Thank you for choosing NETGEAR.
After installing your device, locate the serial number on the label of your product and use it to register your product
at https://my.netgear.com. You must register your product before you can
NETGEAR recommends registering your product through the NETGEAR
support, visit http://support.netgear.com.
Phone (US & Canada only): 1-888-NETGEAR.
Phone (Other Countries): Check the li
http://support.netgear.com/general/cont
NETGEAR recommends that you use only the official NETGEAR support resources.
This manual describes how to configure and operate the NETGEAR ProSafe® 24-Port Gigabit
L2 Managed Switch JGSM7224, hereafter referred to as the switch. This manual describes the
software configuration procedures and options.
This chapter provides an introduction to the switch and explains how to log in to the switch. The
ter has the following sections:
chap
•Package Contents
•Maintenance and Support
•Hardware Features
•Connect the Switch to the Network
•Switch Management Methods
•Configure Access to the Web Management Interface
•Log In to the Web Management Interface
•Interface Naming Conventions
•Online Help
•Registration
1
Note: For more information about the topics covered in this manual, visit
the Support website at support.netgear.com.
Note: Firmware updates with new features and bug fixes are made
available from time to time on
products can regularly check the site a
or you can check for and download new firmware manually. If the
features or behavior of your product do not match what is described
in this guide, you might need to update your firmware.
The following figure shows the front panel ports and status LEDs of the switch.
Figure 1.
From left to right, the switch’s front panel shows the following LEDs and ports:
1. LEDs for th
2. 24 10/
e 24 Ethernet ports.
100/1000 Mbps LAN Ethernet ports with RJ-45 connectors. All Ethernet ports provide
switched N-way, automatic speed negotiating, auto MDI/MDIX technology.
3. One Gigabit
module bay (23F) in which an optional small form-factor pluggable (SFP) GBIC
transceiver module can be installed.
4. One Gigabit
module bay (24F) in which another optional SFP GBIC transceiver module can
be installed.
For bays 23F and 24F, the following modules are supported:
•AGM731F. 1000BASE-SX SFP GBIC for
Gigabit Ethernet short-reach fiber
connectivity.
•AGM732F. 1000BASE-LX SFP GBIC
for Gigabit Ethernet short-reach fiber
connectivity.
Note: If you install SFP modules in bays 23F and 24F, ports 23T and 24T
cannot be used, and their associated LEDs are off.
5. An RS-232 port for connecting to an optional console terminal. The port has a DB9 male
connector. The default baud rate is 9600 K. The configuration is 8 bits, no parity, and 1 stop
bit.
recessed Factory Defaults Reset button. Using a sharp object, press and hold this button
6. A
for about 10 seconds until the front panel LED flashes and the switch returns to factory
ault settings.
def
Note: If you reset the switch to factory default settings, all configuration
settings are lost, and the default IP address and subnet, user name,
and password are restored. (By default, the password is blank, that
is, do not enter anything.)
The function of each LED is described in the following table:
Table 1. LED and port functions
LEDLED statusDescription
General LED
PowerOffPower is disconnected.
Solid greenPower is supplied to the switch and is operating normally.
Solid yellowThe switch is starting up. When the startup process is
solid green.
10/100/1000 Mbps LAN Ethernet port LEDs for ports 1 through 22, 23T, and 24T
Link/ACT
(one per port)
SPD
(one per port)
FDX
(one per port)
LEDs for bays 23F and 24F
SFP Link/ACT
(one per module)
OffNo link is established on the port.
Solid greenA valid link is established on the port.
Flashing green Traffic transmission or reception occurs on the port.
Off•The SPD LED is off and the Link/ACT LED is on: A valid 10 Mbps link
s established on the port.
i
•The SPD LED is off and the Link/ACT LED is off: No 10/100/1000
ps link is established on the port.
Mb
Solid yellowA valid 100 Mbps link is established on the port.
Solid greenA valid 1000 Mbps link is established on the port.
OffA half-duplex link is established on the port, or a full-duplex link is not
stablished on the port.
e
Solid greenA full-duplex link is established on the port.
OffNo SFP module link is established on the port.
Solid greenA valid 1000 Mbps SFP module link is established on the port.
finished, the LED is
Flashing greenTraffic transmission or reception occurs at 1000 Mbps on the module.
Rear Panel
The following figure shows the single rear panel component of the switch, the AC power
socket. Attach the power cord to this socket. (There is no separate power on/off switch.)
The product label on the bottom panel of the switch’s enclosure displays the MAC address,
serial number, regulatory compliance, input power, and other information.
Figure 3.
Connect the Switch to the Network
To connect the switch physically to your network, connect the cables according to the
instructions in the installation guide. See the ProSafe® 24-Port Gigabit L2 Managed Switch Installation Guide for complete steps. A PDF of the installation guide is on the NETGEAR
support website.
Switch Management Methods
The switch functions as a simple switch without the management software . However , you can
use the management software to configure more advanced features that can improve switch
efficiency and overall network performance.
You can use one of the following management functions to configure an
eb management interface (see Configure Access to the Web Management Interface on
•W
page 13)
•Command-line
Configure the Switch with a Static IP Address o
•Simple Network Ma
Protocol on
•Remot
e Network Monitoring (RMON; see Remote Network Monitoring on page 279)
interface (CLI; see the JGSM7224 CLI Reference Manual, and see also
n page 15)
nagement Protocol (SNMP; see Simple Network Management
Note: To configure the switch by using SNMP or RMON, you first need to
configure these functions on the switch through accessing the web
management interface or CLI.
The first three of these standards-based management methods let you both configure and
monitor the components of the switch. The fourth method lets you monitor the component s of
the switch only . The method that you use to manage and monitor the switch depends on your
network size and requirements, and on your preference.
Configure Access to the Web Management Interface
The web management interface lets you monitor, configure, and control the switch remotely
using a standard web browser so you do not have to use SNMP software products. From
your web browser, you can monitor the performance of your switch and optimize its
configuration for your network. You can configure all switch features, such as VLANs, QoS,
and ACLs by using the web management interface.
Before you can access the web management interface from a computer, you need to
configure t
whether there is a DHCP server in the network, follow one of the procedures that are
described in the following sections:
•Configure Access When the Switch Functions in DHCP Client Mode without a DHCP
Server on
•Configure Access When the Switch Functions
on page 14
•Configure the Switch with a Static IP Address on p
he computer for access. Depending upon how your computer is set up and
page 13
in DHCP Client Mode with a DHCP Server
age 15
Configure Access When the Switch Functions in DHCP Client
Mode without a DHCP Server
If there is no DHCP server in your network, the switch assumes a default IP address of
169.254.100.100 and subnet mask of 255.255.0.0. Use this IP address and subnet mask to
log in to the switch (see Log In to the Web Management Interface on
You can connect directly to the switch from a computer. The IP address of the computer
n
eeds to be in the same subnet as the default IP address on the switch. For most networks,
this means that you need to change the IP address of the computer to be on the same subnet
as the default IP address (169.254.100.100) of the switch. For example, configure the
computer with IP address 169.254.100.80 and subnet mask 255.255.0.0.
page 17).
To change the IP address on a computer that is run
system, open the Internet Protocol (TCP/IP) Properties screen that you can access from the
Local Area Connection Properties screen, as shown in the following figure. You need
Windows administrator privileges to change these settings.
When you change the IP address of your administrative system,
you lose your connection to the network. Write down your current
network address settings before you change them.
To modify the network settings on your management computer:
1. On
a computer that is running a Microsoft Windows operating system, open the Internet
Protocol (TCP/IP) Properties screen.
2. Set
the IP address of the administrative system to an address in the 169.254.100.0 network,
such as 169.254.100.80. The IP address needs to be different from that of the switch but
within the same subnet.
3. Click OK.
For information about how to log in to the switch, see Log In to the Web Management
Interface o
n page 17.
Configure Access When the Switch Functions in DHCP Client
Mode with a DHCP Server
By default, the switch is configured as a DHCP client to obtain its IP address from a DHCP
server in the network. You need to access the switch from the console port.
To determine the IP address of the switch if the IP address has been assigned by a
DHCP server on the network:
1. Make sure t
2. Conn
ect a console to the sw it c h. Using the null-modem cable sup plied with the s w i tc h,
hat the switch is connected to a DHCP server.
connect a VT100/ANSI terminal or workstation to console port of the switch (see Figure 1 on
page 10).
3. S
tart and configure a terminal emulation program (TEP):
a. S
tart a TEP using the appropriate method for your operating system:
•W
indows users can use HyperTerminal.
•W
indows Vista users should download a TEP from the Internet.
•Macintosh users can u
•UNIX users can u
b. Con
figure the TEP to use the following settings (they are written next to the console
se ZTerm.
se a terminal emulator such as TIP.
port connector on the front panel of the switch):
•Bau
•D
d rate: 9,600 bps
ata bits: 8
•Parity: none
•S
top bit: 1
•F
low control: none
4. Log in to the s
a. At t
he User: command prompt, type admin, and press Enter.
wit ch :
b. At the passwo
rd: command prompt, just press Enter again (the password is blank,
that is, do not enter anything).
The (JGS
ype the show management vlan command, and press Enter.
5. T
M7224)> prompt displays.
The IP address of the switch is now displayed onscreen.
Use this IP address to log in to the switch through its web management interface (see Lo g In
to the Web Management Interface o
n page 17).
Configure the Switch with a Static IP Address
If the network has no DHCP service, you need to assign a static IP address to the switch. If
you prefer, you can also assign a static IP address to the switch even if the network has
DHCP service.
To access the switch from the console port to assign a static IP address:
1. Con
nect a console to the switch. Using the null-modem cable supplied with the switch,
connect a VT100/ANSI terminal or workstation to console port of the switch (see
The web management interface consists of four levels:
•1st le
vel—main navigation tabs. The main navigation tabs along the top of the web
management interface give you quick access to the various switch functions. The tabs
are always available and remain constant, regardless of your configuration activity.
•2nd le
vel—configuration menus. When you select a main navigation tab, the
configuration menus for that tab display as links directly under the tabs. The configuration
menus in the blue bar change according to the main navigation tab that is selected.
•3rd leve
l—links. The links for each configuration menu are available on the left side of
the screen. The links provide direct access to a screen.
•4th level—su
bmenus with links. Some links in a configuration menu expand to reve al a
submenu with multiple links as the following figure shows. When you click a link that is a
submenu, a down arrow symbol is displayed to the left of the link.
Levels 1 through 3 are shown in the following figure. Level 4 is shown in Figure 7 on
The following table describes the functions of the command buttons that ar e used throughout
the screens of the web management interface:
Table 2. Web management interface command buttons
ButtonFunction
AddAdds the new item to the table.
ApplySends the updated configuration to the swi
immediately. Changes are not retained when you reboot the switch unless you save the
changes to the startup configuration file.
Note: Make sure that you save the configuration
changes. Go to the Save Configuration screen (Maintenance > Save Configuration) to
save the configuration changes to the startup configuration file. For more information, see
Save Configuration on
CancelCancels the configuration onscreen and resets the da
values of the switch.
ClearResets one or more counters.
page 296.
tch. Configuration changes take effect
after you have applied the configuration
ta onscreen to the most recent
DeleteRemoves the selected item or items from the table.
RefreshUpdates the information onscreen to the most recent values of the switch.
LogoutEnds the session.
Each screen contains access to HTML-based help that explains the fields and configuration
options for the screen. Click the red question mark to display the help screen.
Interface Naming Conventions
The switch supports physical and logical interfaces. The logical interfaces are link
aggregation groups (LAGs), also referred to as port channels. Interfaces are identified by
their type and the interface number. The physical ports are Gigabit interfaces and are
numbered on the front panel. You configure the logical interfaces by using the web
management interface or CLI. The following table describes the naming conventions for
these interfaces:
Table 3. Interface naming conventions
InterfaceDescriptionExamples
PhysicalThe physical ports are Gigabit Ethernet interfaces and are
numbered sequentially starting from 0/1 through 0/24.
Link aggregation
up (LAG)
gro
LAG interfaces are logical interfaces that are used only for bridging
functions. There are eight preconfigured link aggregation groups to
which you can add individual interfaces.
0/1, 0/2, 0/3, and so on
through 0/24
po1, po2, po3. po4,
po5, po6, po7, and po8
Online Help
The Help main navigation tab of the web management interface provides access to the menus
that are described in the following sections:
•Support
•User Guide
Support
The Support screen provides access to the NETGEAR support website at
support.netgear.com.
To access the support website from the web management interface:
2. Click Apply to connect to the NETGEAR support website for the switch.
User Guide
The ProSafe 24-Port Gigabit L2 Managed Switch JGSM7224 Reference Manual (the guide
that you are now reading) is available at the NETGEAR download center at
downloadcenter.netgear.com.
To access the reference manual online from the web management interface:
1. Select Help
Figure 9.
> > Online Help > User Guide. The User Guide screen displays:
2. Click Apply to access the NETGEAR download center.
To qualify for product updates and product warranty, NETGEAR encourages you to register
your product. The first time that you connect to the switch while it is connected to the Internet,
you have the option to register your product. At any time, you can register your product from
the web management interface, or you can visit the NETGEAR website for registration at
https://my.netgear.com/registration/login.aspx.
To register the switch with NETGEAR:
1. Select Help >
Figure 10.
Register. The Registration screen displays:
2. Click Register. A new screen displays in your browser:
3. Enter the information in the blank fields. The serial number, model number, and date of
purchase are entered automatically.
4. Click Regi
ster. The registration web page displays:
Figure 12.
5. Complete the registration form.
6. Click submit.
Introduction and Getting St arted
23
2. Configuring the System
IMPORTANT:
The System main navigation tab lets you define the relationship of the switch to its environment
through the features that are described in the following sections:
•Management Settings
•Services: DHCP Server and DHCP Layer 2 Relay
•Simple Network Management Protocol
•Link Layer Discovery Protocol
Make sure that you save the configuration after you have applied
the configuration changes. Go to the Save Configuration screen
(Maintenance > Save Configuration) to save the configuration
changes to the startup configuration file.
2
Management Settings
This section describes how to display the switch status and specify some basic switch
information, such as the management interface IP address, system clock settings, and DNS
information. The Management configuration menu has the links that are described in the
following sections:
Green Ethernet features allow for power consumption savings.
To configure the Green Ethernet features:
1. Select System
> Management > Green Ethernet Configuration. The Green Ethernet
Configuration screen displays:
Figure 15.
2. Configure the settings as explained in the following table:
Table 5. Green Ethernet Configuration screen settings
SettingDescription
Auto Power Down Mode Select one of the following radio buttons:
•Disa
•Enable.
Short Cable ModeSelect one of the following radio buttons:
•Disa
•Enable. I
3. Click App
ly to apply the changes.
ble. Autonegotiation continues, and there is no power consumption
saving while an interface is down.
When a link to a switch interface is down, the inte rface
automatically goes into standby mode and checks the status of the link at
regular intervals. Power consumption is saved, and no autonegotiation is
performed while the link is down. This is the default setting.
ble. Full transmit power is provided to all switch interfaces, regardless
of cable lengths. This is the default setting.
f a cable that is attached to a switch interface is less than 10
meters in length, the interface is automatically placed in low-power mode.
Y ou can configure the switch to monitor and blo ck six types of denial of service (DoS) att acks,
which are explained in the following figure and table.
To manually configure DoS settings:
1. Select System >
Management > Denial of Service. The Denial of Service Configuration
screen displays:
Figure 16.
2. Configure the settings as explained in the following table:
Table 6. Denial of Service Configuration screen settings
SettingDescription
Denial of Service SIP=DIPSelect one of the following radio buttons:
le. This is the default setting.
Packets that have a source IP (SIP) address equal to the
destination IP (DIP) address are dropped.
le. This is the default setting.
Packets with a TCP header that is smaller than the configured
minimum TCP header size are dropped.
Specify the minimum TCP header size. Enter a value in
Hdr Size
le. This is the default setting.
Configuring the System
the range from 0 to 255 bytes. The default setting is
20 bytes.
s that have an IP fragment offset equal to 1 are dropped.
Table 6. Denial of Service Configuration screen settings
SettingDescription
Denial of Service TCP Flag Select one of the following radio buttons:
•Disa
•Enable. All of the following packets are dropped:
Denial of Service L4 PortSelect one of the following radio buttons:
•Disa
•Enable. Packe
ble. This is the default setting.
- Packets that have a TCP flag SYN set and a TCP source port with a
umber lower than 1024
n
- Packets that have TCP control flags set to 0 and the TCP sequence
number set
- Packets that have TCP flags FIN, URG, and PSH set and TCP
sequence number
- Packets that have both the TCP flags SYN and FIN set
ble. This is the default setting.
destination port are dropped, and packets that have a UDP source port
that is equal to the UDP destination port are dropped.
to 0
set to 0
ts that have a TCP source port that is equal to the TCP
Denial of Service ICMPSelect one of the following radio buttons:
•Disa
•Enable. ICMP packets that have the type set to ECHO_REQ (ping) and a
Denial of Service
Max ICM
ble. This is the default setting.
size greater than the configured ICMP packet size are dropped.
Specify the maximum ICMP packet size. Enter a value in
P Size
the range from 0 to 1023 bytes. The default setting is
512 bytes.
3. Click Apply to apply the changes.
Network Interface
The network interface is the logical interface that is used for inband connectivity with the
switch through any of its front panel port s. The configuration of the net work interface does not
affect the configuration of the front panel ports through which traffic is switched or routed.
The Management configuration menu h
are described in the following sections:
•IPv4 Network Configuration
•IPv6 Network configuration
•IPv6 Network Neighbor
as a Network Interface submenu with the links that
IPv4 Network Configuration
To access the switch in a network, you need to configure a static IP address, subnet mask,
and default gateway or enable DHCP or BOOTP so the switch can receive a dynamic IP
address, subnet mask, and default gateway.