Netgear GS724TP Installation Manual [zh]

User Manual

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management

GS724TPv2 GS724TPP

May 2021 202-12036-03

NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134, USA

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Support and Community

Visit netgear.com/support to get your questions answered and access the latest downloads.

You can also check out our NETGEAR Community for helpful advice at

community.netgear.com.

Regulatory and Legal

Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.

(If this product is sold in Canada, you can access this document in Canadian French at https://www.netgear.com/support/download/.)

For regulatory compliance information including the EU Declaration of Conformity, visit https://www.netgear.com/about/regulatory/.

See the regulatory compliance document before connecting the power supply.

For NETGEAR's Privacy Policy, visit

By using this device, you are agreeing to NETGEAR's Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.

Do not use this device outdoors. The PoE source is intended for intra building connection only.

https://www.netgear.com/about/privacy-policy.

Trademarks

Revision History

Publication Part Number

202-12036-03 May 2021 We changed

Publish Date Comments

• The new device UI login options for initial access to the device UI. (HTTP

rather than HTTPS is now the default protocol for access to the device UI.) See

Access the switch on-network and connected to the Internet, Access the switch off-network and not connected to the Internet, and Credentials for the device UI.

• The new options to register the switch to activate your warranty. See

• The new requirements to change the management mode. See

management mode of the switch.

We changed the login steps in all tasks in the manual to document the new device UI login options.

We changed the following sections:

• Configure the time settings

•

Configure Green Ethernet settings

•

Configure SNMPv1 and SNMPv2 trap flags

•

Configure LLDP-MED port settings

•

Configure DHCP snooping interface settings

•

Set up PoE timer schedules

•

Manage the Smart Control Center

•

Configure HTTP access settings

Chapter 1, Get Started to document the following:

Change the

User Manual2

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

(continued) 202-12036-03

202-12036-02 March 2020

202-12036-01 January 2020 We made the following major changes:

(continued) May 2021

(continued)

• Configure HTTPS access settings

•

Reset the switch to factory default settings and reset the registration status

We added the following sections:

• Manage switch discovery with UPnP and SSDP

•

Browser security warning with HTTPS access

• We made multiple minor changes, including changes in terminology.

We changed

We changed following sections:

• Reset the switch to factory default settings but maintain the registration status

•

Reset the switch to factory default settings and reset the registration status

• We added support for model GS724TPP.

• W

e changed the login procedures for all tasks. After you register and access the switch with your NETGEAR account, you can access the switch with the device admin password.

The switch now supports management through the NETGEAR Insight app and Insight Cloud portal.

We reorganized the information in the following sections:

• Available publications

•

Switch management options and default management mode

•

About on-network and off-network access

•

Access the switch on-network and connected to the Internet

•

Access the switch off-network and not connected to the Internet

•

Credentials for the device UI

•

Change the language of the device UI

•

Change the management mode of the switch

In other chapters, we added the following sections:

• PoE concepts

•

Device class power requirements

•

Power allocation and power budget concepts

•

Hardware technical specifications

Throughout the manual, we did the following:

• We added or revised many standard sections.

• W

e made many other minor changes and improvements.

We published the manual in a new format.

Reboot the switch.

Reset the switch to its factory default settings and added the

Chapter 1, Get Started and added or revised

202-11765-03 September 2019 We removed references to the CD.

User Manual3

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

202-11765-02 May 2018 We made the following major changes:

• Added the DHCPv6 option to Configure the IPv6 network interface on page 57

• Added

• Revised

• Added

• Revised

• Added

In addition we made multiple minor changes.

202-11765-01 June 2017 First publication

Configure Layer 2 loop protection on page 199 Configure DiffServ IPv6 class settings on page 223

Manage port authentication on individual ports on page 277

View the client summary on page 284

Use the ACL Wizard to create a simple ACL on page 299 Configure an IPv6 ACL on page 331 Configure rules for an IPv6 ACL on page 334

User Manual4

Chapter 1 Get Started

Available publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Switch management options and default management mode . . . . . . . . .14

Manage the switch by using the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Software requirements to use the device UI . . . . . . . . . . . . . . . . . . . . . . .15

Supported web browsers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

Navigation tabs, configuration menus, and page menu. . . . . . . . . . . . .16

Configuration and status options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

Buttons in the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

User-defined fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

Context-sensitive help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

About on-network and off-network access. . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Access the switch on-network and connected to the Internet . . . . . . . . . . 19

Use a Windows-based computer to access the switch

on-network and connected to the Internet . . . . . . . . . . . . . . . . . . . . . . . .20

Use the NETGEAR Insight mobile app to discover the

IP address of the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21

Use the NETGEAR Switch Discovery Tool to discover the

switch when it is connected to the Internet. . . . . . . . . . . . . . . . . . . . . . . .22

Discover the switch in a network with a DHCP server

using the Smart Control Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24

Use other options to discover the switch IP address. . . . . . . . . . . . . . . .25

Access the switch on-network and connected to the

Internet when you know the switch IP address. . . . . . . . . . . . . . . . . . . . .25

Access the switch off-network and not connected to the Internet . . . . . . . 27

Credentials for the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

access the switch online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

registration key for offline access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31

Access the switch offline with a registration key. . . . . . . . . . . . . . . . . . . .32

Change the language of the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Change the management mode of the switch . . . . . . . . . . . . . . . . . . . . . . . 35

About changing the management mode . . . . . . . . . . . . . . . . . . . . . . . . .35

Change the management mode to NETGEAR Insight

Mobile App and Insight Cloud Portal. . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

Change the management mode back to Directly Connect

to Web Browser Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37

Use the Device View of the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Configure interface settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Access the NETGEAR support website. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

Access the user manual online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Chapter 2 Configure System Information

View or define switch system information . . . . . . . . . . . . . . . . . . . . . . . . . . .51

View or define system information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51

View the fan status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53

View the software versions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54

Configure the switch IP address settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Configure the IPv6 network interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

View the IPv6 network neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58

Configure the time settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Configure the time settings manually . . . . . . . . . . . . . . . . . . . . . . . . . . . .60

Configure the time settings with SNTP . . . . . . . . . . . . . . . . . . . . . . . . . . .62

View the SNTP global status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

Configure an SNTP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67

Configure daylight saving time settings . . . . . . . . . . . . . . . . . . . . . . . . . .72

View the daylight saving time status . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75

Configure Denial of Service settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Configure Auto-DoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76

Configure Denial of Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

Configure the DNS settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79

Configure the global DNS settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79

Configure and view host name-to-IP address information. . . . . . . . . . .81

Configure Green Ethernet settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Configure the Green Ethernet global settings . . . . . . . . . . . . . . . . . . . . .84

Configure the Green Ethernet interface settings . . . . . . . . . . . . . . . . . . .85

Manage switch discovery with UPnP and SSDP. . . . . . . . . . . . . . . . . . . . . . . 87

Use the Device View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Configure Power over Ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

PoE concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

Device class power requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Power allocation and power budget concepts. . . . . . . . . . . . . . . . . . . . .89

Configure PoE trap settings and view PoE information. . . . . . . . . . . . . .91

Configure the PoE port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

Configure SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

Configure the SNMPv1 and SNMPv2 community . . . . . . . . . . . . . . . . . .95

Configure SNMPv1 and SNMPv2 trap settings. . . . . . . . . . . . . . . . . . . . .98

Configure SNMPv1 and SNMPv2 trap flags . . . . . . . . . . . . . . . . . . . . . 101

View the supported MIBs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

Configure SNMPv3 users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

Configure LLDP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105

Configure LLDP global settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

Configure LLDP port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

View LLDP-MED network policy information . . . . . . . . . . . . . . . . . . . . 108

Configure LLDP-MED port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

View local LLDP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

User Manual6

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

View LLDP neighbors information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

Configure DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117

Configure the global DHCP snooping settings . . . . . . . . . . . . . . . . . . 118

Enable DHCP for all interfaces in a VLAN . . . . . . . . . . . . . . . . . . . . . . . 119

Configure DHCP snooping interface settings. . . . . . . . . . . . . . . . . . . . 120

Configure static DHCP bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

Set up PoE timer schedules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

Create a PoE timer schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Specify the settings for an absolute PoE timer schedule . . . . . . . . . . 124

Specify the settings for a recurring PoE timer schedule . . . . . . . . . . . 126

Change the settings for a recurring PoE timer schedule entry . . . . . 128

Delete a PoE timer schedule entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129

Delete a PoE timer schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130

Chapter 3 Configure Switching

Configure the port settings and maximum frame size. . . . . . . . . . . . . . . 132

Configure link aggregation groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135

Configure LAG settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135

Configure LAG membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

Set the LACP system priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

Set the LACP port priority settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

Configure VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .141

Configure VLAN settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Configure VLAN membership. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

View the VLAN status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147

Configure the port PVID settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

Configure a voice VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .150

Configure Auto-VoIP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152

Configure the Auto-VoIP protocol-based settings . . . . . . . . . . . . . . . . 152

Configure the Auto-VoIP OUI-based properties. . . . . . . . . . . . . . . . . . 154

Configure the OUI-based port settings . . . . . . . . . . . . . . . . . . . . . . . . . 155

Manage the OUI table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

Display the Auto-VoIP status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

Configure Spanning Tree Protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .160

Configure the STP settings and view the STP status . . . . . . . . . . . . . . 161

Configure the CST settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163

Configure the CST port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165

View the CST port status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

View the Rapid STP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169

Manage the MST settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

Configure and view the port settings for an MST instance . . . . . . . . . 173

View the STP statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

Configure multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .177

View, search, or clear the MFDB table . . . . . . . . . . . . . . . . . . . . . . . . . . 177

View the MFDB statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179

Manage IGMP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .180

Configure IGMP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180

Configure IGMP snooping for interfaces. . . . . . . . . . . . . . . . . . . . . . . . 182

User Manual7

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

View, search, or clear the IGMP snooping table. . . . . . . . . . . . . . . . . . 184

Configure IGMP snooping for VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . 185

Modify IGMP snooping settings for a VLAN . . . . . . . . . . . . . . . . . . . . . 187

Disable IGMP snooping on a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187

Configure one or more IGMP multicast router interfaces. . . . . . . . . . 188

Configure an IGMP multicast router VLAN . . . . . . . . . . . . . . . . . . . . . . 190

IGMP snooping querier overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191

Configure an IGMP snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . 191

Configure an IGMP snooping querier for a VLAN . . . . . . . . . . . . . . . . 192

Display the status of the IGMP snooping querier for VLANs . . . . . . . 193

View, search, and manage the MAC address table. . . . . . . . . . . . . . . . . . .195

View, search, or clear the MAC address table . . . . . . . . . . . . . . . . . . . 195

Set the dynamic address aging interval. . . . . . . . . . . . . . . . . . . . . . . . . 197

Add a static MAC address to the MAC address table . . . . . . . . . . . . . 198

Configure Layer 2 loop protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .199

Configure global Layer 2 loop protection. . . . . . . . . . . . . . . . . . . . . . . 200

View and configure Layer 2 loop protection on a port . . . . . . . . . . . . 201

Chapter 4 Configure Quality of Service

Quality of Service concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

Manage Class of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .205

CoS configuration concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

Configure the global CoS settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206

Configure the CoS settings for an interface . . . . . . . . . . . . . . . . . . . . . 207

Configure the CoS queue settings for an interface . . . . . . . . . . . . . . . 209

Map 802.1p priorities to queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211

Map DSCP values to queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212

Manage Differentiated Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214

Defining DiffServ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214

Configure the DiffServ mode and display the entries in the

DiffServ private MIB tables. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215

Configure a DiffServ class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216

Configure DiffServ IPv6 class settings . . . . . . . . . . . . . . . . . . . . . . . . . . 223

Configure a DiffServ policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228

Configure the DiffServ service interface . . . . . . . . . . . . . . . . . . . . . . . . 234

View DiffServ service statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237

Chapter 5 Manage Device Security

Change the device admin password for the

device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240

Manage the RADIUS settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .241

Configure the global RADIUS server settings. . . . . . . . . . . . . . . . . . . . 241

Configure a RADIUS authentication server on the switch. . . . . . . . . . 243

Configure a RADIUS accounting server. . . . . . . . . . . . . . . . . . . . . . . . . 247

Configure the TACACS+ settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251

Configure a TACACS+ server on the switch . . . . . . . . . . . . . . . . . . . . . 252

Modify the settings for a TACACS+ server on the switch . . . . . . . . . . 253

User Manual8

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Remove a TACACS+ server from the switch . . . . . . . . . . . . . . . . . . . . . 254

Configure authentication lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255

Configure the dot1x authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 258

Manage the Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

Configure management access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .260

Configure HTTP access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260

Configure HTTPS access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262

Browser security warning with HTTPS access . . . . . . . . . . . . . . . . . . . . 263

Manage certificates for HTTPS access . . . . . . . . . . . . . . . . . . . . . . . . . . 264

Control access with profiles and rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .268

Add an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268

Add a rule to the access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270

Activate the access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271

Display the access profile summary and the number of

filtered packets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272

Deactivate an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274

Remove an access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274

Configure port authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275

Configure the global 802.1X settings . . . . . . . . . . . . . . . . . . . . . . . . . . 276

Manage port authentication on individual ports . . . . . . . . . . . . . . . . . 277

View the port summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282

View the client summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284

Set up traffic control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285

Manage MAC filtering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285

Configure storm control settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289

Configure port security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293

Configure protected ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297

Configure access control lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .298

Use the ACL Wizard to create a simple ACL . . . . . . . . . . . . . . . . . . . . . 299

Configure a MAC ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305

Configure MAC ACL rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 308

Configure MAC bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312

View or delete MAC ACL bindings in the MAC binding table . . . . . . 314

Configure a basic or extended IPv4 ACL. . . . . . . . . . . . . . . . . . . . . . . . 315

Configure rules for a basic IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . 319

Configure rules for an extended IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . 323

Configure an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331

Configure rules for an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 334

Configure IP ACL interface bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . 341

View or delete IP ACL bindings in the IP ACL binding table . . . . . . . 343

Configure VLAN ACL bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 344

Chapter 6 Monitor the System

Monitor the switch and the ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348

View or clear switch statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348

View port statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351

View and manage detailed port statistic . . . . . . . . . . . . . . . . . . . . . . . . 354

View or clear EAP and EAPoL statistics . . . . . . . . . . . . . . . . . . . . . . . . . 360

User Manual9

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Perform a cable test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362

Configure and view the logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .364

Manage and view the memory log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364

Manage and view the flash log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366

Manage the server log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367

View or clear the trap logs and the counter . . . . . . . . . . . . . . . . . . . . . 371

Configure port mirroring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .372

Chapter 7 Maintain or Troubleshoot the Switch

Reboot the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376

Reset the switch to its factory default settings . . . . . . . . . . . . . . . . . . . . . . .377

Reset the switch to factory default settings but maintain the

registration status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 377

Reset the switch to factory default settings and reset the

registration status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 378

Export a file from the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 380

Use TFTP to export a file from the switch to a TFTP server. . . . . . . . . 380

Use HTTP to export a file from the switch to a computer . . . . . . . . . . 382

Download a file to the switch or update the software . . . . . . . . . . . . . . . . 383

Use TFTP to download a file to the switch or update the

software image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 383

Use HTTP to download a file to the switch or update the

software image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 386

Use an HTTP session to download and install an SSL

security certificate file on the switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . 388

Manage software images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .389

Copy a software image. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 390

Configure dual image settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 391

View the dual image status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 393

Perform diagnostics and troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . .394

Ping an IPv4 Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394

Ping an IPv6 address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 395

Send an IPv4 traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 397

Send an IPv6 traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400

Enable remote diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402

Appendix A Configuration Examples

Virtual Local Area Networks (VLANs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 404

VLAN configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 405

Access control lists (ACLs). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406

MAC ACL example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 406

Basic IPv4 ACL example configuration . . . . . . . . . . . . . . . . . . . . . . . . . 407

Differentiated Services (DiffServ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .408

Class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 409

DiffServ traffic classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410

Creating policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410

DiffServ example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 411

User Manual10

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

802.1X access control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .413

802.1X example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 414

Multiple Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415

MSTP example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417

Appendix B Specifications and Default Settings

Switch default settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 421

General feature default settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .422

System setup and maintenance settings . . . . . . . . . . . . . . . . . . . . . . . . . . .428

Port characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .428

Traffic control settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429

Quality of Service Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429

Security settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .430

System management settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .430

Settings for other features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431

Hardware technical specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431

Model GS724TPv2 hardware technical specifications. . . . . . . . . . . . . 432

Model GS724TPP hardware technical specifications . . . . . . . . . . . . . 433

User Manual11

1Get Started

This user manual describes how you can use the device user interface (UI) to configure and operate the following NETGEAR Smart Managed Pro switches:

• GS724TPv2. NETGEAR 24-Port Gigabit PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management. This model provides a PoE power budget of 190W.

• GS724TPP. NETGEAR 24-Port Gigabit Hi-Power PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management. This model provides a PoE power budget of 380W.

The manual describes the software configuration procedures and explains the options that are

available within those procedures.

This chapter contains the following sections:

•

Available publications

• Switch management options and default management mode

• Manage the switch by using the device UI

• About on-network and off-network access

• Access the switch on-network and connected to the Internet

• Access the switch off-network and not connected to the Internet

• Credentials for the device UI

• Register the switch

• Change the language of the device UI

• Change the management mode of the switch

• Use the Device View of the device UI

• Configure interface settings

• Access the NETGEAR support website

• Access the user manual online

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Note: In this manual, we refer to both switch models as the switch. Unless

noted otherwise, all information applies to both switch models.

Note: For more information about the topics covered in this manual, visit the

support website at netgear.com/support.

Note: Firmware updates with new features and bug fixes are made available

from time to time at products can regularly check the site and download new firmware, or you can check for and download new firmware manually. If the features in this guide, you might need to update your firmware.

or behavior of your product does not match what is described

netgear.com/support/download/. Some

Available publications

The following guides are available at netgear.com/support/download/:

• Installation Guide

• Hardware Installation Guide

For information about the NETGEAR Insight app and Insight Cloud portal, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit

netgear.com/support.

Get Started User Manual13

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Switch management options and default management mode

If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up a custom configuration. Just connect power, connect to your network and to your other devices, and you’re done.

The switch provides administrative management options that let you configure, monitor, and control and the network from a web browser. If you are an Insight Premium or Pro subscriber, you can choose to manage the switch by using the NETGEAR Insight app on a smartphone or tablet or from the Insight Cloud portal that is available from a web browser on your Windows-based computer, Mac, or tablet.

the network. The device UI is enabled by default, allowing you to configure the switch

The switch provides the following management options that let you network and configure, monitor, and control the switch:

• Device UI. By default, the management mode of the switch is set to Directly Connect to Web Browser Interface, which lets you access the device UI. In this mode, you can change all settings of the switch.

• NETGEAR Insight app and Insight Cloud portal. If you set the management mode of the switch to NETGEAR Insight Mobile App and Insight Cloud Port following applications to manage the switch remotely:

- NETGEAR Insight app. As an Insight Premium or Insight Pro subscriber

use the NETGEAR Insight app to discover the switch on the network and add the switch to a NETGEAR Insight network location. You can then set up the switch in the network and manage and monitor the switch remotely from your smartphone or tablet. You can choose from four methods to add the switch to the NETGEAR Insight app: You can scan your network for the switch, scan the QR code or the barcode of the switch, or add the serial number of the switch. A free trial is available for new customers.

- Insight Cloud portal.

the NETGEAR Insight Cloud portal to set up the switch in the network, perform advanced remote setup, configuration, and management, monitor the switch, analyze the switch and network usage, and, if necessary, troubleshoot the switch and the network. A free trial is available for new customers.

As an Insight Premium or Insight Pro subscriber

discover

the switch on the

al, you can use the

, you can

, you can use

For more information about NETGEAR Insight, visit netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit

To use the NETGEAR Insight app or Insight Cloud portal methods, you must change the management method so, you can also change the management method back to Directly Connect to Web Browser Interface and use the device UI. For more information, see of the switch on page 35.

Get Started User Manual14

netgear.com/support.

to NETGEAR Insight Mobile App and Insight Cloud Portal. After you do

netgear.com/insight and

Change the management mode

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Manage the switch by using the device UI

This manual describes how to use the device UI to manage and monitor the switch.

For information about using the NETGEAR Insight app and Insight Cloud portal to manage the switch, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit

Software requirements to use the device UI

To access the switch by using a web browser, the browser must meet the following software requirements:

• HTML version 4.0, or later

• HTTP version 1.1, or later

Supported web browsers

netgear.com/support.

The following browsers were tested and support the device UI. If later browser versions are not stated, it means that they were not tested but might function fine. The supported web browsers include the following:

• Microsoft Internet Explorer (IE) version 10 and later versions

• Mozilla Firefox version 35 and later versions

• Chrome version 33 and later versions

• Safari (on MAC OS) version 10 and later versions

Get Started User Manual15

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Navigation tabs, configuration menus, and page menu

The following figure shows the System Information page for model GS724TPP.

Navigation tabs Configuration menus

Logout button

Language menu

Help page

Buttons

Page menus

Configuration status and options

Figure 1. Switch navigation tabs, configuration menus, and page menu

The navigation tabs along the top of the web interface give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which feature you configure.

When you select a tab, the features for that tab appear as menus directly under

the tabs. The

configuration menus in the blue bar change according to the navigation tab that is selected.

The configuration pages for each feature are available as submenu links in the page menu on the left side of the page. Some items in the menu expand to reveal multiple submenu links, as the following figure shows.

Get Started User Manual16

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Link

Submenu

links

Figure 2. Switch page menu link and submenu links

Configuration and status options

The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.

Each page contains access to the HTML-based help that explains the fields and configuration options for the page.

Buttons in the device UI

Each page also contains command buttons. The following table shows the command buttons that are used throughout the pages in the device UI.

Table 1. Command buttons in the device UI

Button Function

Add Clicking the Add button adds the new item configured in the heading row of a table.

Apply Clicking the Apply button sends the updated configuration to the switch. Your sett

saved and configuration changes take effect immediately.

Cancel Clicking the Cancel button cancels the configuration on the page and resets the data on the

page to the previous values of the switch.

Clear Clicking the Clear button clears all the counters and resets the switch summary and detailed

statistics to default values.

Delete Clicking the Delete button removes the selected item.

Refresh Clicking the Refresh button refreshes the page with the latest information from the device.

ings are

Logout Clicking the Logout button ends the session.

Get Started User Manual17

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

User-defined fields

User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page. All characters can be used except for the ones stated in the following table (unless specifically noted in a procedure for a feature).

Table 2. Invalid characters for user-defined fields

Invalid characters for user-defined fields

\ | / < > * ?

Context-sensitive help

When you log in to the switch, every page contains a link to the online help () that contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Configuration page is open, the help topic for that page displays if you click the link to the online help.

About on-network and off-network access

You can access the switch either on-network or off-network:

• On-network and connected to the Internet. When you use the device UI, for easiest access, we recommend that you cable the switch to a network that is connected to the Internet and that includes a router or DHCP server that assigns IP addresses, power on

switch, and

the to connect to the device UI. We refer to this setup as on-network or online.

For more information, see on page 19).

• Off-network and not connected to the Internet. You can also configure the switch connected directly only to the computer that you are using to c switch is not connected to the network and the Internet. We refer to this setup as off-network or offline. If your network does not include a DHCP server (or a router that functions as a DHCP server), you must access the switch off-network.

For more information, see Internet on page 27.

Note: We recommend that you register the switch to activate your warranty.

For more information, see Register the switch on page 30.

then use a computer that is connected to the same network as the switch

Access the switch on-network and connected to the Internet

onfigure it. That is, the

Access the switch off-network and not connected to the

Get Started User Manual18

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Access the switch on-network and connected to the Internet

The DHCP client on the switch is enabled by default, allowing a DHCP server or router on the network to assign an IP address to the switch.

If the switch is on-network, connected to a DHCP server, and connected to the Internet, you can use a Windows-based computer to access the device UI of the switch and register the switch with NETGEAR. For more information, see

access the switch on-network and connected to the Internet on page 20.

Use a Windows-based computer to

If you use a Mac, or if you do not know

tools to discover the IP address of the switch on the network:

• NETGEAR Insight app. Y mobile device and discover the IP address of the switch. See mobile app to discover the IP address of the switch on page 21.

• NETGEAR Switch Discovery Tool (NSDT): If you use a Mac or a Windows-based computer, you can use the NSDT to discover the switch on your n

NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet on page 22.

• NETGEAR Smart Control Center (SCC): You can install the SCC on a Windows-based computer. See

Control Center on page 24

• Other tools. You can also get the IP address of the switch from the DHCP server in the network or use an IP scanner utility. See address on page 25.

When you know the IP address, you can configure the switch in the following ways:

• Device UI. For configuration of all switch features, access the switch over the device UI. See

Access the switch on-network and connected to the Internet when you know the

switch IP address on page 25.

• NETGEAR Smart Control Center (SCC): For features, use the SCC on a Windows-based computer. By default, you can use the SCC to discover the IP address of the switch, but you cannot use the SCC to perform any actions on the switch. However, if you enable the configuration option of the SCC, you can use it to configure the switch. See

Discover the switch in a network with a DHCP server using the Smart

ou can install the NETGEAR Insight app on an iOS or Android

the IP address of the switch, use one of the following

Use the NETGEAR Insight

etwork. See

Use other options to discover the switch IP

configuration of a limited number of switch

Manage the Smart Control Center on page 259.

Use the

For more information about the SCC, visit

• NETGEAR Insight app and Insight Cloud portal. Y mode of the switch so that you can use the NETGEAR Insight app and Insight Cloud portal to manage the switch remotely. For more information, see management mode of the switch on page 35.

Get Started User Manual19

netgear.com/support/product/SCC.

ou can change the management

Change the

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Use a Windows-based computer to access the switch on-network and connected to the Internet

For the following procedure, the network must provide Internet access.

To use a Windows-based computer to determine the switch IP address and access the switch on-network and connected to the Internet:

1. Cable the switch to a network with a router or DHCP server that manages IP addresses.

2. Power on the switch.

The DHCP server assigns the switch an IP address.

3. Connect your

You can use a WiFi or wired network connection.

4. Open Windows Explorer.

5. Click the Network

6. If prompted, enable the Network Discovery feature.

7. Under Network Infrastructure, locate the switch model number.

8. Double-click GSmodel-XXXXXX, in

switch and XXXXXX represents the last six digits of the switch MAC address.

The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you activated the warranty.

9. Enter your credentials, which depend on the page that displays:

•

warranty, the Register to activate your warranty page displays.

button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch.

If you do not have a NETGEAR account, you can create one.

computer to the same network as the switch.

link.

which GSmodel represents the model number of the

activate your warranty, click the Register Your Device

- Enter Registration Key: If you obtained a registration key, enter it. For more information, see registration key for offline access on page 31.

- Skip Registration & Access the UI: Y activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected.

If you do not activate your warranty, the Register to activate your warranty page continues to display when you log in.

• Device UI login page displays: NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials:

Get Started User Manual20

If you previously registered the switch with

ou do not need to register the switch to

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

- Device admin password: Enter the device admin password. The default device

admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.

- Insight network password: If you previously logged in to the device UI, you

changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)

For information about the credentials, see

10. Click the Go

11. If the Change Default Password page displays, specify and confirm a new device admin

password,

The System Information page displays. You can now configure the switch.

button.

click the Submit button, and log in again with your new password.

Credentials for the device UI on page 28.

Use the NETGEAR Insight mobile app to discover the IP address of the switch

If the switch is connected to a WiFi router or access point, and the switch is connected to the Internet, the NETGEAR Insight mobile app lets you discover the switch in your network.

If you do not use the NETGEAR Insight app to claim the switch by adding it to an Insight network location, the switch is not registered and your warranty is not activated.

Using the NETGEAR Insight app to discover the IP address of the switch in your network is not the same as managing the switch with the Insight app or the Insight Cloud Portal.

Note: The default management mode of the switch is the device UI. If you

want to use the Insight app or the Insight Cloud Portal to manage the switch, you first must change the management mode (see

the management mode to NETGEAR Insight Mobile App and Insight Cloud Portal on page 36). After you do so, you can manage

the switch with Insight and add the switch to an Insight network location.

Change

Get Started User Manual21

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

To use the NETGEAR Insight app to discover the IP address of the switch in your network when the switch is connected to the Internet:

1. On your mobile device, go to the app store, search for NETGEAR Insight, and download

the latest version of the app.

2. Connect your mobile device to the WiFi network of the WiFi router or access point to which the switch is connected.

3. Open the NETGEAR Insight mobile app.

4. If you did not set up a NETGEAR account, tap Create

onscreen instructions.

5. Enter the email address and password for your account and tap LOG IN.

NETGEAR

Account and follow the

After you log in to your account, the IP address of the switch

6. Write down the switch IP address.

You can use this IP address to access the switch directly from information about how to access the device UI of the switch, see

on-network and connected to the Internet when you know the switch IP address on page 25.

displays in the device list.

a web browser. For

Access the switch

Use the NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet

For easiest access, we recommend that you cable the switch to a network with a router or DHCP server that assigns IP addresses, power on the switch, and then use a computer that is connected to the same network as the switch.

The NETGEAR Switch Discovery Tool (NSDT) lets you discover the switch in your network and access the device UI of the switch from a Mac or a Windows-based computer.

To install the NETGEAR Switch Discovery T switch in your network when the switch is connected to the Internet:

1. Download the Switch

netgear.com/support/product/netgear-switch-discovery-tool.aspx.

Discovery Tool by visiting

ool and discover the IP address of the

Depending on the computer that you are using, download either the Mac version or the version for a Windows-based computer.

2. Temporarily disable the firewall, Internet security, antivirus programs, or all of these on the computer that

Get Started User Manual22

you use to configure the switch.

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

3. Unzip the NSDT files, and click or double-click the .exe file (for example,

NSDT-1.2.102.exe) to install the program on your computer.

You might see the tool icon appear on your Mac dock or Windows desktop.

4. Reenable the

security services on your computer.

5. Power on the switch.

The DHCP server assigns the switch an IP address.

6. Connect your

computer to the same network as the switch.

You can use a WiFi or wired connection. The computer and the switch must be on the same Layer 2 network.

7. Open the Switch Discovery Tool.

o open the program, double-click the NETGEAR Switch Discovery Tool icon on your

desktop.

The initial page displays a menu and a button.

8. From the Choose

9. Click the Start

a connection menu, menu, select the network for this switch.

Searching button.

The NSDT displays the IP addresses of the switches that it discovers.

10. To access the switch from the NSDT, do the following:

a. Click the ADMIN PAGE

button next to your switch.

The page that displays depends on whether you activated the warranty.

b. Enter your credentials, which depend on the page that displays:

•

your warranty,

- Register Your Device: To activate your warranty

the Register to activate your warranty page displays.

, click the Register Your Device button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch.

If you do not have a NETGEAR account, you can create one.

- Enter Registration Key: If you obtained a registration key information, see

registration key for offline access on page 31.

- Skip Registration & Access the UI: Y

ou do not need to register the switch to activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected.

If you do not activate your warranty, the Register to activate your warranty page continues to display when you log in.

, enter it. For more

Get Started User Manual23

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

• Device UI login page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials:

- Device admin password:

device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password.

- Insight network password: If you previously logged in to the device UI, you

Enter the device admin password. The default

For information about the credentials, see

c. If you enter a password, click the Go

Submit button.

d. If the Change Default Password page displays, specify and confirm a new device

admin

The System Information page displays. You can now configure the switch.

password, click the Submit button, and log in again with your new password.

Credentials for the device UI on page 28.

button; If you enter a registration key, click the

Discover the switch in a network with a DHCP server using the Smart Control Center

This section describes how to set up your switch in a network that includes a DHCP server. The DHCP client on the switch is enabled by default. When you connect the switch to your network, the DHCP server automatically assigns an IP address to the switch. Use the Smart Control Center (SCC) to discover the IP address automatically assigned to the switch.

For information about the SCC, visit

Note: By default, you can use the SCC to discover the IP address of the

switch, but you cannot use the SCC to perform any actions on the switch. However, if you enable the configuration option of the SCC, you can use it to configure the switch (see

Center on page 259).

https://www.netgear.com/support/product/SCC.

Manage the Smart Control

To install the switch in a network with a DHCP server:

1. Connect the

2. Power on the switch by connecting its power cord.

3. Install the SCC on your computer.

4. Start the SCC.

5. Click the Discover

Get Started User Manual24

switch to a network with a DHCP server.

button for the SCC to discover all the devices in the subnet.

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

6. Write down the switch IP address assigned by the DHCP server.

For information about how to access the device UI of the switch, see

on-network and connected to the Internet when you know the switch IP address on page 25.

Access the switch

Use other options to discover the switch IP address

If the switch is on-network, you can use one of the following options to determine the switch IP address:

• Access the DHCP server. You can access the DHCP server (or router that functions as a DHCP server) in your network and view the IP address that is assigned to the switch. For more information, see the documentation for your DHCP server (or router).

• Use an IP scanner utility. IP scanner An IP scanner utility lets you discover the IP address that is assigned to the switch.

For information about how to access the device UI of the switch, see Access the switch

on-network and connected to the Internet when you know the switch IP address on page 25.

utilities are available free of charge on the Internet.

Access the switch on-network and connected to the Internet when you know the switch IP address

If the switch is on-network and you know the switch IP address, you can access the device UI.

For the following procedure, the network must provide Internet access.

Get Started User Manual25

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

To access the switch on-network and connected to the Internet when you know the switch IP address:

1. Launch a web browser.

2. In the address field of your web browser, enter the IP address of the switch.

The page that displays depends on whether your browser is conne

cted to the Internet,

whether the switch is connected to the Internet, and whether you activated the warranty.

3. Enter your credentials, which depend on the page that displays:

•

warranty, the Register to activate your warranty page displays.

activate your warranty, click the Register Your Device button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch.

If you do not have a NETGEAR account, you can create one.

- Enter Registration Key: If you obtained a registration key, enter it. For more information, see

registration key for offline access on page 31.

- Skip Registration & Access the UI: Y

ou do not need to register the switch to activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected.

If you do not activate your warranty, the Register to activate your warranty page continues to display when you log in.

• Device UI login page displays:

If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials:

- Device admin password:

Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.

- Insight network password: If you previously logged in to the device UI, you management mode to NETGEAR Insight, and you added the switch to

changed

the an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)

For information about the credentials, see

4. Click the Go

button.

Credentials for the device UI on page 28.

5. If the Change Default Password page displays, specify and confirm a new device admin password,

click the Submit button, and log in again with your new password.

The System Information page displays. You can now configure the switch.

Get Started User Manual26

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Access the switch off-network and not connected to the Internet

The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.

Note: If you prefer to use the Smart Control Center (SCC) to configure the

switch, you must access the switch off-network as described in the following procedure and then enable the configuration option of the SCC (see Manage the Smart Control Center on page 259).

To access the switch off-network and not connected to the Internet:

1. Change the

the switch.

If the DHCP client of the switch is enabled and you remove the switch from the network with the DHCP server, the IP address reverts to the default IP with a subnet of 255.255.255.0. If you already disabled the DHCP client and assigned a static IP address to the switch, change the IP settings of your computer to be in the same subnet as the static IP address.

For more information about changing the IP settings on your computer following knowledge base articles at the NETGEAR website:

•

Windows-based computer. See the following article:

https://kb.netgear.com/27476/How-to-set-a-static-IP-address-in-Windows

• Mac. See the following article:

https://kb.netgear.com/000037250/Setting-a-static-IP-address-on-your-network-a dapter-in-Mac-OS-for-direct-access-to-an-access-point

(The Mac article is written for an access point but is also valid for a switch.)

2. Connect your

3. Power on the switch by connecting its power cord.

4. Launch a

5. Open a web browser, and enter http://192.168.0.239.

IP settings of your computer to be in the same subnet as the IP settings of

address of 192.168.0.239

, see one of the

computer to the switch using an Ethernet cable.

web browser.

This is the default IP address of the switch. If you already di assigned a static IP address to the switch, enter the static IP address of the switch.

The Enter Registration Key page displays.

6. Do

Get Started User Manual27

one of the following:

Enter a registration key. If you obtained a registration key, do the following:

•

a. Type or paste the key.

sabled the DHCP client and

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 31.

b. Click the Submit button.

• Do not register at this time and access the device UI: Do the following:

a. Click

b. Enter one of the following credentials:

7. If the Change Default Password page displays, specify and confirm a new device admin

password, click the Submit button, and log in again with your new password.

The System Information page displays. You can now configure the switch.

8. After you complete the configuration of the switch, reconfigure the computer that you used for

this process to its original TCP/IP settings.

the Skip

The Device UI login page displays.

Device admin password:

device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password.

- Insight network password: If you previously logged in to the device UI, you changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)

For information about the credentials, see Credentials for the device UI on page 28.

Registration & Access the UI button.

Enter the device admin password. The default

You can now connect your switch to your network using an Ethernet cable.

Credentials for the device UI

The information in this section applies to accessing the switch device UI in either

management mode. That is, it does not apply to accessing the NETGEAR Insight app and

Cloud portal.

To access the device UI, and depending on your situation, use one of the following credentials:

• NETGEAR account credentials

You can register the switch online to activate your warranty by entering your NETGEAR account credentials (see the switch online on page 30). If you do not have a NETGEAR account, you can create one.

Get Started User Manual28

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Alternatively, you can obtain a registration key and enter the key when the switch is offline so that you are no longer prompted to activate your warranty (see

with your NETGEAR account and get a registration key for offline access on page 31).

• Device admin password:

You can access the device UI with your device admin password.

The first time that you access the device UI, enter the default device admin password (password),

after which

you are required to customize the password for greater security. Subsequent times that you log in to the device UI, use your customized device admin password.

• NETGEAR Insight network location password:

NETGEAR Insight can affect how you access the switch device UI. After you add the switch to

an Insight network location and change the management mode of the switch so that you can use the NETGEAR Insight app and Insight Cloud portal to manage the switch remotely (see

Change the management mode of the switch on page 35), the

Insight network location password replaces the switch device admin password. To access the device UI, you must enter the Insight network locati

on password.

Even if you temporarily change the management mode of the switch back to Direct

Connect Web Browser Interface, for example to change settings that are not Insight-manageable or for debugging purposes, you must enter the Insight network location password.

For information about how the Insight network password functions, visit netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit

netgear.com/support.

The following table lists the essential credential options for access to the device UI.

Table 3. Credentials for access to the device UI

Management mode in the device UI

Default mode: Direct Connect Web Browser Interface (Local LAN Only)

NETGEAR Insight Mobile App and Insight Cloud Portal (Cloud/Remote)

1. This situation occurs if you temporarily change the management mode of the switch from NETGEAR Insight Mobile App and

Insight Cloud Portal back to Direct Connect Web Browser Interface.

Added to an Insight network

No Device admin password

Yes

No Device admin password Limited device UI menu.

Yes Insight network password Limited device UI menu.

Credentials Device UI menu

Full device UI menu

Insight network password

Not managed through

NETGEAR Insight.

Managed through NETGEAR Insight.

Get Started User Manual29

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports

Register the switch

You can register the switch online or offline to activate your warranty, after which you are no longer prompted to activate your warranty when you log in:

• Online registration for on-network access: If your switch is on-network or connected to the Internet, you can register the switch with your NETGEAR account credentials and activate your warranty. During the registration process, the switch contacts a NETGEAR server. For more information, see access the switch online on page 30.

• Registration for off-network access: Y is connected to the Internet and get a registration key. If the switch is off-network or not connected to the Internet, you can enter the registration key. After you do so, the Register to activate your warranty page no longer displays when you log in. For more information,

see

offline access on page 31.

ou can register your switch from any device that

Register the switch with your NETGEAR account and access the switch online

For initial registration and access with your NETGEAR account, the switch must be connected to the Internet so that it can communicate with a NETGEAR server.

If you do not own a free NETGEAR account, you can create one during the registration process.

To register and access the switch online over the device UI with your NETGEAR account:

1. Connect your

You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ether

2. Launch a web browser.

3. In the address field of your web browser, enter the IP address of the switch.

For information about finding the IP address of the switch, see

on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27.

The Register to activate your warranty page displays.

computer to the same network as the switch.

net cable.

Access the switch

4. Click the Register switch with your email address and password and activate the warranty.

You are only prompted to do this once to confirm registration of your switch.

Get Started User Manual30

Your Device button and follow the directions onscreen to register the

+ 404 hidden pages

Netgear GS724TP Installation Manual [zh]

Specifications and Main Features

Frequently Asked Questions

User Manual

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management

Contents

1Get Started

Available publications

Switch management options and default management mode

Manage the switch by using the device UI

Software requirements to use the device UI

Supported web browsers

Navigation tabs, configuration menus, and page menu

Configuration and status options

Buttons in the device UI

User-defined fields

Context-sensitive help

About on-network and off-network access

Access the switch on-network and connected to the Internet

Use a Windows-based computer to access the switch on-network and connected to the Internet

Use the NETGEAR Insight mobile app to discover the IP address of the switch

Use the NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet

Discover the switch in a network with a DHCP server using the Smart Control Center

Use other options to discover the switch IP address

Access the switch on-network and connected to the Internet when you know the switch IP address

Access the switch off-network and not connected to the Internet

Credentials for the device UI

Register the switch

Register the switch with your NETGEAR account and access the switch online