NETGEAR GSM7248NA, GSM7224v1, GSM7248v1, 7000 Administration Manual

NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA
202-10238-01 Jan 2007
© 2007 by NETGEAR, Inc. All rights reserved. FullManual.
Trademarks
NETGEAR and Auto Uplink are trademarks or registered trademarks of NETGEAR , Inc. . Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this
document are copyright Intoto, Inc. Jan 2007
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
Netgear's 7000 Series Managed Switch is compliant with the following EU Council Directives: 89/336/EEC and LVD 73/23/EEC. Compliance is verified by testing to the following standards: EN55022 Class A, EN55024 and EN60950-1.
Certificate of the Manufacturer/Importer
It is hereby certified that the 7000 Series Managed Switch has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Pleas e re fer to the notes in the operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das7000 Series Managed Switch gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/ 1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class A category (information equipment to be used in a residential area or an ad jac ent area thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential are as . When used near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.
ii
v1.0, Jan 2007
FCC Information to User
Declaration Of Conformity
We NETGEAR, Inc., 4500 Great America Parkway, Santa Clara, CA 95054, declare under our sole responsibility that the model 7000 Series Managed Switch complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:
This device may not cause harmful interference, and
This device must accept any interference received, including interference that may cause undesired operation.
FCC Requirements for Operation in the United States
Radio Frequency Interference Warnings & Instructions
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harm ful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following methods:
Reorient or relocate the receiving antenna
Increase the separation between the equipment and the receiver
Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected
Consult the dealer or an experienced radio/TV technician for help.
7000 Series Managed Switch
Tested to Comply with FCC Standards
FOR HOME OR OFFICE USE
Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate the equipment.
Canadian Department of Communications Radio Interference Regulations
This digital apparatus (7000 Series Managed Switch) does not exceed the Class A limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
iii
v1.0, Jan 2007
Product and Publication Details
Model Number: 7xxx Publication Date: Jan 2007 Product Family: Managed Switch Product Name: 7000 Series Managed Switch Home or Business Product: Business Language: English Publication Part Number: 202-10238-01 Publication Version Number: 1.0
iv
v1.0, Jan 2007
Contents
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
About This Manual...............................................................................................................xiii
Chapter 1 Introduction
Document Organization ..................................................................................................1-1
Audience ................................ ................ ................ ................ ................. ................ ........1-2
CLI Documentation .........................................................................................................1-3
Related Documentation ..................................................................................................1-3
Chapter 2 Getting Started
In-band and Out-of-band Connectivity ............................................................................2-5
Configuring for In-band Connectivity .. .... ..................................................................2-5
Using BootP or DHCP .......................................................................................2-5
Using the EIA-232 Port ......................................................................................2-6
Configuring for Out-Of-Band Connectivity ................................................................2-7
Starting the Switch ..........................................................................................................2-8
Initial Configuration .........................................................................................................2-8
Initial Configuration Procedure .................................................................................2-9
Software Installation .....................................................................................................2-10
Quick Starting the Networking Device ....................................................................2-10
System Information and System Setup ..................................................................2-10
Chapter 3 Using Ezconfig for Switch Setup
Changing the Password .................................................................................................3-2
Setting Up the Switch IP Address ...................................................................................3-2
Assigning Switch Name and Location Information .........................................................3-3
Saving the Configuration ................................................................................................3-3
v
v1.0, Jan 2007
Chapter 4 Using the Web Interface
Configuring for Web Access ...........................................................................................4-1
Starting the Web Interface ..............................................................................................4-2
Web Page Layout ................................... ... ... ... .................................... ... ... ... .... ... ... ..4-2
Configuring an SNMP V3 User Profile .....................................................................4-2
Command Buttons ...................................................................................................4-3
Chapter 5 Virtual LANs
VLAN Configuration Example .........................................................................................5-2
CLI Examples .................................................................................................................5-2
Example #1: Create Two VLANs ..............................................................................5-2
Example #2: Assign Ports to VLAN2 ........................................................................5-3
Example #3: Assign Ports to VLAN3 ........................................................................5-3
Example #4: Assign VLAN3 as the Default VLAN ...................................................5-3
Graphical User Interface .................................................................................................5-4
Chapter 6 Link Aggregation
CLI Example ...................................................................................................................6-1
Example 1: Create two LAGS: .................................................................................6-3
Example 2: Add the ports to the LAGs: ....................................................................6-4
Example 3: Enable both LAGs. ................................................................................6-4
Chapter 7 IP Routing Services
Port Routing ........................ ................................... ... .... ... ... ... .... .....................................7-1
Port Routing Configuration ........................................ ... ... .... ... ... ...............................7-2
CLI Examples ...........................................................................................................7-3
Example 1. Enabling routing for the Switch .......................................................7-3
Example 2. Enabling Routing for Ports on the Switch .......................................7-4
VLAN Routing .................................................................................................................7-4
VLAN Routing Configuration ....................................................................................7-5
CLI Examples ...........................................................................................................7-5
Example 1: Create Two VLANs .........................................................................7-6
Example 2: Set Up VLAN Routing for the VLANs and the Switch. ....................7-6
VLAN Routing RIP Configuration .... ... .... ... ... ... ... .... ... ....................................... ... ... ..7-7
CLI Example ......................................................................................................7-8
vi
v1.0, Jan 2007
VLAN Routing OSPF Configuration .......................................................................7-10
CLI Example ....................................................................................................7-10
Routing Information Protocol ........................................................................................7-12
RIP Configuration ...................................................................................................7-12
CLI Example ...........................................................................................................7-13
Example #1: Enable Routing for the Switch: ...................................................7-13
Example #2: Enable Routing for Ports .............................................................7-14
Example #3. Enable RIP for the Switch ...........................................................7-14
Example #4. Enable RIP for ports 1/0/2 and 1/0/3 ..........................................7-15
OSPF ........................... ............................................. .............................................. ......7-15
CLI Examples .........................................................................................................7-16
Example #1 Configuring an Inter-Area Router ................................................7-17
Example #2 - Configuring OSPF on a Border Router ......................................7-19
Proxy Address Resolution Protocol (ARP) ...................................................................7-21
Overview ................................................................................................................7-21
CLI Examples .........................................................................................................7-22
Example #1: show ip interface .........................................................................7-22
Example #2: ip proxy-arp .................................................................................7-22
Chapter 8 Virtual Router Redundancy Protocol
CLI Examples .................................................................................................................8-2
Chapter 9 Access Control Lists (ACLs)
Overview ............................. ................ ................ ................ ................ ................ ............9-1
Limitations ................................................................................................................ 9-1
MAC ACLs ......................................................................................................................9-1
Configuring IP ACLs .......................................................................................................9-2
Process .................................. ................ ................ ............. ................ ................ ............9-3
IP ACL CLI Example .......................................................................................................9-3
MAC ACL CLI Examples ................................................................................................9-4
Example #1: mac access list ...................................................................................9-5
Example #2: permit any ..........................................................................................9-6
Example #3 Configure mac access-group ...............................................................9-7
Example #4 permit ...................................................................................................9-8
v1.0, Jan 2007
vii
Example #5: show mac access-lists ........................................................................9-9
Chapter 10 Class of Service (CoS) Queuing
Overview ............................. ................ ................ ................ ................ ................ ..........10-1
CoS Queue Mapping ....................................................................................................10-1
Trusted Ports ............................. ... ... ... .... ... ... ... .................................... ... ... ... .... ... ...10-1
Untrusted Ports ......................................................................................................10-2
CoS Queue Configuration ............................................................................................10-2
Port Egress Queue Configuration .......... ................................................................10-2
Drop Precedence Configuration (per Queue) ........................................................10-3
Per Interface Basis .................................................................................................10-3
CLI Examples ...............................................................................................................10-3
Example #1: show classofservice trust ..................................................................10-4
Example #2: set classofservice trust mode ............................................................10-4
Example #3: show classofservice ip-precedence mapping ....................................10-5
Example #4: Config Cos-queue Min-bandwidth and Strict Priority Scheduler Mode 10-5
Example #5: Set CoS Trust Mode of an Interface ............................... ...................10-6
Traffic Shaping ................................................. ... ... ... .... ... ... ... .... ... ................................10-6
CLI Example ...........................................................................................................10-6
Example #1 traffic-shape .................................................................................10-7
Chapter 11 Differentiated Services
CLI Example .................................................................................................................11-2
DiffServ for V oIP Configuration Example ......................................................................11-4
Chapter 12 IGMP Snooping
Overview ............................. ................ ................ ................ ................ ................ ..........12-1
CLI Examples ...............................................................................................................12-1
Example #1: Enable IGMP Snooping .....................................................................12-1
Example #2: show igmpsnooping ..........................................................................12-2
Example #3: show mac-address-table igmpsnooping ............................................12-2
Chapter 13 Port Security
Overview ............................. ................ ................ ................ ................ ................ ..........13-1
Operation .................................. ............................................. .......................................13-2
viii
v1.0, Jan 2007
CLI Examples ...............................................................................................................13-3
Example #1: show port security .............................................................................13-3
Example #2: show port security on a specific interface .........................................13-3
Example #3: (Config) port security .........................................................................13-3
Chapter 14 Traceroute
CLI Example .................................................................................................................14-2
Chapter 15 Configuration Scripting
Overview ............................. ................ ................ ................ ................ ................ ..........15-1
Considerations .......................... ................ ................ ................. ................ ................ ...15-1
CLI Examples ...............................................................................................................15-1
Example #1: script .................................................................................................15-2
Example #2: script list and script delete .................................................................15-2
Example #3: script apply running-config.scr ..........................................................15-2
Example #4: Creating a Configuration Script ......................................................... 15-3
Example #5: Upload a Configuration Script ...........................................................15-3
Chapter 16 Outbound Telnet
Overview ............................. ................ ................ ................ ................ ................ ..........16-1
CLI Examples ...............................................................................................................16-1
Example #1: show network ....................................................................................16-2
Example #2: show telnet ........................................................................................16-2
Example #3: transport output telnet .......................................................................16-3
Example #4: session-limit and session-timeout .....................................................16-3
Chapter 17 Port Mirroring
Overview ............................. ................ ................ ................ ................ ................ ..........17-1
CLI Examples ...............................................................................................................17-1
Example #1: show monitor session .......................................................................17-2
Example #2: show port all ......................................................................................17-2
Example #3: show port interface ............................................................................17-2
Example #4: (Config) monitor session 1 mode ...................................................... 17-3
Example #5: (Config) monitor session 1 source interface ............ .... ... ... ................17-4
Example #6: (Interface) port security .....................................................................17-4
ix
v1.0, Jan 2007
Chapter 18 Simple Network Time Protocol (SNTP)
Overview ............................. ................ ................ ................ ................ ................ ..........18-1
CLI Examples ...............................................................................................................18-1
Example #1: show sntp ..........................................................................................18-1
Example #2: show sntp client .................................................................................18-2
Example #3: show sntp server ...............................................................................18-2
Example #4: Configure SNTP ................................................................................18-2
Example #5: Setting Time Zone .............................................................................18-4
Example #6: Setting Named SNTP Server ............................................................18-4
Chapter 19 Managing Switch Stacks
Understanding Switch Stacks .......................................................................................19-2
Switch Stack Membership ......................................................................................19-3
Switch Stack Cabling (FSM73xxS) .........................................................................19-4
Stack Master Election and Re-Election ..................................................................19-5
St ack Member Numbers .........................................................................................19-5
Stack Member Priority Values ................................................................................19-6
Switch Stack Offline Configuration .........................................................................19-6
Effects of Adding a Preconfigured Switch to a Switched Stack ....... ................19-6
Effects of Replacing a Preconfigured Switch in a Switch Stack .............................19-7
Effects of Removing a Preconfigured Switch from a Switch Stack ........................19-7
Switch Stack Software Compatibility Recommendations ..............................................19-8
Incompatible Software and Stack Member Image Upgrades ........................ ... ... ..........19-8
Switch Stack Configuration Files ..................................................................................19-8
Switch Stack Management Connectivity .......................................................................19-9
Connectivity to the Switch Stack Through Console Ports ......................................19-9
Connectivity to the Switch Stack Through Telnet ...................................................19-9
Switch Stack Configuration Scenarios ..........................................................................19-9
Stacking Recommendations .................. ... .... ... ... ........................................................19-11
General Practices ............................ ... .... ... ... ... ... .................................... ... ... .... ... .19-11
Initial installation and Power-up of a Stack ....................................... ................ ....19-12
Removing a Unit from the Stack ...........................................................................19-12
Adding a Unit to an Operating Stack ....................................................................19-13
Replacing a Stack Member with a New Unit ........................................................19-13
x
v1.0, Jan 2007
Renumbering Stack Members ..............................................................................19-14
Moving a Master to a Different Unit in the Stack ..................................................19-14
Removing a Master Unit from an Operating Stack ................. ... ... .... ....................19-14
Merging Two Operational Stacks .........................................................................19-15
Preconfiguration ................................. ................................................................. .19-15
Upgrading Firmware .............................................................................................19-15
Migration of Configuration With a Firmware Upgrade ..........................................19-16
Code Mismatch ....................................................................................................19-17
Chapter 20 Pre-Login Banner
Overview ............................. ................ ................ ................ ................ ................ ..........20-1
CLI Example .................................................................................................................20-1
Chapter 21 Syslog
Overview ............................. ................ ................ ................ ................ ................ ..........21-1
Persistent Log Files ................................ ... ................................... .... ... ... ... ... .... ... ...21-1
Interpreting Log Files .............................................................................................21-2
CLI Examples ...............................................................................................................21-2
Example #1: show logging .....................................................................................21-3
Example #2: show logging buffered .......................................................................21-3
Example #3: show logging traplogs .......................................................................21-4
Example 4: show logging hosts ..............................................................................21-4
Example #5: logging port configuration ..................................................................21-5
Chapter 22 IGMP Querier
CLI Examples ...............................................................................................................22-2
Example 1: Enable IGMP Querier ..........................................................................22-2
Example 2 Show IGMP Querier Status ..................................................................22-2
xi
v1.0, Jan 2007
xii
v1.0, Jan 2007
About This Manual
The NETGEAR® FVX538 ProSafe™ VPN Firewall 200 Reference Manual describes how to install, configure and troubleshoot the 7000 Series Man aged Switch. The information in this manual is intended for readers with intermediate computer and Internet skills.
Conventions, Formats and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:
Typographical Conventions. This manual uses the following typographical conventions:
Italics Emphasis, books, CDs, URL names
Bold User input
Fixed Screen text, file and server names, extensions, commands, IP addresses
Formats. This manual uses the following formats to highlight special messages:
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.
Danger: This is a safety warning. Failure to take heed of this notice may result in
personal injury or death.
xiii
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
Scope. This manual is written for the 7000 Series Managed Switch according to these
specifications:
Product Version 7000 Series Managed Switch Manual Publication Date Jan 2007
.
Note: Product updates are available on the NETGEAR, Inc. website at
http://kbserver.netgear.com/products/7xxx.asp.
How to Use This Manual
The HTML version of this manual, if provided, includes the following:
Buttons, and , for browsing forwards or backwards through the manual one page at a time
•A button that displays the table of contents and an button. Double-click on a link in the table of contents or index to navigate directly to where the topic is described in the manual.
•A button to access the full NETGEAR, Inc. online knowledge base for the product model.
Links to PDF versions of the full manual and individual chapters.
How to Print this Manual
To print this manual, you can choose one of the following options, according to your needs.
Printing a Page from HTML. Each page in the HTML version of the manual is dedicated to a major topic. Select File > Print from the browser menu to print the page contents.
Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at
http://www.adobe.com.
Printing a PDF Chapter. Use the PDF of This Chapter link at the top left of any page.
xiv
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
Click the PDF of This Chapter link at the top left of any page in the chapter you want to print. The PDF version of the chapter you were viewing opens in a browser window.
Click the print icon in the upper left of your browser window.
Printing a PDF version of the Complete Manual. Use the Complete PDF Manual link
at the top left of any page.
Click the Complete PDF Manual link at the top left of any page in the manual. The PDF version of the complete manual opens in a browser window.
Click the print icon in the upper left of your browser window.
Tip: If your printer supports printing two pages on a single sheet of paper, you can
save paper and printer ink by selecting this feature.
Revision History
Part Number
202-10238-01 1.0 Product update: New firmware and new user Interface
Version Number
Description
xv
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
xvi
v1.0, Jan 2007
Chapter 1
Introduction
This document provides an understanding of the CLI and Web configuration options for software Release 6.0 features.
Document Organization
This document provides examples of the use of the switch software in a typical network. It describes the use and advantages of specific functions provided by the 7000 Series Managed Switch, and includes information on configuring those functions using the Command Line Interface and Web Interface.
The switch software can operate as a Layer 2 switch, a Layer 3 router or a combination switch/ router . The switch also includes support for network management and Quality of Service functions such as Access Control Lists and Differentiated Services. Which functions you choose to activate will depend on the size and complexity of your network: this document describes configuration for some of the most-used functions.
This document contains configuration information about the following:
Layer 2 – VLANs
Layer 3 – Port routing – VLAN Routing – Virtual Router Redundancy Protocol (VRRP) –RIP – OSPF –Proxy ARP
Quality of Service (QoS) – Access Control Lists (ACLs)
1-1
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
Class of Service (CoS) – Dif ferentiated Services
Multicast – IGMP Snooping
Security – Denial of Service – Port Security
Operating System – Dual Configuration
•Tools –Alarm Manager – Traceroute – Configuration Scripting – Advance Keying – Prelogin Banner – Port Mirroring –SNTP –Syslog – Data Migration
Audience
Use this guide if you are a(n):
Experienced system administrator who is responsible for configuring and operating a network using switch software
Level 1 and Level 2 Support provider
To obtain the greatest benefit from this guide, you should have an understanding of the switch software base and should have read the specification for your networking device platform. You should also have a basic knowledge of Ethernet and networking concepts.
1-2 Introduction
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
CLI Documentation
The Command Line Reference provides information about the CLI commands used to configure the switch and the stack. The document provid es CLI descriptions, syntax, and default values.
Refer to the Command Line Reference for information for the command structure
Related Documentation
Before proceeding, read the Release Notes for this switch product. The Release Notes detail the platform specific functionality of the Switching, Routing, SNMP, Config, Management, and other packages. In addition, see the following publications:
Netgear Quick Installation Guide, 7000 Series Managed Switch
Netgear CLI Reference for the Prosafe 7X00 Series Managed Switch. There are three documents in this series; choose the appropriate one for your product.
Netgear Hardware Installation Guide for your switch
These documents may be found at http://www.NETGEAR.com
Introduction 1-3
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
1-4 Introduction
v1.0, Jan 2007
Chapter 2
Getting Started
Connect a terminal to the switch to begin configuration.
In-band and Out-of-band Connectivity
Ask the system administrator to determine whether you will configure the switch for in-band or out-of-band connectivity.
Configuring for In-band Connectivity
In-band connectivity allows you to access the switch from a remote workstation using the Ethernet network. To use in-band connectivity, you must configure the switch with IP information (IP address, subnet mask, and default gateway).
Configure for In-band connectivity using one of the following methods:
BootP or DHCP
EIA-232 port
Using BootP or DHCP
You can assign IP information initially over the network or over the Ethernet service port through BootP or DHCP. Check with your system administrator to determine whether BootP or DHCP is enabled.
You need to configure the BootP or DHCP server with information about the switch—obtain this information through the serial port connection using the server with the following values:
show network command. Set up the
IP Address Unique IP address for the switch. Each IP parameter is made up of
four decimal numbers, ranging from 0 to 255. The default for all IP parameters is zeroes (0.0.0.0).
Subnet Subnet mask for the LAN gateway IP address of the default router, if the switch is a node outside the IP
range of the LAN
2-5
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
MAC Address MAC address of the switch
When you connect the switch to the network for the first time after setting up the BootP or DHCP server, it is configured with the information supplied above. The switch is ready for in-band connectivity over the network.
If you do not use BootP or DHCP, access the switch through the EIA-232 port, and configure the network information as described below.
Using the EIA-232 Port
You can use a locally or remotely attached terminal to configure in-band management through the EIA-232 port.
1. To use a locally attached terminal, attach one end of a null-modem serial cable to the EIA-232 port of the switch and the other end to the COM port of the terminal or workstation. For remote attachment, attach one end of the serial cable to the EIA-232 port of the switch and the other end to the modem.
2. Set up the terminal for VT100 terminal emulation. a. Set the terminal ON. b. Launch the VT100 application.
3. Configure the COM port as follows: a. Set the data rate to 115,200 baud. b. Set the data format to 8 data bits, 1 stop bit, and no parity. c. Set the flow control to none. d. Select the proper mode under Properties. e. Select Terminal keys.
The Log-in User prompt displays when the terminal interface initializes.
4. Enter an approved user name and password. The default is admin for the user name and the password is blank.
The switch is installed and loaded with the default configuration.
5. Reduce network traffic by turning off the Network Configuration Protocol. Enter the following command:
configure network protocol none
6. Set the IP address, subnet mask, and gateway address by issue the following command:
config network parms ipaddress netmask gateway
2-6 Getting Started
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
IP Address Unique IP address for the switch. Each IP parameter is made up of four
decimal numbers, ranging from 0 to 255. The default for all IP parameters is zeroes (0.0.0.0).
Subnet Subnet mask for the LAN. gateway IP address of the default router, if the switch is a node outside the IP range of
the LAN.
7. T o enable these changes to be retained during a reset of the switch, type Ctrl-Z to return to the main prompt, type save config at the main menu prompt, and type y to confirm the changes.
8. To view the changes and verify in-band information, issue the command: show network.
9. The switch is configured for in-band connectivity and ready for Web-based management.
Configuring for Out-Of-Band Connectivity
To monitor and configure the switch using out-of-band connectivity, use the console port to connect the switch to a terminal desktop system running terminal emulation software. The console port connector is a male DB-9 connector, implemented as a data terminal equipment (DTE) connector.
The following hardware is required to use the console port:
VT100-compatible terminal, or a desktop, or a portable system with a serial port running VT100 terminal emulation software.
An RS-232 crossover cable with a female DB-9 connector for the console port and the appropriate connector for the terminal.
Perform the following tasks to connect a terminal to the switch console port using out-of-band connectivity:
1. Connect an RS-232 crossover cable to the terminal running VT100 terminal emulation software.
2. Configure the terminal emulation software as follows: a. Select the appropriate serial port (serial port 1 or serial port 2) to connect to the console. b. Set the data rate to 115,200 baud. c. Set the data format to 8 data bits, 1 stop bit, and no parity. d. Set the flow control to none.
Getting Started 2-7
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
e. Select the proper mode under Properties. f. Select Terminal keys.
Note: When using HyperT erminal with Microsoft W indows 2000, make sure that
you have Windows 2000 Service Pack 2 or later installed. With Windows 2000 Service Pack 2, the arrow keys function properly in HyperTerminal's VT100 emulation. Go to www.microsoft.com for more information on Windows 2000 service packs.
3. Connect the female connector of the RS-232 crossover cable directly to the switch console port, and tighten the captive retaining screws.
Starting the Switch
1. Make sure that the switch console port is connected to a VT100 terminal or VT100 terminal emulator via the RS-232 crossover cable.
2. Locate an AC power receptacle.
3. Deactivate the AC power receptacle.
4. Connect the switch to the AC receptacle.
5. Activate the AC power receptacle.
When the power is turned on with the local terminal already connected, the switch goes through a power-on self-test (POST). POST runs every time the switch is initialized and checks hardware components to determine if the switch is fully operational before completely booting. If POST detects a critical problem, the startup procedure stops. If POST passes successfully, a valid executable image is loaded into RAM. POST messages are displayed on the terminal and indicate test success or failure. The boot process runs for approximately 60 seconds.
Initial Configuration
The initial simple configuration procedure is based on the following assumptions:
The switch was not configured before and is in the same state as when you received it.
The switch booted successfully.
2-8 Getting Started
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
The console connection was established and the console prompt appears on the screen of a VT100 terminal or terminal equivalent.
The initial switch configuration is performed through the console port. After the initial configuration, you can manage the switch either from the already-connected console port or remotely through an interface defined during the initial configuration.
The switch is not configured with a default user name and password. All of the settings below are necessary to allow the remote management of the switch through
Telnet (Telnet client) or HTTP (Web browser). Before setting up the initial configuration of the switch, obtain the following information from
your network administrator:
The IP address to be assigned to the management interface through which the switch is managed.
The IP subnet mask for the network.
The IP address of the default gateway.
Initial Configuration Procedure
You can perform the initial configuration using the Easy Setup Wizard or by using the Command Line Interface (CLI). The Setup Wizard automatically starts when the switch configuration file is empty. You can exit the wizard at any point by entering [ctrl+z]. For more information on CLI initial configuration, see the User’s Configuration Guide. This guide shows how to use the Setup Wizard for initial switch configuration. The wizard s ets up t he following configuration on the switch:
Establishes the initial privileged user account with a valid password. The wizard configures one privileged user account during the set up.
Enables CLI login and HTTP access to use the local authentication setting only.
Sets up the IP address for the management interface.
Sets up the SNMP community string to be used by the SNMP manager at a given IP address. You may choose to skip this step if SNMP management is not used for this switch.
Allows you to specify the management server IP or permit SNMP access from all IP addresses.
Configures the default gateway IP address.
Getting Started 2-9
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
Software Installation
This section contains procedures to help you become acquainted quickly with the switch software. Before installing switch software, you should verify that the switch operates with the most recent
firmware.
Quick Starting the Networking Device
1. Configure the switch for In-band or Out-of-Band connectivity. In-band connectivity allows access to the software locally or from a remote workstation. You must configure the device with IP information (IP address, subnet mask, and default gateway).
2. Turn the Power ON.
3. Allow the device to load the software until the login prompt appears. The device initial state is
called the default mode.
4. When the prompt asks for operator login, do the following steps: –Type admin
at the login prompt. Since a number of the Quick Setup commands require
administrator account rights, log in to an administrator account. – Do not enter a password because the default mode does not use a password. – Check the CLI User EXEC prompt is displayed. –Enter –Enter –Enter –Enter
enable to switch to the Privileged EXEC mode from User EXEC. configure to switch to the Global Config mode from Privileged EXEC. exit to return to the previous mode. ? to show a list of commands that are available in the current mode.
System Information and System Setup
This section describes the commands you use to view system information and to setup the network device. Table 2-1 contai ns the Quick Start commands that allow you to view or configure the following information:
Software versions
Physical port data
User account management
IP address configuration
2-10 Getting Started
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
Uploading from Networking Device to Out-of-Band PC (Only XMODEM)
Downloading from Out-of-Band PC to Networking Device (Only XMODEM)
Downloading from TFTP Server
Restoring factory defaults If you configure any network parameters, you should execute the following command:
copy system:running-config nvram:startup-config
This command saves the changes to the configuration file. You must be in the correct mode to execute the command. If you do not save the configuration, all changes are lost when a you power down or reset the networking device. In a stacking environment, the running configuration is saved in all units of the stack.
Table 2-1 describes the command syntax, the mode you must be in to execute the command, and the purpose and output of the command.
Table 2-1. Quick Start Commands
Command Mode Description
show hardware
show users
show loginsession
users passwd
<username>
Privileged EXEC
Privileged EXEC
User EXEC Displays all of the login session information.
Global Config Allows the user to set passwords or change passwords needed
Shows hardware version, MAC address, and software version information.
Displays all of the users that are allowed to access the network­ing device.
Access Mode shows whether you can change parameters on the networking device (Read/Write) or can only view them (Read Only).
As a factory default, the ‘admin’ user has Read/Write access and the ‘guest’ user has Read Only access. There can only be one Read/Write user. There can be up to five Read Only users.
to login. A prompt appears after the command is entered requesting the
users old password. In the absence of an old password leave the area blank.
User password should not be more than eight characters in length.
Getting Started 2-11
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
Table 2-1. Quick Start Commands
Command Mode Description
copy system:run­ning-config nvram:startup­config
logout User EXEC
Privileged EXEC
Privileged EXEC
show network
User EXEC Displays the following network configuration info rmation:
Saves passwords and all other changes to the device. If you do not save the configuration, all changes are lost when
you power down or reset the networking device. In a stacking environment, the running configuration is saved in all units of the stack.
Logs the user out of the networking device.
• IP Address - IP Address of the interface (default: 0.0.0.0)
• Subnet Mask - IP Subnet Mask for the interface (default:
0.0.0.0)
• Default Gateway - The default Gateway for this interface (default: 0.0.0.0)
• Burned in MAC Address - The Burned in MAC Address used for in-band connectivity
• Locally Administ ered MAC Address - Can be configured to allow a locally administered MAC address
• MAC Address Type - Specifies which MAC address should be used for in-band connectivity
• Network Configurations Protocol Current - Indicates which network protocol is being used (default: none)
• Management VLAN Id - Specifies VLAN id
• Web Mode - Indicates whether HTTP/Web is enabled.
• Java Mode - Indicates whether java mode is enabled.
network parms
<ipaddr> <net­mask> [gateway]
copy nvram:star­tup-config
<tftp://<ipad­dress>/<file­path>/<filename>>
Privileged EXEC
Privileged EXEC
2-12 Getting Started
Sets the IP address, subnet mask and gateway of the router. The IP address and the gateway must be on the same subnet. IP address range is from 0.0.0.0 to 255.255.255.255.
Starts the configuration file upload, displays the mode and type of upload and confirms the upload is progressing.
The URL must be specified as: xmodem:<filepath>/<filename> For example: If the user is using HyperTerminal, the user must specify where
the file is going to be received by the PC.
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
Table 2-1. Quick Start Commands
Command Mode Description
copy nvram:error­log <tftp://
<ipaddress>/ <filepath>/<file­name>>
copy nvram:tra­plog <tftp://
<ipaddress>/ <filepath>/<file­name>>
copy <tftp:// <ipaddress>/ <filepath>/<file­name>>
nvram:startup­config
Privileged EXEC
Privileged EXEC
Privileged EXEC
Starts the error log upload, displays the mode and type of upload and confirms the upload is progressing.
The URL must be specified as: xmodem:<filepath>/<filename>
Starts the trap log upload, displays the mode and type of upload and confirms the upload is progressing.
The URL must be specified as: xmodem:<filepath>/<filename>
Sets the destination (download) datatype to be an image (sys­tem:image) or a configuration file (nvram:startup-config).
The URL must be specified as: xmodem:<filepath>/<filename> For example: If the user is using Hyper Terminal, the user must specify which
file is to be sent to the networking device. The Networking Device restarts automatically once the code
has been downloaded.
copy <tftp:// <ipaddress>/ <filepath>/<file­name>> sys-
tem:image copy <tftp://
<ipaddress>/ <filepath>/<file­name>>
nvram:startup­config
Privileged EXEC
Privileged EXEC
Sets the destination (download) datatype to be an image (sys­tem:image) or a configuration file (nvram:startup-config).
The URL must be specified as: xmodem:<filepath>/<filename>
Sets the destination (download) datatype to be a configuration file.
The URL must be specified as: tftp://<ipaddress>/<filepath>/<filename> Before starting a TFTP server download, you must configure
the IP address.
Getting Started 2-13
v1.0, Jan 2007
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0
Table 2-1. Quick Start Commands
Command Mode Description
copy <tftp:// <ipaddress>/ <filepath>/<file­name>> sys-
tem:image
clear config
copy system:run­ning-config nvram:startup­config
reload (or cold boot
the networking device)
Privileged EXEC
Privileged EXEC
Privileged EXEC
Privileged EXEC
Sets the destination (download) datatype to be an image. The URL must be specified as: tftp://<ipaddress>/<filepath>/<filename> The system:image option downloads the code file.
Enter yes when the prompt asks if you want to clear all the con­figurations made to the networking device.
Enter yes when the prompt asks if you want to save the configu­rations made to the networking device.
Enter yes when the prompt asks if you want to reset the system. You can reset the networking device or cold boot the network-
ing device. Both work effectively.
2-14 Getting Started
v1.0, Jan 2007
Loading...
+ 118 hidden pages