manualshive.com logo in svg

NETGEAR GS700AT Smart Switch, Руководство администратора, Страница: 156 / 200

Поделиться
Скачать
NETGEAR GS700AT Smart Switch Скачать руководство пользователя страница 156

GS700AT Smart Switch Software Administration Manual

6-20

Managing Security

v1.0, October 2008

•

“MAC ACL”

•

“MAC Rules”

•

“MAC Binding Configuration”

•

“IP ACL”

•

“IP Rules”

•

“IP Binding Configuration”

•

“Binding Table”

MAC ACL

The MAC Configuration screen allows a MAC Based ACL to be defined.

T

o view or rename MAC Based ACLs: 

1.

Click

 

Security > ACL > MAC ACL

. The MAC Configuration screen displays:

The MAC Configuration screen contains the following fields:

MAC Configuration

•

Current number of ACL

 – Displays the current number of user-defined ACLs.

MAC ACL Table

•

Name 

– Enter the user-defined MAC based ACL name. 

•

Number of Rules

 – Displays the current number of rules in the ACL.

2.

Select the ACL entry.

3.

Enter the new ACL Name in the provided field in the first row.

Figure 6-12

Содержание GS700AT Smart Switch

Страница 1: ...202 10360 02 October 2008 NETGEAR Inc 350 East Plumeria Drive San Jose CA 95134 USA GS700AT Smart Switch Software Administration Manual...

Страница 2: ...to test the series for compliance with the regulations Voluntary Control Council for Interference VCCI Statement This equipment is in the first category information equipment to be used in commercial...

Страница 3: ...rouillage radio lectrique du minist re des Communications Cet appareil num rique NETGEAR GS700AT Smart Switch respecte les limites de bruits radio lectriques visant les appareils num riques de classe...

Страница 4: ...body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter FCC Declaration Of Conformity We NETGEAR Inc 4500 Great America Parkway Santa Clara CA 9...

Страница 5: ...1 Switch Management Interface 1 2 Network with a DHCP Server 1 3 Network without a DHCP Server 1 5 Web Access 1 8 Additional Utilities 1 9 Chapter 2 Introduction to the Web Browser Interface Logging I...

Страница 6: ...ttings 5 1 CoS 5 1 Chapter 6 Managing Security Setting Security Configuration Options 6 1 Management Security 6 1 Port Authentication 6 9 Traffic Control 6 14 ACL 6 19 Chapter 7 Monitoring the Switch...

Страница 7: ...GS700AT Smart Switch Software Administration Manual Contents vii v1 0 October 2008 Support 9 1 User Guide 9 2 Appendix A Default Settings Index...

Страница 8: ...and and use all of its capabilities Once basic configuration is performed the switch operates using the remaining factory default parameters However a greater level of configuration anywhere from the...

Страница 9: ...aragraphs Typographical Conventions This manual uses the following typographical conventions Formats This manual uses the following formats to highlight special messages Note Refer to the product rele...

Страница 10: ...f contents and a button Double click on a link in the table of contents or index to navigate directly to where the topic is described in the manual A button to access the full NETGEAR Inc online knowl...

Страница 11: ...m Printing a PDF Chapter Click the PDF of This Chapter link at the top left of any page in the chapter you want to print The PDF version of the chapter you were viewing opens in a browser window Click...

Страница 12: ...HCP Server Network without a DHCP Server Web Access Additional Utilities System Requirements The following hardware and software facilities are required to run the applications described in this manua...

Страница 13: ...the performance of your switch and optimize network configuration Using your browser for example you can set up VLANs traffic priority and configure port trunking In addition NETGEAR provides the Smar...

Страница 14: ...all the Smart Wizard Discovery utility located on the switch installation CD on your computer 4 Start the Smart Wizard Discovery utility Table 1 1 Switch Management Methods Management Method Features...

Страница 15: ...DHCP server You will need this value to access the switch directly from a web browser without using the Smart Wizard Discovery utility 7 Select your switch by highlighting the name of the switch Then...

Страница 16: ...DHCP service you must assign a static IP address to your switch You can also assign the switch a static IP address even if your network has DHCP service Proceed as follows 1 Connect the GS700AT Gigabi...

Страница 17: ...pears 7 Select Disable to disable DHCP 8 The default IP address is 192 168 0 239 and the default subnet mask is 255 255 255 0 If you want different values enter the switch IP address gateway IP addres...

Страница 18: ...screens of the switch are also shown although they do not appear in the Windows view You need Windows Administrator privileges to change these settings 1 On your PC access the MS Windows operating sys...

Страница 19: ...net mask either with or without DHCP server use that IP address in your browser window If you are starting with an out of the box switch and are not using the Smart Wizard Discovery utility you must i...

Страница 20: ...et a new password You must enter the old and new passwords and confirm the new one 2 Click Set to enable the new password Firmware Upgrade The GS700AT Smart Switch software is upgradeable and enables...

Страница 21: ...The location of the new firmware If you do not know the location click Browse to locate the file Upgrade Password Enter your password the default password is password 2 Click Apply to apply the settin...

Страница 22: ...d for many of the basic functions and features of the switch This section introduces the areas of the browser interface and includes the following topics Logging Into the NETGEAR Home Screen Using the...

Страница 23: ...d Secondary Navigation Bars The Primary Navigation Bar contains a list of the different features that can be configured including System Switching QoS Security Monitoring Maintenance and Help Each fea...

Страница 24: ...Options The GS700AT web browser interface provides the following options Device Management Buttons Provides an explanation of the management buttons in the NETGEAR GS700AT Smart Switch Informational...

Страница 25: ...n PDF format For a detailed description of how to access and use these functions see Chapter 9 Online Help Accessing Device Information Each screen of the web browser interface contains a help file wi...

Страница 26: ...cled red Question Mark icon shown in the example below A help window for the screen opens Using Screen and Table Options The NETGEAR GS700AT web browser interface contains screens and tables for confi...

Страница 27: ...try is highlighted and the information appears in the first row which contains the editable fields To select all entries 1 Check the Select box in the first row to select all entries in the table Fiel...

Страница 28: ...irst row 2 Click ADD to update the device The new entry is displayed Modifying an Entry An entry may be modified by editing its values in the first row To modify an entry 1 Select the entry to be modi...

Страница 29: ...the ports 1 Click anywhere on the ports gold button The ports panel is displayed 2 Select the ports to be added as LAG members within the selected LAG by clicking on their respective boxes 3 Click AP...

Страница 30: ...now all Tagged 3 Click again on the quick box and a U appears in the quick box and in all the port boxes marking the ports as untagged 4 Click again on the quick box and the quick box and all the por...

Страница 31: ...sing the interface selection row located above the row of column headers Clicking on or LAGS displays the ports or the LAGs To display all ports 1 Click in the interface selection row The screen displ...

Страница 32: ...v1 0 October 2008 To display the LAG table 1 Click LAGS in the interface selection row The screen displays a table of all LAGs To select an interface 1 Enter the number of the interface in the GO TO I...

Страница 33: ...LLDP The description that follows in this chapter describes configuring and managing system settings in the GS700AT Smart Switch Management The Management menu enables configuration of some system par...

Страница 34: ...ter the name of the contact person The field may contain 0 160 characters System Object ID Displays the vendor s authoritative identification Date Time Displays the current date and local time System...

Страница 35: ...e Timeout in the provided fields 3 Select whether to enable or disable Jumbo Frames After Reset 4 Click APPLY to update the system settings IP Configuration The IP Configuration screen contains fields...

Страница 36: ...e user to define a static IP address IP Address Enter the static IP address used to manage the device Subnet Mask Enter the IP address mask Gateway Enter the default gateway IP address The following o...

Страница 37: ...used to set the system clock The possible field values are Local The system time is set locally via the Date and Time fields SNTP The system time is set via an SNTP server Select SNTP to disable the...

Страница 38: ...ure SNTP servers 1 Click System Management Time SNTP Server Configuration The SNTP Server Configuration screen displays The SNTP Server Configuration screen contains the following fields SNTP Server 1...

Страница 39: ...method for managing network devices The device supports the following SNMP versions SNMP v1 and v2c SNMP version 3 The SNMP agents maintain a list of variables that are used to manage the device The v...

Страница 40: ...he amount of time the device waits before re sending informs Key Management Enter key generation key updates and key usage The device supports SNMP notification filters based on Object IDs OIDs OIDs a...

Страница 41: ...mmunity string used to authenticate the management station to the device Access Mode Select the access rights of the community The possible field values are Read Only Management access is restricted t...

Страница 42: ...w 4 Click ADD to update the device To remove an SNMP community 1 Click System SNMP SNMPv1 v2 Community Configuration The Community Configuration screen displays 2 Select the entry to be removed 3 Clic...

Страница 43: ...field values are Traps Traps are sent Informs Informs are sent only when SNMPv2 is enabled Community String Enter the community string of the trap manager Notification Version Select the trap type Th...

Страница 44: ...w 3 Click ADD to update the device To remove an SNMP trap 1 Click System SNMP SNMPv1 v2 Trap Configuration The SNMPv1 v2 Trap Configuration screen displays 2 Select the entry to be removed 3 Click DEL...

Страница 45: ...byte in hexadecimal character strings is two hexadecimal digits Each byte digit can be separated by a period or a colon The Engine ID must be defined before SNMPv3 is enabled Use Default Check the box...

Страница 46: ...en contains the following field View Name Enter the user defined view name The view name can contain a maximum of 30 alphanumeric characters 2 Select the entry 3 Enter the View Name field in the first...

Страница 47: ...ent screen displays The SNMPv3 View Content screen contains the following fields Views View Name Select the user defined view name The view name can contain a maximum of 30 alphanumeric characters Obj...

Страница 48: ...in the first row 4 Select either Included or Excluded from the View Type provided field in the first row 5 Click ADD to update the device To remove an SNMP OID entry 1 Click System SNMP SNMPv3 View C...

Страница 49: ...nagement station to the device Group Name Select the SNMP group from a list of SNMP groups defined in the SNMP Group Configuration screen 2 Select the SNMP community entry 3 Enter the Management Stati...

Страница 50: ...eges to SNMP groups Groups allow network managers to assign access rights to specific device features or feature aspects To define an SNMP group 1 Click System SNMP SNMPv3 Group Configuration The SNMP...

Страница 51: ...d write Changes are made to the assigned SNMP view Notify Sends traps for the assigned SNMP view 2 Select the SNMP group entry 3 Select the Security Model and Security Level from the lists in the prov...

Страница 52: ...on screen contains the following fields User Name Enter the user name The field range is up to 30 alphanumeric characters Group Name Enter the group name from a list of user defined SNMP groups SNMP g...

Страница 53: ...colon 2 Select the user entry 3 Enter the User Name in the provided field in the first row 4 Select the Group Name and Engine ID from the lists in the provided fields in the first row 5 Select the Aut...

Страница 54: ...meters 1 Click System SNMP SNMPv3 Global Trap Configuration The SNMPv3 Global Trap Settings screen displays The SNMPv3 Global Trap Settings screen contains the following fields SNMP Notifications Sele...

Страница 55: ...traps are sent to specific users and the trap type sent SNMP notification filters provide the following services Identifying Management Trap Targets Defining Trap Filtering Selecting Trap Generation P...

Страница 56: ...nter the amount of times the device re sends an inform request The default is 3 seconds 2 Enter the Recipients IP address in the provided field in the first row 3 Select either Traps or Informs in the...

Страница 57: ...onfiguration screen displays 2 Select the trap entry 3 Click DELETE to remove the entry Trap Filter Name The SNMPv3 Trap Filter Name screen permits filtering traps based on OIDs Each OID is linked to...

Страница 58: ...p filter name 1 Click System SNMP SNMPv3 Trap Filter Name The SNMPv3 Trap Filter Name screen displays 2 Select the trap filter name entry 3 Click DELETE to remove the entry Trap Filter Content The SNM...

Страница 59: ...d field 3 Select the trap filter content entry from the OID table 4 Enter the Object ID Subtree in the provided field in the first row 5 Select the Filter Type from the list in the provided field in t...

Страница 60: ...tion Device Capabilities Device Configuration The advertising device transmits multiple advertisement message sets in a single LAN packet The multiple advertisement sets are sent in the packet Type Le...

Страница 61: ...cket handling when LLDP is disabled The possible field values are Flooding LLDPDU packets are flooded to all ports in the system Filtering LLDPDU packets are filtered This is the default TLV Advertise...

Страница 62: ...h occurs when a new Endpoint device links with the LLDP MED Network Connectivity Device 2 Select the LLDP global status on the device by selecting Enable or Disable in the LLDP field 3 If you selected...

Страница 63: ...t packet handling when LLDP is disabled The possible field values are Flooding LLDPDU packets are flooded to all ports in the system Filtering LLDPDU packets are filtered This is the default TLV Adver...

Страница 64: ...ackets sent when the LLDP MED Fast Start mechanism is initialized which occurs when a new Endpoint device links with the LLDP MED Network Connectivity Device 2 Select the LLDP global status on the dev...

Страница 65: ...field values are Tx Only Enable transmitting LLDP packets only Rx Only Enable receiving LLDP packets only Tx Rx Enable transmitting and receiving LLDP packets Disable Disable LLDP on the interface Ma...

Страница 66: ...ow 7 Click APPLY to update the device LLDP MED Network Policy LLDP Media Endpoint Discovery LLDP MED increases network flexibility by allowing different IP systems to coexist on a single network LLDP...

Страница 67: ...licy is defined for a Voice Signaling application Guest Voice The network policy is defined for a Guest Voice application Guest Voice Signaling The network policy is defined for a Guest Voice Signalin...

Страница 68: ...rovided field in the first row 8 Click APPLY to update the device To add a new network policy entry 1 Click System LLDP Advanced LLDP MED Network Policy The LLDP MED Network Policy screen displays 2 S...

Страница 69: ...e Enable LLDP MED on the selected port Disable Disable LLDP MED on the selected port Notification Select the notification status for the selected port The possible field values are Enable Enable notif...

Страница 70: ...ort information 1 Click System LLDP Advanced Local Information The LLDP MED Local Information screen displays The LLDP MED Local Information screen contains the following fields Device Information Cha...

Страница 71: ...tion of the port transmitting the LLDP frame Port Description Displays information about the port including manufacturer product name and hardware software version Advertisement Displays the advertise...

Страница 72: ...ed address subtype For example IPv4 Address Displays the managed address Interface Subtype Displays the port subtype Interface Number Displays the port number MAC PHY Details Auto Negotiation Supporte...

Страница 73: ...MED capabilities enabled on the port Current Capabilities Capabilities indicates the TLV is advertised by the port Device Class Network Connectivity indicates the device is a network connectivity dev...

Страница 74: ...s Media Service Access Point MSAP entry number Local Port Displays the port number Chassis ID Subtype Displays the chassis ID subtype For example MAC address Chassis ID Displays the chassis identifica...

Страница 75: ...e LLDP frame Port ID Subtype Displays the port ID subtype For example IPv4 address Port ID Displays the port identification of the port transmitting the LLDP frame Port Description Displays informatio...

Страница 76: ...SE TX full duplex mode MED Details Capabilities Supported Displays the MED capabilities enabled on the port Current Capabilities Displays the MED TLVs advertised by the port Device Class Displays the...

Страница 77: ...Unknown Displays unknown location information Network Policies Application Type Displays the network policy application type For example Voice VLAN ID Displays the VLAN ID for which the network policy...

Страница 78: ...t Switch with features under the following main headings Ports LAG VLAN Voice VLAN STP Multicast Address Table The description that follows in this chapter describes configuring and managing switching...

Страница 79: ...The port is operational Down The port is not operational Reactivate Suspended Select the reactivation status for a port disabled through the locked port security option The possible field values are...

Страница 80: ...Back Pressure Select the back pressure mode of the Port Back Pressure mode is used with half duplex mode to disable ports from receiving messages Back Pressure mode is disabled by default The possible...

Страница 81: ...ort configuration is applied to the ports Ensure the following when configuring LAGs All ports within a LAG must be of the same media type A VLAN is not configured on the port The port is not assigned...

Страница 82: ...ration screen displays The Basic LAG Configuration screen contains the following fields Interface Displays the LAG number Description Enter a user defined LAG description Status Select the current lin...

Страница 83: ...s transmission between the device and its link partner in both directions simultaneously Auto Negotiation Select the auto negotiation status of the LAG Auto Negotiation is a protocol between two link...

Страница 84: ...ic LAG Membership screen displays The Basic LAG Membership screen contains the following fields LAG ID Select the LAG ID LAG Name Displays the user defined LAG name LAG Type Select the LAG type The po...

Страница 85: ...displays the member ports included in the LAG Advanced The LAG Advanced menu contains the following options LAG Configuration LAG Membership LACP Configuration LACP Port Configuration LAG Configurati...

Страница 86: ...lues are Up The LAG is currently linked and forwarding traffic Down The LAG is currently not linked Reactivate Suspended Select the action to apply to a suspended LAG The possible field values are Ena...

Страница 87: ...the auto negotiation status of the LAG Auto Negotiation is a protocol between two link partners that enables a port to advertise its transmission rate duplex mode and flow control abilities to its par...

Страница 88: ...nced LAG Membership screen displays The Advanced LAG Membership screen contains the following fields LAG ID Select the LAG ID LAG Name Displays the user defined LAG name LAG Type Select the LAG type T...

Страница 89: ...inks Aggregated ports can be linked into link aggregation port groups Each group is comprised of ports with the same speed The LACP Configuration screen contains fields for configuring LACP To configu...

Страница 90: ...reen contains the following fields Interface Displays the interface number to which timeout and priority values are assigned LACP Priority Enter the port priority value The field range is 1 65535 Time...

Страница 91: ...n the LAN a Layer 3 router working at a protocol level is required to allow traffic flow between VLANs Layer 3 routers identify segments and coordinate with VLANs VLANs are Broadcast and Multicast dom...

Страница 92: ...ssible field values are Static The VLAN is user defined Default The default VLAN ID is 1 It cannot be modified by the user 2 Select the VLAN entry 3 Enter the VLAN ID and VLAN Name in the provided fie...

Страница 93: ...figuring and working with VLANs The maximum number of active VLANs is 128 To define VLAN properties 1 Click Switching VLAN Advanced VLAN Configuration The Advanced VLAN Configuration screen displays T...

Страница 94: ...d VLAN Name in the provided fields in the first row 3 Click ADD to update the device To remove a VLAN 1 Click Switching VLAN Advanced VLAN Configuration The Advanced VLAN Configuration screen displays...

Страница 95: ...es as untagged VLAN members Packets belonging to the respective VLAN are untagged Remove All Remove all the interfaces participating in the VLAN 2 Select the VLAN ID from the list in the provided fiel...

Страница 96: ...hip The VLAN Membership screen displays 2 Click UNTAGGED PORT MEMBERS The VLAN Untagged Ports screen opens Port PVID Configuration The Port PVID Configuration screen contains parameters for assigning...

Страница 97: ...nterface 3 Enter the PVID in the provided field in the first row 4 Click APPLY to update the device Voice VLAN Voice VLAN allows you to enhance VoIP service by configuring ports to carry IP voice traf...

Страница 98: ...initial IP address through DHCP The phone eventually uses the Voice VLAN and starts sending tagged packets The Voice VLAN menu contains the following options Basic Advanced Basic The Voice VLAN Basic...

Страница 99: ...t value Enable Enable remarking the packet CoS tag value Voice VLAN Aging Time Enter the Voice VLAN aging time The Voice VLAN aging time sets the maximum inactivity time for a Voice VLAN port member a...

Страница 100: ...atus Select the Voice VLAN status on the device The possible field values are Enable Enable Voice VLAN on the device Disable Disable Voice VLAN on the device This is the default value VoiceVLAN ID Sel...

Страница 101: ...300 sec For more information on defining MAC address age out time see Dynamic Addresses 2 Select the device VoiceVLAN Status in the provided field 3 If you selected Enable in the VoiceVLAN Status fie...

Страница 102: ...Enable port LAG security on the Voice VLAN Disable Disable port LAG security on the Voice VLAN This is the default value Membership Displays the Voice VLAN member status The possible field values are...

Страница 103: ...o Siemens IP Phones 00 03 6B Assigned to Cisco IP Phones 00 0F E2 Assigned to H3C IP Phones 00 60 B9 Assigned to NEC Philips IP Phones 00 D0 1E Assigned to Pingtel IP Phones 00 E0 75 Assigned to Polyc...

Страница 104: ...OUI screen displays 2 Click RESTORE DEFAULTS to restore the factory defaults STP Spanning Tree Protocol STP provides network topology for any arrangement of bridges STP also provides a single path bet...

Страница 105: ...e device Disable Disable STP on the device STP Operation Mode Select the STP mode on the device The possible field values are STP Enable classic STP on the device RSTP Enable Rapid Spanning Tree Proto...

Страница 106: ...n seconds a bridge waits before sending configuration messages The default Maximum Age Time is 20 seconds Forward Delay Sec Displays the device Forward Delay Time The Forward Delay Time is the amount...

Страница 107: ...STP on the device Disable Disable STP on the device STP Operation Mode Select the STP mode on the device The possible field values are STP Enable classic STP on the device RSTP Enable Rapid Spanning T...

Страница 108: ...s the device Maximum Age Time The Maximum Age Time is the amount of time in seconds a bridge waits before sending configuration messages The default Maximum Age Time is 20 seconds Forward Delay Sec Di...

Страница 109: ...8 The bridge priority value is provided in increments of 4096 Hello Time Enter the device Hello Time The Hello Time indicates the amount of time in seconds a Root Bridge waits between configuration me...

Страница 110: ...ay and enter the value in the provided field 4 Click APPLY to update the device CST Port Configuration To configure CST ports on the device 1 Click Switching STP Advanced CST Port Configuration The CS...

Страница 111: ...the speed at which the port is operating Path Cost Enter the method used to assign default path cost to STP ports The possible field range is 1 200000000 The default path cost assigned to an interface...

Страница 112: ...STP is enabled Role Displays the port role assigned by the STP algorithm to provide to STP paths The possible field values are Root Provides the lowest cost path to forward packets to the root switch...

Страница 113: ...igure to automatically establish a point to point link To establish communications over a point to point link the originating PPP first sends Link Control Protocol LCP packets to configure and test th...

Страница 114: ...lticast Filtering Database The default setting of this is to flood all such traffic traffic in unregistered Multicast groups Layer 2 switching forwards Multicast packets to all relevant VLAN ports by...

Страница 115: ...onfiguration screen displays The Basic IGMP Snooping Configuration screen contains the following fields IGMP Snooping Configuration IGMP Snooping Status Select the IGMP Snooping status on the device T...

Страница 116: ...ace Settings table 3 Select the Status from the list in the provided field in the first row 4 Click APPLY to update the device Advanced The Multicast Advanced menu contains the following options IGMP...

Страница 117: ...N ID Displays the VLAN ID Status Select the IGMP Snooping status on the VLAN The possible field values are Enable Enable IGMP Snooping on the VLAN Disable Disable IGMP Snooping on the VLAN Auto Learn...

Страница 118: ...first row 4 Enter the Host MRouter and Leave Timeouts in the provided fields in the first row 5 Click APPLY to update the device Multicast Group Configuration The Multicast Group Configuration screen...

Страница 119: ...the provided field in the first row 4 Click APPLY to update the device Multicast Group Membership The Multicast Group Membership screen displays the ports and LAGs attached to the selected VLAN and th...

Страница 120: ...atically Forbidden The interface is forbidden to join the Multicast group Excluded The interface is not included in the Multicast group 2 Select the VLAN ID from the list in the provided field 3 Selec...

Страница 121: ...rward All Interface Displays the interface for which the Multicast settings are displayed Interface Status Select the interface status The possible field values are Static The interface is added to th...

Страница 122: ...ured manually An address becomes associated with a port by learning the port from the frame s source address but if a frame that is addressed to a destination MAC address is not associated with a port...

Страница 123: ...ues are VLAN ID Display the MAC Address table entries that relate to the specific VLAN ID MAC Address Display the MAC Address table entries that relate to MAC Address Interface Display the MAC Address...

Страница 124: ...he Static Addresses screen contains a list of static MAC addresses Static Addresses are added and removed from the Static Addresses screen To prevent static MAC addresses from being deleted when the d...

Страница 125: ...ovided fields in the first row 4 Select the MAC Address duration period Status from the list in the provided field in the first row 5 Click APPLY to update the device Dynamic Addresses The Dynamic Add...

Страница 126: ...en displays The Advanced Address Table screen contains the following fields Search By Display the MAC Address which can be sorted according to VLAN ID MAC Address or Interface The possible field value...

Страница 127: ...m the list in the provided field 3 Enter the value to be searched for in the provided box 4 Click GO to execute the query To delete all addresses from the Advanced Address Table 1 Click Switching Addr...

Страница 128: ...result is an improved traffic flow for traffic with high demand QoS is defined by Classification Specifies which packet fields are matched to specific values All packets matching the user defined spec...

Страница 129: ...share the bandwidth with the SP queues This ensures that the remaining bandwidth is distributed according to the weight ratio If WRR is selected the following weights are assigned to the queues 1 2 4...

Страница 130: ...ify traffic based on the CoS VPT tag value DSCP Classify traffic based on the DSCP tag value 2 Select the QoS Mode and Trust Mode in the provided fields 3 Click APPLY to update the device CoS Interfac...

Страница 131: ...CoS default settings to the ports Unchecked Maintain the current CoS settings 2 Select the interface 3 Select the Default CoS value from the list in the provided field in the first row 4 Check or unc...

Страница 132: ...on Rate Indicates the rate that data is transmitted The rate is averaged over a minimum time increment The Bandwidth screen allows the user to define Ingress Rate Limit and Egress Shaping Rates To def...

Страница 133: ...000000 for GE ports Egress Shaping Rates CbS Enter the Egress Shaping Committed Burst Size CbS in bytes per second The possible field range is 4KB to 16MB 2 Select the interface 3 Choose either Enable...

Страница 134: ...is mapped Four traffic priority queues are supported Lowest Low Normal and High The High Queue is reserved for special traffic and is not recommended for use Restore Default Mapping Restore Defaults...

Страница 135: ...ck QoS CoS Advanced DSCP To Queue Mapping The DSCP To Queue Mapping screen displays The DSCP To Queue Mapping screen contains the following fields DSCP to Queue Mapping DSCP In Displays the incoming p...

Страница 136: ...ecked Restore the factory default settings for DSCP mapping values Unchecked Maintain the current DSCP mapping settings 2 Select the Queue values for each DSCP In value in the provided fields 3 Check...

Страница 137: ...the following main menu options Management Security Port Authentication Traffic Control ACL The description that follows in this chapter describes configuring and managing security settings in the GS...

Страница 138: ...ing the system New Password Enter a new password for accessing the system Retype New Password Repeat the new password used to access the system 2 Enter the Old Password New Password and Retype New Pas...

Страница 139: ...re a failure occurs Possible field values are 1 10 The default value is 3 Timeout for Reply Enter the amount of time in seconds the device waits for an answer from the RADIUS Server before retrying th...

Страница 140: ...ists in the provided fields in the first row 5 Click APPLY to update the device To add a new RADIUS Authentication Server entry 1 Click Security Management Security RADIUS Authentication Server Config...

Страница 141: ...default 802 1x 802 1X authentication sessions are recorded Login Device management Web login and logout sessions are recorded Both Both 802 1X authentication and device management sessions are recorde...

Страница 142: ...w TACACS servers To configure TACACS Settings 1 Click Security Management Security TACACS The TACACS screen displays The TACACS screen contains the following fields Host IP Address Enter the TACACS Se...

Страница 143: ...s 2 Enter the Host IP Address Key String Authentication Port and Timeout for Reply in the provided fields in the first row 3 Select the Single Connection status and Active server from the lists in the...

Страница 144: ...3 Select the order in which authentication is applied The possible field values are TACACS Authenticate the user at the TACACS server For more information see TACACS RADIUS Authenticate the user at t...

Страница 145: ...hentication parameters In addition the Guest VLAN option is enabled from the Basic 802 1X Configuration screen To define the 802 1X configuration 1 Click Security Port Authentication Basic 802 1X Conf...

Страница 146: ...efault value Enable Enable using a Guest VLAN for unauthorized ports If a Guest VLAN is enabled the unauthorized port automatically joins the VLAN selected in the VLAN List field Guest VLAN ID Select...

Страница 147: ...t based authentication on the device The possible field values are Disable Disable port based authentication on the device Enable Enable port based authentication on the device Authentication Method E...

Страница 148: ...n select the Authentication Method from the list in the provided field 4 Select Disable or Enable for the Guest VLAN status in the provided field 5 If you selected Enable for the Guest VLAN field then...

Страница 149: ...field Disable Disable the Guest VLAN on the port This is the default value Periodic Reauthentication Select whether periodic port reauthentication is enabled or disabled The possible field values are...

Страница 150: ...n the first row 4 If you selected Enable as the Periodic Reauthentication status enter the Reauthentication Period in the provided field in the first row 5 Enter the Quiet Period Resending EAP time Ma...

Страница 151: ...Traffic Control Storm Control The Storm Control screen displays The Storm Control screen contains the following fields Interface Displays the port number for which the storm control information is dis...

Страница 152: ...a specific port only to users with specific MAC addresses The MAC addresses can be dynamically learned or statically configured Locked port security monitors both received and learned packets that are...

Страница 153: ...ocks the port and only forwards packets that have been learned statically or dynamically prior to locking the port The lock is effective immediately Limited Dynamic Lock The port is unlocked Locks the...

Страница 154: ...elect whether traps are enabled or disabled when a packet from an unknown source is received on a locked port The possible field values are Enable Enable traps Disable Disable traps This is the defaul...

Страница 155: ...1 Click Security Traffic Control Protected Ports Protected Ports Membership The Protected Ports Membership screen displays The Protected Ports Membership screen contains the following fields Protecte...

Страница 156: ...view or rename MAC Based ACLs 1 Click Security ACL MAC ACL The MAC Configuration screen displays The MAC Configuration screen contains the following fields MAC Configuration Current number of ACL Disp...

Страница 157: ...ice To remove a MAC based ACL entry 1 Click Security ACL MAC ACL The MAC Configuration screen displays 2 Select the ACL entry 3 Click DELETE to remove the entry MAC Rules The MAC Rules screen allows a...

Страница 158: ...field 3 Select the rule entry 4 Enter the provided fields in the first row 5 Click APPLY to update the device To add a MAC rule 1 Click Security ACL MAC Rules The MAC Rules screen displays 2 Select t...

Страница 159: ...ifying ACL bound interfaces 2 Select the interfaces to which the ACLs are bound 3 Select the ACL Name from the list in the provided field 4 Select the interfaces to bind to the selected ACL Name by on...

Страница 160: ...nter the user defined IP Based ACL name Number of Rules Displays the current number of rules in the ACL 2 Select the ACL entry 3 Enter the new ACL Name in the provided field in the first editable row...

Страница 161: ...1 Click Security ACL IP Rules The IP Rules screen displays The IP Rules screen contains the following fields IP ACL ACL Name Select the ACL Name from the list IP Rules Priority Enter the rule priorit...

Страница 162: ...hutdown Drop packets that meet the ACL criteria and disable the port to which the packet was addressed 2 Select the ACL Name from the list in the provided field 3 Select the rule entry 4 Enter the pro...

Страница 163: ...e for viewing and modifying ACL bound interfaces Port Selection Table Select the interfaces for which the ACLs are bound 2 Select the ACL Name from the list in the provided field 3 Select the interfac...

Страница 164: ...Binding Table The Binding Table screen displays The Binding Table screen contains the following fields Interface Binding Table Interface Displays the interfaces for which the ACLs are bound ACL Name D...

Страница 165: ...ecommended message format for all error reporting for example Syslog local device reporting Messages are assigned a severity code and include a message mnemonic which identifies the source application...

Страница 166: ...The Logs Configuration screen contains fields for enabling and disabling logs globally To enable or disable event logging 1 Click Monitoring Logs Logs Configuration The Logs Configuration screen disp...

Страница 167: ...g level If the device is down or not functioning properly an emergency log message is saved to the specified logging location Alert The second highest warning level An alert log is saved if there is a...

Страница 168: ...down Critical The third highest warning level A critical log is saved if a critical device malfunction occurs for example two device ports are not functioning while the rest of the device ports remai...

Страница 169: ...sage is saved to the specified logging location Alert The second highest warning level An alert log is saved if there is a serious device malfunction for example all device features are down Critical...

Страница 170: ...the following fields Log Index Displays the log number Log Time Displays the time at which the log was generated Severity Displays the log severity and urgency level The following are the available l...

Страница 171: ...emote log servers New log servers can be defined and the log severity sent to each server To configure remote log servers 1 Click Monitoring Logs Server Log The Server Log screen displays The Server L...

Страница 172: ...while the rest of the device ports remain functional Error A device error has occurred for example if a single port is offline Warning The lowest level of a device warning The device is functioning b...

Страница 173: ...emove a remote log server 1 Click Monitoring Logs Server Log The Server Log screen displays 2 Select the log server entry 3 Click DELETE to remove the log server entry RMON This section contains infor...

Страница 174: ...includes bad packets and FCS octets but excludes framing bits Received Packets Displays the number of packets received on the interface including bad packets Multicast and Broadcast packets since the...

Страница 175: ...Statistics History Control History Table Events Control Events Log Alarms Statistics The RMON Advanced Statistics screen contains fields for viewing information about device utilization and errors th...

Страница 176: ...mber of CRC and Align errors that have occurred on the interface since the device was last refreshed Undersize Packets Displays the number of undersized packets less than 64 octets received on the int...

Страница 177: ...red on the interface since the device was last refreshed Received Bytes Displays the number of octets received on the interface since the device was last refreshed This number includes bad packets and...

Страница 178: ...nitoring RMON Advanced History Control The RMON History Control screen displays The RMON History Control screen contains the following fields History Entry No Displays the entry number for the History...

Страница 179: ...mpling Interval Samples Requested and Owner in the provided field in the first row 3 Click ADD to update the device To remove a history control entry 1 Click Monitoring RMON Advanced History Control T...

Страница 180: ...eived on the interface since the device was last refreshed This number does not include Multicast packets Multicast Packets Displays the number of good Multicast packets received on the interface sinc...

Страница 181: ...RMON Events Control screen contains fields for defining RMON events To configure RMON events control 1 Click Monitoring RMON Advanced Events Control The RMON Events Control screen displays The RMON Ev...

Страница 182: ...add an events control entry 1 Click Monitoring RMON Advanced Events Control The RMON Events Control screen displays 2 Enter the Community Description and Owner in the provided field in the first row 3...

Страница 183: ...vanced Events Log The RMON Events Log screen displays The RMON Events Log screen contains the following fields Event Displays the RMON Events Log Number Displays the log number Log Time Displays the t...

Страница 184: ...the port or LAG interface Counter Value Displays the selected MIB variable value Sample Type Select the sampling method for the selected variable and comparing the value against the thresholds The pos...

Страница 185: ...value or the falling counter crossing the falling threshold value Interval Enter the alarm interval time in seconds Owner Enter the device or user that defined the alarm 2 Select the alarm entry 3 Sel...

Страница 186: ...Event number in the provided fields in the first row 8 Enter the Interval and Owner in the provided fields in the first row 9 Click ADD to update the device To remove an events control entry 1 Click M...

Страница 187: ...e Select the port mode configuration for port mirroring The possible field values are TX Only Port mirroring is configured on transmitting ports only RX Only Port mirroring is configured on receiving...

Страница 188: ...d field in the first row 3 Select the port mirroring Type from the list in the provided field in the first row 4 Click ADD to update the device To remove a source port entry 1 Click Monitoring Port Mi...

Страница 189: ...GS700AT Smart Switch with features under the following main menu options Reset Upload Download File Management Troubleshooting The description that follows in this chapter describes configuring and ma...

Страница 190: ...ry Default screen allows network managers to reset the device to the factory defaults shipped with the switch Restoring factory defaults results in erasing the configuration file To reset the device t...

Страница 191: ...type of file to be uploaded The possible field values are Firmware Upload the Firmware File Configuration Upload the Configuration File TFTP Server IP Enter the TFTP Server IP Address to which the Fir...

Страница 192: ...ng fields File Type Enter the file type to be downloaded The possible field values are Firmware Download the Firmware file Boot File Download the Boot file Configuration Download the Configuration fil...

Страница 193: ...les the user to select which image will be set as active after the next reset To define the active image 1 Click Maintenance File Management Active Image The Active Image screen displays The Active Im...

Страница 194: ...Cable Test screen contains fields for performing tests on copper cables Cable testing provides information about where errors occurred in the cable the last time a cable test was performed and the ty...

Страница 195: ...nly one side Short Cable A short has occurred in the cable OK The cable passed the test Cable Fault Distance Displays the distance from the port where the cable error occurred Last Update Displays the...

Страница 196: ...p menu contains the following options Support User Guide The description that follows in this chapter covers these features c Support The Support screen provides access to the NETGEAR online support s...

Страница 197: ...0 October 2008 User Guide The User Guide screen provides access to the online User Guide To view the User Guide screen 1 Click Help Online Help User Guide The User Guide screen displays 2 Click APPLY...

Страница 198: ...ory Reset function from a Web browser Table 1 Default Settings Feature GS700AT Default Setting Port Speed Auto negotiation Port Duplex Auto negotiation Flow Control half duplex Disabled Flow Control f...

Страница 199: ...dress 1 8 subnet mask 1 8 DHCP 3 26 DHCP server 1 3 DSCP 5 1 Dynamic MAC Address Table 4 45 F Firmware Download 8 4 Firmware Upload 8 3 Flash Logs 7 6 G getting started 1 1 H History Table Page 7 15 I...

Страница 200: ...istics 7 9 Restoring factory defaults 8 2 S scheduling scheme 5 5 security configuration 6 1 Server Logs 7 7 SNMP 3 30 SNMP groups 3 41 3 43 SNMP v3 3 30 STP 4 27 subnet mask 1 8 switch device 3 30 sw...

Отзывы:

Нет отзывов