Netgear GS752TXS-100EUS User Manual

Download

Page 1

GS752TXS Smart Switch

Software Administration Manual

350 East Plumeria Drive San Jose, CA 95134 USA

July 2011 202-10865-01 v1.0

Page 2

GS752TXS Smart Switch Software Administration Manual

into any language in any form or by any means without the written permission of NETGEAR, Inc.

Technical Support

Thank you for choosing NETGEAR. To register your product, get the latest product updates, get support online, or for more information about the topics covered in this manual, visit the Support website at

http://support.netgear.com.

Phone (US & Canada only): 1-888-NETGEAR Phone (Other Countries): Check the list of phone numbers at

http://support.netgear.com/app/answers/detail/a_id/984

Trademarks

NETGEAR, the NETGEAR logo, ReadyNAS, ProSafe, ProSecure, Smart Control Center, Auto Uplink, X-RAID2, and NeoTV are trademarks or registered trademarks of NETGEAR, Inc. Microsoft, Windows, Windows NT, and Vista are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders.

Statement of Conditions

To improve internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use, or application of, the product(s) or circuit layout(s) described herein.

Revision History

Publication Part Number Version Publish Date Comments

202-10865-01 v1.0 July 2011 First publication

2 |

Page 3

Chapter 1 Getting Started

Getting Started with the GS752TXS Smart Switch . . . . . . . . . . . . . . . . . . 10

Switch Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Connecting the Switch to the Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Switch Discovery in a Network with a DHCP Server . . . . . . . . . . . . . . . . . 13

Switch Discovery in a Network without a DHCP Server . . . . . . . . . . . . . . 15

Configuring the Network Settings on the Administrative System . . . . . . . 16

Web Access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Smart Control Center Utilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Network Utilities. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Configuration Upload and Download. . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Firmware Upgrade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Viewing and Managing Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Understanding the User Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Using the Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Using SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Interface Naming Convention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Chapter 2 Configuring System Information

Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Slot Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

IP Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

IPv6 Network Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

IPv6 Network Neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Denial of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

Green Ethernet Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

SNMPV1/V2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Trap Flags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

SNMP v3 User Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

LLDP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

LLDP Port Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

LLDP-MED Network Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

LLDP-MED Port Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Local Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Table of Contents | 3

Page 4

GS752TXS Smart Switch Software Administration Manual

Neighbors Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71

Services — DHCP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75

Global Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75

Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76

Binding Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

Persistent Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79

Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79

Chapter 3 Configuring Stacking Switches

Stacking Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .81

Stack Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82

Factory Defaults Reset Behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82

Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83

Stack Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83

Stack Port Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86

Stack Port Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .87

Stack Firmware Synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Chapter 4 Configuring Switching Information

Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Port Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Flow Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .91

Link Aggregation Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

LAG Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

LAG Membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94

LACP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95

LACP Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97

VLAN Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97

VLAN Membership Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Port VLAN ID Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100

MAC Based VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102

Protocol Based VLAN Group Configuration . . . . . . . . . . . . . . . . . . . . .103

Protocol Based VLAN Group Membership . . . . . . . . . . . . . . . . . . . . . . 104

Voice VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105

Voice VLAN Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105

Voice VLAN Port Setting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106

Voice VLAN OUI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107

Auto-VoIP Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108

Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109

STP Switch Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .110

CST Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

CST Port Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

CST Port Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

Rapid STP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117

MST Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118

4 | Table of Contents

Page 5

GS752TXS Smart Switch Software Administration Manual

MST Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

STP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121

Multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122

MFDB . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

Auto-Video . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124

IGMP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .125

IGMP Snooping Querier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133

MLD Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137

Forwarding Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

MAC Address Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .146

Dynamic Address Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147

Static MAC Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148

Chapter 5 Configuring Routing

Configuring IP Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151

IP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .151

IP Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152

Configuring VLAN Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .156

VLAN Routing Wizard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156

VLAN Routing Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .158

Configuring Router Discovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159

Router Discovery Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

Configuring and Viewing Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161

Configuring ARP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163

ARP Cache. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .163

Global ARP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .165

ARP Entry Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .166

ARP Entry Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .168

Chapter 6 Configuring Quality of Service

Class of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .171

Basic CoS Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .172

CoS Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173

Interface Queue Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .174

802.1p to Queue Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

DSCP to Queue Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177

Differentiated Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .178

Defining DiffServ. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178

Diffserv Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179

Class Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .180

IPv6 Class Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183

Policy Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184

Service Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .188

Service Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .189

Table of Contents | 5

Page 6

GS752TXS Smart Switch Software Administration Manual

Chapter 7 Managing Device Security

Management Security Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .191

Change Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .191

RADIUS Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .192

Configuring TACACS+ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198

Authentication List Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . .201

Configuring Management Access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .202

HTTP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .202

Secure HTTP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .203

Certificate Download. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .205

Certificate Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .206

Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .207

Port Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .210

802.1X Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .210

Port Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .211

Port Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .215

Traffic Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .216

MAC Filter Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .216

MAC Filter Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .218

Storm Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .218

Port Security Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .220

Port Security Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . .221

Security MAC Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .222

Protected Ports Membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223

Configuring Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .224

ACL Wizard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .225

MAC ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .227

MAC Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .228

MAC Binding Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .229

MAC Binding Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .231

IP ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .232

IP Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233

IP Extended Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .235

IPv6 ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238

IPv6 Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .239

IP Binding Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .242

IP Binding Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .244

VLAN Binding Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .245

Chapter 8 Monitoring the System

Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .247

6 | Table of Contents

Switch Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .247

Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .250

Port Detailed Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .251

EAP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257

Cable Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .258

Page 7

GS752TXS Smart Switch Software Administration Manual

System Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260

Memory Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .260

FLASH Log Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262

Server Log Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263

Trap Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .265

Event Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267

Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268

Multiple Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .268

Chapter 9 Maintenance

Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271

Device Reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271

Factory Default . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .272

Upload File From the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .273

TFTP File Upload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .273

HTTP File Upload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275

Download File To Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .276

TFTP File Download. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .276

HTTP File Download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .278

File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279

Copy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .280

Dual Image Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .281

Dual Image Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282

Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283

Ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283

Ping IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .284

Traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285

Chapter 10 Help

Online Help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287

Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287

User Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288

Appendix A Hardware Specifications and Default Values

GS752TXS Smart Switch Specifications . . . . . . . . . . . . . . . . . . . . . . . . .289

GS752TXS Switch Features and Defaults . . . . . . . . . . . . . . . . . . . . . . . .290

Appendix B Configuration Examples

Virtual Local Area Networks (VLANs). . . . . . . . . . . . . . . . . . . . . . . . . . . .293

VLAN Example Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .294

Access Control Lists (ACLs). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295

MAC ACL Example Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . .296

Standard IP ACL Example Configuration . . . . . . . . . . . . . . . . . . . . . . .297

Differentiated Services (DiffServ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298

Table of Contents | 7

Page 8

GS752TXS Smart Switch Software Administration Manual

Class. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .299

DiffServ Traffic Classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299

Creating Policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .300

DiffServ Example Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .301

802.1X . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .302

802.1X Example Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .304

MSTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305

MSTP Example Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .307

Configuring VLAN Routing with Static Route . . . . . . . . . . . . . . . . . . . . . .309

VLAN Routing Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .309

Appendix C Notification of Compliance Index

8 | Table of Contents

Page 9

1. Getting Started

The NETGEAR configure and operate the GS752TXS Smart Switch by using the Web-based graphical user interface (GUI). This manual describes the software configuration procedures and explains the options available within those procedures.

GS752TXS Smart Switch Software Administration Manual describes how to

Document Organization

The GS752TXS Smart Switch Software Administration Manual contains the following chapters:

• Chapter 1, Getting Started, contains information about performing the initial system

configuration and accessing the user interface.

• Chapter 2, Configuring System Information, describes how to configure administrative

features such as SNMP, DHCP, and port information.

• Chapter 3, Configuring Stacking Switches, describes how to configure switch stacking

with the GS752TXS and other switches.

• Chapter 4, Configuring Switching Information, describes how to manage and monitor the

layer 2 switching features.

• Chapter 5, Configuring Routing, describes how to manage and monitor IP routing.

• Chapter 6, Configuring Quality of Service, describes how to manage the Access Control

Lists (ACLs), and how to configure Differentiated Services and Class of Service features.

• Chapter 7, Managing Device Security, contains information about configuring switch

security information such as port access control and RADIUS server settings.

• Chapter 8, Monitoring the System, describes how to view a variety of information about

the switch and its ports, and to configure how the switch monitors events.

• Chapter 9, Maintenance, describes features to help you manage the switch.

• Chapter 10, Help, describes how to access Online Help resources for the switch.

• Appendix A, Hardware Specifications and Default Values, contains hardware

specifications and default values on the GS752TXS Smart Switch.

• Appendix B, Configuration Examples, contains examples of how to configure various

features on the GS752TXS Smart Switch, such as VLANs and ACLs.

Chapter 1: Getting Started | 9

Page 10

GS752TXS Smart Switch Software Administration Manual

Note: Refer to the release notes for the GS752TXS Smart Switch for

information about issues and workarounds.

Getting Started with the GS752TXS Smart Switch

This chapter provides an overview of starting your NETGEAR GS752TXS Smart Switch and accessing the user interface. It also leads you through the steps to use the Smart Control Center utility. This chapter contains the following sections:

• Switch Management Interface on page 11

• Connecting the Switch to the Network on page 12

• Switch Discovery in a Network with a DHCP Server on page 13

• Switch Discovery in a Network without a DHCP Server on page 15

• Configuring the Network Settings on the Administrative System on page 16

• Web Access on page 18

• Smart Control Center Utilities on page 19

• Understanding the User Interfaces on page 25

• Interface Naming Convention on page 31

10 | Chapter 1: Getting Started

Page 11

GS752TXS Smart Switch Software Administration Manual

Switch Management Interface

The NETGEAR GS752TXS Smart Switch contains an embedded Web server and management software for managing and monitoring switch functions. The GS752TXS functions as a simple switch without the management software. However, you can use the management software to configure more advanced features that can improve switch efficiency and overall network performance.

Web-based management lets you monitor, configure, and control your switch remotely using a standard Web browser instead of using expensive and complicated SNMP software products. From your Web browser, you can monitor the performance of your switch and optimize its configuration for your network. You can configure all switch features, such as VLANs, QoS, and ACLs by using the Web-based management interface.

NETGEAR provides the Smart Control Center utility with this product. This program runs under Microsoft that discovers the switches on your network segment (L2 broadcast domain). When you power up your switch for the first time, use the Smart Control Center to discover the switch and view the network information that has been automatically assigned to the switch by a DHCP server; or, if no DHCP server is present on the network, use the Smart Control Center to discover the switch and assign static network information.

In addition to enabling NETGEAR switch discovery, the Smart Control Center provides several utilities to help you maintain the NETGEAR switches on your network, such as password management, firmware upgrade, and configuration file backup. For more information, see

Windows® XP, Windows 2000, or Windows Vista® and provides a front end

Smart Control Center Utilities on page 19.

Chapter 1: Getting Started | 11

Page 12

GS752TXS Smart Switch Software Administration Manual

Connecting the Switch to the Network

To enable remote management of the switch through a Web browser or SNMP, you must connect the switch to the network and configure it with network information (an IP address, subnet mask, and default gateway). The switch has a default IP address of 192.168.0.239 and a default subnet mask of 255.255.255.0.

Use one of the following three methods to change the default network information on the switch:

• Dynamic assignment through DHCP—DHCP is enabled by default on the switch. If you

connect the switch to a network with a DHCP server, the switch obtains its network information automatically. You can use the Smart Control Center to discover the automatically-assigned network information. For detailed information, see

Discovery in a Network with a DHCP Server on page 13.

• Static assignment through the Smart Control Center—If you connect the switch to a

network that does not have a DHCP server, you can use the Smart Control Center to assign a static IP address, subnet mask, and default gateway. For detailed information, see

Switch Discovery in a Network without a DHCP Server on page 15.

• Static assignment by connecting from a local host—If you do not want to use the Smart

Control Center to assign a static address, you can connect to the switch from a host (administrative system) in the 192.168.0.0/24 network and change the settings by using the Web-based management interface on the switch. For information about how to set the IP address on the administrative system so it is in the same subnet as the default IP address of the switch, see

System on page 16.

Configuring the Network Settings on the Administrative

Switch

12 | Chapter 1: Getting Started

Page 13

GS752TXS Smart Switch Software Administration Manual

Switch Discovery in a Network with a DHCP Server

This section describes how to set up your switch in a network that has a DHCP server. The DHCP client on the switch is enabled by default. When you connect it to your network, the DHCP server will automatically assign an IP address to your switch. Use the Smart Control Center to discover the IP address automatically assigned to the switch.

To install the switch in a network with a DHCP server, use the following steps:

1. Connect the switch to a network with a DHCP server.

2. Power on the switch by connecting its power cord.

3. Install the Smart Control Center on your computer.

4. Start the Smart Control Center.

5. Click Discover for the Smart Control Center to find your switch. You should see a screen

similar to the one shown in the following figure.

Figure 1. Smart Switch Discovery

Chapter 1: Getting Started | 13

Page 14

GS752TXS Smart Switch Software Administration Manual

6. Make a note of the displayed IP address assigned by the DHCP server. You will need this

value to access the switch directly from a Web browser (without using the Smart Control Center).

7. Select your switch by clicking the line that displays the switch, then click the

Web Browser Access button. The Smart Control Center displays a login window.

Use your Web browser to manage your switch. The default password is password. Then use this page to proceed to management of the switch covered in Using the Web

Interface on page 25.

14 | Chapter 1: Getting Started

Page 15

GS752TXS Smart Switch Software Administration Manual

Switch Discovery in a Network without a DHCP Server

This section describes how to use the Smart Control Center to set up your switch in a network without a DHCP server. If your network has no DHCP service, you must assign a static IP address to your switch. If you choose, you can assign it a static IP address, even if your network has DHCP service.

To assign a static IP address:

1. Connect the switch to your existing network.

2. Power on the switch by connecting its power cord.

3. Install the Smart Control Center on your computer.

4. Start the Smart Control Center.

5. Click Discover for the Smart Control Center to find your GS752TXS switch. The utility

broadcasts Layer 2 discovery packets within the broadcast domain to discover the switch. You should see a screen similar to Figure 1 on page 13.

6. Select the switch, then click Configure Device. The page expands to display additional

fields at the bottom of the page, as the following figure shows.

7. Choose the Disabled radio button to disable DHCP.

Chapter 1: Getting Started | 15

Page 16

GS752TXS Smart Switch Software Administration Manual

8. Enter the static switch IP address, gateway IP address, and subnet mask for the switch, and

then type your password.

Tip: You must enter the current password every time you use the Smart

Control Center to update the switch setting. The default password is password.

9. Click Apply to configure the switch with the network settings.

Please ensure that your PC and the switch are in the same subnet. Make a note of these settings for later use.

Configuring the Network Settings on the Administrative System

If you choose not to use the Smart Control Center to configure the network information on the switch, you can connect directly to the switch from an administrative system, such as a PC or laptop computer. The IP address of the administrative system must be in the same subnet as the default IP address on the switch. For most networks, this means you must change the IP address of the administrative system to be on the same subnet as the default IP address of the switch (192.168.0.239).

To change the IP address on an administrative system running a Microsoft® Windows® operating system, open the Internet Protocol (TCP/IP) properties screen that you access from the Local Area Connection properties, as shown in the following figure. You need Windows Administrator privileges to change these settings.

16 | Chapter 1: Getting Started

Page 17

GS752TXS Smart Switch Software Administration Manual

WARNING!

When you change the IP address of your administrative system, you will loose your connection to the rest of the network. Be sure to write down your current network address settings before you change them.

To modify the network settings on your administrative system:

1. On your PC, access the MS Windows operating system TCP/IP Properties.

2. Set the IP address of the administrative system to an address in the 192.168.0.0 network,

such as 192.168.0.200. The IP address must be different from that of the switch but within the same subnet.

3. Click OK.

To configure a static address on the switch:

1. Use a straight-through cable to connect the Ethernet port on the administrative system

directly to any port on the GS752TXS.

2. Open a Web browser on your PC and connect to the management interface as described in

Web Access on page 18.

3. Change the network settings on the switch to match those of your network (this procedure is

described in IP Configuration on page 37).

After you change the network settings on the switch, return the network configuration on your administrative system to the original settings.

Chapter 1: Getting Started | 17

Page 18

GS752TXS Smart Switch Software Administration Manual

Web Access

To access the GS752TXS management interface, use one of the following methods:

• From the Smart Control Center, select the switch and click Web Browser Access.

• Open a Web browser and enter the IP address of the switch in the address field.

You must be able to ping the IP address of the GS752TXS management interface from your administrative system for Web access to be available. If you used the Smart Control Center to set up the IP address and subnet mask, either with or without a DHCP server, use that IP address in the address field of your Web browser. If you did not change the IP address of the switch from the default value, enter 192.168.0.239 into the address field.

Clicking Web Browser Access on the Smart Control Center or accessing the switch directly from your Web browser displays the login screen shown in the following figure.

Figure 2. Login Screen

18 | Chapter 1: Getting Started

Page 19

GS752TXS Smart Switch Software Administration Manual

Smart Control Center Utilities

In addition to device discovery and network address assignment, the Smart Control Center includes several maintenance features. This section describes the following Smart Control Center utilities:

• Network Utilities on page 19

• Configuration Upload and Download on page 20

• Firmware Upgrade on page 22

• Viewing and Managing Tasks on page 24

Network Utilities

From the Network tab, you can perform the following functions:

• DHCP Refresh—Forces the switch to release the current bindings and request new

address information from the DHCP server.

• Reboot Device—Reboots the selected device.

• Web Browser Access—Launches a Web browser and connects to the management

interface for the selected device.

• Configure Device—Allows you to modify network information for the switch, including

the IP address, DHCP client mode, system name, and location. For more information about this feature, see Configuring the Device.

• Change Password—Allows you to set a new password for the device. For more

information about this feature, see Changing the Switch Password.

Configuring the Device

To modify switch information:

1. Select the switch.

2. Click Configure Device. Additional fields appear on the screen.

3. To assign or update a static IP address, default gateway, or subnet mask, disable the DHCP

client and enter the new information. You can also specify a system name and location for the switch.

4. Type the password in the Current Password field. You cannot apply the changes without a

valid switch password. The default password for the switch is password.

5. Click Apply to update the switch with the changes to the network information.

Chapter 1: Getting Started | 19

Page 20

GS752TXS Smart Switch Software Administration Manual

Changing the Switch Password

1. Select the switch.

2. Click Change Password. Additional fields appear on the screen.

3. Type the switch password in the Current Password field. The default password for the

switch is password.

4. Type the new password in the New Password and Confirm Password fields. The

password can contain up to 20 ASCII characters.

Click Apply to update the switch with the new password.

Configuration Upload and Download

When you make changes to the switch, the configuration information is stored in a file on the switch. You can backup the configuration by uploading the configuration file from the switch to an administrative system. You can download a saved configuration file from the administrative system to the switch. The configuration file you download to the switch overwrites the running configuration on the switch.

Configuration upload and download is useful if you want to save a copy of the current switch configuration (Upload Configuration) before you make changes. If you do not like the changes, you can use the Download Configuration option to restore the switch to the settings in the saved configuration file.

To save a copy of the current switch configuration on your administrative system:

1. Click the Maintenance tab and select the device with the configuration to save.

2. Click Upload Configuration.

3. From the Browse for Folder window that appears, navigate to and select the folder where

you want to store the configuration file.

20 | Chapter 1: Getting Started

Page 21

GS752TXS Smart Switch Software Administration Manual

4. Click OK.

5. Enter the switch password and click Apply.

The file is uploaded to the administrative computer as a *.cfg file. You can open it and view the contents with a text editor.

To restore the configuration to a previously saved version:

1. Click the Maintenance tab and select the device with the configuration to restore.

2. Click Download Configuration.

3. From the Select a Configuration window that appears, navigate to and select the

configuration file to download to the switch.

4. Click Open.

Optionally, you can schedule a different date and time to download the configuration file. To delay the download process, clear the Run Now? check box and enter a date and time to complete the download.

Chapter 1: Getting Started | 21

Page 22

GS752TXS Smart Switch Software Administration Manual

5. Enter the switch password and click Apply to begin the download process.

Note: Click the Tasks tab to view status information about the

configuration download.

Firmware Upgrade

The application software for the GS752TXS Smart Switch is upgradeable, enabling your switch to take advantage of improvements and additional features as they become available. The upgrade procedure and the required equipment are described in this section. This procedure assumes that you have downloaded or otherwise obtained the firmware upgrade and that you have it available as a binary file on your computer. This procedure uses the TFTP protocol to implement the transfer from computer to switch.

Note: You can also upgrade the firmware using the TFTP Download and

HTTP Download features mentioned in this book. See HTTP File

Upload on page 275.

To upgrade your firmware:

1. Click the Maintenance tab, and then click the Firmware link directly below the tabs (see

Figure 1 on page 13).

2. Select the switch to upgrade and click Download Firmware.

By default, the firmware is downloaded to primary storage and will be become the active image after the download completes and the switch reboots. To download firmware to use as a backup image, select the Secondary Storage option. To prevent the switch from using the downloaded firmware as the active image, make sure the Run this FW after

download option is clear.

22 | Chapter 1: Getting Started

Page 23

GS752TXS Smart Switch Software Administration Manual

Note: NETGEAR recommends that you download the same image as the

primary and secondary image for redundancy.

3. From the Select new firmware window that appears, navigate to and select the firmware

image to download to the switch.

4. Click Open.

You can choose to schedule a later time to complete the download and installation by clearing the Run Now? option and selecting a date and time to perform the firmware download and installation. The scheduled firmware download appears in the Tasks list.

5. Enter the switch password to continue downloading the firmware.

6. Click Apply to download the firmware and upgrade the switch with the new image.

7. When the process is complete, the switch automatically reboots.

Note: Click the Tasks tab to view status information about the firmware

upgrade.

WARNING!

It is important that you do not power-off the administrative system or the switch while the firmware upgrade is in progress.

Chapter 1: Getting Started | 23

Page 24

GS752TXS Smart Switch Software Administration Manual

Viewing and Managing Tasks

From the Tasks tab, you can view information about configuration downloads and firmware upgrades that have already occurred, are in progress, or are scheduled to take place at a later time. You can also delete or reschedule selected tasks. Figure 3 shows the Tasks page.

Figure 3. Tasks Page

The following list describes the command buttons that are specific to the Tasks page:

• Delete Task—Remove a completed or schedule task from the list.

• Reschedule—Change the scheduled date and time for a pending firmware upgrade.

• Select Range—Select all tasks that occurred or are scheduled to occur within a certain

period of time.

24 | Chapter 1: Getting Started

Page 25

GS752TXS Smart Switch Software Administration Manual

Understanding the User Interfaces

The GS752TXS Smart Switch software includes a set of comprehensive management functions for configuring and monitoring the system by using one of the following methods:

• Web user interface

• Simple Network Management Protocol (SNMP)

Each of the standards-based management methods allows you to configure and monitor the components of the GS752TXS Smart Switch software. The method you use to manage the system depends on your network size and requirements, and on your preference.

The GS752TXS Smart Switch Software Administration Manual describes how to use the Web-based interface to manage and monitor the system.

Using the Web Interface

To access the switch by using a Web browser, the browser must meet the following software requirements:

• HTML version 4.0, or later

• HTTP version 1.1, or later

• Java Runtime Environment 1.6 or later

Use the following procedures to log on to the Web interface:

1. Open a Web browser and enter the IP address of the switch in the Web browser

address field.

2. The factory default password is password. Type the password into the field on the login

screen, as shown in sensitive.

3. After the system authenticates you, the System Information page displays.

Figure 4 on page 26 shows the layout of the Smart Switch Web interface.

Figure 2 on page 18, and then click Login. Passwords are case

Chapter 1: Getting Started | 25

Page 26

GS752TXS Smart Switch Software Administration Manual

Navigation Tab Feature Link Logout Button

Help Link

Help Page

Page Menu

Figure 4. Administrative Page Layout

Configuration Status and Options

Navigation Tabs, Feature Links, and Page Menu

The navigation tabs along the top of the Web interface give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which feature you configure.

When you select a tab, the features for that tab appear as links directly under the tabs. The feature links in the blue bar change according to the navigation tab that is selected.

The configuration pages for each feature are available as links in the page menu on the left side of the page. Some items in the menu expand to reveal multiple configuration pages, as

Figure 5 on page 27 shows. When you click a menu item that includes multiple configuration

pages, the item becomes preceded by a down arrow symbol and expands to display the additional pages.

26 | Chapter 1: Getting Started

Page 27

GS752TXS Smart Switch Software Administration Manual

Page Link

Configuration

Pages

Figure 5. Menu Hierarchy

Configuration and Status Options

The area directly under the feature links and to the right of the page menu displays the configuration information or status for the page you select. On pages that contain configuration options, you can input information into fields or select options from drop-down menus.

Each page contains access to the HTML-based help that explains the fields and configuration options for the page. Each page also contains command buttons.

The following table shows the command buttons that are used throughout the pages in the Web interface:

Button Function

Add Clicking Add adds the new item configured in the heading row of a table. Apply Clicking the Apply button sends the updated configuration to the switch. Configuration

changes take effect immediately.

Cancel Clicking Cancel cancels the configuration on the screen and resets the data on the screen

to the latest value of the switch.

Delete Clicking Delete removes the selected item. Refresh Clicking the Refresh button refreshes the page with the latest information from the device. Logout Clicking the Logout button ends the session.

Device View

The Device View is a Java® applet that displays the ports on the switch. This graphic provides an alternate way to navigate to configuration and monitoring options. The graphic also provides information about device ports, current configuration and status, table information, and feature components.

The Device View is available from the System  Device View page.

Depending upon the status of the port, the LED of the port status illuminates in Device View either red, green, or gray. Green indicates that the port is enabled. Red indicates that an error

Chapter 1: Getting Started | 27

Page 28

GS752TXS Smart Switch Software Administration Manual

has occurred on the port, or red indicates that the link is disabled. Gray is applicable for port 51 and 52, indicates that the port is working in stack mode. The LED of the port speed illuminates either green or yellow.

• A green LED indicates operational ports at the following link speed:

• Copper ports – 1000 Mbps; fiber SFP+ ports – 10 Gbps

• A yellow LED indicates operational ports at the following link speed:

• Copper ports – 10/100 Mbps; fiber SFP+ ports – 1000 Mbps.

The System LEDs are located on the left side of the front panel.

Power/Status LED

The power LED is a bicolor LED that serves as an indicator of power and diagnostic status. The following indications are given by the following LED states:

• A solid Green LED indicates that the power is supplied to the switch and operating

normally.

• A solid Yellow LED indicates that system is in the boot-up stage.

• No lit LED indicates that power is disconnected.

FAN Status LED

FAN status is indicated as follows:

• A solid yellow LED indicates that the fan is faulty

• No lit LED indicates that the fan is operating normally.

Stack Master LED

The Stack Master LED is lit if there is an active stack link and the unit is in stack mode.

• A solid Green LED indicates that the switch acts as a master unit in a stack of switches.

• No lit LED indicates that the switch acts as a slave member in a stack of switches.

Seven-Segment LED for the Stacking ID

A solid Green LED displays the stack ID (1–6).

The following image shows the Device View of the GS752TXS.

Click the port you want to view or configure to see a menu that displays statistics and configuration options. Click the menu option to access the page that contains the configuration or monitoring options.

28 | Chapter 1: Getting Started

Page 29

GS752TXS Smart Switch Software Administration Manual

If you click the graphic, but do not click a specific port, the main menu appears, as the following figure shows. This menu contains the same option as the navigation tabs at the top of the page.

Chapter 1: Getting Started | 29

Page 30

GS752TXS Smart Switch Software Administration Manual

Help Page Access

Every page contains a link to the online help , which contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Addressing page is open, the help topic for that page displays if you click Help. Figure 4 on page 26 shows the location of the Help link on the Web interface.

User-Defined Fields

User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration Web page. All characters may be used except for the following (unless specifically noted in for that feature):

\ <

/ >|

* |

Using SNMP

The GS752TXS Smart Switch software supports the configuration of SNMP groups and users that can manage traps that the SNMP agent generates.

The GS752TXS Smart Switch uses both standard public MIBs for standard functionality and private MIBs that support additional switch functionality. All private MIBs begin with a “-” prefix. The main object for interface configuration is in -SWITCHING-MIB, which is a private MIB. Some interface configurations also involve objects in the public MIB, IF-MIB.

SNMP is enabled by default. The System  Management  System Information Web page, which is the page that displays after a successful login, displays the information you need to configure an SNMP manager to access the switch.

Any user can connect to the switch using the SNMPv3 protocol, but for authentication and encryption, the switch supports only one user which is admin; therefore there is only one profile that can be created or modified.

To configure authentication and encryption settings for the SNMPv3 admin profile by using the Web interface:

1. Navigate to the System  SNMP  SNMPv3  User Configuration page.

2. To enable authentication, select an Authentication Protocol option, which is either MD5 or

SHA.

3. To enable encryption, select the DES option in the Encryption Protocol field. Then, enter

an encryption code of eight or more alphanumeric characters in the Encryption Key field.

4. Click Apply.

To access configuration information for SNMPv1 or SNMPv2, click System  SNMP  SNMPv1/v2 and click the page that contains the information to configure.

30 | Chapter 1: Getting Started

Page 31

GS752TXS Smart Switch Software Administration Manual

Interface Naming Convention

The GS752TXS Smart Switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. All the physical ports 1–48 are Gigabit ports and Port 49–52 are SFP+ ports that support both 10G and 1000M mode. The number of the port is identified on the front panel. You can configure the logical interfaces by using the software. The following table describes the naming convention for all interfaces available on the switch.

Interface Description Example

Physical The physical ports include Gigabit ports and are numbered

sequentially starting from one using the following format: X/gY or X/xgY. X for the unit ID, g is for a 1G port, xg is for a 10G port, and Y is the port number.

Link Aggregation Group (LAG) LAG interfaces are logical interfaces that are only used for

bridging functions.

CPU Management Interface This is the internal switch interface responsible for the

switch base MAC address. This interface is not configurable and is always listed in the MAC Address Table.

1/g1, 1/g2, 2/g3

l1, l2, l3

Chapter 1: Getting Started | 31

Page 32

Page 33

2. Configuring System Information

Use the features in the System tab to define the switch’s relationship to its environment. The

System tab contains links to the following features:

• Management on page 33

• SNMP on page 59

• LLDP on page 64

• Services — DHCP Snooping on page 75

Management

This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information. From the Management link, you can access the following pages:

• System Information on page 33

• Slot Information on page 35

• IP Configuration on page 37

• IPv6 Network Configuration on page 38

• IPv6 Network Neighbor on page 40

• Time on page 41

• Denial of Service on page 46

• DNS on page 50

• Green Ethernet Configuration on page 53

System Information

After a successful login, the System Information page displays. Use this page to configure and view general device information.

To display the System Information page, click System  Management System Information. A screen similar to the following displays.

Chapter 2: Configuring System Information | 33

Page 34

GS752TXS Smart Switch Software Administration Manual

To define system information:

1. Open the System Information page.

2. Define the following fields:

• System Name. Enter the name you want to use to identify this switch. You may use

up to 31 alphanumeric characters. The factory default is blank.

• System Location. Enter the location of this switch. You may use up to 31

alphanumeric characters. The factory default is blank.

• System Contact. Enter the contact person for this switch. You may use up to 31

alphanumeric characters. The factory default is blank.

3. Click Apply.

The system parameters are applied, and the device is updated.

The following table describes the status information the System Page displays.

Field Description

Serial Number The serial number of the switch.

System Object ID The base object ID for the switch's enterprise MIB.

34 | Chapter 2: Configuring System Information

Page 35

GS752TXS Smart Switch Software Administration Manual

Field Description

Date & Time The current date and time.

System Up Time Displays the number of days, hours, and minutes since the last system

restart.

Base MAC Address The universally assigned network address.

Model Name The model name of the switch.

Boot Version The boot code version of the switch.

Software Version

The software version of the switch.

Slot Information

Use this page to display details of the different slots in the different units in the stack. To display the Slot Information page, click System

screen similar to the following displays.

 Management Slot Information. A

Chapter 2: Configuring System Information | 35

Page 36

GS752TXS Smart Switch Software Administration Manual

Click Refresh to refresh the screen with most recent data.

The following table describes the status information the Slot Information displays.

Field Description

Slot Identifies the slot using the format unit/slot.

Status Displays whether the slot is empty or full.

Administrative State Displays whether the slot is administratively enabled or disabled.

Power State Displays whether the slot is powered on or not.

Card Configured Type Displays configured card type in the slot.

Card Inserted Type Displays inserted slot type.

Card Power Down Displays whether the card in the slot is powered down.

Card Pluggable Displays whether the inserted card is pluggable or not.

Card Model ID Displays the model ID of the card configured for the slot.

Card Description Displays the description of the card configured for the slot.

Card Model Displays the list of models of all cards that can be supported.

Card Index Displays the index assigned to the selected card type.

Card Type Displays the hardware type of this supported card. This is a 32-bit data

field.

Card Descriptor Displays a data field used to identify the supported card.

36 | Chapter 2: Configuring System Information

Page 37

GS752TXS Smart Switch Software Administration Manual

IP Configuration

Use the IP Configuration page to configure network information for the management interface, which is the logical interface used for in-band connectivity with the switch through any of the switch's front-panel ports. The configuration parameters associated with the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed.

To access the page, click System

 Management  IP Configuration. A screen similar to the

following displays.

To configure the network information for the management interface:

1. Select the appropriate radio button to determine how to configure the network

information for the switch management interface:

• Dynamic IP Address (DHCP). Specifies that the switch must obtain the IP address

through a DHCP server.

• Dynamic IP Address (BOOTP). Specifies that the switch must obtain the IP address

through a BootP server.

• Static IP Address. Specifies that the IP address, subnet mask, and default gateway

must be manually configured. Enter this information in the fields below this radio button.

2. If you selected the Static IP Address option, configure the following network information:

• IP Address. The IP address of the network interface. The factory default value is

192.168.0.239. Each part of the IP address must start with a number other than zero. For example, IP addresses 001.100.192.6 and 192.001.10.3 are not valid.

• Subnet Mask. The IP subnet mask for the interface. The factory default value is

255.255.255.0.

• Default Gateway. The default gateway for the IP interface. The factory default value

is 192.168.0.254.

Chapter 2: Configuring System Information | 37

Page 38

GS752TXS Smart Switch Software Administration Manual

3. Specify the VLAN ID for the management VLAN.

The management VLAN is used to establish an IP connection to the switch from a workstation that is connected to a port in the same VLAN. If not specified, the active management VLAN ID is 1 (default), which allows an IP connection to be established through any port.

When the management VLAN is set to a different value, an IP connection can be made only through a port that is part of the management VLAN. It is also mandatory that the port VLAN ID (PVID) of the port to be connected in that management VLAN be the same as the management VLAN ID.

The management VLAN has the following requirements:

• Only one management VLAN can be active at a time.

• When a new management VLAN is configured, connectivity through the existing

management VLAN is lost.

• The management station should be reconnected to the port in the new management

VLAN.

Note: Make sure that the VLAN to be configured as the management

VLAN exists. And make sure that the PVID of at least one port that is a port of the VLAN is the same as the management VLAN ID. For information about creating VLANs and configuring the PVID for a port, see VLANs on page 97.

4. If you change any of the network connection parameters, click Apply to apply the changes

to the system.

5. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

IPv6 Network Configuration

Use the IPv6 Network Configuration page to configure the IPv6 network interface, which is the logical interface used for in-band connectivity with the switch via all of the switch's front-panel ports. The configuration parameters associated with the switch's network interface do not affect the configuration of the front-panel ports through which traffic is switched or routed.

To access the page, click System  Management  IPv6 Network Configuration. A screen similar to the following displays.

38 | Chapter 2: Configuring System Information

Page 39

GS752TXS Smart Switch Software Administration Manual

To access the switch over a IPv6 network, you must initially configure the switch with IPv6 information (IPv6 prefix, prefix length, and default gateway). IPv6 can be configured using any of the following options:

• IPv6 Auto Configuration

• DHCPv6

When in-band connectivity is established, IPv6 information can be changed using any of the following:

• SNMP-based management

• Web-based management

To configure the network information for an IPv6 network:

1. Admin Mode. Enable or disable the IPv6 network interface on the switch. The default

value is Enable.

2. IPv6 Address Auto Configuration Mode. The IPv6 address for the IPv6 network interface

is set in auto configuration mode if this option is enabled. The default value is Disable. Auto configuration can be enabled only when DHCPv6 is not enabled on any of the management interfaces.

3. Current Network Configuration Protocol. The IPv6 address for the IPv6 network interface

is configured by DHCPv6 protocol if this option is enabled. The default value is None. DHCPv6 can be enabled only when IPv6 Auto config or DHCPv6 are not enabled on any of the management interfaces.

4. DHCPv6 Client DUID. Identifier used to identify the client's unique DUID value. This option

only displays when DHCPv6 is enabled.

5. IPv6 Gateway. Specify the gateway for the IPv6 network interface. The gateway address is

in IPv6 global or link-local address format.

6. IPv6 Prefix/Prefix Length. Add the IPv6 prefix and prefix to the IPv6 network interface. The

address is in the global address format.

Chapter 2: Configuring System Information | 39

Page 40

GS752TXS Smart Switch Software Administration Manual

7. EUI64. Specify whether format IPv6 address in EUI-64 format. The default value is False.

8. Click Add to add a new IPv6 address in global format.

9. Click DELETE to delete a selected IPv6 address.

10. Click Apply to apply the changes to the system. Update the switch with the values on the

screen. If you want the switch to retain the new values across a power cycle, you must perform a save.

11. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

IPv6 Network Neighbor

Use the IPv6 Network Neighbor page to configure the IPv6 Network Interface IPv6 Neighbor Table.

To access the page, click System  Management  IPv6 Network Neighbor. A screen similar to the following displays.

• IPv6 Address. Specifies the IPv6 address of neighbor or interface.

• MAC Address. Specifies MAC address associated with an interface.

• IsRtr. Indicates whether the neighbor is a router. If the neighbor is a router, the value is

True. If the neighbor is not a router, the value is False.

• Neighbor State. Specifies the state of the neighbor cache entry. The following are the

states for dynamic entries in the IPv6 neighbor discovery cache:

• Reach. Positive confirmation was received within the last Reachable Time

milliseconds that the forward path to the neighbor was functioning properly. While in REACH state, the device takes no special action as packets are sent.

• Stale. More than ReachableTime milliseconds have elapsed since the last positive

confirmation was received that the forward path was functioning properly. While in STALE state, the device takes no action until a packet is sent.

40 | Chapter 2: Configuring System Information

Page 41

GS752TXS Smart Switch Software Administration Manual

• Delay. More than ReachableTime milliseconds have elapsed since the last positive

confirmation was received that the forward path was functioning properly. A packet was sent within the last DELAY_FIRST_PROBE_TIME seconds. If no reachability confirmation is received within DELAY_FIRST_PROBE_TIME seconds of entering the DELAY state, send a neighbor solicitation message and change the state to PROBE.

• Probe. A reachability confirmation is actively sought by resending neighbor

solicitation messages every RetransTimer milliseconds until a reachability confirmation is received.

• Last Updated. Time since the address was confirmed to be reachable.

To configure the network information for a IPv6 network:

• Refresh. Refreshes the screen with most recent data.

• Clear. Clear IPv6 neighbors on selected interface or all interfaces.

Time

GS752TXS Smart Switch software supports the Simple Network Time Protocol (SNTP). You can also set the system time manually

SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. GS752TXS Smart Switch software operates only as an SNTP client and cannot provide time services to other systems.

Time sources are established by Stratums. Stratums define the accuracy of the reference clock. The higher the stratum (where zero is the highest), the more accurate the clock. The device receives time from stratum 1 and above since it is itself a stratum 2 device.

The following is an example of stratums:

• Stratum 0: A real-time clock is used as the time source, for example, a GPS system.

• Stratum 1: A server that is directly linked to a Stratum 0 time source is used. Stratum 1

time servers provide primary network time standards.

• Stratum 2: The time source is distanced from the Stratum 1 server over a network path.

For example, a Stratum 2 server receives the time over a network link, via NTP, from a Stratum 1 server.

Information received from SNTP servers is evaluated based on the time level and server type.

SNTP time definitions are assessed and determined by the following time levels:

• T1: Time at which the original request was sent by the client.

• T2: Time at which the original request was received by the server.

• T3: Time at which the server sent a reply.

• T4: Time at which the client received the server's reply.

The device can poll Unicast server types for the server time.

Chapter 2: Configuring System Information | 41

Page 42

GS752TXS Smart Switch Software Administration Manual

Polling for Unicast information is used for polling a server for which the IP address is known. SNTP servers that have been configured on the device are the only ones that are polled for synchronization information. T1 through T4 are used to determine server time. This is the preferred method for synchronizing device time because it is the most secure method. If this method is selected, SNTP information is accepted only from SNTP servers defined on the device using the SNTP Server Configuration page.

The device retrieves synchronization information, either by actively requesting information or at every poll interval.

Time Configuration

Use the Time Configuration page to view and adjust date and time settings. To display the Time Configuration page, click System

Configuration.

 Management  Time  SNTP Global

To configure the time by using the CPU clock cycle as the source:

1. From the Clock Source field, select Local.

2. In the Date field, enter the date in the DD/MM/YYYY format.

3. In the Time field, enter the time in HH:MM:SS format.

Note: If you do not enter a date and time, the switch will calculate the date

and time using the CPU’s clock cycle.

42 | Chapter 2: Configuring System Information

Page 43

GS752TXS Smart Switch Software Administration Manual

When the Clock Source is set to Local, the Time Zone field is grayed out (disabled):

4. Click Apply to send the updated configuration to the switch. Configuration changes occur

immediately.

To configure the time through SNTP:

1. From the Clock Source field, select SNTP.

When the Clock Source is set to SNTP, the Date and Time fields are grayed out (disabled). The switch gets the date and time from the network.

2. Use the menu to select the Coordinated Universal Time (UTC) time zone in which the switch

is located, expressed as the number of hours.

3. Click Apply to send the updated configuration to the switch. Configuration changes take

effect immediately.

4. Use the SNTP Server Configuration page to configure the SNTP server settings, as

described in

SNTP Server Configuration on page 44.

5. Click Refresh to refresh the page with the most current data from the switch.

6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

The SNTP Global Status table on the Time Configuration page displays information about the system’s SNTP client. The following table describes the SNTP Global Status fields.

Field Description

Version Specifies the SNTP Version the client supports.

Supported Mode Specifies the SNTP modes the client supports. Multiple modes may be

supported by a client.

Last Update Time Specifies the local date and time (UTC) the SNTP client last updated the

system clock.

Last Attempt Time Specifies the local date and time (UTC) of the last SNTP request or receipt

of an unsolicited message.

Chapter 2: Configuring System Information | 43

Page 44

GS752TXS Smart Switch Software Administration Manual

Field Description

Last Attempt Status Specifies the status of the last SNTP request or unsolicited message for both

unicast mode. If no message has been received from a server, a status of Other is displayed. These values are appropriate for all operational modes:

• Other: None of the following enumeration values.

• Success: The SNTP operation was successful and the system time was

updated.

• Request Timed Out: A directed SNTP request timed out without

receiving a response from the SNTP server.

• Bad Date Encoded: The time provided by the SNTP server is not valid.

• Version Not Supported: The SNTP version supported by the server is

not compatible with the version supported by the client.

• Server Unsynchronized: The SNTP server is not synchronized with its

peers. This is indicated via the 'leap indicator' field on the SNTP message.

• Server Kiss Of Death: The SNTP server indicated that no further

queries were to be sent to this server. This is indicated by a stratum field equal to 0 in a message received from a server.

Server IP Address Specifies the IP address of the server for the last received valid packet. If no

message has been received from any server, an empty string is shown.

Address Type Specifies the address type of the SNTP Server address for the last received

valid packet.

Server Stratum Specifies the claimed stratum of the server for the last received valid packet.

Reference Clock Id Specifies the reference clock identifier of the server for the last received valid

packet.

Server Mode Specifies the mode of the server for the last received valid packet.

Unicast Sever Max Entries Specifies the maximum number of unicast server entries that can be

configured on this client.

Unicast Server Current Entries

Specifies the number of current valid unicast server entries configured for this client.

Click Refresh to refresh the page with the most current data from the switch.

SNTP Server Configuration

Use the SNTP Server Configuration page to view and modify information for adding and modifying Simple Network Time Protocol SNTP servers.

To display the SNTP Server Configuration page, click System  Management  Time  SNTP

Server Configuration.

44 | Chapter 2: Configuring System Information

Page 45

GS752TXS Smart Switch Software Administration Manual

To configure a new SNTP Server:

1. Enter the appropriate SNTP server information in the available fields:

• Server Type. Specifies whether the address for the SNTP server is an IP address

(IPv4) or hostname (DNS).

• Address. Enter the IP address or the hostname of the SNTP server.

• Port. Enter a port number on the SNTP server to which SNTP requests are sent. The

valid range is 1–65535. The default is 123.

• Priority. Specifies the priority of this server entry in determining the sequence of

servers to which SNTP requests are sent. Enter a priority from 1–3, with 1 being the default and the highest priority. Servers with lowest numbers have priority.

• Version. Enter the protocol version number. The range is 1–4.

2. Click Add.

3. Repeat the previous steps to add additional SNTP servers. You can configure up to three

SNTP servers.

4. To removing an SNTP server, select the check box next to the configured server to remove,

and then click Delete. The entry is removed, and the device is updated.

5. To change the settings for an existing SNTP server, select the check box next to the

configured server and enter new values in the available fields, and then click Apply. Configuration changes take effect immediately.

6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

The SNTP Server Status table displays status information about the SNTP servers configured on your switch. The following table describes the SNTP Global Status fields.

Chapter 2: Configuring System Information | 45

Page 46

GS752TXS Smart Switch Software Administration Manual

Field Description

Address Specifies all the existing Server Addresses. If no Server configuration exists, a

message saying “No SNTP server exists” flashes on the screen.

Last Update Time Specifies the local date and time (UTC) that the response from this server was

used to update the system clock.

Last Attempt Time Specifies the local date and time (UTC) that this SNTP server was last queried.

Last Attempt Status Specifies the status of the last SNTP request to this server. If no packet has been

received from this server, a status of Other is displayed:

• Other: None of the following enumeration values.

• Success: The SNTP operation was successful and the system time was

updated.

• Request Timed Out: A directed SNTP request timed out without receiving a

response from the SNTP server.

• Bad Date Encoded: The time provided by the SNTP server is not valid.

• Version Not Supported: The SNTP version supported by the server is not

compatible with the version supported by the client.

• Server Unsynchronized: The SNTP server is not synchronized with its

peers. This is indicated via the 'leap indicator' field on the SNTP message.

• Server Kiss Of Death: The SNTP server indicated that no further queries

were to be sent to this server. This is indicated by a stratum field equal to 0 in a message received from a server.

Requests Specifies the number of SNTP requests made to this server since last agent

reboot.

Failed Requests Specifies the number of failed SNTP requests made to this server since last

reboot.

Click Refresh to refresh the page with the most current data from the switch.

Denial of Service

Use the Denial of Service (DoS) page to configure DoS control. The GS752TXS Smart Switch software provides support for classifying and blocking specific types of DoS attacks. You can configure your system to monitor and block the following types of attacks:

• Denial of Service Min TCP Header Size: Specify the Min TCP Hdr Size allowed. If DoS

TCP Fragment is enabled, the switch will drop these packets:

• First TCP fragments that has a TCP payload: IP_Payload_Length - IP_Header_Size <

Min_TCP_Header_Size. Its range is (0 to 255). The default value is 20.

• Denial of Service ICMPv4: Enabling ICMPv4 DoS prevention causes the switch to drop

ICMPv4 packets that have a type set to ECHO_REQ (ping) and a size greater than the configured ICMPv4 Pkt Size. The factory default is disabled.

• Denial of Service Max ICMPv4 Packet Size: Specify the Max ICMPv4 Pkt Size allowed.

If ICMPv4 DoS prevention is enabled, the switch will drop IPv4 ICMP ping packets that

46 | Chapter 2: Configuring System Information

Page 47

GS752TXS Smart Switch Software Administration Manual

have a size greater than this configured Max ICMPv4 Pkt Size. Its range is (0 to 16376). The default value is 512.

• Denial of Service ICMPv6: Enabling ICMPv6 DoS prevention causes the switch to drop

ICMPv6 packets that have a type set to ECHO_REQ (ping) and a size greater than the configured ICMPv6 Pkt Size. The factory default is disabled.

• Denial of Service Max ICMPv6 Packet Size: Specify the Max IPv6 ICMP Pkt Size

allowed. If ICMPv6 DoS prevention is enabled, the switch will drop IPv6 ICMP ping packets that have a size greater than this configured Max ICMPv6 Pkt Size. Its range is (0 to 16376). The default value is 512.

• Denial of Service First Fragment: Enabling First Fragment DoS prevention causes the

switch to check DoS options on first fragment IP packets when switch are receiving fragmented IP packets. Otherwise, switch ignores the first fragment IP packages.The factory default is disabled.

• Denial of Service ICMP Fragment: Enabling ICMP Fragment DoS prevention causes

the switch to drop ICMP Fragmented packets. The factory default is disabled.

• Denial of Service SIP=DIP: Enabling SIP=DIP DoS prevention causes the switch to drop

packets that have a source IP address equal to the destination IP address. The factory default is disabled.

• Denial of Service SMAC=DMAC: Enabling SMAC=DMAC DoS prevention causes the

switch to drop packets that have a source MAC address equal to the destination MAC address. The factory default is disabled.

• Denial of Service TCP FIN&URG&PSH: Enabling TCP FIN & URG & PSH DoS

prevention causes the switch to drop packets that have TCP Flags FIN, URG, and PSH set and TCP Sequence Number=0. The factory default is disabled.

• Denial of Service TCP Flag&Sequence: Enabling TCP Flag DoS prevention causes the

switch to drop packets that have TCP control flags set to 0 and TCP sequence number set to 0. The factory default is disabled.

• Denial of Service TCP Fragment: Enabling TCP Fragment DoS prevention causes the

switch to drop packets:

• First TCP fragments that has a TCP payload: IP_Payload_Length - IP_Header_Size <

Min_TCP_Header_Size. The factory default is disabled.

• Denial of Service TCP Offset: Enabling TCP Offset DoS prevention causes the switch to

drop packets that have a TCP header Offset=1. The factory default is disabled.

• Denial of Service TCP Port: Enabling TCP Port DoS prevention causes the switch to

drop packets that have TCP source port equal to TCP destination port. The factory default is disabled.

• Denial of Service TCP SYN: Enabling TCP SYN DoS prevention causes the switch to

drop packets that have TCP Flags SYN set. The factory default is disabled.

• Denial of Service TCP SYN&FIN: Enabling TCP SYN & FIN DoS prevention causes the

switch to drop packets that have TCP Flags SYN and FIN set. The factory default is disabled.

• Denial of Service UDP Port: Enabling UDP Port DoS prevention causes the switch to

drop packets that have UDP source port equal to UDP destination port. The factory default is disabled.

Chapter 2: Configuring System Information | 47

Page 48

GS752TXS Smart Switch Software Administration Manual

Auto-DoS Configuration

The Auto-DoS Configuration page lets you automatically enable all the DoS features available on the switch, except for the L4 Port attack. See the previous section for information about the types of DoS attacks the switch can monitor and block.

To access the Auto-DoS Configuration page, click System

Service

 Auto-DoS Configuration.

To configure the Auto-DoS feature:

1. Select a radio button to enable or disable Auto-DoS:

• Disable. Auto-DoS is disabled (default).

• Enable. Auto-DoS is enabled. When an attack is detected, a warning message is

logged to the buffered log and is sent to the Syslog server. At the same time, the port is shut down and can be enabled only manually by the admin user.

 Management  Denial of

2. Click Apply to send the updated configuration to the switch. Configuration changes occur

immediately.

3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

DoS Configuration

The DoS Configuration page lets you to select which types of DoS attacks for the switch to monitor and block.

To access the DoS Configuration page, click System  Management  Denial of Service 

DoS Configuration.

48 | Chapter 2: Configuring System Information

Page 49

GS752TXS Smart Switch Software Administration Manual

To configure individual DoS settings:

1. Select the types of DoS attacks for the switch to monitor and block and configure any

associated values, as the following list describes.

• Denial of Service Min TCP Header Size: Specify the Min TCP Hdr Size allowed. If

DoS TCP Fragment is enabled, the switch will drop these packets:

• First TCP fragments that has a TCP payload: IP_Payload_Length -

IP_Header_Size < Min_TCP_Header_Size. Its range is (0 to 255). The default value is 20.

• Denial of Service ICMPv4: Enabling ICMPv4 DoS prevention causes the switch to

drop ICMPv4 packets that have a type set to ECHO_REQ (ping) and a size greater than the configured ICMPv4 Pkt Size. The factory default is disabled.

• Denial of Service Max ICMPv4 Packet Size: Specify the Max ICMPv4 Pkt Size

allowed. If ICMPv4 DoS prevention is enabled, the switch will drop IPv4 ICMP ping packets that have a size greater than this configured Max ICMPv4 Pkt Size. Its range is (0 to 16376). The default value is 512.

• Denial of Service ICMPv6: Enabling ICMPv6 DoS prevention causes the switch to

drop ICMPv6 packets that have a type set to ECHO_REQ (ping) and a size greater than the configured ICMPv6 Pkt Size. The factory default is disabled.

• Denial of Service Max ICMPv6 Packet Size: Specify the Max IPv6 ICMP Pkt Size

• Denial of Service First Fragment: Enabling First Fragment DoS prevention causes

the switch to check DoS options on first fragment IP packets when switch are

Chapter 2: Configuring System Information | 49

Page 50

GS752TXS Smart Switch Software Administration Manual

receiving fragmented IP packets. Otherwise, switch ignores the first fragment IP packages.The factory default is disabled.

• Denial of Service ICMP Fragment: Enabling ICMP Fragment DoS prevention

causes the switch to drop ICMP Fragmented packets. The factory default is disabled.

• Denial of Service SIP=DIP: Enabling SIP=DIP DoS prevention causes the switch to

drop packets that have a source IP address equal to the destination IP address. The factory default is disabled.

• Denial of Service SMAC=DMAC: Enabling SMAC=DMAC DoS prevention causes

the switch to drop packets that have a source MAC address equal to the destination MAC address. The factory default is disabled.

• Denial of Service TCP FIN&URG&PSH: Enabling TCP FIN & URG & PSH DoS

prevention causes the switch to drop packets that have TCP Flags FIN, URG, and PSH set and TCP Sequence Number=0. The factory default is disabled.

• Denial of Service TCP Flag&Sequence: Enabling TCP Flag DoS prevention causes

the switch to drop packets that have TCP control flags set to 0 and TCP sequence number set to 0. The factory default is disabled.

• Denial of Service TCP Fragment: Enabling TCP Fragment DoS prevention causes

the switch to drop packets:

• First TCP fragments that has a TCP payload: IP_Payload_Length -

IP_Header_Size < Min_TCP_Header_Size. The factory default is disabled.

• Denial of Service TCP Offset: Enabling TCP Offset DoS prevention causes the

switch to drop packets that have a TCP header Offset=1. The factory default is disabled.

• Denial of Service TCP Port: Enabling TCP Port DoS prevention causes the switch to

drop packets that have TCP source port equal to TCP destination port. The factory default is disabled.

• Denial of Service TCP SYN: Enabling TCP SYN DoS prevention causes the switch

to drop packets that have TCP Flags SYN set. The factory default is disabled.

• Denial of Service TCP SYN&FIN: Enabling TCP SYN & FIN DoS prevention causes

the switch to drop packets that have TCP Flags SYN and FIN set. The factory default is disabled.

2. If you change any of the DoS settings, click Apply to apply the changes to the switch.

3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

DNS

You can use these pages to configure information about DNS servers the network uses and how the switch operates as a DNS client.

DNS Configuration

Use this page to configure global DNS settings and DNS server information.

50 | Chapter 2: Configuring System Information

Page 51

GS752TXS Smart Switch Software Administration Manual

To access this page, click System  Management  DNS  DNS Configuration.

To configure the global DNS settings:

1. Specify whether to enable or disable the administrative status of the DNS Client.

• Enable. Allow the switch to send DNS queries to a DNS server to resolve a DNS

domain name. The DNS is enabled by default.

• Disable. Prevent the switch from sending DNS queries.

2. Enter the DNS default domain name to include in DNS queries. When the system is

performing a lookup on an unqualified hostname, this field is provided as the domain name (for example, if default domain name is netgear.com and the user enters test, then test is changed to test.netgear.com to resolve the name).

3. To specify the DNS server to which the switch sends DNS queries, enter an IP address in

standard IPv4 dot notation in the DNS Server Address and click Add. The server appears in the list below. You can specify up to eight DNS servers. The precedence is set in the order created.

4. To remove a DNS server from the list, select the check box next to the server you want to

remove and click Delete. If no DNS server is specified, the check box is global and will delete all the DNS servers listed.

5. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

6. Click Apply to send the updated configuration to the switch. Configuration changes take

effect immediately.

Host Configuration

Use this page to manually map host names to IP addresses or to view dynamic DNS mappings.

To access this page, click System  Management  DNS  Host Configuration.

Chapter 2: Configuring System Information | 51

Page 52

To add a static entry to the local DNS table:

GS752TXS Smart Switch Software Administration Manual

1. Specify the static host name to add. Enter up to 158 characters.

2. Specify the IP address in standard IPv4 dot notation to associate with the hostname.

3. Click Add. The entry appears in the list below.

4. To remove an entry from the static DNS table, select the check box next to the entry and

click Delete.

5. To change the hostname or IP address in an entry, select the check box next to the entry

and enter the new information in the appropriate field, and then click Apply.

6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

The Dynamic Host Configuration table shows host name-to-IP address entries that the switch has learned. The following table describes the dynamic host fields:

Field Description

Host Lists the host name you assign to the specified IP address.

Total Amount of time since the dynamic entry was first added to the table.

Elapsed Amount of time since the dynamic entry was last updated.

Type The type of the dynamic entry.

Addresses Lists the IP address associated with the host name.

Click Refresh to refresh the table with the most current data from the switch. Click Clear to delete Dynamic Host Entries. The table will be repopulated with entries as they

are learned.

52 | Chapter 2: Configuring System Information

Page 53

GS752TXS Smart Switch Software Administration Manual

Green Ethernet Configuration

Use this page to configure Green Ethernet features. Using the Green Ethernet Configuration features allows for power consumption savings.

To access this page, click System  Management  Green Ethernet  Green Ethernet Configuration.

To configure the Green Ethernet Configuration feature:

1. Enable or disable the Auto Power Down Mode.

• Enable. When the port link is down, the PHY will automatically go down for a short

period of time and then wake up to check link pulses. This allows the port to continue to perform auto-negotiation while consuming less power when no link partner is present.

• Disable. Provide full power to the PHY even if no link partner is present.

2. Enable or disable the Short Cable Mode.

• Enable. When the port link up at 1 Gbps speed, the cable length test is performed

and if the length of the cable is <10m, then PHYs are put into the low power mode so only enough power is used to support a short cable.

• Disable. Provide full power to the PHY even if no link partner is present.

3. Enable or disable the EEE Mode.

• Enable this option by selecting the corresponding line on the radio button.

• Disable. Provide full power to the PHY even if no link partner is present.

4. Click Apply to apply the change to the system. Configuration changes take effect

immediately.

Chapter 2: Configuring System Information | 53

Page 54

GS752TXS Smart Switch Software Administration Manual

5. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

Green Ethernet Interface Configuration

Use this page to configure Green Ethernet Interface Configuration feature. Using this features allows for proper port configuration and the ability to enable or disable the Auto Power Down, Short Cable, and EEE Modes.

To access this page, click System

 Management  Green Ethernet  Green Ethernet

Interface Configuration.

To configure the Green Ethernet Interface feature:

1. Click on the interface settings for a physical port. Select the following parameters:

• Go To Interface - Enter the Port in unit/slot/port format and click on the Go button.

The entry corresponding to the specified port will be selected.

• Port - Selects the interface for which data is to be displayed or configured.

• Auto Power Down Mode - This object determines whether or not auto power down

mode from green feature is enabled for particular port. The factory default is disable. When the port link is down the PHY will automatically go down for short period of time, and then wake up to check link pulses. This will allow performing auto-negotiation and saving power consumption when no link partner is present.

• Short Cable Mode - This object determines whether or not short cable mode from

green feature is enabled for particular port. The factory default is disable. When the port link up at 1 Gbps speed, the cable length test is performed and if the length of the cable is less than 10m, PHYs are put into low power mode so enough power is used to support a short cable. The EEE and the Short Cable modes are not supposed to be active simultaneously.

54 | Chapter 2: Configuring System Information

Page 55

GS752TXS Smart Switch Software Administration Manual

• EEE Mode - This object determines whether or not Energy Efficient Ethernet (EEE)

from green feature is enabled for particular port. The EEE and the Short Cable modes are not supposed to be active simultaneously.

2. Click Apply to apply the change to the system. Configuration changes take effect

immediately.

3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

Green Ethernet Detail

Use this page to configure Green Ethernet Detail feature. Using the Green Ethernet features allows for power consumption savings.

To access this page, click System  Management  Green Ethernet  Green Ethernet Detail.

To configure the Green Ethernet Detail feature:

1. Within the Local Device Information Interface, view or select the following:

Chapter 2: Configuring System Information | 55

Page 56

GS752TXS Smart Switch Software Administration Manual

• Cumulative Energy Saved on this port due to Green Mode(s) (Watts * Hours) -

This shows the energy savings per port, per hour.

• Energy Detect Admin Mode - Select Enable or Disable to enter this mode.

• Operational Status - This shows the Green Mode operational status, either Inactive

or Active.

• Reason - This shows the Admin status, either Admin Down or Admin Up.

• Short Reach Admin Mode - Select Enable or Disable enter Short Reach Admin

Mode.

• Operational Status - This shows the operational status of the port, either Active or

Inactive.

• Reason - This shows the reason why the port is either Active or Inactive.

• EEE Admin Mode - Select Enable or Disable to enter EEE Admin Mode.

• Rx Low Power Idle Event Count - This shows the Rx Low Power Idle Event count on

the port.

• Rx Low Power Idle Duration (uSec) - This shows the Rx Low Power Idle Event

count on the port.

• Tx Low Power Idle Event Count - This shows the Tx Low Power Idle Event count on

the port.

• Tx Low Power Idle Duration (uSec) - This shows the Tx Low Power Idle duration on

the port.

• Tw_sys_tx (uSec) - This shows the time duration the Tx_sys_tx present on the port.

• Tw_sys_tx Echo (uSec) - This shows the time duration the Tw_sys_tx Echo present

on the port.

• Tw_sys_rx (uSec) - This shows the time duration the Tw_sys_rx present on the port.

• Tw_sys_rx Echo (uSec) - This shows the time duration the Tw_sys_rx Echo present

on the port.

• Fallback Tw_sys (uSec) - This shows the time duration the Fallback Tw_sys present

on the port.

• Tx_dll_enabled - This shows if the Tx_dll is enabled, select either Yes or No.

• Tx_dll_ready - This shows if the Tx_dl is ready, select either Yes or No.

• Rx_dll_enabled - This shows if the Rx_dll is enabled, select either Yes or No.

• Rx_dll_ready - This shows if the Rx_dll is ready, select either Yes or No.

• Time Since Counters Last Cleared - This shows time since this port was last

cleared.

2. View or select the following Remote Device Information:

• Interface - If local interfaces are enabled to receive LLDP data, this allows you to

select the remote device and retrieve port information.

• Remote ID - This shows if remote ID.

• Remote Tw_sys_tx (uSec) - This shows the time duration of the Remote Tw_sys_tx

on the port.

56 | Chapter 2: Configuring System Information

Page 57

GS752TXS Smart Switch Software Administration Manual

• Remote Tw_sys_tx Echo (uSec) - This shows the time duration of the Remote

Tw_sys_tx Echo on the port.

• Remote Tw_sys_rx (uSec) - This shows the time duration of the Remote Tw_sys_rx

on the port.

• Remote Tw_sys_rx Echo (uSec) - This shows the time duration of the Remote

Remote Tw_sys_rx Echo on the port.

• Remote Fallback Tw_sys (uSec) - This shows the time duration of the Remote

Remote Fallback Tw_sys on the port.

Green Ethernet Summary

This page summarizes the Green Ethernet Summary settings currently in use. To access this page, click System

Summary.

 Management  Green Ethernet  Green Ethernet

1. In the Green Mode Statistics Summary section, view or select the following:

• Current Power Consumption by all ports in Stack - This shows the power

consumption (in mWatts) of the all the ports in the stack.

• Estimated Percentage Power Saving per stack - This shows the percentage of

power saving per stack.

• Cumulative Energy Saving per Stack (Watts*Hours) - This shows the cumulative

percentage of energy savings per stack.

• Unit - This shows the number of units in Green Mode.

Chapter 2: Configuring System Information | 57

Page 58

GS752TXS Smart Switch Software Administration Manual

• Green Features supported on this unit - This shows the which feature(s) are

supported on this unit.

• Interface - Use this to select the interface to be displayed or configured.

• Energy Detect Admin Mode - Select Enable or Disable to enter Energy Detect

Admin Mode.

• Energy Detect Operational Status - This shows if the Energy Detect Operational

Status is either Active or Inactive.

• Short Reach Admin Mode - Select Enable or Disable to enter Short Reach Admin

Mode.

• Short Reach Operational Status - This shows if the Short Reach Admin Mode is

either Active or Inactive.

• EEE Admin Mode - Select Enable or Disable to enter EEE Admin Mode.

2. Click Refresh to refresh the page with the most current data from the switch.

Green Ethernet LPI History

Use this page to configure Green Ethernet LPI History feature. Viewing the Green Ethernet LPI History feature allows you to view the Green Ethernet history of each stack.

To access this page, click System  Management  Green Ethernet  Green Ethernet LPI

History.

1. In the Port GreenMode EEE History section, view or select the following:

• Interface - Use this to select the interface to be displayed or configured.

• Sampling Interval - 36000 (30 to 36000)

• Max Samples to keep - 168 (1 to 168)

58 | Chapter 2: Configuring System Information

Page 59

GS752TXS Smart Switch Software Administration Manual

• Percentage LPI time per Stack - It will get calculated based on the sampling interval

and values fetched during sampling.

• Sample No. - It keeps track of every sample in the table. When the number increases

to maximum it will be rolled over.

• Percentage Time spent in LPI mode since last sample - It will get calculated

based on the sampling interval and values fetched during sampling.

• Percentage Time spent in LPI mode since last reset - It will get calculated based

on the sampling interval and values fetched during sampling.

2. Click Apply to send the updated configuration to the switch. Configuration changes take

effect immediately.

3. Click Refresh to refresh the page with the most current data from the switch.

SNMP

From SNMP link under the System tab, you can configure SNMP settings for SNMP V1/V2 and SNMPv3.

From the SNMP link, you can access the following pages:

• SNMPV1/V2 on page 59

• Trap Flags on page 62

• SNMP v3 User Configuration on page 63

SNMPV1/V2

The pages under the SNMPV1/V2 menu allow you to configure SNMP community information, traps, and trap flags.

Community Configuration

To display this page, click System  SNMP  SNMP V1/V2  Community Configuration.

By default, two SNMP Communities exist:

• Private, with Read/Write privileges and status set to Enable.

• Public, with Read Only privileges and status set to Enable.

These are well-known communities. Use this page to change the defaults or to add other communities. Only the communities that you define using this page will have access to the switch using the SNMPv1 and SNMPv2c protocols. Only those communities with read/write level access can be used to change the configuration using SNMP.

Use this page when you are using the SNMPv1 and SNMPv2c protocol.

Chapter 2: Configuring System Information | 59

Page 60

To configure SNMP communities:

GS752TXS Smart Switch Software Administration Manual

1. To add a new SNMP community, enter community information in the available fields

described below, and then click Add.

• Management Station IP. Specify the IP address of the management station.Together,

the Management Station IP and the Management Station IP Mask denote a range of IP addresses from which SNMP clients may use that community to access this device. If either (Management Station IP or Management Station IP Mask) value is

0.0.0.0, access is allowed from any IP address. Otherwise, every client’s address is ANDed with the mask, as is the Management Station IP Address; and, if the values are equal, access is allowed. For example, if the Management Station IP and Management Station IP Mask parameters are 192.168.1.0/255.255.255.0, then any client whose address is 192.168.1.0 through 192.168.1.255 (inclusive) will be allowed access. To allow access from only one station, use a Management Station IP Mask value of 255.255.255.255, and use that machine’s IP address for Client Address.

• Management Station IP Mask. Specify the subnet mask to associate with the

management station IP address.

• Community String. Specify a community name. A valid entry is a case-sensitive

string of up to 16 characters.

• Access Mode. Specify the access level for this community by selecting Read/Write or

Read Only from the menu.

• Status. Specify the status of this community by selecting Enable or Disable from the

pull down menu. If you select Enable, the Community Name must be unique among all valid Community Names or the set request will be rejected. If you select Disable, the Community Name will become invalid.

2. To modify an existing community, select the check box next to the community, change the

desired fields, and then click Apply. Configuration changes take effect immediately.

3. To delete a community, select the check box next to the community and click Delete.

60 | Chapter 2: Configuring System Information

Page 61

GS752TXS Smart Switch Software Administration Manual

4. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

Trap Configuration

This page displays an entry for every active Trap Receiver. To access this page, click System

 SNMP  SNMP V1/V2  Trap Configuration.

To configure SNMP trap settings:

1. To add a host that will receive SNMP traps, enter trap configuration information in the

available fields described below, and then click Add.

• Recipients IP. The address in x.x.x.x format to receive SNMP traps from this device.

• Version. The trap version to be used by the receiver from the menu.

• SNMP v1: Uses SNMP v1 to send traps to the receiver.

• SNMP v2: Uses SNMP v2 to send traps to the receiver.

• Community String. The community string for the SNMP trap packet to be sent to the

trap manager. This may be up to 16 characters and is case sensitive.

• Status. Select the receiver’s status from the menu:

• Enable: Send traps to the receiver.

• Disable: Do not send traps to the receiver.

2. To modify information about an existing SNMP recipient, select the check box next to the

recipient, change the desired fields, and then click Apply. Configuration changes take effect immediately.

3. To delete a recipient, select the check box next to the recipient and click Delete.

4. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

Chapter 2: Configuring System Information | 61

Page 62

GS752TXS Smart Switch Software Administration Manual

Trap Flags

The pages in the Trap Manager folder allow you to view and configure information about SNMP traps the system generates.

Use the Trap Flags page to enable or disable traps the switch can send to an SNMP manager. When the condition identified by an active trap is encountered by the switch, a trap message is sent to any enabled SNMP Trap Receivers, and a message is written to the trap log.

To access the Trap Flags page, click System

 SNMP  SNMP V1/V2  Trap Flags.

To configure the trap flags:

1. From the Authentication field, enable or disable activation of authentication failure

traps by selecting the corresponding button. The factory default is Enable.

2. From the Link Up/Down field, enable or disable activation of link status traps by selecting

the corresponding button. The factory default is Enable.

3. From the Spanning Tree field, enable or disable activation of spanning tree traps by

selecting the corresponding button. The factory default is Enable.

4. If you make any changes to this page, click Apply to send the updated configuration to the

switch. Configuration changes take effect immediately.

5. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

62 | Chapter 2: Configuring System Information

Page 63

GS752TXS Smart Switch Software Administration Manual

SNMP v3 User Configuration

This is the configuration for SNMP v3. To access this page, click System

 SNMP  SNMP V3  User Configuration.

The SNMPv3 Access Mode is a read-only field that shows the access privileges for the user account. The admin account always has Read/Write access, and all other accounts have Read Only access.

To configure SNMPv3 settings for the user account:

1. In the Authentication Protocol field, specify the SNMPv3 Authentication Protocol setting

for the selected user account. The valid Authentication Protocols are None, MD5, or SHA. If you select:

• None: The user will be unable to access the SNMP data from an SNMP browser.

• MD5 or SHA: The user login password will be used as SNMPv3 authentication

password, and you must therefore specify a password. The password must be eight characters in length.

2. In the Encryption Protocol field, choose whether to encrypt SNMPv3 packets transmitted by

the switch.

• None. Do not encrypt the contents of SNMPv3 packets transmitted from the switch.

• DES. Encrypt SNMPv3 packets using the DES encryption protocol.

3. If you selected DES in the Encryption Protocol field, enter the SNMPv3 Encryption Key here.

Otherwise, this field is ignored. Valid keys are 0 to 15 characters long.

4. Click Apply to send the updated configuration to the switch. Configuration changes take

effect immediately.

5. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

Chapter 2: Configuring System Information | 63

Page 64

GS752TXS Smart Switch Software Administration Manual

LLDP

The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN.

From the LLDP link, you can access the following pages:

• LLDP Configuration on page 64

• LLDP Port Settings on page 65

• LLDP-MED Network Policy on page 67

• LLDP-MED Port Settings on page 68

• Local Information on page 69

• Neighbors Information on page 71

LLDP is a one-way protocol; there are no request/response sequences. Information is advertised by stations implementing the transmit function, and is received and processed by stations implementing the receive function. The transmit and receive functions can be enabled/disabled separately per port. By default, both transmit and receive are disabled on all ports. The application is responsible for starting each transmit and receive state machine appropriately, based on the configured status and operational state of the port.

The Link Layer Discovery Protocol-Media Endpoint Discovery (LLDP-MED) is an enhancement to LLDP with the following features:

• Auto-discovery of LAN policies (such as VLAN, Layer 2 Priority, and DiffServ settings),

enabling plug and play networking.

• Device location discovery for creation of location databases.

• Extended and automated power management of Power over Ethernet endpoints.

• Inventory management, enabling network administrators to track their network devices

and determine their characteristics (manufacturer, software and hardware versions, serial/asset number).

LLDP Configuration

Use the LLDP Configuration page to specify LLDP and LLDP-MED parameters that are applied to the switch.

To display the LLDP Configuration page, click System > LLDP > Basic > LLDP

Configuration.

Note: You can also access the LLDP Configuration page by clicking

System > LLDP > Advanced > LLDP Configuration.

64 | Chapter 2: Configuring System Information

Page 65

GS752TXS Smart Switch Software Administration Manual

To configure global LLDP settings:

1. Configure the following LLDP properties.

• TLV Advertised Interval. Specify the interval at which frames are transmitted. The

default is 30 seconds, and the valid range is 5–32768 seconds.

• Hold Multiplier. Specify multiplier on the transmit interval to assign to Time-to-Live

(TTL). The default is 4, and the range is 2–10.

• Reinitializing Delay. Specify the delay before a reinitialization. The default is 2

seconds, and the range is 1–10 seconds.

• Transmit Delay. Specify the interval for the transmission of notifications. The default

is 5 seconds, and the range is 5–3600 seconds.

2. To change the LLDP-MED properties in the Fast Start Duration field, specify the number of

LLDP packets sent when the LLDP-MED Fast Start mechanism is initialized, which occurs when a new endpoint device links with the LLDP-MED network connectivity device. The default value is 3, and the range is from 1–10.

3. Click Apply to apply the new settings to the system.

4. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

5. Click Refresh to update the screen with the current information.

LLDP Port Settings

Use the LLDP Port Settings page to specify LLDP parameters that are applied to a specific interface.

To display the LLDP Port Settings page, click System  LLDP  Advanced  LLDP Port

Settings.

Chapter 2: Configuring System Information | 65

Page 66

GS752TXS Smart Switch Software Administration Manual

To configure LLDP port settings:

1. Change the LLDP port settings described below:

• Interface. Specifies the port to be affected by these parameters.

• Admin Status. Select the status for transmitting and receiving LLDP packets:

• Tx Only: Enable only transmitting LLDP PDUs on the selected ports.

• Rx Only: Enable only receiving LLDP PDUs on the selected ports.

• Tx and Rx: Enable both transmitting and receiving LLDP PDUs on the selected

ports.

• Disabled: Do not transmit or receive LLDP PDUs on the selected ports.

• Management IP Address. Choose whether to advertise the management IP address

from the interface. The possible field values are:

• Stop Advertise: Do not advertise the management IP address from the interface.

• Auto Advertise: Advertise the current IP address of the device as the

management IP address.

• Notification. When notifications are enabled, LLDP interacts with the Trap Manager to

notify subscribers of remote data change statistics. The default is Disabled.

• Optional TLV(s). Enable or disable the transmission of optional type-length value

(TLV) information from the interface. The TLV information includes the system name, system description, system capabilities, and port description. To configure the System Name, see Management on page 33. To configure the Port Description, see Ports on page 89.

2. If you make any changes to the page, click Apply to apply the new settings to the system.

3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

66 | Chapter 2: Configuring System Information

Page 67

GS752TXS Smart Switch Software Administration Manual

LLDP-MED Network Policy

This page displays information about the LLPD-MED network policy TLV transmitted in the LLDP frames on the selected local interface.

To display this page, click System  LLDP  Advanced  LLDP-MED Network Policy.

From the Interface menu, select the interface with the information to view. The following table describes the LLDP-MED network policy information that displays on the screen.

Field Description

Network Policy Number Specifies the policy number.

Application Specifies the media application type associated with the policy, which can be

one of the following:

• Unknown

• Voice

• Guest Voice

• Guest Voice Signaling

• Softphone Voice

• Video Conferencing

• Streaming Video

• Video Signaling

A port can receive multiple application types. The application information is displayed only if a network policy TLV has been transmitted from the port.

VLAN ID Specifies the VLAN ID associated with the policy.

VLAN Type Specifies whether the VLAN associated with the policy is tagged or

untagged.

Chapter 2: Configuring System Information | 67

Page 68

GS752TXS Smart Switch Software Administration Manual

Field Description

User Priority Specifies the priority associated with the policy.

DSCP

Specifies the DSCP associated with a particular policy type.

Click Refresh to refresh the page with the most current data from the switch.

LLDP-MED Port Settings

Use this page to enable LLDP-MED mode on an interface and configure its properties. To display this page, click System

 LLDP  Advanced  LLDP-MED Port Settings.

To configure LLDP-MED settings for a port:

1. From the Port field, select the port to configure.

2. From the LLDP-MED Status field, enable or disable the LLDP-MED mode for the selected

interface.

3. From the Notification field, specify whether the port should send a topology change

notification if a device is connected or removed.

4. From the Transmit Optional TLVs field, specify whether the port should transmit optional

type length values (TLVs) in the LLDP PDU frames. If enabled, the following LLDP-MED TLVs are transmitted:

• MED Capabilities

• Network Policy

• Location Identification

• Extended Power via MDI: PSE

68 | Chapter 2: Configuring System Information

Page 69

GS752TXS Smart Switch Software Administration Manual

• Extended Power via MDI: PD

• Inventory

5. Click Apply to send the updated configuration to the switch. These changes occur

immediately and the configuration will be saved.

6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

Local Information

Use the LLDP Local Information page to view the data that each port advertises through LLDP.

To display the LLDP Local Device Information page, click System  Advanced  LLDP  Local Information.

The following table describes the LLDP local information that displays for each port.

Field Description

Interface Select the interface with the information to display. Port ID Subtype Identifies the type of data displayed in the Port ID field.

Port ID Identifies the physical address of the port.

Port Description Identifies the user-defined description of the port. To configure the Port

Description, see

Advertisement Displays the advertisement status of the port.

Ports on page 89.

Chapter 2: Configuring System Information | 69

Page 70

GS752TXS Smart Switch Software Administration Manual

Click Refresh to refresh the page with the most current data from the switch.

To view additional details about a port, click the name of the port in the Interface column of the Port Information table.

A popup window displays information for the selected port.

The following table describes the detailed local information that displays for the selected port.

Field Description Managed Address

Address SubType Displays the type of address the management interface uses, such as an IPv4

address.

Address Displays the address used to manage the device.

Interface SubType Displays the port subtype.

Interface Number Displays the number that identifies the port.

MAC/PHY Details

Auto-Negotiation Supported Specifies whether the interface supports port-speed auto-negotiation. The

possible values are True or False.

Auto-Negotiation Enabled Displays the port speed auto-negotiation support status. The possible values

are True (enabled) or False (disabled).

Auto Negotiation Advertised Capabilities

Displays the port speed auto-negotiation capabilities such as 1000BASE-T half-duplex mode or 100BASE-TX full-duplex mode.

70 | Chapter 2: Configuring System Information

Page 71

GS752TXS Smart Switch Software Administration Manual

Field Description

Operational MAU Type Displays the Medium Attachment Unit (MAU) type. The MAU performs

physical layer functions, including digital data conversion from the Ethernet interface collision detection and bit injection into the network.

MED Details

Capabilities Supported Displays the MED capabilities enabled on the port.

Current Capabilities Displays the TLVs advertised by the port.

Device Class Network Connectivity indicates the device is a network connectivity device.

Network Policies

Application Type Specifies the media application type associated with the policy.

VLAN ID Specifies the VLAN ID associated with the policy.

VLAN Type Specifies whether the VLAN associated with the policy is tagged or untagged.

User Priority Specifies the priority associated with the policy.

DSCP

Specifies the DSCP associated with a particular policy type.

Neighbors Information

Use the LLDP Neighbors Information page to view the data that a specified interface has received from other LLDP-enabled systems.

To display the LLDP Neighbors Information page, click System  LLDP  Advanced 

Neighbors Information.

Chapter 2: Configuring System Information | 71

Page 72

GS752TXS Smart Switch Software Administration Manual

The following table describes the information that displays for all LLDP neighbors that have been discovered.

Field Description

MSAP Entry Displays the Media Service Access Point (MSAP) entry number for the

remote device.

Local Port Displays the interface on the local system that received LLDP information

from a remote system.

Chassis ID Subtype Identifies the type of data displayed in the Chassis ID field on the remote

system.

Chassis ID Identifies the remote 802 LAN device's chassis. Port ID Subtype Identifies the type of data displayed in the remote system’s Port ID field.

Port ID Identifies the physical address of the port on the remote system from which

the data was sent.

System Name Identifies the system name associated with the remote device. If the field is

blank, the name might not be configured on the remote system.

Click Refresh to update the information on the screen with the most current data.

To view additional information about the remote device, click the link in the MSAP Entry field.

A popup window displays information for the selected port.

72 | Chapter 2: Configuring System Information

Page 73

GS752TXS Smart Switch Software Administration Manual

Field Description Port Details

Local Port Displays the interface on the local system that received LLDP information

from a remote system.

MSAP Entry Displays the Media Service Access Point (MSAP) entry number for the

remote device.

Basic Details

Chassis ID Subtype Identifies the type of data displayed in the Chassis ID field on the remote

system.

Chassis ID Identifies the remote 802 LAN device's chassis.

Port ID Subtype Identifies the type of data displayed in the remote system’s Port ID field.

Port ID Identifies the physical address of the port on the remote system from which

the data was sent.

Port Description Identifies the user-defined description of the port.

System Name Identifies the system name associated with the remote device.

System Description Specifies the description of the selected port associated with the remote

system.

System Capabilities Specifies the system capabilities of the remote system.

Managed Addresses

Address SubType Specifies the type of the management address.

Address Specifies the advertised management address of the remote system.

Interface SubType Specifies the port subtype.

Interface Number Identifies the port on the remote device that sent the information.

MAC/PHY Details

Auto-Negotiation Supported Specifies whether the remote device supports port-speed auto-negotiation.

The possible values are True or False

Auto-Negotiation Enabled Displays the port speed auto-negotiation support status. The possible values

are True or False

Auto Negotiation Advertised Capabilities

Displays the port speed auto-negotiation capabilities.

Operational MAU Type Displays the Medium Attachment Unit (MAU) type. The MAU performs

physical layer functions, including digital data conversion from the Ethernet interface collision detection and bit injection into the network.

Chapter 2: Configuring System Information | 73

Page 74

GS752TXS Smart Switch Software Administration Manual

Field Description MED Details

Capabilities Supported Specifies the supported capabilities that were received in MED TLV from the

device.

Current Capabilities Specifies the advertised capabilities that were received in MED TLV from the

device.

Device Class Displays the LLDP-MED endpoint device class. The possible device classes

are:

• Endpoint Class 1 Indicates a generic endpoint class, offering basic LLDP

services.

• Endpoint Class 2 Indicates a media endpoint class, offering media

streaming capabilities as well as all Class 1 features.

• Endpoint Class 3 Indicates a communications device class, offering all

Class 1 and Class 2 features plus location, 911, Layer 2 switch support and device information management capabilities.

Hardware Revision Displays the hardware version advertised by the remote device.

Firmware Revision Displays the firmware version advertised by the remote device.

Software Revision Displays the software version advertised by the remote device.

Serial Number Displays the serial number advertised by the remote device.

Model Name Displays the model name advertised by the remote device.

Asset ID Displays the asset ID advertised by the remote device.

Location Information

Civic Displays the physical location, such as the street address, the remote device

has advertised in the location TLV. For example, 123 45th St. E. The field value length range is 6–160 characters.

Coordinates Displays the location map coordinates the remote device has advertised in

the location TLV, including latitude, longitude, and altitude.

ECS ELIN Displays the Emergency Call Service (ECS) Emergency Location

Identification Number (ELIN) the remote device has advertised in the location TLV. The field range is 10–25.

Unknown Displays unknown location information for the remote device.

Network Policies

Application Type Specifies the media application type associated with the policy advertised by

the remote device.

VLAN ID Specifies the VLAN ID associated with the policy.

VLAN Type Specifies whether the VLAN associated with the policy is tagged or untagged.

User Priority Specifies the priority associated with the policy.

DSCP Specifies the DSCP associated with a particular policy type.

74 | Chapter 2: Configuring System Information

Page 75

GS752TXS Smart Switch Software Administration Manual

Field Description LLDP Unknown TLVs

Type Displays the unknown TLV type field.

Value Displays the unknown TLV value field.

Services — DHCP Snooping

DHCP Snooping is a useful feature that provides security by filtering untrusted DHCP messages and by building and maintaining a DHCP snooping binding table. An untrusted message is a message that is received from outside the network or firewall and that can cause traffic attacks within your network. The DHCP snooping binding table contains the MAC address, IP address, lease time, binding type, VLAN number, and interface information that corresponds to the local untrusted interfaces of a switch. An untrusted interface is an interface that is configured to receive messages from outside the network or firewall. A trusted interface is an interface that is configured to receive only messages from within the network.

DHCP snooping acts like a firewall between untrusted hosts and DHCP servers. It also provides way to differentiate between untrusted interfaces connected to the end-user and trusted interfaces connected to the DHCP server or another switch.

From the Services link, you can access the following pages:

• Global Configuration on page 75

• Interface Configuration on page 76

• Binding Configuration on page 77

• Persistent Configuration on page 79

• Statistics on page 79

Global Configuration

To access the DHCP Snooping Global Configuration page, click System Services  DHCP Snooping

 Global Configuration.

Chapter 2: Configuring System Information | 75

Page 76

GS752TXS Smart Switch Software Administration Manual

To configure DHCP snooping global settings:

1. In the DHCP Snooping Mode field, select Enable or Disable to turn the DHCP

Snooping feature on or off. The factory default is disabled.

2. In the MAC Address Validation field, select Enable or Disable to turn the DHCP

Snooping feature on or off. The factory default is disabled.

3. Click Apply to apply the change to the system. Configuration changes take effect

immediately.

4. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

5. Enter the VLAN in the VLAN ID field for which the DHCP Snooping Mode is to be enabled.

6. Select Enable or Disable in the DHCP Snooping Mode field to enable or disable the

DHCP Snooping feature for entered VLAN. The factory default is disabled.

Interface Configuration

Use the DHCP Snooping Interface Configuration page to view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded. If a port is configured as untrusted, any DHCP (or BootP) responses received on that port are discarded.

To access the DHCP Snooping Interface Configuration page, click System

DHCP Snooping

76 | Chapter 2: Configuring System Information

 Interface Configuration.

 Services 

Page 77

GS752TXS Smart Switch Software Administration Manual

To configure DHCP snooping interface settings:

1. In the Go To Interface field, enter the Interface in unit/slot/port format and click on the

Go button. The entry corresponding to the specified interface, will be selected.

2. To configure DHCP snooping interface settings for a physical port, click 1, LAGs, or ALL.

3. Select the check box next to the port or LAG to configure. You can select multiple ports and

LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces.

4. Choose the trust mode for the selected port(s) or LAG(s). If it is enabled, DHCP snooping

application considers as port trusted. The factory default is disabled.

5. Choose Logging Invalid Packets. If it is enabled, DHCP snooping application logs invalid

packets on this interface. The factory default is disabled.

6. Choose Rate Limit (pps) to specify the rate limit value for DHCP Snooping purpose. If the

incoming rate of DHCP packets exceeds the value of this object for consecutively burst interval seconds, the port will be shutdown. If this value is N/A, then burst interval has no meaning, hence it is disabled. The default value is N/A. The range of Rate Limit is (0 to 300).

7. Choose Burst Interval (secs) to specify the burst interval value for rate limiting purpose on

this interface. If the rate limit is N/A, then the burst interval has no meaning and it is N/A. The default value is N/A. The range of Burst Interval is (1 to 15).

8. Click Apply to apply the change to the system. Configuration changes take effect

immediately.

9. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

Binding Configuration

To access the DHCP Snooping Binding Configuration page, click System Services  DHCP Snooping

 Binding Configuration.

Chapter 2: Configuring System Information | 77

Page 78

GS752TXS Smart Switch Software Administration Manual

To configure DHCP binding settings:

1. For DHCP Snooping Static Binding Configuration, in the Interface field, select the

interface to add a binding into the DHCP snooping database.

2. In the MAC Address field, specify the MAC address for the binding to be added. This is the

Key to the binding database.

3. In the VLAN ID field, select the VLAN from the list for the binding rule. The range of the

VLAN ID is (1 to 4093).

4. In the IP Address field, specify a valid IP Address for the binding rule.

5. Click Add to add the DHCP snooping binding entry into the database.

6. Click Delete to delete the selected static entries from the database.

7. Click Clear to delete all DHCP Snooping binding entries.

8. Click Refresh to refresh the data on the screen with the latest DHCP Snooping Dynamic

Binding information.

9. Click Apply to apply the change to the system. Configuration changes take effect

immediately.

10. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

For DHCP Snooping Dynamic Binding Configuration, the Interface field displays the interface to which a binding entry in the DHCP snooping database.

The MAC Address field displays the MAC address for the binding in the binding database. The VLAN ID field displays the VLAN for the binding entry in the binding database. The range

of the VLAN ID is 1 to 4093. The IP Address field displays the IP Address for the binding entry in the binding database.

78 | Chapter 2: Configuring System Information

Page 79

GS752TXS Smart Switch Software Administration Manual

The Lease Time field displays the remaining Lease time for the Dynamic entries.

Persistent Configuration

To access the DHCP Snooping Persistent Configuration page, click System Services  DHCP Snooping

 Persistent Configuration.

To configure DHCP snooping persistent settings:

1. Select the Local or Remote in the Store

field. Local means that the binding table will be

stored locally and Remote means that the binding table will be stored in the remote TFTP server. Local selection disables the Remote objects like Remote File Name and Remote

IP Address.

2. The Remote IP Address field configures Remote IP Address on which the snooping

database will be stored when Remote is selected.

3. The Remote File Name field configures Remote File Name to store the database when

Remote is selected.

4. The Write Delay field configures the maximum write time to write the database into local or

remote. The range is 15 to 86400.

5. Click Apply to apply the change to the system. Configuration changes take effect

immediately.

6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

Statistics

To access the DHCP Snooping Statistics page, click System Services  DHCP Snooping  Statistics.

Chapter 2: Configuring System Information | 79

Page 80

GS752TXS Smart Switch Software Administration Manual

Use the DHCP Snooping Statistics page to view the DHCP Snooping statistics.

1. Click on the interface settings for a physical port, click 1, LAGs, or ALL.

• The Interface field shows the untrusted and snooping enabled interface for which

statistics to be displayed.

• The MAC Verify Failures field shows the number of packets that were dropped by

DHCP Snooping as there is no matching DHCP Snooping binding entry found.

• The Client Ifc Mismatch field shows the number of DHCP messages that are

dropped based on source MAC address and client HW address verification.

• The DHCP Server Msgs Received field shows the number of Server messages that

are dropped on an un trusted port.

2. Click Clear to clear all interfaces statistics.

3. Click Refresh to refresh the data on the screen with the latest statistics.

80 | Chapter 2: Configuring System Information

Page 81

3. Configuring Stacking Switches

Stacking Overview

A stackable switch is a switch that is fully functional operating standalone, but can also be set-up to operate together with up to six other switches with this group of switches showing the characteristics of a single switch while having the port capacity of the sum of the combined switches.

One of the switches in the stack controls the operation of the stack. This switch is called the stack master. The remaining switches in the stack are stack members. The stack members use stacking technology to behave and work together as a unified system. Layer 2 and above protocols present the entire switch stack as a single entity to the network.

The stack master is the single point of stack-wide management. From the stack master, you configure the following:

• System-level (global) features that apply to all stack members

• Interface-level features for all interfaces on any stack member

A switch stack is identified in the network by its network IP address. The network IP address is assigned according to the MAC address of the stack master. Every stack member is uniquely identified by its own stack member number.

All stack members are eligible stack masters. If the stack master becomes unavailable, the remaining stack members participate in electing a new stack master from among themselves. The following factors determine which switch is elected the stack master:

• The switch that is master always has priority to retain the role of master

• Assigned priority

• MAC address

All stack members must run the same software version to ensure compatibility between stack members. The software versions on all stack members, including the stack master, must be the same. This helps ensure full compatibility in the stack protocol version among the stack members. If a stack member is running a software version that is not the same as the stack master, then the stack member is not allowed to join the stack.

The stack master contains the saved and running configuration files for the switch stack. The configuration files include the system-level settings for the switch stack and the interface-level

Chapter 3: Configuring Stacking Switches | 81

Page 82

GS752TXS Smart Switch Software Administration Manual

settings for all stack members. Each stack member retains a copy of the saved file for backup purposes.

If the master is removed from the stack, another member will be elected master, and will then run from that saved configuration.

The Stack Master Switch performs a consistency check to ensure that all units in the stack are running the same version of agent. Using the information gathered during Topology Discovery, the Master Switch can determine whether all units are running the same version of agent. If the versions do not match, then the ports on the Subordinate Switch will not become valid for operation. This condition is known as the Special Stacking Mode. The administrator will have the ability to synchronize the software on the stack unit with the software that is running on the Master Switch. Normally, the software is automatically distributed to all units in the stack after downloading new code. But there can be instances where a unit with older code is plugged in to the stack. In this scenario, the user needs to enable the ‘Stack Firmware synchronization’ command to push the code from the Master Switch to the Subordinate switch. This ensures that the Stack switches are in Sync with the rest of the participating switches in the Stack.

The Master Switch will automatically distribute firmware to subordinate switches when the administrator initiates a code download. This feature ensures that all stack members are synchronized when reloading the stack.

Stack Features

• The stack supports up to 6 switches (GS752TXS only).

• Support single IP Address management through web and SCC.

• Support for master-slave configuration.

• Master retains configuration for entire stack.

• Automatic detection of new members, with synchronization of firmware (upgrade or

downgrade as needed).

• Configuration updates download is supported across the stack through single operation.

• Support automatic master fail-over. Fully resilient stack with chain and ring topology.

• Hot swappable (insertion and removal) is supported.

• You are be provided with stack number information and automatic stacking set-up option.

Factory Defaults Reset Behavior

The configurations applied on GS752TXS would be automatically saved to the flash. The Master Switch will automatically distribute the configuration to the Subordinate Switches. This will allow for the scenario where the Master Switch may become unavailable, and a Subordinate Switch can become the new Master Switch, and apply the configuration that was saved on the original Master Switch.

The Master Switch will initialize the stack using the last saved system configuration that is stored in its local FLASH. When the Stack Master switch ‘Factory Default’ is selected from the

82 | Chapter 3: Configuring Stacking Switches

Page 83

GS752TXS Smart Switch Software Administration Manual

Web GUI, the system applies default settings to all the Stack member units and would reset the Stack including the participating stack members.

When the stack is powered up and completes the boot process or the original Master Switch becomes unavailable, the Master Switch is determined through the Master Switch Election process.

The rules for Master Switch Election are as follows:

• If a unit had previously been elected Master Switch, then it will remain the Master Switch

and other units will simply be Subordinate Switches.

• If no units were Master Switches, or more than one unit was a Master Switch, then the

unit with the highest management preference is elected Master Switch. The management preference can be assigned by the administrator. However, if all units have the same management preference, then the unit with the highest MAC address is assigned as the Master Switch.

Configuration

Stack Configuration

This page moves the Primary Management Unit functionality from one unit to another. Upon execution, the entire stack (including all interfaces in the stack) is unconfigured and reconfigured with the configuration on the new Primary Management Unit. After the reload is complete, all stack management capability must be performed on the new Primary Management Unit. To preserve the current configuration across a stack move, save the current configuration to the NVRAM before performing the stack move. A stack move causes all routes and layer 2 addresses to be lost. The administrator is prompted to confirm the management move.

To display the Stack Configuration page, click System  Stacking  Basic  Stack

Configuration. A screen similar to the following displays.

Chapter 3: Configuring Stacking Switches | 83

Page 84

GS752TXS Smart Switch Software Administration Manual

1. Use Management Unit Selected to select the unit to be managed unit and click Apply to

move the management to the selected unit.

2. Unit ID displays the list of units of the stack. Details of the selected unit are displayed. There

is also an ADD option visible only to Admin users which can be used to preconfigure new members of the stack.

3. Use Change to Switch ID to renumber the switch ID of the selected switch by admin users.

4. Use Switch Type to specify the type of switch hardware when creating a new switch in the

stack.

5. Use Management Status to indicate whether the selected switch is the management unit or

a normal stacking member or on standby.

6. Use Switch Priority to select whether you want this unit to become a management unit in

preference to another unit. The default value for this setting is undefined. If the preference level is set to zero, then the device cannot become a management unit. A higher value indicates a higher priority, the maximum value is 15.

7. Click Add to add a unit to the stack with the specific switch type.

8. Click Delete to remove the selected unit from the stack.

9. Click Refresh to update the page with the latest information from the switch.

10. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

11. Click Apply to apply the new settings to the switch. Configuration changes take effect

immediately.

The following table describes the Stack Configuration fields.

84 | Chapter 3: Configuring Stacking Switches

Page 85

GS752TXS Smart Switch Software Administration Manual

Field Description

Hardware Management Preference The hardware management preference of the switch.

The hardware management preference can be disabled or unassigned.

Standby Status Identifies the switch that is configured as the Standby

Unit. The possible values are:

• Cfg Standby - Indicates that the unit is configured

as the Standby Unit. The unit configured as the Standby switch becomes the stack manager if the current manager fails.

• Opr Standby - Indicates that this unit is operating

as the Standby Unit and the configured Standby Unit is not part of the stack.

• None - The switch is not configured as the

Standby Unit.

Switch Status Displays the status of the selected unit. The possible

values are:

• OK

• Unsupported

• Code Mismatch

• Config Mismatch

• Not Present

The following table describes the Basic Stack Status fields.

Field Description

Unit ID The unit ID of the specific switch.

Switch Description The description for the unit can be configured by the

user.

Serial Number The unique box serial number for this switch.

Uptime The displays the relative time since the last reboot of

the switch.

Preconfigured Model Identifier This field displays the model type assigned by the

device manufacturer to identify the device.

Plugged-in Model Identifier This field displays the model type assigned by the

device manufacturer to identify the plugged-in device.

Expected Code Type This field indicates the expected code type on this

unit.

Detected Code Version This field indicates the detected version of code on

this unit.

Chapter 3: Configuring Stacking Switches | 85

Page 86

GS752TXS Smart Switch Software Administration Manual

Field Description

Detected Code Version in Flash The displays the Release number and version

number of the code stored in flash.

SFS Last Attempt Status This displays the status of last tried stack firmware

synchronisation. “None” is the default value if SFS has not been tried.

Stack Port Configuration

To display the Stack Port Configuration page, click System  Stacking  Advanced  Stack Port Configuration. A screen similar to the following displays.

1. Configured Stack Mode - Specify the operating mode of the port to be either Ethernet or

stacking. The default value is set to stacking. The following table describes Stack Port Configuration fields.

Field Description

Unit ID Displays the unit.

Port Displays the stackable interfaces on the given unit.

Running Stack Mode Displays the run-time mode of the stackable

interface.

Link Status Displays the link status (UP/DOWN) of the port.

Link Speed (Gbps) Displays the maximum speed of the stacking port.

86 | Chapter 3: Configuring Stacking Switches

Page 87

GS752TXS Smart Switch Software Administration Manual

Field Description

Transmit Data Rate (Mbps) Displays the approximate transmit rate on the

stacking port.

Total Transmit Errors Displays the total number of errors in transmit

packets since boot. The counter may wrap.

Receive Data Rate (Mbps) Displays the approximate receive rate on the

stacking port.

Total Receive Errors Displays the total number of errors in receive packets

since boot. The counter may wrap.

Stack Port Diagnostics

This page displays the diagnostics for all the stackable interfaces in the given stack. To display the Stack Port Diagnostics page, click System

 Stacking  Advanced  Stack Port

Diagnostics. A screen similar to the following displays.

The following table describes the Stack Port Diagnostics fields.

Field Definition

Port Displays the stackable interface on the given unit.

Port Diagnostics Info Displays three text fields (80 character strings)

populated by the driver containing debug and status information.

Chapter 3: Configuring Stacking Switches | 87

Page 88

GS752TXS Smart Switch Software Administration Manual

Stack Firmware Synchronization

To display the stack firmware synchronization configurations from the Stack Firmware Synchronization page, click System Synchronization. A screen similar to the following displays.

 Stacking  Advanced  Stack Firmware

1. Use the Stack Firmware Auto Upgrade field to enable or disable the Stack Firmware

Synchronization feature.

2. Use the Traps field

Synchronization Start, Failure, or Finish.

3. Use the Allow Downgrade field to enable or disable Downgrading the image on stack

member if the stack members version is newer.

4. Click Refresh to update the page with the latest information from the switch.

5. Click Apply to apply the new settings to the switch. Configuration changes take effect

immediately.

to enable or disable sending of traps during Stack Firmware

88 | Chapter 3: Configuring Stacking Switches

Page 89

4. Configuring Switching Information

Use the features in the Switching tab to define Layer 2 features. The Switching tab contains links to the following features:

• Ports on page 89

• Link Aggregation Groups on page 92

• VLANs on page 97

• Voice VLAN on page 105

• Auto-VoIP Configuration on page 108

• Spanning Tree Protocol on page 109

• Multicast on page 122

• Forwarding Database on page 145

Ports

The pages on the Ports tab allow you to view and monitor the physical port information for the ports available on the switch. From the Ports link, you can access the following pages:

• Port Configuration on page 89

• Flow Control on page 91

Port Configuration

Use the Port Configuration page to configure the physical interfaces on the switch. To access the Port Configuration page, click Switching

Chapter 4: Configuring Switching Information | 89

 Ports  Port Configuration.

Page 90

To configure port settings:

GS752TXS Smart Switch Software Administration Manual

1. To configure settings for a physical port, click PORTS.

2. To configure settings for a Link Aggregation Group (LAG), click LAGS.

3. To configure settings for both physical ports and LAGs, click ALL.

4. Select the check box next to the port or LAG to configure. You can select multiple ports and

LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces.

5. Configure or view the settings:

• Description. Enter the description string to be attached to a port. The string can be

up to 64 characters in length.

• Port Type. For most ports this field is blank. Otherwise, the possible values are:

• MON: Indicates that the port is a monitoring port. For additional information about

port monitoring, see Port Mirroring on page 268.

• LAG: Indicates that the port is a member of a Link Aggregation trunk. For more

information, see Link Aggregation Groups on page 92.

• Admin Mode. Use the menu to select the port control administration state, which can

be one of the following:

• Enable: The port can participate in the network (default).

• Disable: The port is administratively down and does not participate in the network.

• Port Speed. Use the menu to select the port’s speed and duplex mode. If you select

Auto, the duplex mode and speed will be set by the auto-negotiation process. The port’s maximum capability (full duplex and 1000 Mbps) will be advertised. Otherwise, your selection will determine the port’s duplex mode and transmission rate. The factory default is Auto.

• Physical Status. Indicates the physical port’s speed and duplex mode

• Link Status. Indicates whether the Link is up or down.

90 | Chapter 4: Configuring Switching Information

Page 91

GS752TXS Smart Switch Software Administration Manual

• Link Trap. This object determines whether or not to send a trap when link status

changes. The factory default is Enable.

• Enable: Specifies that the system sends a trap when the link status changes.

• Disable: Specifies that the system does not send a trap when the link status

changes.

• Maximum Frame Size. Specifies the maximum Ethernet frame size the interface

supports. The size includes the Ethernet header, CRC, and payload. Any change to the maximum frame size is immediately applied to all interfaces.

• MAC Address. Displays the physical address of the specified interface.

• PortList Bit Offset. Displays the bit offset value which corresponds to the port when

the MIB object type PortList is used to manage in SNMP.

• ifIndex. The ifIndex of the interface table entry associated with this port. If the

interface field is set to All, this field is blank.

6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

7. If you make any changes to the page, click Apply to apply the changes to the system.

Flow Control

IEEE 802.3x flow control works by pausing a port when the port becomes oversubscribed and dropping all traffic for small bursts of time during the congestion condition. This can lead to high-priority and/or network control traffic loss. When IEEE 802.3x flow control is enabled, lower speed switches can communicate with higher speed switches by requesting that the higher speed switch refrains from sending packets. Transmissions are temporarily halted to prevent buffer overflows.

To display the Flow Control page, click Switching link.

 Ports, and then click the Flow Control

To configure global flow control settings:

1. From the Global Flow Control (IEEE 802.3x) Mode field, enable or disable IEEE 802.3x

flow control on the system. The factory default is Disable.

Chapter 4: Configuring Switching Information | 91

Page 92

GS752TXS Smart Switch Software Administration Manual

• Enable. The switch sends pause packets if the port buffers become full.

• Disable. The switch does not send pause packets if the port buffers become full.

2. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

3. If you change the mode, click Apply to apply the changes to the system.

Link Aggregation Groups

Link aggregation groups (LAGs), which are also known as port-channels, allow you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, which increases fault tolerance and provides load sharing. You assign the LAG VLAN membership after you create a LAG. The LAG by default becomes a member of the management VLAN.

A LAG interface can be either static or dynamic, but not both. All members of a LAG must participate in the same protocols. A static port-channel interface does not require a partner system to be able to aggregate its member ports.

Static LAGs are supported. When a port is added to a LAG as a static member, it neither transmits nor receives LAGPDUs. The GS752TXS Smart Switch supports eight LAGs.

From the LAGs link, you can access the following pages:

• LAG Configuration on page 92

• LAG Membership on page 94

• LACP Configuration on page 95

• LACP Port Configuration on page 96

LAG Configuration

Use the LAG (Port Channel) Configuration page to group one or more full-duplex Ethernet links to be aggregated together to form a link aggregation group, which is also known as a port-channel. The switch treats the LAG as if it were a single link.

To access the LAG Configuration page, click Switching LAG  Basic  LAG Configuration.

92 | Chapter 4: Configuring Switching Information

Page 93

GS752TXS Smart Switch Software Administration Manual

To configure LAG settings:

1. Select the check box next to the LAG to configure. You can select multiple LAGs to

apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces.

2. Configure or view the following settings:

• LAG Name. Specify the name you want assigned to the LAG. You may enter any

string of up to 15 alphanumeric characters. A valid name has to be specified in order to create the LAG

• Description. Specify the Description string to be attached to a LAG. It can be up to 64

characters in length.

• LAG ID. Displays the number assigned to the LAG. This field is read-only.

• Link Trap. Specify whether you want to have a trap sent when link status changes.

The factory default is Disable, which will cause the trap to be sent.

• Admin Mode. Select Enable or Disable from the menu. When the LAG (port channel)

is disabled, no traffic will flow and LAGPDUs will be dropped, but the links that form the LAG (port channel) will not be released. The factory default is Enable.

• STP Mode. Select the Spanning Tree Protocol Administrative Mode associated with

the LAG.

• LAG Type. Specifies whether the LAG is configured as a Static or LACP port. When

the LAG is static, it does not transmit or process received LAGPDUs, for example the member ports do not transmit LAGPDUs and all the LAGPDUs it may receive are dropped. The default is Static.

• Active Ports. A listing of the ports that are actively participating members of this Port

Channel. A maximum of 8 ports can be assigned to a port channel.

• LAG State. Indicates whether the link is Up or Down.

Chapter 4: Configuring Switching Information | 93

Page 94

GS752TXS Smart Switch Software Administration Manual

3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

4. If you make any changes to this page, click Apply to send the updated configuration to the

switch. Configuration changes take effect immediately.

LAG Membership

Use the LAG Membership page to select two or more full-duplex Ethernet links to be aggregated together to form a link aggregation group (LAG), which is also known as a port-channel. The switch can treat the port-channel as if it were a single link.

To access the LAG Membership page, click Switching

 LAG  Basic  LAG Membership.

To create a LAG:

1. From the LAG ID field, select the LAG to configure.

2. In the LAG Name field, enter the name you want assigned to the LAG. You may enter any

string of up to 15 alphanumeric characters. A valid name has to be specified to create the LAG.

3. Click the unit name in the orange bar to display the ports.

94 | Chapter 4: Configuring Switching Information

Page 95

GS752TXS Smart Switch Software Administration Manual

4. Click the box below each port to include in the LAG. The following figure shows an example

of how to configure LAG1 with ports g1–g4 as members.

5. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

6. If you make any changes to this page, click Apply to send the updated configuration to the

switch. Configuration changes take effect immediately.

7. To view the ports that are members of the selected LAG, click Current Members.

LACP Configuration

To display the LACP Configuration page, click Switching LAG  Advanced  LACP Configuration.

To configure LACP:

1. From the LACP System Priority field, specify the device’s link aggregation priority

relative to the devices at the other ends of the links on which link aggregation is enabled. A higher value indicates a lower priority. You can change the value of the parameter globally by specifying a priority from 0–65535. The default value is 32768.

2. Click Refresh to reload the page and display the most current information.

Chapter 4: Configuring Switching Information | 95

Page 96

GS752TXS Smart Switch Software Administration Manual

3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

4. If you make any changes to this page, click Apply to send the updated configuration to the

switch. Configuration changes take effect immediately.

LACP Port Configuration

To display the LACP Port Configuration page, click Switching LAG  Advanced  LACP Port Configuration.

To configure LACP port priority settings:

1. Select the check box next to the port to configure. You can select multiple ports to apply

the same setting to all selected ports.

Note: You cannot select ports that are not participating in a LAG

2. Configure the LACP Priority value for the selected port. The field range is 0–255. The

default value is 128.

3. Configure the administrative LACP Timeout value.

• Long. Specifies a long timeout value.

• Short. Specifies a short timeout value.

4. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

5. If you make any changes to this page, click Apply to send the updated configuration to the

switch. Configuration changes take effect immediately.

96 | Chapter 4: Configuring Switching Information

Page 97

GS752TXS Smart Switch Software Administration Manual

VLANs

Adding Virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a VLAN switch forwards traffic based on the Layer 2 header, which is fast, and like a router, it partitions the network into logical segments, which provides better administration, security and management of multicast traffic.

By default, all ports on the switch are in the same broadcast domain. VLANs electronically separate ports on the same switch into separate broadcast domains so that broadcast packets are not sent to all the ports on a single switch. When you use a VLAN, users can be grouped by logical function instead of physical location.

Each VLAN in a network has an associated VLAN ID, which appears in the IEEE 802.1Q tag in the Layer 2 header of packets transmitted on a VLAN. An end station may omit the tag, or the VLAN portion of the tag, in which case the first switch port to receive the packet may either reject it or insert a tag using its default VLAN ID. A given port may handle traffic for more than one VLAN, but it can only support one default VLAN ID.

From the VLAN link, you can access the following pages:

• VLAN Configuration on page 97

• VLAN Membership Configuration on page 98

• Port VLAN ID Configuration on page 100

• MAC Based VLAN on page 102

• Protocol Based VLAN Group Configuration on page 103

• Protocol Based VLAN Group Membership on page 104

VLAN Configuration

Use the VLAN Configuration page to define VLAN groups stored in the VLAN membership table. The GS752TXS supports up to 256 VLANs. VLAN 1 is created by default, and all ports are untagged members.

To display the VLAN Configuration page, click Switching VLAN  Basic  VLAN

Configuration.

Chapter 4: Configuring Switching Information | 97

Page 98

To configure VLANs:

GS752TXS Smart Switch Software Administration Manual

1. To add a VLAN, configure the VLAN ID, name, and type, and then click Add.

• VLAN ID. Specify the VLAN Identifier for the new VLAN. (You can enter data in this

field only when you are creating a new VLAN.) The range of the VLAN ID is 1–4093.

• VLAN Name. Use this optional field to specify a name for the VLAN. It can be up to 32

alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 is always named Default.

• VLAN Type. This field identifies the type of the VLAN you are configuring. You cannot

change the type of the default VLAN (VLAN ID = 1) because the type is always Default. When you create a VLAN on this page, its type will always be Static. Voice VLAN (2) and Auto-Video VLAN (3) are created by default.

2. To delete a VLAN, select the check box next to the VLAN ID and click Delete. You cannot

delete the default VLAN.

3. To modify settings for a VLAN, select the check box next to the VLAN ID, change the

desired information, and then click Apply. Configuration changes occur immediately.

4. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

5. To reset the VLAN settings on the switch to the factory defaults, select the Reset

Configuration check box, and click OK in the popup message to confirm. If the

Management VLAN is set to a non-default VLAN (VLAN 1), it is automatically set to 1 after a Reset Configuration.

VLAN Membership Configuration

Use this page to configure VLAN Port Membership for a particular VLAN. You can select the Group operation through this page.

98 | Chapter 4: Configuring Switching Information

Page 99

GS752TXS Smart Switch Software Administration Manual

To display the VLAN Membership Configuration page, click Switching VLAN  Advanced  VLAN Membership.

To configure VLAN membership:

1. From the VLAN ID field, select the VLAN to which you want to add ports.

2. Click the orange bar below the VLAN Type field to display the physical ports on the switch.

3. Click the lower orange bar to display the LAGs on the switch.

4. To select the port(s) or LAG(s) to add to the VLAN, click the square below each port or LAG.

You can add each interface as a tagged (T) or untagged (U) VLAN member. A blank square means that the port is not a member of the VLAN.

• Tagged: Frames transmitted from this port are tagged with the port VLAN ID.

• Untagged: Frames transmitted from this port are untagged. Each port can be an

untagged member of only one VLAN. By default, all ports are an untagged member of VLAN 1.

In the following figure, ports 6, 7, and 8 from Unit 1 are being added as tagged members to VLAN 2.

Chapter 4: Configuring Switching Information | 99

Page 100

GS752TXS Smart Switch Software Administration Manual

5. Use the Group Operations field to select all the ports and configure them. Possible values

are:

• Untag All: Select all the ports on which all frames transmitted from this VLAN will be

untagged. All the ports will be included in the VLAN.

• Tag All: Select the ports on which all frames transmitted for this VLAN will be tagged.

All the ports will be included in the VLAN.

• Remove All: This selection has the effect of excluding all ports from the selected

VLAN.

6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to

the latest value of the switch.

7. If you make any changes to this page, click Apply to send the updated configuration to the

switch. Configuration changes take place immediately.

Port VLAN ID Configuration

The Port PVID Configuration screen lets you assign a port VLAN ID (PVID) to an interface. There are certain requirements for a PVID:

• All ports must have a defined PVID.

• If no other value is specified, the default VLAN PVID is used.

• If you want to change the port’s default PVID, you must first create a VLAN that includes

the port as a member.

• Use the Port VLAN ID (PVID) Configuration page to configure a virtual LAN on a port.

To access the Port PVID Configuration page, click Switching Configuration.

 VLAN  Advanced  Port PVID

100 | Chapter 4: Configuring Switching Information

Netgear GS752TXS-100EUS User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

GS752TXS Smart Switch

Table of Contents

1. Getting Started

Getting Started with the GS752TXS Smart Switch

Switch Management Interface

Connecting the Switch to the Network

Switch Discovery in a Network with a DHCP Server

Switch Discovery in a Network without a DHCP Server

Configuring the Network Settings on the Administrative System

Web Access

Smart Control Center Utilities

Network Utilities

Configuration Upload and Download

Firmware Upgrade

Viewing and Managing Tasks

Understanding the User Interfaces

Using the Web Interface

Using SNMP

Interface Naming Convention

2. Configuring System Information

Management

System Information

Slot Information

IP Configuration

IPv6 Network Configuration

IPv6 Network Neighbor

Time

Denial of Service

Green Ethernet Configuration

SNMP

SNMPV1/V2

Trap Flags

SNMP v3 User Configuration

LLDP

LLDP Configuration

LLDP Port Settings

LLDP-MED Network Policy

LLDP-MED Port Settings

Local Information

Neighbors Information

Services — DHCP Snooping

Global Configuration

Interface Configuration

Binding Configuration

Persistent Configuration

Statistics

3. Configuring Stacking Switches

Stacking Overview

Stack Features

Factory Defaults Reset Behavior

Configuration

Stack Configuration

Stack Port Configuration

Stack Port Diagnostics

Stack Firmware Synchronization

4. Configuring Switching Information

Ports

Port Configuration

Flow Control

Link Aggregation Groups

LAG Configuration

LAG Membership

LACP Configuration

LACP Port Configuration

VLANs

VLAN Configuration

VLAN Membership Configuration

Port VLAN ID Configuration