Netgear GS110TUP User Manual

User Manual

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch with 1 SFP and 1 Copper Uplink

GS110TUP GS710TUP

May 2021 202-12043-03

NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134, USA

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Support and Community

Visit netgear.com/support to get your questions answered and access the latest downloads.

You can also check out our NETGEAR Community for helpful advice at

community.netgear.com.

Regulatory and Legal

Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.

(If this product is sold in Canada, you can access this document in Canadian French at https://www.netgear.com/support/download/.)

For regulatory compliance information including the EU Declaration of Conformity, visit https://www.netgear.com/about/regulatory/.

See the regulatory compliance document before connecting the power supply.

For NETGEAR's Privacy Policy, visit

By using this device, you are agreeing to NETGEAR's Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.

Do not use this device outdoors. The PoE source is intended for intra building connection only.

https://www.netgear.com/about/privacy-policy.

Trademarks

Revision History

Publication Part Number

202-12043-03 May 2021

Publish Date Comments

• We changed Chapter 1, Get Started to document the following:

- The new device UI login options for initial access to the device UI. (HTTP

rather than HTTPS is now the default protocol for access to the device UI.) See

Access the switch off-network and not connected to the Internet, and Credentials for the device UI.

- The new options to register the switch to activate your warranty. See

- The new requirements to change the management mode. See

the management mode of the switch.

• We changed the login steps in all tasks in the manual to document the new device UI login options.

• We changed

• We added

• We changed

registration status.

• We made multiple minor changes, including changes in terminology.

Access the switch on-network and connected to the Internet,

Change

Manage the Smart Control Center.

Browser security warning with HTTPS access.

Reset the switch to factory default settings and reset the

User Manual2

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

202-12043-02 March 2020 • We changed Reboot the switch.

• We changed

following sections:

Reset the switch to factory default settings but maintain the registration status.

Reset the switch to factory default settings and reset the registration status.

202-12043-01 January 2020 We added model GS110TUP.

202-12045-01 December 2019 First publication for model GS710TUP.

Reset the switch to its factory default settings and added the

User Manual3

Chapter 1 Get Started

Available publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

Switch management options and default management mode . . . . . . . . .14

Manage the switch by using the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Software requirements for the device UI . . . . . . . . . . . . . . . . . . . . . . . . . .15

Supported web browsers for the device UI . . . . . . . . . . . . . . . . . . . . . . .15

Navigation tabs, configuration menus, and page menu. . . . . . . . . . . . .16

Configuration and status options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

Buttons in the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

User-defined fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

Context-sensitive help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

About on-network and off-network access. . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Access the switch on-network and connected to the Internet . . . . . . . . . . 19

Use a Windows-based computer to access the switch

on-network and connected to the Internet . . . . . . . . . . . . . . . . . . . . . . . .20

Use the NETGEAR Insight mobile app to discover the

IP address of the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21

Use the NETGEAR Switch Discovery Tool to discover the

IP address of the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22

Discover the switch in a network with a DHCP server using

the Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24

Use other options to discover the switch IP address. . . . . . . . . . . . . . . .25

Access the switch on-network when you know the switch IP address .25

Access the switch off-network and not connected to the Internet . . . . . . . 27

Credentials for the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

access the switch online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

registration key for offline access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31

Access the switch offline with a registration key. . . . . . . . . . . . . . . . . . . .32

Change the language of the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Change the management mode of the switch . . . . . . . . . . . . . . . . . . . . . . . 35

About changing the management mode . . . . . . . . . . . . . . . . . . . . . . . . .35

Change the management mode to NETGEAR Insight

Mobile App and Insight Cloud Portal. . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

Change the management mode back to Directly Connect

to Web Browser Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37

Use the Device View of the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40

Configure interface settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Access the NETGEAR support website. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Access the user manual online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48

Chapter 2 Configure System Information

View or define switch system information . . . . . . . . . . . . . . . . . . . . . . . . . . .50

View or define system information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

View the temperature and fan status . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52

View the software versions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54

View the system CPU status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55

Configure the CPU thresholds. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56

Configure the IP network settings for management access . . . . . . . . . . . . 58

Configure the IPv4 network and VLAN settings for the

device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58

Configure the IPv6 network settings for the local browser

interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

View the IPv6 network neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61

Configure the time settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Configure the time settings manually . . . . . . . . . . . . . . . . . . . . . . . . . . . .63

Configure the time settings with SNTP and configure the

global SNTP settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

View the SNTP global status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68

Configure an SNTP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70

Configure daylight saving time settings . . . . . . . . . . . . . . . . . . . . . . . . . .75

View the daylight saving time status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

Configure denial of service settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79

Configure Auto-DoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79

Configure denial of service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80

Configure DNS settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Configure the global DNS settings and add a DNS server. . . . . . . . . . .83

Remove a DNS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .85

Configure and view host name-to-IP address information. . . . . . . . . . .86

Configure green Ethernet settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Configure the global green Ethernet settings . . . . . . . . . . . . . . . . . . . . .89

Configure green Ethernet interface settings. . . . . . . . . . . . . . . . . . . . . . .90

Use the Device View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

Configure Power over Ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

PoE concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

Device class power requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

Power allocation and power budget concepts. . . . . . . . . . . . . . . . . . . . .93

Configure the global PoE settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95

Manage the uninterrupted PoE feature . . . . . . . . . . . . . . . . . . . . . . . . . . .96

Configure the PoE port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97

Configure SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101

Configure the SNMPv1 and SNMPv2 community . . . . . . . . . . . . . . . . 101

Configure SNMPv1 and SNMPv2 trap settings. . . . . . . . . . . . . . . . . . . 104

Configure SNMPv1 and SNMPv2 trap flags . . . . . . . . . . . . . . . . . . . . . 106

View the supported MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

Configure SNMPv3 users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109

Configure Link Layer Discovery Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . .110

User Manual5

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Configure LLDP global settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

Configure LLDP port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

View the LLDP-MED network policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

Configure the LLDP-MED port settings . . . . . . . . . . . . . . . . . . . . . . . . . 115

View the local information advertised through LLDP . . . . . . . . . . . . . 116

View the LLDP neighbors information . . . . . . . . . . . . . . . . . . . . . . . . . . 119

Configure DHCP snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122

Configure the global DHCP snooping settings . . . . . . . . . . . . . . . . . . 123

Enable DHCP for all member interfaces of a VLAN . . . . . . . . . . . . . . . 124

Configure DHCP snooping interface settings. . . . . . . . . . . . . . . . . . . . 125

Configure static DHCP bindings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

Configure DHCP snooping persistent settings. . . . . . . . . . . . . . . . . . . 128

View or clear DHCP snooping statistics. . . . . . . . . . . . . . . . . . . . . . . . . 130

Set up PoE timer schedules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131

Create a PoE timer schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

Specify the settings for an absolute PoE timer schedule . . . . . . . . . . 132

Specify the settings for a recurring PoE timer schedule . . . . . . . . . . . 133

Change the settings for a recurring PoE timer schedule entry . . . . . 135

Delete a PoE timer schedule entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136

Delete a PoE timer schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

Chapter 3 Configure Switching

Configure the port settings and maximum frame size. . . . . . . . . . . . . . . 140

Configure link aggregation groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143

Configure LAG settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143

Configure LAG membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

Set the LACP system priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147

Set the LACP port priority settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

Configure VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

Configure VLAN settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150

Configure VLAN membership. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

View the VLAN status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155

Configure the PVID settings for an interface. . . . . . . . . . . . . . . . . . . . . 156

Configure a MAC-based VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

Configure protocol-based VLAN groups. . . . . . . . . . . . . . . . . . . . . . . . 161

Configure protocol-based VLAN group membership . . . . . . . . . . . . 163

Configure a voice VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

Configure the GARP switch settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

Configure GARP ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

Configure Auto-VoIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .169

Configure the Auto-VoIP protocol-based settings . . . . . . . . . . . . . . . . 169

Configure the Auto-VoIP OUI-based properties . . . . . . . . . . . . . . . . . 171

Configure the OUI-based port settings . . . . . . . . . . . . . . . . . . . . . . . . . 172

Manage the OUI table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173

Display the Auto-VoIP status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175

Configure Spanning Tree Protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .176

Configure the STP settings and view the STP status . . . . . . . . . . . . . . 177

User Manual6

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Configure the CST settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179

Configure the CST port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181

View the CST port status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183

View the Rapid STP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185

Manage the MST settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186

Configure and view the port settings for an MST instance . . . . . . . . . 190

View the STP statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193

Configure multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .194

View, search, or clear the MFDB table . . . . . . . . . . . . . . . . . . . . . . . . . . 194

View the MFDB statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196

Configure the auto-video multicast settings. . . . . . . . . . . . . . . . . . . . . 197

Manage IGMP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .198

Configure IGMP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198

Configure IGMP snooping for interfaces. . . . . . . . . . . . . . . . . . . . . . . . 200

View, search, or clear the IGMP snooping table. . . . . . . . . . . . . . . . . . 202

Configure IGMP snooping for VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . 203

Modify IGMP snooping settings for a VLAN . . . . . . . . . . . . . . . . . . . . . 205

Disable IGMP snooping on a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

Configure one or more IGMP multicast router interfaces. . . . . . . . . . 206

Configure an IGMP multicast router VLAN . . . . . . . . . . . . . . . . . . . . . . 208

IGMP snooping querier overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209

Configure an IGMP snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . 209

Configure an IGMP snooping querier for a VLAN . . . . . . . . . . . . . . . . 210

Display the status of the IGMP snooping querier for VLANs . . . . . . . 211

Manage MLD snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .213

Enable MLD snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213

Configure MLD snooping for interfaces . . . . . . . . . . . . . . . . . . . . . . . . 215

Configure the MLD VLAN settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216

Modify the MLD snooping settings for a VLAN . . . . . . . . . . . . . . . . . . 218

Remove MLD snooping from a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . 218

Configure one or more MLD multicast router interfaces . . . . . . . . . . 219

Configure an MLD multicast router VLAN . . . . . . . . . . . . . . . . . . . . . . . 221

Configure an MLD snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . . 222

Configure the MLD snooping querier VLAN settings . . . . . . . . . . . . . 223

View, search, and manage the MAC address table. . . . . . . . . . . . . . . . . . .225

View, search, or clear the MAC address table. . . . . . . . . . . . . . . . . . . . 225

Set the dynamic address aging interval. . . . . . . . . . . . . . . . . . . . . . . . . 227

Add a static MAC address to the MAC address table . . . . . . . . . . . . . 228

Configure Layer 2 loop protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .229

Configure global Layer 2 loop protection. . . . . . . . . . . . . . . . . . . . . . . 230

View and configure Layer 2 loop protection on a port . . . . . . . . . . . . 231

Chapter 4 Configure Routing

Routing concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235

Configure the IPv4 routing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .235

Configure the IPv4 router settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235

View the IPv4 routing statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236

Configure IPv6 routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240

User Manual7

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Configure the global IPv6 routing settings . . . . . . . . . . . . . . . . . . . . . . 240

View the IPv6 route table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241

Configure the IPv6 VLAN interface settings . . . . . . . . . . . . . . . . . . . . . 242

Configure an IPv6 prefix. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245

View the IPv6 routing statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247

View, search, or clear the IPv6 neighbor table . . . . . . . . . . . . . . . . . . . 252

Configure an IPv6 static route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254

Configure IPv6 route preferences. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 256

Configure VLAN routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .257

Create a routing interface with the VLAN Static Routing Wizard. . . . 257

Manage a VLAN routing interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259

Delete a VLAN routing interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261

Configure router discovery for a VLAN routing interface . . . . . . . . . . . . 262

Manage routes and view the routing table. . . . . . . . . . . . . . . . . . . . . . . . . .263

Manually add a route and view the routing table . . . . . . . . . . . . . . . . 263

Modify a route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265

Delete a route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266

Configure Address Resolution Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . .267

View the ARP cache. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268

Manually add an entry to the ARP table . . . . . . . . . . . . . . . . . . . . . . . . 270

View or globally configure the ARP table . . . . . . . . . . . . . . . . . . . . . . . 271

Remove ARP entries from the ARP cache . . . . . . . . . . . . . . . . . . . . . . . 272

Chapter 5 Configure Quality of Service

Quality of Service concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275

Manage the Class of Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275

CoS configuration concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275

Configure the global CoS settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276

Configure the CoS settings for an interface . . . . . . . . . . . . . . . . . . . . . 277

Configure the CoS queue settings for an interface . . . . . . . . . . . . . . . 279

Map 802.1p priorities to queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281

Map DSCP values to queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282

Manage Differentiated Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283

Defining DiffServ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284

Configure the DiffServ mode and display the entries in the

DiffServ private MIB tables. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284

Configure a DiffServ class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286

Configure DiffServ IPv6 class settings . . . . . . . . . . . . . . . . . . . . . . . . . . 292

Configure a DiffServ policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297

Configure the DiffServ service interface . . . . . . . . . . . . . . . . . . . . . . . . 303

View DiffServ service statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307

Chapter 6 Manage Device Security

Change the device admin password for the

device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310

Manage the RADIUS settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .311

Configure the global RADIUS server settings. . . . . . . . . . . . . . . . . . . . 311

User Manual8

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Configure a RADIUS authentication server on the switch. . . . . . . . . . 313

Configure a RADIUS accounting server. . . . . . . . . . . . . . . . . . . . . . . . . 317

Configure the TACACS+ settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .321

Configure the global TACACS+ settings . . . . . . . . . . . . . . . . . . . . . . . . 321

Configure a TACACS+ server on the switch . . . . . . . . . . . . . . . . . . . . . 322

Modify the settings for a TACACS+ server on the switch . . . . . . . . . . 324

Remove a TACACS+ server from the switch . . . . . . . . . . . . . . . . . . . . . 324

Configure authentication lists. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .325

Configure an HTTP authentication list . . . . . . . . . . . . . . . . . . . . . . . . . . 325

Configure an HTTPS authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 327

Configure the dot1x authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 329

Manage the Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .330

Configure management access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .331

Configure HTTP access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331

Configure HTTPS access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332

Browser security warning with HTTPS access . . . . . . . . . . . . . . . . . . . . 334

Manage certificates for HTTPS access . . . . . . . . . . . . . . . . . . . . . . . . . . 335

Control access with profiles and rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .339

Add an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339

Add a rule to the access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 341

Activate the access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342

Display the access profile summary and the number of

filtered packets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343

Deactivate an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345

Remove an access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 346

Configure port authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347

Configure the global 802.1X settings . . . . . . . . . . . . . . . . . . . . . . . . . . 347

Manage port authentication on individual ports . . . . . . . . . . . . . . . . . 349

View the port summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354

View the client summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355

Set up traffic control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357

Manage MAC filtering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357

Configure storm control settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 361

Manage port security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364

Configure protected ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369

Configure access control lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .370

Use the ACL Wizard to create a simple ACL . . . . . . . . . . . . . . . . . . . . . 371

Configure a MAC ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 377

Configure MAC ACL rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 380

Configure MAC bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 384

View or delete MAC ACL bindings in the MAC binding table . . . . . . 386

Configure a basic or extended IPv4 ACL. . . . . . . . . . . . . . . . . . . . . . . . 387

Configure rules for a basic IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . 391

Configure rules for an extended IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . 395

Configure an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402

Configure rules for an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 405

Configure IP ACL interface bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . 412

View or delete IP ACL bindings in the IP ACL binding table . . . . . . . 414

User Manual9

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Configure VLAN ACL bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 416

Chapter 7 Monitor the Switch and the Traffic

Monitor the switch and the ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419

View or clear switch statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419

View port statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422

View and manage detailed port statistics . . . . . . . . . . . . . . . . . . . . . . . 425

View or clear EAP and EAPoL statistics . . . . . . . . . . . . . . . . . . . . . . . . . 431

Perform a cable test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433

Configure and view the logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .435

Manage and view the memory log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435

Manage and view the flash log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 437

Manage the server log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439

View or clear the trap logs and the counters . . . . . . . . . . . . . . . . . . . . 442

Configure port mirroring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .443

Chapter 8 Maintain or Troubleshoot the Switch

Reboot the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 447

Reset the switch to its factory default settings . . . . . . . . . . . . . . . . . . . . . . .448

Reset the switch to factory default settings but maintain the

registration status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 448

Reset the switch to factory default settings and reset the

registration status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 449

Export a file from the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 451

Use TFTP to export a file from the switch to a TFTP server. . . . . . . . . 451

Use HTTP to export a file from the switch to a computer . . . . . . . . . . 453

Download a file to the switch or update the software . . . . . . . . . . . . . . . .454

Use TFTP to download a file to the switch or update the

software image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 454

Use HTTP to download a file to the switch or update the

software image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457

Use an HTTP session to download and install an SSL

security certificate file on the switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . 459

Manage software images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 461

Copy a software image. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 461

Configure dual image settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 462

View the dual image status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464

Perform diagnostics and troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . .465

Ping an IPv4 address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 465

Ping an IPv6 address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 467

Send an IPv4 traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 469

Send an IPv6 traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471

Enable remote diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 473

Appendix A Configuration Examples

Virtual Local Area Networks (VLANs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476

User Manual10

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

VLAN configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477

Access control lists (ACLs). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478

MAC ACL example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 478

Basic IPv4 ACL example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . 479

Differentiated Services (DiffServ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .480

Class. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 481

DiffServ traffic classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482

Create policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482

DiffServ example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483

802.1X access control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .484

802.1X example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486

Multiple Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .487

MSTP example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489

VLAN routing interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .490

Appendix B Specifications and Default Settings

Switch default settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 493

General feature default settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .494

System setup and maintenance settings . . . . . . . . . . . . . . . . . . . . . . . . . . .501

Port characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .501

Traffic control settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .502

Quality of Service settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .502

Security settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

System management settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

Settings for other features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .504

Hardware technical specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 505

Model GS110TUP hardware technical specifications . . . . . . . . . . . . . 505

Model GS710TUP hardware technical specifications . . . . . . . . . . . . . 506

User Manual11

1Get Started

This user manual describes how you can use the device user interface (UI) to configure and operate the following switches:

• Model GS110TUP. NETGEAR 10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Desktop Switch with 1 SFP and 1 Copper Uplink. This model provides 60W PoE++ (IEEE 802.3bt) to each PoE++ port (1–4) and up to 30W PoE+ (IEEE 802.3at) to each PoE+ port (5–8). The maximum PoE power budget across all active PoE++ and PoE+ ports is 240W In addition, this model provides one dedicated Gigabit Ethernet uplink port and one dedicated SFP fiber uplink port.

• Model GS710TUP. NETGEAR 10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Rackmount Switch with 1 SFP and 1 Copper Uplink. This model provides 60W PoE++ (IEEE 802.3bt) to each PoE++ port (1–8). maximum PoE power budget across all active PoE++ ports is 480W In addition, this model provides one dedicated Gigabit Ethernet uplink port and one dedicated SFP fiber uplink port.

The

The manual describes the software configuration procedures and explains the options that are

available within those procedures.

This chapter contains the following sections:

Available publications

•

• Switch management options and default management mode

• Manage the switch by using the device UI

• About on-network and off-network access

• Access the switch on-network and connected to the Internet

• Access the switch off-network and not connected to the Internet

• Credentials for the device UI

• Register the switch

• Change the language of the device UI

• Change the management mode of the switch

• Use the Device View of the device UI

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

• Configure interface settings

• Access the NETGEAR support website

• Access the user manual online

Note: For more information about the topics covered in this manual, visit the

support website at netgear.com/support.

Note: Firmware updates with new features and bug fixes are made available

from time to time at products can regularly check the site and download new firmware, or you can check for and download new firmware manually. If the features in this guide, you might need to update your firmware.

or behavior of your product does not match what is described

netgear.com/support/download/. Some

Available publications

The following guides are available at netgear.com/support/download/:

• Installation Guide

• Hardware Installation Guide

For information about the NETGEAR Insight app and Insight Cloud portal, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit

netgear.com/support.

Get Started User Manual13

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Switch management options and default management mode

If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up a custom configuration. Just connect power, connect to your network and to your other devices, and you’re done.

The switch provides administrative management options that let you configure, monitor, and control and the network from a web browser. If you are an Insight Premium or Pro subscriber, you can choose to manage the switch by using the NETGEAR Insight app on a smartphone or tablet or from the Insight Cloud portal that is available from a web browser on your Windows-based computer, Mac, or tablet.

the network. The device UI is enabled by default, allowing you to configure the switch

The switch provides the following management options that let you network and configure, monitor, and control the switch:

• Device UI. By default, the management mode of the switch is set to Directly Connect to Web Browser Interface, which lets you access the device UI. In this mode, you can change all settings of the switch.

• NETGEAR Insight app and Insight Cloud portal. If you set the management mode of the switch to NETGEAR Insight Mobile App and Insight Cloud Port following applications to manage the switch remotely:

- NETGEAR Insight app. As an Insight Premium or Insight Pro subscriber

use the NETGEAR Insight app to discover the switch on the network and add the switch to a NETGEAR Insight network location. You can then set up the switch in the network and manage and monitor the switch remotely from your smartphone or tablet. You can choose from four methods to add the switch to the NETGEAR Insight app: You can scan your network for the switch, scan the QR code or the barcode of the switch, or add the serial number of the switch. A free trial is available for new customers.

- Insight Cloud portal.

the NETGEAR Insight Cloud portal to set up the switch in the network, perform advanced remote setup, configuration, and management, monitor the switch, analyze the switch and network usage, and, if necessary, troubleshoot the switch and the network. A free trial is available for new customers.

As an Insight Premium or Insight Pro subscriber

discover

the switch on the

al, you can use the

, you can

, you can use

For more information about NETGEAR Insight, visit netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit

To use the NETGEAR Insight app or Insight Cloud portal methods, you must change the management method so, you can also change the management method back to Directly Connect to Web Browser Interface and use the device UI. For more information, see of the switch on page 35.

Get Started User Manual14

netgear.com/support.

to NETGEAR Insight Mobile App and Insight Cloud Portal. After you do

netgear.com/insight and

Change the management mode

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Manage the switch by using the device UI

This manual describes how to use the device UI to manage and monitor the switch.

For information about using the NETGEAR Insight app and Insight Cloud portal to manage the switch, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit

Software requirements for the device UI

To access the switch by using a web browser, the browser must meet the following software requirements:

• HTML version 4.0, or later

• HTTP version 1.1, or later

Supported web browsers for the device UI

netgear.com/support.

The following browsers were tested and support the device UI. Later browser versions might function fine but were not tested. The supported web browsers include the following:

• Microsoft Internet Explorer (IE) version 11

• Microsoft Edge

• Mozilla Firefox version 67

• Chrome version 78

• Safari on Windows OS versions 5.1.7

• Safari on MAC OS X version 13.0.3

Get Started User Manual15

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Navigation tabs, configuration menus, and page menu

The System Information page is the start page in the device UI. The following figure shows the System Information page for model GS710TUP.

Navigation tabs

Page menus

Configuration menus

Language menu

Logout button

Help page

Buttons

Configuration status

and options

Figure 1. Switch navigation tabs, configuration menus, and page menu

The navigation tabs along the top of the device UI give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which feature you configure.

When you select a tab, the features for that tab appear as menus directly under

the tabs. The

configuration menus in the blue bar change according to the navigation tab that is selected.

The configuration pages for each feature are available as submenu links in the page menu on the left side of the page. Some items in the menu expand to reveal multiple submenu links, as the following figure shows.

Get Started User Manual16

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Link

Submenu

links

Figure 2. Switch page menu link and submenu links

Configuration and status options

The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.

Each page contains access to the HTML-based help that explains the fields and configuration options for the page.

Buttons in the device UI

Each page also contains command buttons. The following table shows the command buttons that are used throughout the pages in the device UI:

Table 1. Command buttons in the device UI

Button Function

Add Clicking the Add button adds the new item configured in the heading row of a table.

Apply Clicking the Apply button to save

Cancel Clicking the Cancel button cancels the configuration on the page and resets the data on the

page to the previous values of the switch.

Clear Clicking the Clear button clears all the counters and resets the switch summary and detailed

statistics to default values.

Delete Clicking the Delete button removes the selected item.

Refresh Clicking the Refresh button refreshes the page with the latest information from the device.

your settings. Configuration changes take effect immediately.

Logout Clicking the Logout button ends the session.

Get Started User Manual17

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

User-defined fields

User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page. All characters can be used except for the ones stated in the following table (unless specifically noted in a procedure for a feature).

Table 2. Invalid characters for user-defined fields

Invalid characters for user-defined fields

\ | / < > * ?

Context-sensitive help

When you log in to the switch, every page contains a link to the online help ( ) that contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Configuration page is open, the help topic for that page displays if you click the link to the online help.

About on-network and off-network access

You can access the switch either on-network or off-network:

• On-network and connected to the Internet. When you use the device UI, for easiest access, we recommend that you cable the switch to a network that is connected to the Internet and that includes a router or DHCP server that assigns IP addresses, power on

switch, and

the to connect to the device UI. We refer to this setup as on-network or online.

For more information, see on page 19).

• Off-network and not connected to the Internet. You can also configure the switch connected directly only to the computer that you are using to c switch is not connected to the network and the Internet. We refer to this setup as off-network or offline. If your network does not include a DHCP server (or a router that functions as a DHCP server), you must access the switch off-network.

For more information, see Internet on page 27.

Note: We recommend that you register the switch to activate your warranty.

For more information, see Register the switch on page 30.

then use a computer that is connected to the same network as the switch

Access the switch on-network and connected to the Internet

onfigure it. That is, the

Access the switch off-network and not connected to the

Get Started User Manual18

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Access the switch on-network and connected to the Internet

The DHCP client on the switch is enabled by default, allowing a DHCP server or router on the network to assign an IP address to the switch.

If the switch is on-network, connected to a DHCP server, and connected to the Internet, you can use a Windows-based computer to access the device UI of the switch and register the switch with NETGEAR. For more information, see

access the switch on-network and connected to the Internet on page 20.

Use a Windows-based computer to

If you use a Mac, or if you do not know

tools to discover the IP address of the switch on the network:

• NETGEAR Insight mobile app. Y iOS or Android mobile device and discover the IP address of the switch. See NETGEAR Insight mobile app to discover the IP address of the switch on page 21.

• NETGEAR Switch Discovery Tool (NSDT). If you use a Mac or a Windows-based computer, you can use the NSDT to discover the switch on your n NETGEAR Switch Discovery Tool to discover the IP address of the switch on page 22.

• NETGEAR Smart Control Center (SCC). You can install the SCC on a Windows-based computer. See Control Center on page 24.

• Other tools. You can also get the IP address of the switch from the DHCP server in the network or use an IP scanner utility. See address on page 25.

When you know the IP address, you can configure the switch in the following ways:

• Device UI. For configuration of all switch features, access the switch over the device UI. See

Access the switch on-network when you know the switch IP address on page 25.

• NETGEAR Smart Control Center (SCC): For features, use the SCC on a Windows-based computer. By default, you can use the SCC to discover the IP address of the switch, but you cannot use the SCC to perform any actions on the switch. However, if you enable the configuration option of the SCC, you can use it to configure the switch. See

Discover the switch in a network with a DHCP server using the Smart

the IP address of the switch, use one of the following

ou can install the NETGEAR Insight mobile app on an

Use the

etwork. See

Use other options to discover the switch IP

configuration of a limited number of switch

Manage the Smart Control Center on page 330.

Use the

For more information about the SCC, visit

• NETGEAR Insight app and Insight Cloud portal. Y mode of the switch so that you can use the NETGEAR Insight app and Insight Cloud portal to manage the switch remotely. For more information, see management mode of the switch on page 35.

Get Started User Manual19

netgear.com/support/product/SCC.

ou can change the management

Change the

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Use a Windows-based computer to access the switch on-network and connected to the Internet

For the following procedure, the network must provide Internet access.

To use a Windows-based computer to determine the switch IP address and access the switch on-network and connected to the Internet:

1. Cable the switch to a network with a router or DHCP server that manages IP addresses.

2. Power on the switch.

The DHCP server assigns the switch an IP address.

3. Connect your

You can use a WiFi or wired network connection.

4. Open Windows Explorer.

5. Click the Network

6. If prompted, enable the Network Discovery feature.

7. Under Network Infrastructure, locate the switch model number.

The model number is either GS1

8. Double-click either GS1 represents the last six digits of the switch MAC address.

The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you activated the warranty.

9. Enter your credentials, which depend on the page that displays:

•

warranty, the Register to activate your warranty page displays.

button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch.

computer to the same network as the switch.

link.

10TUP or GS710TUP.

10TUP-XXXXXX or GS710TUP-XXXXXX, in which XXXXXX

activate your warranty, click the Register Your Device

If you do not have a NETGEAR account, you can create one.

- Enter Registration Key: If you obtained a registration key, enter it. For more information, see registration key for offline access on page 31.

- Skip Registration & Access the UI: Y activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected.

If you do not activate your warranty, the Register to activate your warranty page continues to display when you log in.

Get Started User Manual20

ou do not need to register the switch to

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

• Device UI login page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials:

- Device admin password:

admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.

Note:Insight network password: If you previously logged in to the

device UI, you changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)

Enter the device admin password. The default device

For information about the credentials, see

10. Click the Go

11. If the Change Default Password page displays, specify and confirm a new device admin

password,

The System Information page displays. You can now configure the switch.

button.

click the Submit button, and log in again with your new password.

Credentials for the device UI on page 28.

Use the NETGEAR Insight mobile app to discover the IP address of the switch

If the switch is connected to a WiFi router or access point, and the switch is connected to the Internet, the NETGEAR Insight mobile app lets you discover the switch in your network.

If you do not use the NETGEAR Insight app to claim the switch by adding it to an Insight network location, the switch is not registered and your warranty is not activated.

Using the NETGEAR Insight app to discover the IP address of the switch in your network is not the same as managing the switch with the Insight app or the Insight Cloud Portal.

Note: The default management mode of the switch is the device UI. If you

want to use the Insight app or the Insight Cloud Portal to manage the switch, you first must change the management mode (see

management mode to NETGEAR Insight Mobile App and Insight Cloud Portal on page 36). After you do so, you can manage the switch

with Insight and add the switch to an Insight network location.

Change the

Get Started User Manual21

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

To use the NETGEAR Insight app to discover the IP address of the switch in your network:

1. On your mobile device, go to the app store, search for NETGEAR Insight, and download

the latest version of the app.

2. Connect your mobile device to the WiFi network of the WiFi router or access point to which the switch is connected.

3. Open the NETGEAR Insight mobile app.

4. If you did not set up a NETGEAR account, tap Create

onscreen instructions.

5. Enter the email address and password for your account and tap LOG IN.

NETGEAR

Account and follow the

After you log in to your account, the IP address of the switch

6. Write down the switch IP address.

You can use this IP address to access the switch directly from information about how to access the device UI of the switch, see on-network when you know the switch IP address on page 25.

displays in the device list.

a web browser. For

Access the switch

Use the NETGEAR Switch Discovery Tool to discover the IP address of the switch

For easiest access, we recommend that you cable the switch to a network with a router or DHCP server that assigns IP addresses, power on the switch, and then use a computer that is connected to the same network as the switch.

The NETGEAR Switch Discovery Tool lets you discover the switch in your network and access the device UI of the switch from a Mac or a Windows-based computer.

To install the NETGEAR Switch Discovery T network:

1. Download the Switch

netgear.com/support/product/netgear-switch-discovery-tool.aspx.

Discovery Tool by visiting

ool and discover the switch in your

Depending on the computer that you are using, download either the Mac version or the version for a 64-bit Windows-based computer.

2. Temporarily disable the firewall, Internet security, antivirus programs, or all of these on the computer that

Get Started User Manual22

you use to configure the switch.

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

3. Unzip the NSDT files, and click or double-click the .exe file (for example,

NSDT-1.2.102.exe) to install the program on your computer.

You might see the tool icon appear on your Mac dock or Windows desktop.

4. Reenable the

security services on your computer.

5. Power on the switch.

The DHCP server assigns the switch an IP address.

6. Connect your

computer to the same network as the switch.

You can use a WiFi or wired connection. The computer and the switch must be on the same Layer 2 network.

7. Open the Switch Discovery Tool.

o open the program, double-click the NETGEAR Switch Discovery Tool icon on your

desktop.

The initial page displays a menu and a button.

8. From the Choose

9. Click the Start

a connection menu, menu, select the network for this switch.

Searching button.

The NSDT displays the IP addresses of the switches that it discovers.

10. To access the switch from the NSDT, do the following:

a. Click the ADMIN PAGE

The page that displays depends on whether your network is connected to

button next to your switch.

the Internet

and whether you activated the warranty.

b. Enter your credentials, which depend on the page that displays:

• Register to activate your warranty page displays: If the switch is online and

you did

not yet activate your warranty, the Register to activate your warranty page

displays.

- Register Your Device: To activate your warranty Device button, and follow the directions onscreen to register the switch with

your email address and password. After you activate your warranty, you are no longer prompted to register the switch.

If you do not have a NETGEAR account, you can create one.

- Enter Registration Key: If you obtained a registration key information, see

registration key for offline access on page 31.

- Skip Registration & Access the UI: Y activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected.

If you do not activate your warranty, the Register to activate your warranty page continues to display when you log in.

Get Started User Manual23

, click the Register Your

, enter it. For more

ou do not need to register the switch to

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

• Device UI login page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials:

- Device admin password:

device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password.

- Insight network password: If you previously logged in to the device UI, you

changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)

Enter the device admin password. The default

For information about the credentials, see

c. If you enter a password, click the Go

Submit button.

d. If the Change Default Password page displays, specify and confirm a new device

admin

The System Information page displays. You can now configure the switch.

password, click the Submit button, and log in again with your new password.

Credentials for the device UI on page 28.

button; If you enter a registration key, click the

Discover the switch in a network with a DHCP server using the Smart Control Center

This section describes how to set up your switch in a network that includes a DHCP server. The DHCP client on the switch is enabled by default. When you connect the switch to your network, the DHCP server automatically assigns an IP address to the switch. Use the Smart Control Center (SCC) to discover the IP address automatically assigned to the switch.

For information about the SCC, visit

Note: By default, you can use the SCC to discover the IP address of the

switch, but you cannot use the SCC to perform any actions on the switch. However, if you enable the configuration option of the SCC, you can use it to configure the switch (see

Center on page 330).

netgear.com/support/product/SCC.

Manage the Smart Control

To install the switch in a network with a DHCP server:

1. Connect the

2. Power on the switch by connecting its power cord.

3. Install the SCC on your computer.

4. Start the SCC.

5. Click the Discover

Get Started User Manual24

switch to a network with a DHCP server.

button for the SCC to discover all the devices in the subnet.

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

6. Write down the switch IP address assigned by the DHCP server.

For information about how to access the device UI of the switch, see

on-network when you know the switch IP address on page 25.

Access the switch

Use other options to discover the switch IP address

If the switch is on-network, you can use one of the following options to determine the switch IP address:

• Access the DHCP server. You can access the DHCP server (or router that functions as a DHCP server) in your network and view the IP address that is assigned to the switch. For more information, see the documentation for your DHCP server (or router).

• Use an IP scanner utility. IP scanner An IP scanner utility lets you discover the IP address that is assigned to the switch.

For information about how to access the device UI of the switch, see Access the switch on-network when you know the switch IP address on page 25.

utilities are available free of charge on the Internet.

Access the switch on-network when you know the switch IP address

If the switch is on-network and you know the switch IP address, you can access the device UI.

For the following procedure, the network must provide Internet access.

To access the switch on-network when you know the switch IP address:

1. Launch a web

2. In the address field of your web browser, enter the IP address of the switch.

Get Started User Manual25

browser.

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you activated the warranty.

3. Enter your credentials, which depend on the page that displays:

• Register to activate your warranty page displays: If the switch is online and you

did not yet activate your warranty, the Register to activate yo

ur warranty page

displays.

- Register Your Device: To

activate your warranty, click the Register Your Device button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch.

If you do not have a NETGEAR account, you can create one.

- Enter Registration Key: If you obtained a registration key, enter it. For more information, see

registration key for offline access on page 31.

- Skip Registration & Access the UI: Y

ou do not need to register the switch to activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected.

If you do not activate your warranty, the Register to activate your warranty page continues to display when you log in.

• Device UI login page displays:

If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials:

- Device admin password:

Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.

- Insight network password: If you previously logged in to the device UI, you management mode to NETGEAR Insight, and you added the switch to

changed

the an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)

For information about the credentials, see

4. Click the Go

button.

Credentials for the device UI on page 28.

5. If the Change Default Password page displays, specify and confirm a new device admin password,

click the Submit button, and log in again with your new password.

The System Information page displays. You can now configure the switch.

Get Started User Manual26

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Access the switch off-network and not connected to the Internet

The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.

Note: If you prefer to use the Smart Control Center (SCC) to configure the

switch, you must access the switch off-network as described in the following procedure and then enable the configuration option of the SCC (see Manage the Smart Control Center on page 330).

To access the switch off-network and not connected to the Internet:

1. Change the

the switch.

If the DHCP client of the switch is enabled and you remove the switch from the network with the DHCP server, the IP address reverts to the default IP with a subnet of 255.255.255.0. If you already disabled the DHCP client and assigned a static IP address to the switch, change the IP settings of your computer to be in the same subnet as the static IP address.

For more information about changing the IP settings on your computer following knowledge base articles at the NETGEAR website:

•

Windows-based computer. See the following article:

https://kb.netgear.com/27476/How-to-set-a-static-IP-address-in-Windows

• Mac. See the following article:

https://kb.netgear.com/000037250/Setting-a-static-IP-address-on-your-network-a dapter-in-Mac-OS-for-direct-access-to-an-access-point

(The Mac article is written for an access point but is also valid for a switch.)

2. Connect your

3. Power on the switch by connecting its power cord.

4. Launch a

5. Open a web browser, and enter http://192.168.0.239.

IP settings of your computer to be in the same subnet as the IP settings of

address of 192.168.0.239

, see one of the

computer to the switch using an Ethernet cable.

web browser.

This is the default IP address of the switch. If you already di assigned a static IP address to the switch, enter the static IP address of the switch.

The Enter Registration Key page displays.

Get Started User Manual27

sabled the DHCP client and

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

6. Do one of the following:

• Enter a registration key. If you obtained a registration key, do the following:

a. Type or paste the key.

For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 31.

b. Click the Submit button.

• Do not register at this time and access the device UI: Do the following:

a. Click

b. Enter one of the following credentials:

7. If the Change Default Password page displays, specify and confirm a new device admin

password, click the Submit button, and log in again with your new password.

The System Information page displays. You can now configure the switch.

8. After you complete the configuration of the switch, reconfigure the computer that you used for

this process to its original TCP/IP settings.

the Skip

The Device UI login page displays.

Device admin password:

device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password.

- Insight network password: If you previously logged in to the device UI, you changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)

For information about the credentials, see Credentials for the device UI on page 28.

Registration & Access the UI button.

Enter the device admin password. The default

You can now connect your switch to your network using an Ethernet cable.

Credentials for the device UI

The information in this section applies to accessing the switch device UI in either

management mode. That is, it does not apply to accessing the NETGEAR Insight app and

Cloud portal.

To access the device UI, and depending on your situation, use one of the following credentials:

• NETGEAR account credentials

You can register the switch online to activate your warranty by entering your NETGEAR account credentials (see

Get Started User Manual28

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

the switch online on page 30). If you do not have a NETGEAR account, you can create

one.

Alternatively, you can obtain a registration key and enter the key when the so that you are no longer prompted to activate your warranty (see

switch is offline

with your NETGEAR account and get a registration key for offline access on page 31).

• Device admin password:

You can access the device UI with your device admin password.

The first time that you access the device UI, enter the default device admin password (password),

after which

you are required to customize the password for greater security. Subsequent times that you log in to the device UI, use your customized device admin password.

• NETGEAR Insight network location password:

NETGEAR Insight can affect how you access the switch device UI. After you add the switch to an Insight network location and change the management mode of the switch so that you can use the NETGEAR Insight app and Insight Cloud portal to manage the switch remotely (see

Change the management mode of the switch on page 35), the

Insight network location password replaces the switch device admin password. To access the device UI, you must enter the Insight network locati

on password.

Even if you temporarily change the management mode of the switch back to Direct

Connect Web Browser Interface, for example to change settings that are not Insight-manageable or for debugging purposes, you must enter the Insight network location password.

For information about how the Insight network password functions, visit netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit

netgear.com/support.

The following table lists the essential credential options for access to the device UI.

Table 3. Credentials for access to the device UI

Management mode in the device UI

Default mode: Direct Connect Web Browser Interface (Local LAN Only)

NETGEAR Insight Mobile App and Insight Cloud Portal (Cloud/ Remote)

1. This situation occurs if you temporarily change the management mode of the switch from NETGEAR Insight Mobile App and

Insight Cloud Portal back to Direct Connect Web Browser Interface.

Added to an Insight network

No Device admin password

Yes

No Device admin password Limited device UI menu.

Yes Insight network password Limited device UI menu.

Credentials Device UI menu

Full device UI menu

Insight network password

Not managed through

NETGEAR Insight.

Managed through NETGEAR Insight.

Get Started User Manual29

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch

Register the switch

You can register the switch online or offline to activate your warranty, after which you are no longer prompted to activate your warranty when you log in:

• Online registration for on-network access: If your switch is on-network or connected to the Internet, you can register the switch with your NETGEAR account credentials and activate your warranty. During the registration process, the switch contacts a NETGEAR server. For more information, see access the switch online on page 30.

• Registration for off-network access: Y is connected to the Internet and get a registration key. If the switch is off-network or not connected to the Internet, you can enter the registration key. After you do so, the Register to activate your warranty page no longer displays when you log in. For more information,

see

offline access on page 31.

ou can register your switch from any device that

Register the switch with your NETGEAR account and access the switch online

For initial registration and access with your NETGEAR account, the switch must be connected to the Internet so that it can communicate with a NETGEAR server.

If you do not have a free NETGEAR account, you can create one during the registration process.

To register and access the switch online over the device UI with your NETGEAR account:

1. Connect your

You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ether

2. Launch a web browser.

3. In the address field of your web browser, enter the IP address of the switch.

For information about finding the IP address of the switch, see

on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27.

The Register to activate your warranty page displays.

computer to the same network as the switch.

net cable.

Access the switch

4. Click the Register switch with your email address and password and activate the warranty.

You are only prompted to do this once to confirm registration of your switch.

Get Started User Manual30

Your Device button and follow the directions onscreen to register the

+ 477 hidden pages

Netgear GS110TUP User Manual

10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch with 1 SFP and 1 Copper Uplink

Contents

1Get Started

Available publications

Switch management options and default management mode

Manage the switch by using the device UI

Software requirements for the device UI

Supported web browsers for the device UI

Navigation tabs, configuration menus, and page menu

Configuration and status options

Buttons in the device UI

User-defined fields

Context-sensitive help

About on-network and off-network access

Access the switch on-network and connected to the Internet

Use a Windows-based computer to access the switch on-network and connected to the Internet

Use the NETGEAR Insight mobile app to discover the IP address of the switch

Use the NETGEAR Switch Discovery Tool to discover the IP address of the switch

Discover the switch in a network with a DHCP server using the Smart Control Center

Use other options to discover the switch IP address

Access the switch on-network when you know the switch IP address

Access the switch off-network and not connected to the Internet

Credentials for the device UI

Register the switch

Register the switch with your NETGEAR account and access the switch online