NETGEAR GS700AT Smart Switch Administration Manual Download Page 133

GS700AT Smart Switch Software Administration Manual

Configuring QoS

5-6

v1.0, October 2008

Ingress Rate Limit 

– Enter the rate limit in kilobits per second. The possible field range is 

3500 to the maximum port speed. GE (Gigabit Ethernet) ports have a maximum speed of 
1000000 kilobits per second. The field default value is 3500.

Egress Shaping Rates Status

 – Select whether egress shaping is defined on the interface. 

The possible field values are:

Enable – Enable egress shaping rate on the interface.

Disable – Disable egress shaping rate on the interface. This is the default value.

Egress Shaping Rates CIR 

– Enter the Egress Shaping Committed Information Rate 

(CIR) in kilobits per second. The possible field range is 64 to 1000000 for GE ports.

Egress Shaping Rates CbS 

– Enter the Egress Shaping Committed Burst Size (CbS) in 

bytes per second. The possible field range is 4KB to 16MB.

2.

Select the interface.

3.

Choose either Enable or Disable in the 

Ingress Rate Limit Status

 provided field in the first 

row.

4.

If you selected Enable in the 

Ingress Rate Limit Status

 field, enter the 

Ingress Rate Limit

 in 

the provided field in the first row.

5.

Choose either Enable or Disable in the 

Egress Shaping Rate Status

 provided field in the first 

row.

6.

If you selected Enable in the 

Egress Shaping Rate Status

 field, enter the 

Egress Shaping 

Rates CIR

 and 

CbS

 in the provided fields in the first row.

7.

Click 

APPLY

 to update the device.

Advanced

The CoS 

Advanced

 menu contains the following options:

“CoS to Queue Mapping”

“DSCP to Queue Mapping”

CoS to Queue Mapping

The CoS to Queue Mapping screen contains fields for mapping CoS values to traffic queues.

Summary of Contents for GS700AT Smart Switch

Page 1: ...202 10360 02 October 2008 NETGEAR Inc 350 East Plumeria Drive San Jose CA 95134 USA GS700AT Smart Switch Software Administration Manual...

Page 2: ...to test the series for compliance with the regulations Voluntary Control Council for Interference VCCI Statement This equipment is in the first category information equipment to be used in commercial...

Page 3: ...rouillage radio lectrique du minist re des Communications Cet appareil num rique NETGEAR GS700AT Smart Switch respecte les limites de bruits radio lectriques visant les appareils num riques de classe...

Page 4: ...body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter FCC Declaration Of Conformity We NETGEAR Inc 4500 Great America Parkway Santa Clara CA 9...

Page 5: ...1 Switch Management Interface 1 2 Network with a DHCP Server 1 3 Network without a DHCP Server 1 5 Web Access 1 8 Additional Utilities 1 9 Chapter 2 Introduction to the Web Browser Interface Logging I...

Page 6: ...ttings 5 1 CoS 5 1 Chapter 6 Managing Security Setting Security Configuration Options 6 1 Management Security 6 1 Port Authentication 6 9 Traffic Control 6 14 ACL 6 19 Chapter 7 Monitoring the Switch...

Page 7: ...GS700AT Smart Switch Software Administration Manual Contents vii v1 0 October 2008 Support 9 1 User Guide 9 2 Appendix A Default Settings Index...

Page 8: ...and and use all of its capabilities Once basic configuration is performed the switch operates using the remaining factory default parameters However a greater level of configuration anywhere from the...

Page 9: ...aragraphs Typographical Conventions This manual uses the following typographical conventions Formats This manual uses the following formats to highlight special messages Note Refer to the product rele...

Page 10: ...f contents and a button Double click on a link in the table of contents or index to navigate directly to where the topic is described in the manual A button to access the full NETGEAR Inc online knowl...

Page 11: ...m Printing a PDF Chapter Click the PDF of This Chapter link at the top left of any page in the chapter you want to print The PDF version of the chapter you were viewing opens in a browser window Click...

Page 12: ...HCP Server Network without a DHCP Server Web Access Additional Utilities System Requirements The following hardware and software facilities are required to run the applications described in this manua...

Page 13: ...the performance of your switch and optimize network configuration Using your browser for example you can set up VLANs traffic priority and configure port trunking In addition NETGEAR provides the Smar...

Page 14: ...all the Smart Wizard Discovery utility located on the switch installation CD on your computer 4 Start the Smart Wizard Discovery utility Table 1 1 Switch Management Methods Management Method Features...

Page 15: ...DHCP server You will need this value to access the switch directly from a web browser without using the Smart Wizard Discovery utility 7 Select your switch by highlighting the name of the switch Then...

Page 16: ...DHCP service you must assign a static IP address to your switch You can also assign the switch a static IP address even if your network has DHCP service Proceed as follows 1 Connect the GS700AT Gigabi...

Page 17: ...pears 7 Select Disable to disable DHCP 8 The default IP address is 192 168 0 239 and the default subnet mask is 255 255 255 0 If you want different values enter the switch IP address gateway IP addres...

Page 18: ...screens of the switch are also shown although they do not appear in the Windows view You need Windows Administrator privileges to change these settings 1 On your PC access the MS Windows operating sys...

Page 19: ...net mask either with or without DHCP server use that IP address in your browser window If you are starting with an out of the box switch and are not using the Smart Wizard Discovery utility you must i...

Page 20: ...et a new password You must enter the old and new passwords and confirm the new one 2 Click Set to enable the new password Firmware Upgrade The GS700AT Smart Switch software is upgradeable and enables...

Page 21: ...The location of the new firmware If you do not know the location click Browse to locate the file Upgrade Password Enter your password the default password is password 2 Click Apply to apply the settin...

Page 22: ...d for many of the basic functions and features of the switch This section introduces the areas of the browser interface and includes the following topics Logging Into the NETGEAR Home Screen Using the...

Page 23: ...d Secondary Navigation Bars The Primary Navigation Bar contains a list of the different features that can be configured including System Switching QoS Security Monitoring Maintenance and Help Each fea...

Page 24: ...Options The GS700AT web browser interface provides the following options Device Management Buttons Provides an explanation of the management buttons in the NETGEAR GS700AT Smart Switch Informational...

Page 25: ...n PDF format For a detailed description of how to access and use these functions see Chapter 9 Online Help Accessing Device Information Each screen of the web browser interface contains a help file wi...

Page 26: ...cled red Question Mark icon shown in the example below A help window for the screen opens Using Screen and Table Options The NETGEAR GS700AT web browser interface contains screens and tables for confi...

Page 27: ...try is highlighted and the information appears in the first row which contains the editable fields To select all entries 1 Check the Select box in the first row to select all entries in the table Fiel...

Page 28: ...irst row 2 Click ADD to update the device The new entry is displayed Modifying an Entry An entry may be modified by editing its values in the first row To modify an entry 1 Select the entry to be modi...

Page 29: ...the ports 1 Click anywhere on the ports gold button The ports panel is displayed 2 Select the ports to be added as LAG members within the selected LAG by clicking on their respective boxes 3 Click AP...

Page 30: ...now all Tagged 3 Click again on the quick box and a U appears in the quick box and in all the port boxes marking the ports as untagged 4 Click again on the quick box and the quick box and all the por...

Page 31: ...sing the interface selection row located above the row of column headers Clicking on or LAGS displays the ports or the LAGs To display all ports 1 Click in the interface selection row The screen displ...

Page 32: ...v1 0 October 2008 To display the LAG table 1 Click LAGS in the interface selection row The screen displays a table of all LAGs To select an interface 1 Enter the number of the interface in the GO TO I...

Page 33: ...LLDP The description that follows in this chapter describes configuring and managing system settings in the GS700AT Smart Switch Management The Management menu enables configuration of some system par...

Page 34: ...ter the name of the contact person The field may contain 0 160 characters System Object ID Displays the vendor s authoritative identification Date Time Displays the current date and local time System...

Page 35: ...e Timeout in the provided fields 3 Select whether to enable or disable Jumbo Frames After Reset 4 Click APPLY to update the system settings IP Configuration The IP Configuration screen contains fields...

Page 36: ...e user to define a static IP address IP Address Enter the static IP address used to manage the device Subnet Mask Enter the IP address mask Gateway Enter the default gateway IP address The following o...

Page 37: ...used to set the system clock The possible field values are Local The system time is set locally via the Date and Time fields SNTP The system time is set via an SNTP server Select SNTP to disable the...

Page 38: ...ure SNTP servers 1 Click System Management Time SNTP Server Configuration The SNTP Server Configuration screen displays The SNTP Server Configuration screen contains the following fields SNTP Server 1...

Page 39: ...method for managing network devices The device supports the following SNMP versions SNMP v1 and v2c SNMP version 3 The SNMP agents maintain a list of variables that are used to manage the device The v...

Page 40: ...he amount of time the device waits before re sending informs Key Management Enter key generation key updates and key usage The device supports SNMP notification filters based on Object IDs OIDs OIDs a...

Page 41: ...mmunity string used to authenticate the management station to the device Access Mode Select the access rights of the community The possible field values are Read Only Management access is restricted t...

Page 42: ...w 4 Click ADD to update the device To remove an SNMP community 1 Click System SNMP SNMPv1 v2 Community Configuration The Community Configuration screen displays 2 Select the entry to be removed 3 Clic...

Page 43: ...field values are Traps Traps are sent Informs Informs are sent only when SNMPv2 is enabled Community String Enter the community string of the trap manager Notification Version Select the trap type Th...

Page 44: ...w 3 Click ADD to update the device To remove an SNMP trap 1 Click System SNMP SNMPv1 v2 Trap Configuration The SNMPv1 v2 Trap Configuration screen displays 2 Select the entry to be removed 3 Click DEL...

Page 45: ...byte in hexadecimal character strings is two hexadecimal digits Each byte digit can be separated by a period or a colon The Engine ID must be defined before SNMPv3 is enabled Use Default Check the box...

Page 46: ...en contains the following field View Name Enter the user defined view name The view name can contain a maximum of 30 alphanumeric characters 2 Select the entry 3 Enter the View Name field in the first...

Page 47: ...ent screen displays The SNMPv3 View Content screen contains the following fields Views View Name Select the user defined view name The view name can contain a maximum of 30 alphanumeric characters Obj...

Page 48: ...in the first row 4 Select either Included or Excluded from the View Type provided field in the first row 5 Click ADD to update the device To remove an SNMP OID entry 1 Click System SNMP SNMPv3 View C...

Page 49: ...nagement station to the device Group Name Select the SNMP group from a list of SNMP groups defined in the SNMP Group Configuration screen 2 Select the SNMP community entry 3 Enter the Management Stati...

Page 50: ...eges to SNMP groups Groups allow network managers to assign access rights to specific device features or feature aspects To define an SNMP group 1 Click System SNMP SNMPv3 Group Configuration The SNMP...

Page 51: ...d write Changes are made to the assigned SNMP view Notify Sends traps for the assigned SNMP view 2 Select the SNMP group entry 3 Select the Security Model and Security Level from the lists in the prov...

Page 52: ...on screen contains the following fields User Name Enter the user name The field range is up to 30 alphanumeric characters Group Name Enter the group name from a list of user defined SNMP groups SNMP g...

Page 53: ...colon 2 Select the user entry 3 Enter the User Name in the provided field in the first row 4 Select the Group Name and Engine ID from the lists in the provided fields in the first row 5 Select the Aut...

Page 54: ...meters 1 Click System SNMP SNMPv3 Global Trap Configuration The SNMPv3 Global Trap Settings screen displays The SNMPv3 Global Trap Settings screen contains the following fields SNMP Notifications Sele...

Page 55: ...traps are sent to specific users and the trap type sent SNMP notification filters provide the following services Identifying Management Trap Targets Defining Trap Filtering Selecting Trap Generation P...

Page 56: ...nter the amount of times the device re sends an inform request The default is 3 seconds 2 Enter the Recipients IP address in the provided field in the first row 3 Select either Traps or Informs in the...

Page 57: ...onfiguration screen displays 2 Select the trap entry 3 Click DELETE to remove the entry Trap Filter Name The SNMPv3 Trap Filter Name screen permits filtering traps based on OIDs Each OID is linked to...

Page 58: ...p filter name 1 Click System SNMP SNMPv3 Trap Filter Name The SNMPv3 Trap Filter Name screen displays 2 Select the trap filter name entry 3 Click DELETE to remove the entry Trap Filter Content The SNM...

Page 59: ...d field 3 Select the trap filter content entry from the OID table 4 Enter the Object ID Subtree in the provided field in the first row 5 Select the Filter Type from the list in the provided field in t...

Page 60: ...tion Device Capabilities Device Configuration The advertising device transmits multiple advertisement message sets in a single LAN packet The multiple advertisement sets are sent in the packet Type Le...

Page 61: ...cket handling when LLDP is disabled The possible field values are Flooding LLDPDU packets are flooded to all ports in the system Filtering LLDPDU packets are filtered This is the default TLV Advertise...

Page 62: ...h occurs when a new Endpoint device links with the LLDP MED Network Connectivity Device 2 Select the LLDP global status on the device by selecting Enable or Disable in the LLDP field 3 If you selected...

Page 63: ...t packet handling when LLDP is disabled The possible field values are Flooding LLDPDU packets are flooded to all ports in the system Filtering LLDPDU packets are filtered This is the default TLV Adver...

Page 64: ...ackets sent when the LLDP MED Fast Start mechanism is initialized which occurs when a new Endpoint device links with the LLDP MED Network Connectivity Device 2 Select the LLDP global status on the dev...

Page 65: ...field values are Tx Only Enable transmitting LLDP packets only Rx Only Enable receiving LLDP packets only Tx Rx Enable transmitting and receiving LLDP packets Disable Disable LLDP on the interface Ma...

Page 66: ...ow 7 Click APPLY to update the device LLDP MED Network Policy LLDP Media Endpoint Discovery LLDP MED increases network flexibility by allowing different IP systems to coexist on a single network LLDP...

Page 67: ...licy is defined for a Voice Signaling application Guest Voice The network policy is defined for a Guest Voice application Guest Voice Signaling The network policy is defined for a Guest Voice Signalin...

Page 68: ...rovided field in the first row 8 Click APPLY to update the device To add a new network policy entry 1 Click System LLDP Advanced LLDP MED Network Policy The LLDP MED Network Policy screen displays 2 S...

Page 69: ...e Enable LLDP MED on the selected port Disable Disable LLDP MED on the selected port Notification Select the notification status for the selected port The possible field values are Enable Enable notif...

Page 70: ...ort information 1 Click System LLDP Advanced Local Information The LLDP MED Local Information screen displays The LLDP MED Local Information screen contains the following fields Device Information Cha...

Page 71: ...tion of the port transmitting the LLDP frame Port Description Displays information about the port including manufacturer product name and hardware software version Advertisement Displays the advertise...

Page 72: ...ed address subtype For example IPv4 Address Displays the managed address Interface Subtype Displays the port subtype Interface Number Displays the port number MAC PHY Details Auto Negotiation Supporte...

Page 73: ...MED capabilities enabled on the port Current Capabilities Capabilities indicates the TLV is advertised by the port Device Class Network Connectivity indicates the device is a network connectivity dev...

Page 74: ...s Media Service Access Point MSAP entry number Local Port Displays the port number Chassis ID Subtype Displays the chassis ID subtype For example MAC address Chassis ID Displays the chassis identifica...

Page 75: ...e LLDP frame Port ID Subtype Displays the port ID subtype For example IPv4 address Port ID Displays the port identification of the port transmitting the LLDP frame Port Description Displays informatio...

Page 76: ...SE TX full duplex mode MED Details Capabilities Supported Displays the MED capabilities enabled on the port Current Capabilities Displays the MED TLVs advertised by the port Device Class Displays the...

Page 77: ...Unknown Displays unknown location information Network Policies Application Type Displays the network policy application type For example Voice VLAN ID Displays the VLAN ID for which the network policy...

Page 78: ...t Switch with features under the following main headings Ports LAG VLAN Voice VLAN STP Multicast Address Table The description that follows in this chapter describes configuring and managing switching...

Page 79: ...The port is operational Down The port is not operational Reactivate Suspended Select the reactivation status for a port disabled through the locked port security option The possible field values are...

Page 80: ...Back Pressure Select the back pressure mode of the Port Back Pressure mode is used with half duplex mode to disable ports from receiving messages Back Pressure mode is disabled by default The possible...

Page 81: ...ort configuration is applied to the ports Ensure the following when configuring LAGs All ports within a LAG must be of the same media type A VLAN is not configured on the port The port is not assigned...

Page 82: ...ration screen displays The Basic LAG Configuration screen contains the following fields Interface Displays the LAG number Description Enter a user defined LAG description Status Select the current lin...

Page 83: ...s transmission between the device and its link partner in both directions simultaneously Auto Negotiation Select the auto negotiation status of the LAG Auto Negotiation is a protocol between two link...

Page 84: ...ic LAG Membership screen displays The Basic LAG Membership screen contains the following fields LAG ID Select the LAG ID LAG Name Displays the user defined LAG name LAG Type Select the LAG type The po...

Page 85: ...displays the member ports included in the LAG Advanced The LAG Advanced menu contains the following options LAG Configuration LAG Membership LACP Configuration LACP Port Configuration LAG Configurati...

Page 86: ...lues are Up The LAG is currently linked and forwarding traffic Down The LAG is currently not linked Reactivate Suspended Select the action to apply to a suspended LAG The possible field values are Ena...

Page 87: ...the auto negotiation status of the LAG Auto Negotiation is a protocol between two link partners that enables a port to advertise its transmission rate duplex mode and flow control abilities to its par...

Page 88: ...nced LAG Membership screen displays The Advanced LAG Membership screen contains the following fields LAG ID Select the LAG ID LAG Name Displays the user defined LAG name LAG Type Select the LAG type T...

Page 89: ...inks Aggregated ports can be linked into link aggregation port groups Each group is comprised of ports with the same speed The LACP Configuration screen contains fields for configuring LACP To configu...

Page 90: ...reen contains the following fields Interface Displays the interface number to which timeout and priority values are assigned LACP Priority Enter the port priority value The field range is 1 65535 Time...

Page 91: ...n the LAN a Layer 3 router working at a protocol level is required to allow traffic flow between VLANs Layer 3 routers identify segments and coordinate with VLANs VLANs are Broadcast and Multicast dom...

Page 92: ...ssible field values are Static The VLAN is user defined Default The default VLAN ID is 1 It cannot be modified by the user 2 Select the VLAN entry 3 Enter the VLAN ID and VLAN Name in the provided fie...

Page 93: ...figuring and working with VLANs The maximum number of active VLANs is 128 To define VLAN properties 1 Click Switching VLAN Advanced VLAN Configuration The Advanced VLAN Configuration screen displays T...

Page 94: ...d VLAN Name in the provided fields in the first row 3 Click ADD to update the device To remove a VLAN 1 Click Switching VLAN Advanced VLAN Configuration The Advanced VLAN Configuration screen displays...

Page 95: ...es as untagged VLAN members Packets belonging to the respective VLAN are untagged Remove All Remove all the interfaces participating in the VLAN 2 Select the VLAN ID from the list in the provided fiel...

Page 96: ...hip The VLAN Membership screen displays 2 Click UNTAGGED PORT MEMBERS The VLAN Untagged Ports screen opens Port PVID Configuration The Port PVID Configuration screen contains parameters for assigning...

Page 97: ...nterface 3 Enter the PVID in the provided field in the first row 4 Click APPLY to update the device Voice VLAN Voice VLAN allows you to enhance VoIP service by configuring ports to carry IP voice traf...

Page 98: ...initial IP address through DHCP The phone eventually uses the Voice VLAN and starts sending tagged packets The Voice VLAN menu contains the following options Basic Advanced Basic The Voice VLAN Basic...

Page 99: ...t value Enable Enable remarking the packet CoS tag value Voice VLAN Aging Time Enter the Voice VLAN aging time The Voice VLAN aging time sets the maximum inactivity time for a Voice VLAN port member a...

Page 100: ...atus Select the Voice VLAN status on the device The possible field values are Enable Enable Voice VLAN on the device Disable Disable Voice VLAN on the device This is the default value VoiceVLAN ID Sel...

Page 101: ...300 sec For more information on defining MAC address age out time see Dynamic Addresses 2 Select the device VoiceVLAN Status in the provided field 3 If you selected Enable in the VoiceVLAN Status fie...

Page 102: ...Enable port LAG security on the Voice VLAN Disable Disable port LAG security on the Voice VLAN This is the default value Membership Displays the Voice VLAN member status The possible field values are...

Page 103: ...o Siemens IP Phones 00 03 6B Assigned to Cisco IP Phones 00 0F E2 Assigned to H3C IP Phones 00 60 B9 Assigned to NEC Philips IP Phones 00 D0 1E Assigned to Pingtel IP Phones 00 E0 75 Assigned to Polyc...

Page 104: ...OUI screen displays 2 Click RESTORE DEFAULTS to restore the factory defaults STP Spanning Tree Protocol STP provides network topology for any arrangement of bridges STP also provides a single path bet...

Page 105: ...e device Disable Disable STP on the device STP Operation Mode Select the STP mode on the device The possible field values are STP Enable classic STP on the device RSTP Enable Rapid Spanning Tree Proto...

Page 106: ...n seconds a bridge waits before sending configuration messages The default Maximum Age Time is 20 seconds Forward Delay Sec Displays the device Forward Delay Time The Forward Delay Time is the amount...

Page 107: ...STP on the device Disable Disable STP on the device STP Operation Mode Select the STP mode on the device The possible field values are STP Enable classic STP on the device RSTP Enable Rapid Spanning T...

Page 108: ...s the device Maximum Age Time The Maximum Age Time is the amount of time in seconds a bridge waits before sending configuration messages The default Maximum Age Time is 20 seconds Forward Delay Sec Di...

Page 109: ...8 The bridge priority value is provided in increments of 4096 Hello Time Enter the device Hello Time The Hello Time indicates the amount of time in seconds a Root Bridge waits between configuration me...

Page 110: ...ay and enter the value in the provided field 4 Click APPLY to update the device CST Port Configuration To configure CST ports on the device 1 Click Switching STP Advanced CST Port Configuration The CS...

Page 111: ...the speed at which the port is operating Path Cost Enter the method used to assign default path cost to STP ports The possible field range is 1 200000000 The default path cost assigned to an interface...

Page 112: ...STP is enabled Role Displays the port role assigned by the STP algorithm to provide to STP paths The possible field values are Root Provides the lowest cost path to forward packets to the root switch...

Page 113: ...igure to automatically establish a point to point link To establish communications over a point to point link the originating PPP first sends Link Control Protocol LCP packets to configure and test th...

Page 114: ...lticast Filtering Database The default setting of this is to flood all such traffic traffic in unregistered Multicast groups Layer 2 switching forwards Multicast packets to all relevant VLAN ports by...

Page 115: ...onfiguration screen displays The Basic IGMP Snooping Configuration screen contains the following fields IGMP Snooping Configuration IGMP Snooping Status Select the IGMP Snooping status on the device T...

Page 116: ...ace Settings table 3 Select the Status from the list in the provided field in the first row 4 Click APPLY to update the device Advanced The Multicast Advanced menu contains the following options IGMP...

Page 117: ...N ID Displays the VLAN ID Status Select the IGMP Snooping status on the VLAN The possible field values are Enable Enable IGMP Snooping on the VLAN Disable Disable IGMP Snooping on the VLAN Auto Learn...

Page 118: ...first row 4 Enter the Host MRouter and Leave Timeouts in the provided fields in the first row 5 Click APPLY to update the device Multicast Group Configuration The Multicast Group Configuration screen...

Page 119: ...the provided field in the first row 4 Click APPLY to update the device Multicast Group Membership The Multicast Group Membership screen displays the ports and LAGs attached to the selected VLAN and th...

Page 120: ...atically Forbidden The interface is forbidden to join the Multicast group Excluded The interface is not included in the Multicast group 2 Select the VLAN ID from the list in the provided field 3 Selec...

Page 121: ...rward All Interface Displays the interface for which the Multicast settings are displayed Interface Status Select the interface status The possible field values are Static The interface is added to th...

Page 122: ...ured manually An address becomes associated with a port by learning the port from the frame s source address but if a frame that is addressed to a destination MAC address is not associated with a port...

Page 123: ...ues are VLAN ID Display the MAC Address table entries that relate to the specific VLAN ID MAC Address Display the MAC Address table entries that relate to MAC Address Interface Display the MAC Address...

Page 124: ...he Static Addresses screen contains a list of static MAC addresses Static Addresses are added and removed from the Static Addresses screen To prevent static MAC addresses from being deleted when the d...

Page 125: ...ovided fields in the first row 4 Select the MAC Address duration period Status from the list in the provided field in the first row 5 Click APPLY to update the device Dynamic Addresses The Dynamic Add...

Page 126: ...en displays The Advanced Address Table screen contains the following fields Search By Display the MAC Address which can be sorted according to VLAN ID MAC Address or Interface The possible field value...

Page 127: ...m the list in the provided field 3 Enter the value to be searched for in the provided box 4 Click GO to execute the query To delete all addresses from the Advanced Address Table 1 Click Switching Addr...

Page 128: ...result is an improved traffic flow for traffic with high demand QoS is defined by Classification Specifies which packet fields are matched to specific values All packets matching the user defined spec...

Page 129: ...share the bandwidth with the SP queues This ensures that the remaining bandwidth is distributed according to the weight ratio If WRR is selected the following weights are assigned to the queues 1 2 4...

Page 130: ...ify traffic based on the CoS VPT tag value DSCP Classify traffic based on the DSCP tag value 2 Select the QoS Mode and Trust Mode in the provided fields 3 Click APPLY to update the device CoS Interfac...

Page 131: ...CoS default settings to the ports Unchecked Maintain the current CoS settings 2 Select the interface 3 Select the Default CoS value from the list in the provided field in the first row 4 Check or unc...

Page 132: ...on Rate Indicates the rate that data is transmitted The rate is averaged over a minimum time increment The Bandwidth screen allows the user to define Ingress Rate Limit and Egress Shaping Rates To def...

Page 133: ...000000 for GE ports Egress Shaping Rates CbS Enter the Egress Shaping Committed Burst Size CbS in bytes per second The possible field range is 4KB to 16MB 2 Select the interface 3 Choose either Enable...

Page 134: ...is mapped Four traffic priority queues are supported Lowest Low Normal and High The High Queue is reserved for special traffic and is not recommended for use Restore Default Mapping Restore Defaults...

Page 135: ...ck QoS CoS Advanced DSCP To Queue Mapping The DSCP To Queue Mapping screen displays The DSCP To Queue Mapping screen contains the following fields DSCP to Queue Mapping DSCP In Displays the incoming p...

Page 136: ...ecked Restore the factory default settings for DSCP mapping values Unchecked Maintain the current DSCP mapping settings 2 Select the Queue values for each DSCP In value in the provided fields 3 Check...

Page 137: ...the following main menu options Management Security Port Authentication Traffic Control ACL The description that follows in this chapter describes configuring and managing security settings in the GS...

Page 138: ...ing the system New Password Enter a new password for accessing the system Retype New Password Repeat the new password used to access the system 2 Enter the Old Password New Password and Retype New Pas...

Page 139: ...re a failure occurs Possible field values are 1 10 The default value is 3 Timeout for Reply Enter the amount of time in seconds the device waits for an answer from the RADIUS Server before retrying th...

Page 140: ...ists in the provided fields in the first row 5 Click APPLY to update the device To add a new RADIUS Authentication Server entry 1 Click Security Management Security RADIUS Authentication Server Config...

Page 141: ...default 802 1x 802 1X authentication sessions are recorded Login Device management Web login and logout sessions are recorded Both Both 802 1X authentication and device management sessions are recorde...

Page 142: ...w TACACS servers To configure TACACS Settings 1 Click Security Management Security TACACS The TACACS screen displays The TACACS screen contains the following fields Host IP Address Enter the TACACS Se...

Page 143: ...s 2 Enter the Host IP Address Key String Authentication Port and Timeout for Reply in the provided fields in the first row 3 Select the Single Connection status and Active server from the lists in the...

Page 144: ...3 Select the order in which authentication is applied The possible field values are TACACS Authenticate the user at the TACACS server For more information see TACACS RADIUS Authenticate the user at t...

Page 145: ...hentication parameters In addition the Guest VLAN option is enabled from the Basic 802 1X Configuration screen To define the 802 1X configuration 1 Click Security Port Authentication Basic 802 1X Conf...

Page 146: ...efault value Enable Enable using a Guest VLAN for unauthorized ports If a Guest VLAN is enabled the unauthorized port automatically joins the VLAN selected in the VLAN List field Guest VLAN ID Select...

Page 147: ...t based authentication on the device The possible field values are Disable Disable port based authentication on the device Enable Enable port based authentication on the device Authentication Method E...

Page 148: ...n select the Authentication Method from the list in the provided field 4 Select Disable or Enable for the Guest VLAN status in the provided field 5 If you selected Enable for the Guest VLAN field then...

Page 149: ...field Disable Disable the Guest VLAN on the port This is the default value Periodic Reauthentication Select whether periodic port reauthentication is enabled or disabled The possible field values are...

Page 150: ...n the first row 4 If you selected Enable as the Periodic Reauthentication status enter the Reauthentication Period in the provided field in the first row 5 Enter the Quiet Period Resending EAP time Ma...

Page 151: ...Traffic Control Storm Control The Storm Control screen displays The Storm Control screen contains the following fields Interface Displays the port number for which the storm control information is dis...

Page 152: ...a specific port only to users with specific MAC addresses The MAC addresses can be dynamically learned or statically configured Locked port security monitors both received and learned packets that are...

Page 153: ...ocks the port and only forwards packets that have been learned statically or dynamically prior to locking the port The lock is effective immediately Limited Dynamic Lock The port is unlocked Locks the...

Page 154: ...elect whether traps are enabled or disabled when a packet from an unknown source is received on a locked port The possible field values are Enable Enable traps Disable Disable traps This is the defaul...

Page 155: ...1 Click Security Traffic Control Protected Ports Protected Ports Membership The Protected Ports Membership screen displays The Protected Ports Membership screen contains the following fields Protecte...

Page 156: ...view or rename MAC Based ACLs 1 Click Security ACL MAC ACL The MAC Configuration screen displays The MAC Configuration screen contains the following fields MAC Configuration Current number of ACL Disp...

Page 157: ...ice To remove a MAC based ACL entry 1 Click Security ACL MAC ACL The MAC Configuration screen displays 2 Select the ACL entry 3 Click DELETE to remove the entry MAC Rules The MAC Rules screen allows a...

Page 158: ...field 3 Select the rule entry 4 Enter the provided fields in the first row 5 Click APPLY to update the device To add a MAC rule 1 Click Security ACL MAC Rules The MAC Rules screen displays 2 Select t...

Page 159: ...ifying ACL bound interfaces 2 Select the interfaces to which the ACLs are bound 3 Select the ACL Name from the list in the provided field 4 Select the interfaces to bind to the selected ACL Name by on...

Page 160: ...nter the user defined IP Based ACL name Number of Rules Displays the current number of rules in the ACL 2 Select the ACL entry 3 Enter the new ACL Name in the provided field in the first editable row...

Page 161: ...1 Click Security ACL IP Rules The IP Rules screen displays The IP Rules screen contains the following fields IP ACL ACL Name Select the ACL Name from the list IP Rules Priority Enter the rule priorit...

Page 162: ...hutdown Drop packets that meet the ACL criteria and disable the port to which the packet was addressed 2 Select the ACL Name from the list in the provided field 3 Select the rule entry 4 Enter the pro...

Page 163: ...e for viewing and modifying ACL bound interfaces Port Selection Table Select the interfaces for which the ACLs are bound 2 Select the ACL Name from the list in the provided field 3 Select the interfac...

Page 164: ...Binding Table The Binding Table screen displays The Binding Table screen contains the following fields Interface Binding Table Interface Displays the interfaces for which the ACLs are bound ACL Name D...

Page 165: ...ecommended message format for all error reporting for example Syslog local device reporting Messages are assigned a severity code and include a message mnemonic which identifies the source application...

Page 166: ...The Logs Configuration screen contains fields for enabling and disabling logs globally To enable or disable event logging 1 Click Monitoring Logs Logs Configuration The Logs Configuration screen disp...

Page 167: ...g level If the device is down or not functioning properly an emergency log message is saved to the specified logging location Alert The second highest warning level An alert log is saved if there is a...

Page 168: ...down Critical The third highest warning level A critical log is saved if a critical device malfunction occurs for example two device ports are not functioning while the rest of the device ports remai...

Page 169: ...sage is saved to the specified logging location Alert The second highest warning level An alert log is saved if there is a serious device malfunction for example all device features are down Critical...

Page 170: ...the following fields Log Index Displays the log number Log Time Displays the time at which the log was generated Severity Displays the log severity and urgency level The following are the available l...

Page 171: ...emote log servers New log servers can be defined and the log severity sent to each server To configure remote log servers 1 Click Monitoring Logs Server Log The Server Log screen displays The Server L...

Page 172: ...while the rest of the device ports remain functional Error A device error has occurred for example if a single port is offline Warning The lowest level of a device warning The device is functioning b...

Page 173: ...emove a remote log server 1 Click Monitoring Logs Server Log The Server Log screen displays 2 Select the log server entry 3 Click DELETE to remove the log server entry RMON This section contains infor...

Page 174: ...includes bad packets and FCS octets but excludes framing bits Received Packets Displays the number of packets received on the interface including bad packets Multicast and Broadcast packets since the...

Page 175: ...Statistics History Control History Table Events Control Events Log Alarms Statistics The RMON Advanced Statistics screen contains fields for viewing information about device utilization and errors th...

Page 176: ...mber of CRC and Align errors that have occurred on the interface since the device was last refreshed Undersize Packets Displays the number of undersized packets less than 64 octets received on the int...

Page 177: ...red on the interface since the device was last refreshed Received Bytes Displays the number of octets received on the interface since the device was last refreshed This number includes bad packets and...

Page 178: ...nitoring RMON Advanced History Control The RMON History Control screen displays The RMON History Control screen contains the following fields History Entry No Displays the entry number for the History...

Page 179: ...mpling Interval Samples Requested and Owner in the provided field in the first row 3 Click ADD to update the device To remove a history control entry 1 Click Monitoring RMON Advanced History Control T...

Page 180: ...eived on the interface since the device was last refreshed This number does not include Multicast packets Multicast Packets Displays the number of good Multicast packets received on the interface sinc...

Page 181: ...RMON Events Control screen contains fields for defining RMON events To configure RMON events control 1 Click Monitoring RMON Advanced Events Control The RMON Events Control screen displays The RMON Ev...

Page 182: ...add an events control entry 1 Click Monitoring RMON Advanced Events Control The RMON Events Control screen displays 2 Enter the Community Description and Owner in the provided field in the first row 3...

Page 183: ...vanced Events Log The RMON Events Log screen displays The RMON Events Log screen contains the following fields Event Displays the RMON Events Log Number Displays the log number Log Time Displays the t...

Page 184: ...the port or LAG interface Counter Value Displays the selected MIB variable value Sample Type Select the sampling method for the selected variable and comparing the value against the thresholds The pos...

Page 185: ...value or the falling counter crossing the falling threshold value Interval Enter the alarm interval time in seconds Owner Enter the device or user that defined the alarm 2 Select the alarm entry 3 Sel...

Page 186: ...Event number in the provided fields in the first row 8 Enter the Interval and Owner in the provided fields in the first row 9 Click ADD to update the device To remove an events control entry 1 Click M...

Page 187: ...e Select the port mode configuration for port mirroring The possible field values are TX Only Port mirroring is configured on transmitting ports only RX Only Port mirroring is configured on receiving...

Page 188: ...d field in the first row 3 Select the port mirroring Type from the list in the provided field in the first row 4 Click ADD to update the device To remove a source port entry 1 Click Monitoring Port Mi...

Page 189: ...GS700AT Smart Switch with features under the following main menu options Reset Upload Download File Management Troubleshooting The description that follows in this chapter describes configuring and ma...

Page 190: ...ry Default screen allows network managers to reset the device to the factory defaults shipped with the switch Restoring factory defaults results in erasing the configuration file To reset the device t...

Page 191: ...type of file to be uploaded The possible field values are Firmware Upload the Firmware File Configuration Upload the Configuration File TFTP Server IP Enter the TFTP Server IP Address to which the Fir...

Page 192: ...ng fields File Type Enter the file type to be downloaded The possible field values are Firmware Download the Firmware file Boot File Download the Boot file Configuration Download the Configuration fil...

Page 193: ...les the user to select which image will be set as active after the next reset To define the active image 1 Click Maintenance File Management Active Image The Active Image screen displays The Active Im...

Page 194: ...Cable Test screen contains fields for performing tests on copper cables Cable testing provides information about where errors occurred in the cable the last time a cable test was performed and the ty...

Page 195: ...nly one side Short Cable A short has occurred in the cable OK The cable passed the test Cable Fault Distance Displays the distance from the port where the cable error occurred Last Update Displays the...

Page 196: ...p menu contains the following options Support User Guide The description that follows in this chapter covers these features c Support The Support screen provides access to the NETGEAR online support s...

Page 197: ...0 October 2008 User Guide The User Guide screen provides access to the online User Guide To view the User Guide screen 1 Click Help Online Help User Guide The User Guide screen displays 2 Click APPLY...

Page 198: ...ory Reset function from a Web browser Table 1 Default Settings Feature GS700AT Default Setting Port Speed Auto negotiation Port Duplex Auto negotiation Flow Control half duplex Disabled Flow Control f...

Page 199: ...dress 1 8 subnet mask 1 8 DHCP 3 26 DHCP server 1 3 DSCP 5 1 Dynamic MAC Address Table 4 45 F Firmware Download 8 4 Firmware Upload 8 3 Flash Logs 7 6 G getting started 1 1 H History Table Page 7 15 I...

Page 200: ...istics 7 9 Restoring factory defaults 8 2 S scheduling scheme 5 5 security configuration 6 1 Server Logs 7 7 SNMP 3 30 SNMP groups 3 41 3 43 SNMP v3 3 30 STP 4 27 subnet mask 1 8 switch device 3 30 sw...

Reviews: