default Maximum Age Time is 20 seconds Forward Delay Enter the device Forward Delay Time The Forwa...

Page 103: ...rovided field 4 Click APPLY to update the device CST Port Configuration To configure CST ports on the device 1 Click Switching STP Advanced CST Port Configuration The CST Port Configuration screen displays The CST Port Configuration screen contains the following fields Interface Displays the port or LAG for which the STP information is displayed STP Status Select the STP status on the interface Th...

Page 104: ...he port is currently blocked and cannot forward traffic or learn MAC addresses Blocking is displayed when STP is enabled Listening The port is in Listening mode The port cannot forward traffic nor can it learn MAC addresses Learning The port is in Learning mode The port cannot forward traffic however it can learn new MAC addresses Speed Displays the speed at which the port is operating Path Cost E...

Page 105: ... all relevant VLAN ports by default treating the packet as a Multicast transmission Multicast traffic forwarding is functional However irrelevant ports also receive the Multicast causing increased network traffic Multicast forwarding filters enable forwarding of Layer 2 packets to port subsets defined in the Multicast filter database The device supports forwarding L2 Multicast Packets Multicast fo...

Page 106: ...ssible field values are Enable Enable IGMP Snooping on the device Disable Disable IGMP Snooping on the device Interface Settings VLAN ID Displays the VLAN ID Status Select the IGMP Snooping status on the VLAN The possible field values are Enable Enable IGMP Snooping on the VLAN Disable Disable IGMP Snooping on the VLAN 2 Select the IGMP Snooping Status in the provided field 3 Click APPLY to update...

Page 107: ...roup Membership Multicast Forward All IGMP Snooping Configuration To configure Advanced IGMP Snooping 1 Click Switching Multicast Advanced IGMP Snooping Configuration The Advanced IGMP Snooping Configuration screen displays The IGMP Snooping Configuration screen contains the following fields IGMP Snooping Configuration Status Select the IGMP Snooping status on the device IGMP Snooping is operation...

Page 108: ...er Multicast groups are located The possible field values are Enable Enable auto learn Disable Disable auto learn Host Timeout Enter the amount of time host waits to receive a message before timing out The default time is 260 seconds MRouter Timeout Enter the amount of the time the Multicast router waits to receive a message before it times out The default value is 300 seconds Leave Timeout Enter ...

Page 109: ...iguration table can contain up to 32 Multicast service groups To configure Multicast groups 1 Click Switching Multicast Advanced Multicast Group Configuration The Multicast Group Configuration screen displays The Multicast Group Configuration screen contains the following information VLAN ID Displays the VLAN ID VLAN Name Displays the user defined VLAN name Multicast Address Enter the Multicast gr...

Page 110: ...r in which the port or LAGs joined the Multicast group To configure Multicast group membership 1 Click Switching Multicast Advanced Multicast Group Membership The Multicast Group Membership screen displays The Multicast Group Membership screen contains the following information Multicast Group Membership VLAN ID Enter the VLAN ID VLAN Name Displays the user defined VLAN name Multicast Address Ente...

Page 111: ...ded fields 3 Select the interface entry in the Multicast Group table 4 Select the Interface Status from the list in the provided field in the first row Note that you may not specify Dynamic 5 Click APPLY to update the device Multicast Forward All The Multicast Forward All screen contains fields for attaching ports or LAGs to a device that is attached to a neighboring Multicast router switch Once I...

Page 112: ...t Group table 4 Select the Interface Status from the list in the provided field in the first row Note that you may not specify Dynamic 5 Click APPLY to update the device Address Table Packets addressed to destinations stored in either the Static or Dynamic databases are immediately forwarded to the port The Dynamic MAC Address Table can be sorted by interface VLAN or MAC Address MAC addresses are ...

Page 113: ...AC Address table according to the defined categories To query the Basic Address Table 1 Click Switching Address Table Basic Address Table The Basic Address Table screen displays The Basic Address Table screen contains the following fields Search By Display the MAC Address list according to selected category and query field The possible field values are VLAN ID Display the MAC Address table entries...

Page 114: ... from the list in the provided field 3 Enter the value to be searched for in the provided box 4 Click GO to execute the query Advanced The Address Table Advanced menu contains the following options Static Addresses Dynamic Addresses Address Table Static Addresses The Static Addresses screen contains a list of static MAC addresses Static Addresses are added and removed from the Static Addresses scr...

Page 115: ...s is deleted when the device is reset Delete on Timeout The MAC address is deleted when the Address Aging Interval expires Secure The MAC Address is defined for locked interfaces 2 Select the address table entry 3 Enter the MAC Address and Interface in the provided fields in the first row 4 Select the MAC Address duration period Status from the list in the provided field in the first row 5 Click A...

Page 116: ... is 300 seconds 2 Enter the Address Aging in the provided field in the first row 3 Click APPLY to update the device Address Table The Advanced Address Table screen displays the MAC Address table according to the defined categories To query the Advanced MAC Address Table 1 Click Switching Address Table Advanced Address Table The Advanced Address Table screen displays The Advanced Address Table scre...

Page 117: ...t relate to MAC Address Interface Display the MAC Address table entries that relate to the specific interface VLAN ID Displays the VLAN ID number to which the entry refers MAC Address Displays the MAC address to which the entry refers Interface Displays the interface to which the entry refers 2 Select the Search By key from the list in the provided field 3 Enter the value to be searched for in the...

Page 118: ...FS700TS Smart Switch Software Administration Manual 4 42 Configuring Switching Settings v1 0 September 2007 ...

Page 119: ...e result is an improved traffic flow for traffic with high demand QoS is defined by Classification Specifies which packet fields are matched to specific values All packets matching the user defined specifications are classified together Action Defines traffic management where packet forwarding is based on packet information and packet field values such as VLAN Priority Tag VPT and DiffServ Code Po...

Page 120: ...an share the bandwidth with the SP queues This ensures that the remaining bandwidth is distributed according to the weight ratio If WRR is selected the following weights are assigned to the queues 1 2 4 8 The CoS menu contains the following options Basic Advanced Basic The CoS Basic menu contains the following options CoS Global Configuration CoS Interface Configuration Queue Bandwidth CoS Global ...

Page 121: ...ssify traffic based on the CoS VPT tag value DSCP Classify traffic based on the DSCP tag value 2 Select the QoS Mode and Trust Mode in the provided fields 3 Click APPLY to update the device CoS Interface Configuration The CoS Interface Configuration screen contains information for configuring the default CoS value on a selected interface After CoS has been configured the device original CoS defaul...

Page 122: ...ettings to the ports Unchecked Maintain the current CoS settings 2 Select the interface 3 Select the Default CoS value from the list in the provided field in the first row 4 Check or uncheck the Restore Defaults box in the interface entry row 5 Click APPLY to update the device Queue The Queue screen contains fields for defining the QoS queue forwarding types To set the queue settings 1 Click QoS C...

Page 123: ...tion Rate Indicates the rate that data is transmitted The rate is averaged over a minimum time increment The Bandwidth screen allows the user to define Ingress Rate Limit and Egress Shaping Rates To define bandwidth settings 1 Click QoS CoS Basic Bandwidth The Bandwidth screen displays The Bandwidth screen contains the following fields Interface Displays the ports for which the bandwidth settings ...

Page 124: ...ange is 0 to 62 5Mb 2 Select the interface 3 Choose either Enable or Disable in the Ingress Rate Limit Status provided field in the first row 4 If you selected Enable in the Ingress Rate Limit Status field enter the Ingress Rate Limit in the provided field in the first row 5 Choose either Enable or Disable in the Egress Shaping Rate Status provided field in the first row 6 If you selected Enable i...

Page 125: ...eue is reserved for special traffic and is not recommended for use Restore Default Mapping Restore Defaults Restore the device factory defaults for mapping CoS values to a forwarding queue The possible field values are Checked Restore the factory default settings for mapping CoS values to a forwarding queue Unchecked Maintain the current CoS queue mapping settings 2 Select the Queue values for eac...

Page 126: ...e The following DSCP In values are predefined 3 11 19 27 35 43 51 59 Queue Select the traffic forwarding queue to which the DSCP is mapped Four traffic priority queues are supported Lowest Low Normal and High The High Queue is reserved for special traffic and is not recommended for use Restore Default Mapping Restore Defaults Restore the DSCP Mapping device factory default values The possible fiel...

Page 127: ...dministration Manual Configuring QoS 5 9 v1 0 September 2007 2 Select the Queue values for each DSCP In value in the provided fields 3 Check or uncheck the Restore Defaults box in the provided field 4 Click APPLY to update the device ...

Page 128: ...FS700TS Smart Switch Software Administration Manual 5 10 Configuring QoS v1 0 September 2007 ...

Page 129: ...er the following main menu options Management Security Port Authentication Traffic Control ACL The description that follows in this chapter describes configuring and managing security settings in the FS700TS Smart Switch Management Security The Management Security menu contains the following options User Configuration RADIUS TACACS Authentication List User Configuration The User Configuration menu...

Page 130: ...ord Enter the current password for accessing the system New Password Enter a new password for accessing the system Retype New Password Repeat the new password used to access the system 2 Enter the Old Password New Password and Retype New Password in the provided fields 3 Click APPLY to update the device RADIUS Remote Authorization Dial In User Service RADIUS servers provide additional security for...

Page 131: ...nds the device waits for an answer from the RADIUS server before retrying the query or switching to the next server Possible field values are 1 30 The default value is 3 Dead Time Enter the default amount of time in minutes that a RADIUS server is bypassed for service requests The range is 0 2000 The default value is 0 Key String Enter the default key string used for authenticating and encrypting ...

Page 132: ...ity RADIUS The RADIUS screen displays 2 Enter the Host IP Address Authentication Port Number of Retries Timeout for Reply Dead Time and Key String in the provided fields in the first row 3 Select the Usage Type and Active server from the lists in the provided fields in the first row 4 Click ADD to update the device To remove a RADIUS server entry 1 Click Security Management Security RADIUS The RAD...

Page 133: ... which the TACACS session occurs The default port is port 49 Timeout for Reply Enter the amount of time in seconds the device waits for an answer from the TACACS server before retrying the query or switching to the next server Possible field values are 1 30 The default value is 5 Single Connection Select whether a single open connection between the host Authentication Port and the TACACS server is...

Page 134: ...elds in the first row 4 Click ADD to update the device To remove a TACACS server entry 1 Click Security Management Security TACACS The TACACS screen displays 2 Select the TACACS server entry 3 Click DELETE to remove the entry Authentication List The Authentication List screen contains information for defining an authentication method for the selected Authentication List For example if the user sel...

Page 135: ...ate the user at the TACACS server For more information see TACACS RADIUS Authenticate the user at the RADIUS server For more information see RADIUS Local Authenticate the user at the device level The device checks the user name and password for authentication None Assign no authentication method to the authentication list 2 Select the Authentication List entry 3 Select the order of authentication ...

Page 136: ...802 1X Configuration screen contains the following fields Port Based Authentication State Select whether port based authentication is enabled or disabled on the device The possible field values are Disable Disable port based authentication on the device Enable Enable port based authentication on the device Authentication Method Select the authentication method used for port authentication The poss...

Page 137: ...elect Disable or Enable for the Port Based Authentication State in the provided field 3 If you selected Enable for the Port Based Authentication State then select the Authentication Method from the list in the provided field 4 Select Disable or Enable for the Guest VLAN status in the provided field 5 If you selected Enable for the Guest VLAN field then select the VLAN ID from the list in the provi...

Page 138: ... for port authentication The possible field values are RADIUS None Port authentication is first attempted through the RADIUS server If the RADIUS server is inaccessible or not defined then no authentication method None is used and the session is permitted RADIUS Port authentication is through the RADIUS server None No authentication method is used to authenticate the port Guest VLAN Enter whether ...

Page 139: ...ID from the list in the provided field 6 Click APPLY to update the device Port Authentication The Port Authentication screen allows to configure port authentication interface parameters To configure port based authentication global properties 1 Click Security Port Authentication Advanced Port Authentication The Port Authentication screen displays The Port Authentication screen contains the followi...

Page 140: ...hich the selected port is reauthenticated The field default is 3600 seconds Authenticator State Select whether immediate port reauthentication is enabled or disabled The possible field values are Enable Enable immediate port reauthentication Disable Disable immediate port reauthentication This is the default value Quiet Period Enter the number of seconds that the device remains in the quiet state ...

Page 141: ...frames accepted and forwarded by the device When Layer 2 frames are forwarded Broadcast and Multicast frames are flooded to all ports on the relevant VLAN This occupies bandwidth and loads all nodes on all ports A Broadcast Storm is a result of an excessive amount of broadcast messages simultaneously transmitted across a network by a single port Forwarded message responses are heaped onto the netw...

Page 142: ...rm control on the interface This is the default value Disable Disable storm control on the interface Broadcast Mode Select the Broadcast mode on the interface The possible field values are Multicast Broadcast Counts Broadcast and Multicast traffic together Broadcast Only Counts only Broadcast traffic Broadcast Rate Threshold Enter the maximum rate kilobits per second at which broadcast packets are...

Page 143: ...s with specific MAC addresses These addresses are either manually defined on the port or learned on that port up to the point when it is locked When a packet is received on a locked port and the packet source MAC address is not tied to that port either it was learned on a different port or it is unknown to the system the protection mechanism is invoked It provides the following options for unautho...

Page 144: ...d on the port The Max Entries field is enabled only if the Limited Dynamic Lock mode is selected The range is 1 128 entries The default value is 1 Action Select the action to be applied to packets arriving on a locked port The possible field values are Forward Forwards packets from an unknown source without learning the MAC address Discard Discards packets from any unlearned source This is the def...

Page 145: ...with an active ACL are either admitted or denied entry and the ingress port is disabled If they are denied entry the user can disable the port The ACL menu contains the following option Basic Basic The ACL Basic menu contains the following options MAC ACL MAC Rules MAC Binding Configuration Binding Table MAC ACL The MAC ACL screen allows a MAC Based ACL to be defined To view or rename MAC Based AC...

Page 146: ...ays the current number of rules in the ACL 2 Select the ACL entry 3 Enter the new ACL Name in the provided field in the first row 4 Click APPLY to update the device To add a new MAC based ACL entry 1 Click Security ACL Basic MAC ACL The MAC Configuration screen displays 2 Enter the ACL Name in the provided field in the first row 3 Click ADD to update the device To remove a MAC based ACL entry 1 Cl...

Page 147: ...e Select the ACL Name from the list Rule Table MAC Address Dest Enter the destination MAC Address Action Select the action applied to packets with MAC addresses that have been filtered The possible field values are Deny Deny access to packets originating from the blocked MAC address 2 Select the ACL Name from the list in the provided field 3 Select the rule entry 4 Enter the provided fields in the...

Page 148: ...Click DELETE to remove the entry MAC Binding Configuration To bind interfaces to an ACL 1 Click Security ACL MAC Binding Configuration The MAC Binding Configuration screen displays The MAC Binding Configuration screen contains the following fields MAC Binding Configuration ACL Name Select the ACL Name for viewing and modifying ACL bound interfaces VLAN Select the VLAN to bind to the ACL 2 Select t...

Page 149: ...Click Security ACL Binding Table The Binding Table screen displays The Binding Table screen contains the following fields Interface Binding Table Interface Displays the interfaces for which the ACLs are bound ACL Name Displays the ACL Name ACL Type Displays the ACL Type The possible field value is MAC The ACL is MAC address based Figure 6 13 ...

Page 150: ...FS700TS Smart Switch Software Administration Manual 6 22 Managing Security v1 0 September 2007 ...

Page 151: ...rting for example Syslog local device reporting Messages are assigned a severity code and include a message mnemonic which identifies the source application generating the message Messages are filtered based on their urgency or relevancy The following table contains the Log Severity Levels Table 1 Severity Levels Severity Severity Level Severity Level Description Emergency 0 The system is not func...

Page 152: ...ogs Configuration The Log Configuration screen contains fields for enabling and disabling logs globally To enable or disable event logging 1 Click Monitoring Logs Logs Configuration The Logs Configuration screen displays The Logs Configuration screen contains the following field Logging State Select whether to enable or disable the device global logs for Cache File and Server Logs Console logs are...

Page 153: ...for example all device features are down Critical The third highest warning level A critical log is saved if a critical device malfunction occurs for example two device ports are not functioning while the rest of the device ports remain functional Error A device error has occurred for example if a single port is offline Warning The lowest level of a device warning The device is functioning but an ...

Page 154: ... Error A device error has occurred for example if a single port is offline Warning The lowest level of a device warning The device is functioning but an operational problem has occurred Notice Provides device information Informational Provides device information Debug Provides debugging messages 2 Select the minimum severity level for RAM logs 3 Select the minimum severity level for FLASH logs 4 C...

Page 155: ...cal The third highest warning level A critical log is saved if a critical device malfunction occurs for example two device ports are not functioning while the rest of the device ports remain functional Error A device error has occurred for example if a single port is offline Warning The lowest level of a device warning The device is functioning but an operational problem has occurred Notice Provid...

Page 156: ...message is saved to the specified logging location Alert The second highest warning level An alert log is saved if there is a serious device malfunction for example all device features are down Critical The third highest warning level A critical log is saved if a critical device malfunction occurs for example two device ports are not functioning while the rest of the device ports remain functional...

Page 157: ...are sent to the remote server Only one facility can be assigned to a single server If a second facility level is assigned the first facility is overridden All applications defined for a device utilize the same facility on a server The field default is Local 0 The possible field values are Local 0 Local 7 Description Enter a user defined server description Minimum Severity Select the minimum severi...

Page 158: ... assigned to the server from the list in the provided field in the first row 6 Enter an optional server Description in the provided field in the first row 7 Select the Minimum Severity level message sent to the server from the list in the provided field in the first row 8 Click APPLY to update the device To add a remote log server 1 Click Monitoring Logs Server Log The Server Log screen displays 2...

Page 159: ...s to view network traffic information from a single workstation The RMON menu contains the following options Basic Advanced Basic The RMON Basic menu contains the following options Statistics Statistics The RMON Basic Statistics screen contains fields for viewing information about device utilization and errors that occurred on the device To view RMON Basic Statistics 1 Click Monitoring RMON Basic ...

Page 160: ...nce the device was last refreshed Broadcast Packets Received Displays the number of good broadcast packets received on the interface since the device was last refreshed This number does not include Multicast packets Multicast Packets Received Displays the number of good Multicast packets received on the interface since the device was last refreshed CRC Alignment Errors Displays the number of CRC a...

Page 161: ...ics are displayed The possible field values are Port Select the specific port for which RMON statistics are displayed LAG Select the specific LAG for which RMON statistics are displayed Received Bytes Displays the number of octets received on the interface since the device was last refreshed This number includes bad packets and FCS octets but excludes framing bits Broadcast Packets Received Displa...

Page 162: ...bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral octet Alignment Error number The field range to detect jabbers is between 20 ms and 150 ms Collisions Displays the number of collisions received on the interface since the device was last refreshed Frames of 64 Bytes Displays the number of 64 byte frames received on the interface since the dev...

Page 163: ...st packets Multicast Packets Received Displays the number of good Multicast packets received on the interface since the device was last refreshed CRC Alignment Errors Displays the number of CRC and Align errors that have occurred on the interface since the device was last refreshed 2 To view RMON Interface Statistics select Port or LAG as the type of Interface and select the interface from the lis...

Page 164: ...default is 1800 seconds equal to 30 minutes Samples Requested Enter the number of samples to be saved The field range is 1 65535 The default value is 50 Current Number of Samples Displays the current number of samples taken Owner Enter the RMON station or user that requested the RMON information The field range is 0 20 characters 2 Select the history control entry 3 Enter the Source Interface Samp...

Page 165: ...epresents all counter values compiled during a single sample To view the RMON History Table 1 Click Monitoring RMON Advanced History Table The RMON History Table screen displays The RMON History Table screen contains the following fields History Entry History Entry No Select the entry number for the History Control Table screen Owner Displays the RMON station or user that requested the RMON inform...

Page 166: ...received on the interface since the device was last refreshed Oversize Packets Displays the number of oversized packets over 1518 octets received on the interface since the device was last refreshed Fragments Displays the number of fragments packets with less than 64 octets excluding framing bits but including FCS octets received on the interface since the device was last refreshed Jabbers Display...

Page 167: ...pe Select the event type Possible values are None No event has occurred Log The event is a log entry Trap The event is a trap Log Trap The event is both a log entry and a trap Time Displays the time that the event occurred Owner Enter the device or user that defined the event 2 Select the events control entry 3 Enter the Community Description and Owner in the provided field in the first row 4 Sele...

Page 168: ... Events Control screen displays 2 Select the events control entry 3 Click DELETE to remove the events control entry Events Log The RMON Events Log screen contains a list of RMON events To view RMON events logs 1 Click Monitoring RMON Advanced Events Log The RMON Events Log screen displays The RMON Events Log screen contains the following fields Event Displays the RMON Events Log Number Displays th...

Page 169: ...Enter the port or LAG interface Counter Value Displays the selected MIB variable value Sample Type Select the sampling method for the selected variable and comparing the value against the thresholds The possible field values are Absolute Compares the values directly with the thresholds at the end of the sampling interval Delta Subtracts the last sampled value from the current value The difference ...

Page 170: ...d value or the falling counter crossing the falling threshold value Interval Enter the alarm interval time in seconds Owner Enter the device or user that defined the alarm 2 Select the alarm entry 3 Select the Counter Name from the list of MIB variable values in the provided field in the first row 4 Enter the Interface in the provided field in the first row 5 Select the Sample Type from the list i...

Page 171: ...g Event number in the provided fields in the first row 8 Enter the Interval and Owner in the provided fields in the first row 9 Click ADD to update the device To remove an events control entry 1 Click Monitoring RMON Advanced Alarms The RMON Alarms screen displays 2 Select the alarm entry 3 Click DELETE to remove the alarm entry Port Mirroring Port mirroring monitors and mirrors network traffic by...

Page 172: ...ype Select the port mode configuration for port mirroring The possible field values are TX Only Port mirroring is configured on transmitting ports only RX Only Port mirroring is configured on receiving ports only TX and RX Port mirroring is configured on both receiving and transmitting ports This is the default value 2 Enter the Destination Port in the provided field 3 Select the source port entry...

Page 173: ...ded field in the first row 3 Select the port mirroring Type from the list in the provided field in the first row 4 Click ADD to update the device To remove a source port entry 1 Click Monitoring Port Mirroring Port Mirroring The Port Mirroring screen displays 2 Select the source port entry 3 Click DELETE to remove the source port entry ...

Page 174: ...FS700TS Smart Switch Software Administration Manual 7 24 Monitoring the Switch v1 0 September 2007 ...

Page 175: ...he following main menu options Reset Upload Download File Management Troubleshooting The description that follows in this chapter describes configuring and managing maintenance options in the FS700TS Smart Switch Reset The Reset menu contains the following options Device Reboot Factory Default Device Reboot The Device Reboot screen resets the device There are two options to reboot Rebooting a part...

Page 176: ...elow to reboot unit s Confirm the rebooting operation 2 Select a unit number or All as the Reboot Unit Number in the provided field 3 Check the confirmation box 4 Click APPLY to reset the device Factory Default The Factory Default screen allows network managers to reset the device to the factory defaults shipped with the switch Restoring factory defaults results in erasing the configuration file T...

Page 177: ...he following fields Note all configuration settings will return to their default values after reset Check to confirm that the original factory default values will be restored after reset 2 Check the confirmation box 3 Click APPLY to reset the device to the factory defaults Upload The Upload menu contains the following option Upload Upload System Files can be backed up using the Upload screen Figur...

Page 178: ...nfiguration File TFTP Server IP Enter the TFTP Server IP Address to which the Firmware or Configuration file is uploaded Remote Filename Enter the destination file name to be uploaded 2 Select Firmware or Configuration as the upload File Type from the provided field 3 Enter the TFTP Server IP address in the provided field 4 Enter the upload Remote Filename in the provided field 5 Click APPLY to up...

Page 179: ...rom which the Firmware Boot or Configuration file is downloaded Remote Filename Enter the destination file name to be downloaded Destination Unit Select the destination stack member Master or All to which the files are downloaded Configuration Files can only be downloaded to the Master Stacking Unit 2 Select Firmware Boot File or Configuration as the download File Type from the provided field 3 En...

Page 180: ...ve Image screen contains the following fields Unit No Displays the unit number for which the Image file is selected Active Image Displays the image file which is currently active on the unit After Reset Select the image file that is active after the specific unit is reset The possible field values are Image 1 Activate Image file 1 after the device is reset Image 2 Activate Image file 2 after the d...

Page 181: ...st was performed and the type of cable error that occurred The tests use Time Domain Reflectometry TDR technology to test the quality and characteristics of a copper cable attached to a port Cables up to 120 meters long can be tested Cables are tested when the ports are in the down state with the exception of the Approximated Cable Length test To test cables 1 Click Maintenance Troubleshooting Dia...

Page 182: ...e passed the test Cable Fault Distance Displays the distance from the port where the cable error occurred Last Update Displays the last time the port was tested Test The test results are displayed Cable Length Displays the approximate cable length This test can only be performed when the port is up and operating at 100Mbps or 1 Gbps 2 On the row containing the interface to be tested click TEST to ...

Page 183: ...mat The Help menu contains the following options Support User Guide The description that follows in this chapter covers these features c Support The Support screen provides access to the NETGEAR online support site at www netgear com To access the Support screen 1 Click Help Online Help Support The Online Help menu opens and the Support screen displays 2 Click APPLY to go to the NETGEAR Online Sup...

Page 184: ...ptember 2007 User Guide The User Guide screen provides access to the PDF format of the User Guide To view the User Guide screen 1 Click Help Online Help User Guide The User Guide screen displays 2 Click APPLY to open a window and display the User Guide in PDF format Figure 9 2 ...

Page 185: ...ctory Reset function from a Web browser Table 1 Default Settings Feature FS700TSDefault Setting Port Speed Auto negotiation Port Duplex Auto negotiation Flow Control half duplex Disabled Flow Control full duplex Disabled IP Configuration DHCP enabled Password password VLAN 802 1q based VLAN Link Aggregation Trunk Disabled Traffic Prioritization QoS Optimized for flow control all ports set normal p...

Page 186: ...FS700TS Smart Switch Software Administration Manual A 2 Default Settings v1 0 September 2007 ...

Page 187: ... 6 D defaults IP address 1 7 subnet mask 1 7 switch A 2 DHCP server 1 3 downloading files 5 3 dynamic address 3 12 E EAP 4 36 F factory defaults 5 4 factory reset 5 4 Fast Ethernet cables C 1 file download 5 3 management 5 1 upload 5 1 flash logs 3 27 G getting started 1 1 H HTTP host 5 1 I IEEE 802 1D 4 25 IEEE 802 1p 4 7 IEEE 802 1Q 4 9 B 2 IEEE 802 3ad 4 17 IEEE 802 3u C 1 IGMP snooping 4 29 in...

Page 188: ...ngs 1 5 P password changing 1 8 3 8 patch panels C 3 port authentication 4 33 configuration 3 17 4 1 monitor 4 20 security 4 39 Q QoS 4 7 R RADIUS server 3 9 rate limiting 4 23 reset current configuration 5 5 factory 5 4 resetting the switch 5 5 RSTP 4 25 S security 3 8 4 31 4 39 server logs 3 28 SNMP 4 27 SNTP 3 14 spanning tree 4 25 specifications A 1 static address 3 11 static multicast 4 31 st...

Page 189: ...C 4 40 twisted pair cables C 2 U unknown multicast 4 30 upgrading the firmware 1 8 uploading files 5 1 utilities SmartWizard Discovery 1 2 switch configuration 4 1 system settings 3 1 V VLANs 4 9 B 1 W Web access 1 6 2 1 ...

Page 190: ...Software Administration Manual Index 4 v1 0 September 2007 ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands