NetGear M4250-10G2F-PoE+, M4250-10G2XF-PoE+, M4250-26G4F-PoE+, M4250-26G4XF-PoE+, M4250-40G8F-PoE+ Users Guide

Main User Manual

AV Line of Fully Managed Switches
M4250 Series

Firmware version 13.0.0 and later versions

NETGEAR, Inc.

350 E. Plumeria DriveFebruary 2023
San Jose, CA 95134, USA202-12091-05

AV Line of Fully Managed Switches M4250 Series Main User Manual

Support and Community

Visit netgear.com/support to get your questions answered and access the latest
downloads.

You can also check out our NETGEAR Community for helpful advice at
community.netgear.com.

Regulatory and Legal

Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français
canadien à https://www.netgear.com/support/download/.

(If this product is sold in Canada, you can access this document in Canadian French at
https://www.netgear.com/support/download/.)

For regulatory compliance information including the EU Declaration of Conformity, visit
https://www.netgear.com/about/regulatory/.

See the regulatory compliance document before connecting the power supply.

For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy.

By using this device, you are agreeing to NETGEAR’s Terms and Conditions at
https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the
device to your place of purchase within your return period.

Do not use this device outdoors. The PoE source is intended for intra building connection
only.

Applicable to 6 GHz devices only: Only use the device indoors. The operation of 6 GHz
devices is prohibited on oil platforms, cars, trains, boats, and aircraft, except that
operation of this device is permitted in large aircraft while flying above 10,000 feet.
Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or
communications with unmanned aircraft systems.

Trademarks

© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc.
Any non-NETGEAR trademarks are used for reference purposes only.

Revision History

CommentsPublish DatePublication Part

Number

February 2023202-12091-05

We corrected the device class 6 value in Table 38 in section PoE concepts
on page 136.

We changed Supported switches on page 23.May 2022202-12091-04

2

(Continued)

Number

AV Line of Fully Managed Switches M4250 Series Main User Manual

CommentsPublish DatePublication Part

November 2021202-12091-03

We changed the following sections:
Log in to the main UI with a web browser on page 24
Log in to the main UI using the switch default IP address on page 25
Configure the IPv4 service port on page 48
Add an SNMPv3 user account on page 158
Configure user password requirements on page 497
Configure the HTTPS access settings on page 526
Manage certificates for HTTPS access on page 528
Generate an SSL certificate on page 529
Delete an SSL certificate on page 531
Transfer an existing HTTPS certificate from a server to the switch on page
531

We added the following sections:
Display the status of the SSL certificates on page 528
Activate a certificate on page 530

We made other minor changes.
We published the manual in a new format.

This second publication is a major revision.March 2021202-12091-02

We added the following:
Information about the 24-port PoE+ and PoE++ models and the 40-port
PoE+ and PoE++ models (see Supported switches on page 23).
Information about the Auto-Trunk feature (see Auto-Trunk overview on
page 194 and Enable or disable Auto-Trunks on page 195).
Information about the Auto-LAG feature (see Auto-LAG overview on page
302, Enable or disable Auto-LAGs on page 303, and Configure the hash
mode for Auto-LAGs on page 304).

We revised a very large part of the manual and added multiple new
sections to provide more complete and correct information.

We replaced the old appendix with defaults setting with a new one that
also includes hardware specifications (see Software Default Settings and
Hardware Specifications on page 784).

We made multiple corrections throughout the entire manual.

First publication.October 2020202-12091-01

3

Contents

Chapter 1 Get Started with the Main UI

Supported switches............................................................................23

Available publications and online help...........................................23

Register your product........................................................................23

Main local browser UI overview........................................................24

Log in to the main UI with a web browser.......................................24

Log in to the main UI using the switch default IP address........25

Log in to the main UI with a known IP address..........................26

Main UI buttons and user-defined fields.....................................26

Interface naming conventions......................................................27

Save your settings to the running configuration........................28

Main UI online help........................................................................28

Use the Device View in the Main UI..................................................29

Set up SNMP access...........................................................................31

Chapter 2 Configure Switch System Information

Switch system information.................................................................35

View and configure switch system information..........................35

View the fan status.........................................................................38

View the temperature sensor information..................................39

View the device status and firmware version.............................40

View the system CPU status..........................................................41

Configure the CPU thresholds.....................................................42

View or clear switch statistics........................................................43

View USB device information.......................................................45

Loopback interface.............................................................................46

IPv4 management interfaces and VLANs........................................47

Configure the IPv4 service port....................................................48

Configure an IPv4 management VLAN.......................................49

Configure an IPv4 management interface..................................52

IPv6 management interfaces and VLANs........................................53

Configure an IPv6 service porttime.............................................54

Manage IPv6 addresses for the IPv6 service port......................55

Configure an IPv6 management VLAN.......................................56

Manage IPv6 addresses for the IPv6 management VLAN........59

4

AV Line of Fully Managed Switches M4250 Series Main User Manual

Manage the IPv6 default route addresses for the IPv6

management VLAN.......................................................................60

Configure an IPv6 management interface..................................61

Manage IPv6 addresses for the IPv6 management interface....63

Manage the IPv6 default route addresses for the IPv6

management interface..................................................................64

Time and SNTP settings.....................................................................65

Configure the time setting manually...........................................65

Configure the time settings with SNTP and configure the global

SNTP settings..................................................................................66

View the SNTP global status.........................................................69

Configure SNTP servers................................................................71

Add an SNTP server..................................................................72

Change the settings for an existing SNTP server..................74

Remove an SNTP server...........................................................74

Configure daylight saving time settings.....................................75

View the daylight saving time status............................................77

Precision Time Protocol.....................................................................79

Manage the global PTP settings..................................................79

Manage the PTP interface settings..............................................80

Domain Name System.......................................................................81

Configure the global DNS settings and add a DNS server......81

Remove a DNS server....................................................................83

Configure and view host name-to-IP address information.......84

Add a static entry to the dynamic host mapping table........84

Remove an entry from the dynamic host mapping table.....85

Change the host name or IP address in an entry of the dynamic

host mapping table, view all entries, or clear all entries......85

Switch database management template.........................................86

Green Ethernet settings.....................................................................88

Configure the global green Ethernet settings...........................88

Configure green Ethernet interface settings..............................89

Configure and display detailed green Ethernet settings for an

interface..........................................................................................90

Display green Ethernet information for the link partner of an

interface..........................................................................................93

Display the green Ethernet statistics summary..........................94

Configure and display the green Ethernet EEE LPI history for an

interface..........................................................................................96

Bonjour settings..................................................................................97

Enable or disable Bonjour............................................................98

Display Bonjour information.........................................................98

IPv4 DHCP server................................................................................99

Configure a DHCP server..............................................................99

Manage DHCP pools...................................................................101

5

AV Line of Fully Managed Switches M4250 Series Main User Manual

Create a DHCP pool...............................................................101

Change a DHCP pool.............................................................104

Remove a DHCP pool.............................................................105

Configure DHCP pool options...................................................105

Display DHCP server statistics....................................................106

Display the DHCP bindings........................................................108

Delete one or all dynamic DHCP bindings...............................109

View bindings with DHCP conflicts...........................................109

Delete one or all DHCP bindings with conflicts.......................111

DHCP relay and relay statistics.......................................................112

DHCP Layer 2 relay..........................................................................113

Configure the global DHCP L2 relay settings..........................114

Configure a DHCP L2 relay interface........................................114

Display DHCP L2 relay interface statistics.................................116

UDP relay...........................................................................................117

Configure the global UDP relay settings and add a UDP switch

configuration................................................................................117

Change a UDP switch configuration.........................................119

Remove a UDP switch configuration.........................................119

Add a UDP interface configuration...........................................120

Change a UDP interface configuration.....................................121

Remove a UDP switch configuration.........................................122

DHCPv6 server..................................................................................123

Enable the DHCPv6 server.........................................................123

Manage DHCPv6 pools...............................................................124

Create a DHCPv6 pool...........................................................124

Change a DHCPv6 pool.........................................................124

Delete a DHCPv6 pool...........................................................125

Manage DHCPv6 prefix delegation for pools..........................126

Create a DHCPv6 prefix delegation configuration for a

pool...........................................................................................126

Change a DHCPv6 prefix delegation configuration for a

pool...........................................................................................127

Delete a DHCPv6 prefix delegation configuration for a

pool...........................................................................................128

Configure the DHCPv6 settings for an interface......................129

Display the DHCPv6 bindings....................................................130

Display DHCPv6 server statistics................................................131

Delete DHCPv6 statistics for one or all interfaces...................134

DHCPv6 relay interface....................................................................135

Power over Ethernet........................................................................136

PoE concepts................................................................................136

Configure the global PoE settings.............................................138

Configure the PoE ports settings...............................................139

Power-cycle one or more PoE ports..........................................143

6

AV Line of Fully Managed Switches M4250 Series Main User Manual

Timer schedules...............................................................................144

Create a timer schedule..............................................................144

Specify the settings for an absolute timer schedule...............145

Specify the settings for a recurring timer schedule.................146

Change the settings for a recurring timer schedule entry......148

Delete a timer schedule entry....................................................149

Delete a timer schedule..............................................................150

Simple Network Management Protocol........................................151

Manage SNMPv1 and SNMPv2 communities..........................151

Add an SNMPv1 and SNMPv2 community..........................151

Change an existing SNMPv1 and SNMPv2 community.....152

Delete an SNMPv1 and SNMPv2 community......................153

Manage the SNMPv1 and SNMPv2 trap settings.....................153

Add an SNMPv1 or SNMPv2 trap configuration for a host.153

Change an SNMPv1 or SNMPv2 trap configuration for a

host...........................................................................................155

Delete an SNMPv1 or SNMPv2 trap configuration for a

host...........................................................................................155

Configure SNMPv1 and SNMPv2 trap flags.............................156

Display the supported MIBs.......................................................158

Manage SNMPv3 users...............................................................158

Add an SNMPv3 user account...............................................158

Change an SNMPv3 user account.........................................159

Delete an SNMPv3 user account...........................................160

Link Layer Discovery Protocol.........................................................161

Configure the global LLDP settings..........................................161

Configure LLDP interface settings.............................................162

Display or clear LLDP statistics...................................................163

Display LLDP local device information......................................165

Display LLDP remote device information.................................166

Display the LLDP remote device inventory..............................168

Link Layer Discovery Protocol for Media Endpoint Devices.......169

Configure the global LLDP-MED settings.................................169

Configure LLDP-MED interface settings...................................170

Display LLDP-MED local device information............................172

Display the LLDP-MED remote device information.................174

Display the LLDP-MED remote device inventory.....................178

Link dependency..............................................................................179

Configure a link dependency group.........................................179

Configure or display upstream and downstream interfaces for a

link dependency group..............................................................180

Clear all interfaces in a link dependency group......................182

Industry Standard Discovery Protocol...........................................183

Configure the global ISDP settings...........................................183

Configure ISDP settings for an interface...................................185

7

AV Line of Fully Managed Switches M4250 Series Main User Manual

Display or clear ISDP neighbor information.............................186

Display or clear ISDP statistics....................................................187

Chapter 3 Configure Switching Information

VLANs................................................................................................190

Manage the VLAN configuration on the switch.......................190

Add a VLAN.............................................................................190

Change a VLAN.......................................................................191

Delete one or more VLANs....................................................192

Reset the entire VLAN configuration to default setting.....193

Change the internal VLAN allocation settings.....................193

Auto-Trunk overview...................................................................194

Enable or disable Auto-Trunks...................................................195

Configure the switch port mode settings for interfaces.........196

Configure membership interfaces for a VLAN.........................199

View the VLAN status on the switch..........................................201

Change the port VLAN ID settings............................................202

Configure a MAC-based VLAN..................................................205

Add a MAC-based VLAN configuration...............................205

Delete a MAC-based VLAN configuration...........................206

Configure a protocol-based VLAN group................................206

Add a protocol-based VLAN group......................................207

Change a protocol-based VLAN group...............................208

Delete a protocol-based VLAN group.................................209

Configure membership interfaces for a protocol-based VLAN

group.............................................................................................209

Configure an IP subnet-based VLAN........................................211

Add an IP subnet-based VLAN..............................................211

Delete an IP subnet-based VLAN..........................................212

Configure a double VLAN..........................................................212

Configure a voice VLAN..............................................................214

Configure Generic Attribute Registration Protocol.................215

Configure GARP switch settings............................................216

Configure GARP settings for one or more interfaces.........217

Auto-VoIP..........................................................................................218

Configure Auto-VoIP protocol-based settings.........................219

Configure the Auto-VoIP OUI-based properties.....................220

Configure the OUI-based interface settings............................221

Manage the OUI table.................................................................222

Add an OUI prefix...................................................................223

Delete one or more OUI prefixes..........................................223

Display the Auto-VoIP status......................................................224

Spanning Tree Protocol...................................................................225

Configure the STP settings and display the STP status...........226

8

AV Line of Fully Managed Switches M4250 Series Main User Manual

Configure the CST settings and display the CST status..........229

Configure the CST interface settings........................................231

Display the CST interface status.................................................234

Manage MST instances...............................................................236

Add an MST instance and display the MST status..............236

Change an MST instance........................................................238

Delete an MST instance..........................................................238

Configure and display the interface settings for an MST

instance.........................................................................................239

Display the STP interface statistics.............................................242

Configure the PVST/RPVST VLAN settings...............................243

Change a PVST/RPVST VLAN configuration.............................245

Remove a PVST/RPVST VLAN configuration............................246

Configure the PVST and RPVST interface settings..................246

Display the PVST and RPVST statistics......................................248

Multicast forwarding database.......................................................249

Display the entries in the multicast forwarding database......249

Remove the IGMP snooping entries from the multicast forwarding

database.......................................................................................250

Remove all known multicast MAC entries from the multicast

forwarding database...................................................................251

Display the multicast forwarding database statistics..............252

Internet Group Management Protocol snooping........................253

Configure IGMP snooping automatically with IGMP Plus

mode.............................................................................................254

Configure IGMP snooping manually.........................................255

Configure the IGMP snooping settings for interfaces.............257

Configure IGMP snooping for VLANs automatically with IGMP

Plus mode.....................................................................................259

Configure IGMP snooping for VLANs manually......................260

Configure an IGMP multicast router interface.........................262

Configure an IGMP multicast router VLAN...............................263

IGMP snooping querier overview..............................................264

Configure the IGMP snooping querier global settings..........264

Configure an IGMP snooping querier for a VLAN...................265

Remove the IGMP snooping querier settings for a VLAN......267

Display the status of the IGMP snooping querier....................268

Multicast Listener Discovery snooping..........................................269

Configure MLD snooping automatically with MLD Plus mode.269

Configure MLD snooping manually..........................................271

Configure the MLD snooping settings for interfaces..............272

Configure MLD snooping for VLANs automatically with MLD Plus

mode.............................................................................................274

Configure MLD snooping for VLANs manually........................275

Remove the MLD snooping querier settings for a VLAN........277

9

AV Line of Fully Managed Switches M4250 Series Main User Manual

Configure an MLD multicast router interface...........................278

Configure an MLD multicast router VLAN................................279

Configure the MLD snooping querier global settings............280

Configure an MLD snooping querier for a VLAN....................281

Remove the MLD snooping querier settings for a VLAN........283

Multicast VLAN registration............................................................283

Configure the global MVR settings...........................................284

Configure an MVR group............................................................285

Remove an MVR group...............................................................286

Configure an MVR interface.......................................................287

Configure the interface members of an MVR group...............288

Display the MVR statistics...........................................................289

MAC address table...........................................................................290

View, search, or clear the MAC address table.........................290

Set the dynamic address aging interval....................................292

Add a static MAC address to the MAC address table............293

Remove a static MAC address from the MAC address table..293

Port settings......................................................................................294

Configure and display the port settings...................................294

Add port, LAG, and VLAN descriptions....................................297

Display transceiver module information...................................299

Configure the port link flap settings..........................................300

Link aggregation groups.................................................................301

Auto-LAG overview......................................................................302

Enable or disable Auto-LAGs.....................................................303

Configure the hash mode for Auto-LAGs.................................304

Configure the LAG settings........................................................305

Configure a single LAG and its membership...........................307

802.1AS timing and synchronization.............................................309

Configure and view the global 802.1AS settings....................309

Configure the 802.1AS interface settings.................................311

View the 802.1AS statistics.........................................................313

Multiple Registration Protocol and 802.1Qav settings................315

Configure the global MRP settings............................................316

Configure 802.1Qav mapping...................................................318

Configure the MRP interface settings.......................................319

View or clear MMRP statistics.....................................................321

View or clear MVRP statistics......................................................322

View or clear MSRP statistics......................................................324

View the MSRP reservation settings..........................................326

Configure and view the Qav settings for interfaces................328

View MSRP streams information................................................330

Loop protection................................................................................332

About loop protection................................................................332

Configure the global loop protection settings........................334

10

AV Line of Fully Managed Switches M4250 Series Main User Manual

Configure the loop protection settings for interfaces and display

the loop protection state............................................................335

Chapter 4 Manage Routing

Routing concepts.............................................................................338

Routing table, routes and route preferences................................338

Configure a route and display learned routes.........................338

Delete a route...............................................................................340

Specify route preferences...........................................................341

IPv4 routing.......................................................................................342

Manage the global IPv4 routing settings..................................342

Display the IPv4 statistics............................................................344

Configure IPv4 routing interfaces..............................................347

Delete the routing IP address from an IPv4 routing interface.350
Configure a secondary IP address for an IPv4 routing

interface........................................................................................351

Delete the secondary IP address from an IPv4 routing

interface........................................................................................352

IPv6 routing.......................................................................................353

Manage the global IPv6 routing settings..................................353

Display the IPv6 route table........................................................354

Configure IPv6 routing interfaces..............................................355

Configure prefix settings for an IPv6 routing interface...........358

Delete a prefix setting from an IPv6 routing interface............360

Display the IPv6 and ICMPv6 statistics for an IPv6 routing

interface........................................................................................361

Display the IPv6 neighbor table or clear IPv6 neighbor entries.366

Configure IPv6 static routes.......................................................368

Delete an IPv6 static route..........................................................370

Configure the IPv6 route preference for the switch................370

Configure IPv6 tunnels................................................................371

Delete an IPv6 tunnel..................................................................373

Routing VLANs..................................................................................373

Create a routing VLAN with the VLAN static routing wizard...374

Configure routing for an existing VLAN....................................375

Remove the routing function from a VLAN..............................376

Address Resolution Protocol..........................................................377

Display the ARP entries in the ARP cache.................................378

Add or change a static entry in the ARP table.........................379

Delete a static ARP entry.............................................................380

Configure the ARP table settings or remove entries from the

table...............................................................................................381

Routing Information Protocol.........................................................383

Enable or disable RIP on the switch..........................................384

11

AV Line of Fully Managed Switches M4250 Series Main User Manual

Configure the global RIP settings for the switch......................384

Configure RIP interface settings................................................386

Configure the RIP route redistribution settings and display the

route redistribution summary....................................................388

Router discovery and router advertisements................................390

Chapter 5 Configure Multicast Routing

IPv4 multicast routing and the IPv4 multicast route table...........394

Display the IPv4 multicast route table.......................................394

Add static multicast entries to the IPv4 Mroute table.............395

Delete a static multicast entry from the IPv4 Mroute table.....396

Configure global multicast settings for the switch..................397

Configure a multicast interface..................................................398

IGMP for IPv4 multicast routing......................................................399

Configure the global IGMP settings for the switch.................399

Configure an IGMP routing interface........................................400

Display the statistics for the IGMP routing interfaces..............402

Display the IGMP groups and search the IGMP group

database.......................................................................................403

Display the IGMP membership information and search the IGMP

membership database................................................................405

Configure an IGMP proxy interface...........................................407

Display the statistics for the IGMP proxy interface..................408

Display the IGMP proxy membership and search the IGMP proxy

membership database................................................................410

PIM for IPv4 multicast routing.........................................................411

Configure the global PIM IPv4 settings on the switch............412

Add IPv4 PIM-SSM groups..........................................................412

Delete an IPv4 PIM-SSM group..................................................413

Configure an IPv4 PIM interface................................................414

Display IPv4 PIM neighbors and search the PIM neighbor

database.......................................................................................416

Add an IPv4 PIM candidate rendezvous point configuration.417
Delete an IPv4 PIM candidate rendezvous point configuration.418
Configure an interface as an IPv4 PIM bootstrap router

candidate......................................................................................419

Delete an IPv4 PIM bootstrap router candidate configuration.420

Configure a static IPv4 PIM rendezvous point for a group.....421

Delete a static IPv4 PIM rendezvous point configuration.......422

Static multicast routes for IPv4 addresses.....................................422

Configure static multicast routes for IPv4 addresses..............422

Delete a static multicast route for an IPv4 address..................423

Multicast admin boundaries for IPv4 addresses..........................424

Configure an interface as a multicast admin boundary..........424

12

AV Line of Fully Managed Switches M4250 Series Main User Manual

Delete a multicast admin boundary configuration for an

interface........................................................................................425

IPv6 multicast routing and the IPv6 multicast route table...........426

Display the IPv6 multicast route table.......................................426

PIM for IPv6 multicast routing.........................................................428

Configure the global PIM IPv6 settings on the switch............428

Add IPv6 PIM-SSM groups..........................................................429

Delete an IPv6 PIM-SSM group..................................................430

Configure an IPv6 PIM interface................................................430

Display IPv6 PIM neighbors and search the PIM neighbor

database.......................................................................................432

Add an IPv6 PIM candidate rendezvous point configuration.433
Delete an IPv6 PIM candidate rendezvous point configuration.434
Configure an interface as an IPv6 PIM bootstrap router

candidate......................................................................................435

Delete an IPv6 PIM bootstrap router candidate configuration.436

Configure a static IPv6 PIM rendezvous point for a group.....437

Delete a static IPv6 PIM rendezvous point configuration.......438

MLD for IPv6 multicast routing.......................................................439

Configure the global MLP settings for the switch....................439

Configure an MLD routing interface.........................................440

Display the statistics for the MLD routing interfaces...............442

Display the MLD groups and search the MLD group database.443

Display or clear MLD traffic statistics.........................................445

Configure an MLD proxy interface............................................446

Display the statistics for the MLD proxy interface....................447

Display the MLD proxy membership and search the MLD proxy

membership database................................................................449

Static multicast routes for IPv6 addresses.....................................450

Configure static multicast routes for IPv6 addresses..............451

Delete a static multicast route for an IPv6 address..................452

Chapter 6 Configure Quality of Service

Quality of Service concepts.............................................................454

Class of Service.................................................................................454

CoS configuration concepts.......................................................454

Configure the CoS trust mode settings globally or for a specific

interface........................................................................................455

Map 802.1p priorities to queues...............................................456

Map DSCP values to queues......................................................458

Configure the CoS interface settings for an interface.............458

Configure CoS queue settings for an interface.......................460

Configure the CoS WRED precedence settings for dropping

packets..........................................................................................462

13

AV Line of Fully Managed Switches M4250 Series Main User Manual

Differentiated Services.....................................................................464

Defining DiffServ..........................................................................464

DiffServ wizard overview.............................................................465

Use the DiffServ wizard to create a traffic class and policy for one

or more interfaces........................................................................466

Configure the DiffServ mode and display the entries in the

DiffServ private MIB tables.........................................................467

Configure a DiffServ class...........................................................468

Add and configure a DiffServ class.......................................469

Rename an existing DiffServ class.........................................473

Change the criteria for an existing DiffServ class................473

Delete a DiffServ class............................................................474

Configure an IPv6 DiffServ class................................................475

Add and configure an IPv6 DiffServ class............................475

Rename an existing IPv6 DiffServ class................................478

Change the criteria for an existing IPv6 DiffServ class.......478

Delete an IPv6 DiffServ class..................................................479

Configure a DiffServ policy.........................................................480

<<TBD>>Create and configure a DiffServ policy...............480

Rename an existing DiffServ policy.......................................486

Change the policy attributes for an existing DiffServ policy.487
Change or remove a class from an existing DiffServ policy.488

Delete a DiffServ policy..........................................................488

Configure the DiffServ service interface...................................489

Attach DiffServ policies to an interface................................489

Change one or both DiffServ policies for an interface.......490

Remove one or both DiffServ policies from an interface....491

Display DiffServ service statistics...............................................492

Chapter 7 Manage Switch Security

User accounts and passwords........................................................495

Add or change a user account...................................................495

Delete a user account.................................................................496

Configure user password requirements...................................497

Change the privileged EXEC CLI password.............................498

Change the console, Telnet, or SSH password........................499

RADIUS servers.................................................................................500

Configure the global RADIUS server settings..........................500

Configure a RADIUS authentication server on the switch......503

Add a RADIUS authentication server to the switch.............503

Modify the settings for a RADIUS authentication server on the

switch........................................................................................505

Remove a RADIUS authentication server from the switch..506

Configure a RADIUS accounting server....................................507

14

AV Line of Fully Managed Switches M4250 Series Main User Manual

Add a RADIUS accounting server to the switch..................507

Modify the settings for a RADIUS accounting server on the

switch........................................................................................509

Remove a RADIUS accounting server from the switch.......510

TACACS+ servers.............................................................................510

Configure the global TACACS+ settings..................................511

Add a TACACS+ server to the switch.......................................512

Modify the settings for a TACACS+ server on the switch.......513

Remove a TACACS+ server from the switch............................514

Authentication lists...........................................................................514

Configure a login authentication list.........................................514

Delete a login authentication list...............................................516

Configure an enable authentication list....................................517

Delete an enable authentication list..........................................519

Configure the Dot1x authentication list....................................520

Configure the HTTP authentication list.....................................521

Configure the HTTPS authentication List..................................522

Current login sessions.....................................................................523

HHTP and HTTPS management access.........................................524

Configure HTTP access settings................................................524

Configure the HTTPS access settings........................................526

Browser security message with HTTPS access.........................527

Manage certificates for HTTPS access.......................................528

Display the status of the SSL certificates..............................528

Generate an SSL certificate....................................................529

Activate a certificate................................................................530

Delete an SSL certificate.........................................................531

Transfer an existing HTTPS certificate from a server to the

switch........................................................................................531

SSH management access................................................................533

Configure the global SSH access settings................................534

Manage RSA and DSA keys for SSH access..............................535

Generate an RSA or DSA key.................................................535

Delete an RSA or DSA key.....................................................536

Transfer existing SSH keys from a TFTP server to the switch.537

Telnet management access............................................................539

Select Telnet authentication lists...............................................539

Configure inbound Telnet settings...........................................540

Configure outbound Telnet settings.........................................541

Console port management access................................................542

Denial of service...............................................................................544

Management access profiles and rules.........................................546

Add an access profile..................................................................546

Add a rule to the access profile.................................................547

Activate the access profile..........................................................548

15

AV Line of Fully Managed Switches M4250 Series Main User Manual

Display the access profile summary and the number of filtered

packets..........................................................................................549

Deactivate an access profile.......................................................550

Remove an access profile...........................................................551

Port authentication...........................................................................552

Configure the global 802.1X settings.......................................552

Manage port authentication on individual ports.....................554

Configure 802.1X settings for a port....................................554

Initialize 802.1X on a port......................................................558

Display the port summary...........................................................559

Display the client summary.........................................................561

MAC filters for traffic control...........................................................563

Create a MAC filter......................................................................563

Delete a MAC filter......................................................................565

Display the MAC filter summary................................................566

Port security.......................................................................................567

Configure the global port security mode.................................567

Configure a port security interface............................................568

Display learned MAC addresses and convert them to static

addresses......................................................................................569

Add a static MAC address to the MAC address table for port

security..........................................................................................571

Remove a static MAC address from the MAC address table for

port security..................................................................................571

Private port groups..........................................................................572

Add a private port group............................................................572

Remove a private port group.....................................................573

Configure the membership of a private port group...............574

Protect ports......................................................................................575

Private VLANs....................................................................................576

Overview of the tasks for private VLAN configuration............577

Assign a private VLAN type to a VLAN......................................578

Configure a private VLAN association with a primary and

secondary VLAN..........................................................................579

Remove an existing private VLAN association.........................581

Configure the private VLAN port mode...................................581

Private VLAN host interface: Assign the interface to primary and

secondary VLANs.........................................................................583

Private VLAN host interface: Remove the interface from primary

and secondary VLANs.................................................................585

Private VLAN promiscuous interface: Assign the interface to

primary and secondary VLANs...................................................586

Private VLAN promiscuous interface: Remove the interface from

primary and secondary VLANs...................................................587

16

AV Line of Fully Managed Switches M4250 Series Main User Manual

Private VLAN promiscuous trunk interface: Add primary and

secondary VLANs to the trunk....................................................589

Private VLAN promiscuous trunk interface: Remove primary and

secondary VLANs from the trunk...............................................590

Private VLAN isolated trunk interface: Add primary and secondary

VLANs to the trunk.......................................................................591

Private VLAN isolated trunk interface: Remove primary and

secondary VLANs from the trunk...............................................592

Configure native and allowed VLANs on a private VLAN trunk

interface........................................................................................593

Storm control....................................................................................595

Configure global storm control settings...................................595

Configure storm control settings for one or more ports........597

DHCP snooping................................................................................599

Enable DHCP snooping for the switch......................................600

Enable DHCP snooping for a VLAN..........................................600

Configure DHCP snooping interface settings..........................601

Add a static DHCP binding and display dynamic DHCP

bindings........................................................................................603

Remove a static DHCP binding..................................................604

Configure DHCP snooping persistent settings........................605

Display or clear DHCP snooping statistics................................606

DHCPv6 snooping............................................................................607

Enable DHCPv6 snooping for the switch..................................607

Enable DHCPv6 snooping for a VLAN......................................608

Configure DHCPv6 snooping interface settings......................609

Add a static DHCPv6 binding and display dynamic DHCPv6

bindings........................................................................................611

Remove a static DHCPv6 binding..............................................612

Configure DHCPv6 snooping persistent settings....................613

Display or clear DHCPv6 snooping statistics...........................614

IP source guard interfaces...............................................................615

Configure IP source guard on an interface..............................615

Add a static IP source guard binding and display dynamic IP

source guard bindings................................................................617

Remove a static IP source guard binding.................................618

IPv6 source guard interfaces...........................................................619

Configure IPv6 source guard on an interface..........................619

Add a static IPv6 source guard binding and display dynamic IPv6

source guard bindings................................................................621

Remove a static IPv6 source guard binding.............................622

Dynamic ARP inspection.................................................................623

Configure the global DAI settings.............................................623

Configure DAI VLANs..................................................................624

Configure DAI interfaces............................................................625

17

AV Line of Fully Managed Switches M4250 Series Main User Manual

Create a DAI access control list.................................................627

Configure a rule for an existing DAI ACL..................................627

Delete a rule from an existing DAI ACL....................................628

Delete a DAI access control list..................................................629

Display the DAI statistics.............................................................630

Captive portals..................................................................................631

Configure the global captive portal settings...........................632

Configure a captive portal..........................................................633

Delete a captive portal................................................................637

Configure a captive portal binding...........................................637

Display or delete captive portal bindings in the captive portal

binding table................................................................................638

Configure captive portal groups...............................................639

Add a captive portal group....................................................639

Remove a captive portal group.............................................640

Configure captive portal users...................................................641

Add or modify a captive portal user account......................641

Delete a captive portal user account....................................643

Configure the captive portal trap flag settings........................644

Display or clear captive portal client statistics.........................645

Access control lists...........................................................................646

Use the ACL Wizard to create a simple ACL............................647

Use the ACL Wizard to create an ACL..................................647

Modify an ACL rule that you created with the ACL Wizard.652

Delete an ACL rule that you created with the ACL Wizard.652

ACL Wizard example..............................................................653

Configure a MAC ACL.................................................................653

Add a MAC ACL......................................................................654

Change the name of a MAC ACL..........................................655

Delete a MAC ACL..................................................................655

Configure MAC ACL rules..........................................................656

Add a rule to a MAC ACL.......................................................656

Change the match criteria for a MAC rule...........................659

Delete a rule for a MAC ACL.................................................659

Configure MAC bindings............................................................660

Display or delete MAC ACL bindings in the MAC binding

table...............................................................................................662

Configure a basic or extended IPv4 ACL..................................663

Add an IPv4 ACL..........................................................................664

Change the number or name of an IPv4 ACL..........................665

Delete an IPv4 ACL......................................................................666

Configure rules for a basic IP ACL.............................................666

Add a rule for a basic IPv4 ACL.............................................667

Modify the match criteria for a basic IPv4 ACL rule............669

Delete a basic IPv4 ACL rule..................................................670

18

AV Line of Fully Managed Switches M4250 Series Main User Manual

Configure rules for an extended IPv4 ACL...............................671

Add a rule for an extended IPv4 ACL...................................671

Modify the match criteria for an extended IPv4 ACL rule...678

Delete an extended IPv4 ACL rule........................................679

Configure an IPv6 ACL................................................................679

Add an IPv6 ACL.....................................................................680

Change the name of an IPv6 ACL.........................................681

Delete an IPv6 ACL.................................................................681

Configure rules for an IPv6 ACL.................................................682

Add a rule for an IPv6 ACL.....................................................682

Modify the match criteria for an IPv6 ACL rule....................687

Delete an IPv6 ACL rule..........................................................688

Configure IP ACL interface bindings.........................................688

Display or delete IP ACL bindings in the IP ACL binding table.690

Configure VLAN ACL bindings..................................................692

Add a VLAN ACL binding......................................................692

Remove a VLAN ACL binding................................................693

Chapter 8 Monitor the Switch and Network

Port and EAP packet statistics.........................................................695

Display or clear port statistics....................................................695

Display or clear detailed statistics for a port............................696

Display or clear EAP and EAPoL statistics................................703

Perform a cable test.........................................................................705

Logs....................................................................................................706

Manage and display the memory log.......................................707

Message log format.....................................................................709

Enable or disable the command configuration log................709

Enable or disable console logging...........................................710

Syslog and log server host settings...............................................712

Configure the syslog settings.....................................................712

Add a syslog server.....................................................................713

Modify the settings for a syslog server......................................715

Delete the settings for a syslog server......................................715

Trap log.............................................................................................716

Event log............................................................................................717

Port mirroring....................................................................................718

RSPAN VLANs and source and destination switches...................721

Configure an existing VLAN as an RSPAN VLAN.....................721

Configure the switch as an RSPAN source switch...................722

Configure the switch as an RSPAN destination switch............724

sFlow monitoring..............................................................................725

sFlow agent overview..................................................................726

Configure the source interface for the sFlow agent................726

19

AV Line of Fully Managed Switches M4250 Series Main User Manual

Configure an sFlow receiver.......................................................727

Configure sFlow polling and sampling on an interface..........729

Display license information.............................................................730

Display license key information.................................................730

Display features to which the license applies..........................731

Chapter 9 Maintenance and Troubleshooting

Save the configuration.....................................................................734

Automatic installation of the configuration file.............................734

Configure the auto install process.............................................734

Option 125 DHCP server requirements for obtaining an

configuration file through auto install.......................................736

Reboot the switch from the main local browser UI......................737

Reset the switch to the factory default settings............................738

Export a file from the switch............................................................739

Export a file from the switch to a server....................................739

Use HTTP to export a file from the switch to a computer.......741

Export a file from the switch to a USB storage device............742

Upgrade software or download a file............................................744

Upgrade the software image or download a file from a server to

the switch......................................................................................744

Use HTTP to download a file to the switch or update the software

image.............................................................................................747

Download a file from a USB storage device to the switch......749

Use an HTTP session to download and install an SSL security

certificate file on the switch........................................................750

Manage software images................................................................752

Copy a software image...............................................................752

Configure dual image settings...................................................753

Change the software image that loads when the switch starts

or reboots.................................................................................753

Delete a software image........................................................754

Diagnostics and troubleshooting...................................................755

Ping an IPv4 address...................................................................755

Ping an IPv6 address...................................................................757

Send an IPv4 traceroute..............................................................758

Send an IPv6 traceroute..............................................................760

Capture Packets...........................................................................762

Perform a full memory dump.....................................................763

Appendix A Configuration Examples

Virtual Local Area Networks (VLANs).............................................766

VLAN configuration examples...................................................767

Access control lists (ACLs)...............................................................768

20

AV Line of Fully Managed Switches M4250 Series Main User Manual

MAC ACL sample configuration................................................769

Basic IP ACL sample configuration............................................770

Differentiated Services (DiffServ)....................................................771

Class..............................................................................................772

DiffServ traffic classes..................................................................772

Create policies.............................................................................773

Traffic conditioning policy.....................................................773

DiffServ example configuration.................................................774

802.1X access control......................................................................775

802.1X example configuration...................................................777

Multiple Spanning Tree Protocol...................................................779

MSTP example configuration.....................................................780

VLAN routing interfaces..................................................................782

Appendix B Software Default Settings and Hardware Specifications

Access default settings for the switch device UI...........................785

System features default settings.....................................................785

Switching features default settings................................................790

Routing and multicast features default settings...........................800

QoS features default settings.........................................................805

Security features default settings...................................................807

Monitoring features default settings..............................................816

Model-specific hardware technical specifications.......................818

Model M4250-10G2F-PoE+ (SKU GSM4212P)........................818

Model M4250-10G2XF-PoE+ (SKU GSM4212PX)...................819

M4250-10G2XF-PoE++ (SKU GSM4212UX)............................819

M4250-26G4F-PoE+ (SKU GSM4230P)....................................820

M4250-26G4XF-PoE+ (SKU GSM4230PX)...............................821

M4250-26G4F-PoE++ (SKU GSM4230UP)...............................821

M4250-40G8F-PoE+ (SKU GSM4248P)....................................822

M4250-40G8XF-PoE+ (SKU GSM4248PX)...............................823

M4250-40G8XF-PoE++ (SKU GSM4248UX)............................823

M4250-12M2XF (SKU MSM4214X)...........................................824

M4250-16XF (SKU XSM4216F)..................................................824

General hardware technical specifications...................................825

21

1

Get Started with the Main UI

This user manual is for the AV Line of Fully Managed Switches M4250 Series and covers
all M4250 switch models.

This chapter provides an overview of how you can using your switch and access the
main local browser user interface (UI).

The chapter contains the following sections:

• Supported switches

• Available publications and online help

• Register your product

• Main local browser UI overview

• Log in to the main UI with a web browser

• Use the Device View in the Main UI

• Set up SNMP access

Note: For more information about the topics covered in this manual, visit the support
website at netgear.com/support.

Note: Firmware updates with new features and bug fixes are made available from time
to time at netgear.com/support/download/. Some products can regularly check the site
and download new firmware, or you can check for and download new firmware manually.
If the features or behavior of your product does not match what is described in this
guide, you might need to update your firmware.

22

AV Line of Fully Managed Switches M4250 Series Main User Manual

Supported switches

This main user manual is for the NETGEAR AV Line of Fully Managed Switches M4250
Series models. For a list of M4250 switch models, visit kb.netgear.com/000064904.

Available publications and online help

You can download the following publications and more for the AV Line of Fully Managed
Switches M4250 Series by visiting netgear.com/support/download/.

Installation Guide

•

Hardware Installation Guide

•

Main User Manual (this manual)

•

Audio Video User Manual

•

Software Administration Manual

•

CLI Command Reference Manual

•

When you are logged in to the main local browser UI, you can access documentation
online by selecting Help > Online Help > User Guide. See Main UI online help on page
28

In addition, context-sensitive online help is available in the main local browser UI.

Register your product

To qualify for product updates and product warranty, we encourage you to register
your product. The first time that you log in to the switch, you can register with NETGEAR
by clicking the Register now button.

Registration confirms that your email alerts work, lowers technical support resolution
time, and ensures that your shipping address accuracy. We would also like to incorporate
your feedback into future product development. We never sell or rent your email address
and you can opt out of communications.

To register your switch with NETGEAR:

1.

Visit the NETGEAR website for registration at
https://my.netgear.com/registration/login.aspx.

2.

Click the Login button, and follow the directions onscreen to register the switch with
your NETGEAR email address and password.

Main User Manual23Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

If you did not yet create a NETGEAR account, click the Create account link, follow
the directions onscreen to create an account, and then register the switch with your
NETGEAR email address and password.

Main local browser UI overview

Your switch contains an embedded web server and management software for managing
and monitoring switch functions. The switch functions as a simple switch without the
management software. However, you can use the management software to configure
more advanced features that can improve switch efficiency and overall network
performance.

The switch software includes a set of comprehensive management functions for
configuring and monitoring the system by using one of the following methods:

Main local browser user interface (main UI), either over an Ethernet network port or

•
over the out-of-band (OOB) port (also referred to as the service port)

Audio-video local browser user interface (AV UI), either over an Ethernet network

•
port or over the OOB port

Simple Network Management Protocol (SNMP)

•

Command-line interface (CLI)

•

Each of the standards-based management methods allows you to configure and monitor
the components of the switch. The method you use to manage the system depends on
your network size and requirements, and on your preference.

This manual describes how to use the main local browser user interface (UI) to manage
and monitor the switch. We abbreviate the main local browser UI as the main UI.

The main UI is a web-based management tool that lets you monitor, configure, and
control your switch remotely using a standard web browser. From your web browser,
you can monitor the performance of your switch and optimize its configuration for your
network. You can configure all available switch features, such as VLANs, QoS, and ACLs,
by using the main UI.

Log in to the main UI with a web browser

If this is the first time that you log in to the switch and you must use the default IP address
of the switch, see the information in the installation guide.

You can use a web browser to access the switch and log in. You must be able to ping
the IP address of the management interface or out-of-band (OOB) port from your
computer for web access to be available.

Main User Manual24Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

By default, no IP address is set for the OOB port, but its DHCP client is enabled so that
the port can receive an IP address from a DHCP server in your network. If the OOB port
does not receive an IP address from a DHCP server in your network, the IP address for
the port is set to 192.168.0.239 with 255.255.255.0 as the subnet mask. The same occurs
if you connect the OOB port directly to a computer and reboot the switch.

Note: The first time that you log in as an admin user to the main UI, no password is
required (that is, the password is blank). After you log in for the first time, you are required
to specify a local device password that you must use each subsequent time that you log
in. (You can change the password again.)

Log in to the main UI using the switch default IP address

To use the switch default IP address to access the switch over the main UI:

1. Prepare your computer with a static IP address:

• For access over an Ethernet network port, use a static IP address in the 169.254.0.0

subnet with subnet mask 255.255.0.0.
For example, use 169.254.100.201 for your computer.

• For access over the OOB port, use a static IP address in the 192.168.0.0 subnet

with subnet mask 255.255.0.0.
For example, use 192.168.0.201 for your computer.

2.

Connect an Ethernet cable from an Ethernet port on your computer to either an
Ethernet network port on the switch or to the OOB port on the switch.

3.

If you are using the OOB port, reboot the switch so that the IP address for the OOB
port is set to 192.168.0.239 with 255.255.255.0 as the subnet mask.

4.

Launch a web browser such as Google Chrome, Mozilla Firefox, or Microsoft Edge.

5.

Enter the default IP address of the switch in the web browser address field:

• For access over an Ethernet network port, enter 169.254.100.100.

• For access over the OOB port, enter 192.168.0.239.

The login page displays.

6. Click the Main UI Login button.
The main UI login page displays in a new tab.

7. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

Main User Manual25Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

Log in to the main UI with a known IP address

If you did not assign a static IP address to the switch but let a DHCP server in your
network assign an IP address to switch, determine the IP address by accessing the DHCP
server or by using an IP scanner utility.

The procedures in this manual assume that you know the IP address of your switch.

To use a known IP address to access the switch over the main UI:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

Main UI buttons and user-defined fields

The following table shows the command buttons that are used on the pages in the main
UI:

Table 1. Main UI command buttons

FunctionButton

Clicking the Add button adds the new item configured in the heading row of a table.Add

Apply

Clicking the Apply button sends the updated configuration to the switch. Configuration
changes take effect immediately.

Cancel

Clicking the Cancel button cancels the configuration on the page and resets the data on
the page to the previous values of the switch.

Clicking the Delete button removes the selected item.Delete

Clicking the Refresh button refreshes the page with the latest information from the device.Refresh

Main User Manual26Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 1. Main UI command buttons (Continued)

FunctionButton

Clicking the Save button saves your settings.Save

Clicking the Logout button ends the session.Logout

User-defined fields can contain 1 to 159 characters, unless otherwise noted on the
configuration web page. All characters can be used except for the following (unless
specifically noted in for that feature):

Table 2. Invalid characters for user-defined fields

Invalid characters for user-defined fields

?*></|\

Interface naming conventions

The switch supports physical and logical interfaces. Interfaces are identified by their
type and the interface number. The physical ports are Gigabit Ethernet or multispeed
10G Ethernet interfaces and are numbered on the front panel. You configure the logical
interfaces.

The following table describes the naming convention for all interfaces available on the
switch.

Table 3. Naming conventions for interfaces

ExampleDescriptionInterface

Physical interfaces

ports are 1G, 2.5G,or 10G Ethernet
interfaces or 1G or 10G fiber interfaces.
The interface number consists of the switch
number (always 0) followed by a forward
slash and the port number, which is a
sequential number starting from 1.

Link aggregation group (LAG)

are used only for bridging functions.

0/1, 0/2, 0/3, and so onDepending on the model, the physical

LAG 1, LAG 2, LAG 3, and so onLAG interfaces are logical interfaces that

Main User Manual27Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 3. Naming conventions for interfaces (Continued)

ExampleDescriptionInterface

CPU management interface

Routing VLAN interfaces

responsible for the switch base MAC
address. This interface is not configurable
and is always listed in the MAC Address
Table.

This is an interface used for routing
functionality.

5/1This is the internal switch interface

VLAN 1, VLAN 2, VLAN 3, and
so on

Save your settings to the running configuration

When you click the Apply button, your changes are saved for the web management
session but are not retained when you restart the switch. To save your changes to the
running configuration (that is, permanently), click the Save icon at the top right of a
page.

You can also first make multiple changes without clicking the Save icon after each
change (although you must click the Apply button after each change) and then save
the configuration to the running configuration. For more information, see Save the
configuration on page 734).

Main UI online help

When you log in to the switch, each page contains a link to the online help that contains
information to assist in configuring and managing the switch. The online help pop-up
windows are context sensitive. For example, if the IP Addressing page is open, the help
topic for that page displays if you click the Help button.

You can connect to the online support site at netgear.com/support when you are logged
in to the switch.

To access the online support link:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

Main User Manual28Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select Help > Online Help > Support.

6.

To connect to the NETGEAR support site for the M4250 Series switches, click the
Apply button.

Use the Device View in the Main UI

The Device View is an HTML applet that displays the ports on the switch. This graphic
provides an alternate way to navigate to configuration and monitoring options. The
graphic also provides information about device ports, current configuration and status,
tables, and feature components.

To use the Device View:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select System > Device View.
The Device View front view of the switch displays.

Main User Manual29Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

As an example, the following figure shows the front view of model
M4250-10G2F-PoE+.

6. To display the back view, click the B button.
The B button changes into the F button. (Clicking the F button displays the front

view again.)

As an example, the following figure shows the back view of model
M4250-10G2F-PoE+.

The port coloring indicates the port status:

• Black. The port is not connected to a device or disabled.

• Green. The port is connected to a device or enabled.

• Red. An error occurred on the port.

The system LEDs indicate the system status. For more information, see the hardware
installation guide, which you can download by visiting
netgear.com/support/download/.

7.

To display the menus that let you configure ports, right-click a port.

Main User Manual30Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

As an example, the following figure shows the back view of model
M4250-10G2F-PoE+ with a partial view of the menus that let you configure a port.

8.

To display the menus that let you configure global switch settings, right-click the
back view anywhere other than on a port.

As an example, the following figure shows the back view of model
M4250-10G2F-PoE+ with menus that let you configure global switch settings.

Set up SNMP access

The switch software supports the configuration of SNMP groups and users that can
manage traps that the SNMP agent generates.

Main User Manual31Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

The switch uses both standard public MIBs for standard functionality and private MIBs
that support additional switch functionality. All private MIBs begin with a “-” prefix. The
main object for interface configuration is in -SWITCHING-MIB, which is a private MIB.
Some interface configurations also involve objects in the public MIB, IF-MIB.

SNMP is enabled by default. The System Information page, which is the page that
displays when you log in, displays the information that you need to configure an SNMP
manager to access the switch.

Any user can connect to the switch using the SNMP v3 protocol, but for authentication
and encryption, the switch supports only one user, which is the admin user; therefore,
only one profile can be created or modified.

You cannot access the switch using SNMPv3 until you log in to the switch as an admin
and change the default password (see Log in to the main UI with a web browser on
page 24). After you do, SNMPv3 is automatically configured with the MD5 authentication
protocol and the new password for admin user.

For SNMPv3 switch access, the authentication protocol must be MD5 or SHA. You cannot
use the “none” option for the authentication protocol.

For more information about SNMP, see Simple Network Management Protocol on page

151.

To configure authentication and encryption settings for the SNMPv3 admin profile:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > SNMP > SNMP v3 User Configuration.
The User Configuration page displays.

6. To enable authentication, select an Authentication Protocol option, which is either
MD5 or SHA.

7. To enable encryption, select the DES option in the Encryption Protocol list Then
enter an encryption code of eight or more alphanumeric characters in the Encryption
Key field.

Main User Manual32Get Started with the Main UI

AV Line of Fully Managed Switches M4250 Series Main User Manual

8. Click the Apply button.
Your settings are saved.

9.

To save the settings to the running configuration, click the Save icon.

Note: To access configuration information for SNMP V1 or SNMP V2, select System >
SNMP > SNMPv1/v2 and select the page that contains the information that you want

to configure.

Main User Manual33Get Started with the Main UI

2

Configure Switch System Information

This chapter covers the following topics:

• Switch system information

• Loopback interface

• IPv4 management interfaces and VLANs

• IPv6 management interfaces and VLANs

• Time and SNTP settings

• Precision Time Protocol

• Domain Name System

• Switch database management template

• Green Ethernet settings

• Bonjour settings

• IPv4 DHCP server

• DHCP relay and relay statistics

• DHCP Layer 2 relay

• UDP relay

• DHCPv6 server

• DHCPv6 relay interface

• Power over Ethernet

• Timer schedules

• Simple Network Management Protocol

• Link Layer Discovery Protocol

• Link Layer Discovery Protocol for Media Endpoint Devices

• Link dependency

• Industry Standard Discovery Protocol

34

AV Line of Fully Managed Switches M4250 Series Main User Manual

Switch system information

You can view and configure the switch system information.

View and configure switch system information

When you log in, the System Information page displays. You can configure and view
general device information.

To view and define system information:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

Information

Main User Manual35Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

5.

Select System > Management > System Information.

6.

Define the following fields:

•

System Name: Enter the name to identify this switch. You can use up to 255

alphanumeric characters. The factory default is blank.

•

System Location: Enter the location of this switch. You can use up to 255

alphanumeric characters. The factory default is blank.

•

System Contact: Enter the contact person for this switch. You can use up to 255

alphanumeric characters. The factory default is blank.

•

Login Timeout: Specify how many minutes of inactivity can occur on a serial port

connection before the switch closes the connection. Enter a number between 0
and 160 minutes. The factory default is 5. Entering 0 disables the time-out.

•

Management Source Interface: Select the management interface that is used

as source interface for SNMP trap, syslog, DNS, TACACS+, RADIUS, sflow, and
SNTP applications. Possible values are as follows:

None

•

Routing Interface

•

Routing VLAN

•

Information

Main User Manual36Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Routing Loopback Interface

•

Service Port

•

Different. For some applications from the list, the source interface is configured

•
separately. They display in the list only if this is the case.

By default VLAN 1 is used as the source interface.

7. Click the Apply button.

Your settings are saved.

8.

To save the settings to the running configuration, click the Save icon.

The following table describes the status information in the Application Information and
System Information sections on the page.

Table 4. Application Information and System Information

Application Information

App Name

System Information

IPv4 Management Interface

IPv6 Management Interface

DescriptionField

The name of the application that functions as the Universal Plug and Play
(UPnP) agent.

The status of the application.App Status

The version of the application.Version

The product name of this switch.Product Name

The IPv4 address and mask assigned to the management VLAN interface.IPv4 Management Address

The IPv6 address and mask assigned to the management VLAN interface.IPv6 Management Address

The IPv4 management VLAN ID of the switch. Click the displayed
Management VLAN ID value to jump to the configuration page. See
Configure an IPv4 management VLAN on page 49.

The IPv6 management VLAN ID of the switch. Click the displayed
Management VLAN ID value to jump to the configuration page. See
Configure an IPv6 management VLAN on page 56.

The IPv4 address and mask assigned to the loopback interface.IPv4 Loopback Interface

Information

The IPv6 prefix and prefix length assigned to the loopback interface.IPv6 Loopback Interface

The current date.System Date

The time in days, hours, and minutes since the switch was restarted.System Up Time

Main User Manual37Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 4. Application Information and System Information (Continued)

DescriptionField

The current SNTP sync status.Current SNTP Sync Status

The base object ID for the switch's enterprise MIB.System SNMP OID

Universally assigned network address.System Mac Address

The SNTP synchronized time.Current SNTP Synchronized Time

View the fan status

This page shows the status of the fans in all units. These fans remove the heat generated
by the power, CPU, and other chipsets, and allow the chipsets work normally.

To view the fan status:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Scroll down to the Fan Status section.

6.

To refresh the page, click the Refresh button.
The following table describes the nonconfigurable Fan Status information.

The number of fans depend on the switch model.

Table 5. Fan Status

Information

DescriptionField

The unit ID of the switch in which the fan is installed. This ID is always 1.Unit ID

The ID of the fan (1, 2, or 3)FAN

Main User Manual38Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 5. Fan Status (Continued)

DescriptionField

The description of the fan (FAN-1, FAN-2, or FAN-3).Description

The type of fan is always Fixed.Type

Speed

FAN Status

The speed of the fan.

For more information, see the hardware installation guide, which you can

download by visiting netgear.com/support/download/.

The duty level of the fan in percentage.Duty Level

The status of the fan:

Operational: The fan is running normally.

•

Failure: The fan failed.

•

Not Present: The fan is not present. (The number of fans depends on

•
the switch model.)

Stop: The fan stopped because the switch temperature is low. The fan

•
will start if the switch temperature rises.

View the temperature sensor information

You can view the current temperature of different system sensors using the Temperature
Status table.

To view temperature information:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Scroll down to the Temperature Status section.

Main User Manual39Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

6.

To refresh the page, click the Refresh button.
The following table describes the nonconfigurable Temperature Status information.

Table 6. Temperature Status information

DescriptionField

Unit ID

The unit ID of the switch in which the sensor is installed. This ID is always

1.

The ID of the sensor.Sensor

The description of the sensor.Description

The temperature of the sensor in Celsius.Temperature (C)

The state of the sensor: Operational or Failure.State

The maximum supported operating temperature in Celsius.Max Temp (C)

View the device status and firmware version

You can view the device status and firmware version.

To view the device status and firmware version:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Scroll down to the Temperature Status section.

6.

To refresh the page, click the Refresh button.
The following table describes the nonconfigurable Device Status information.

Main User Manual40Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 7. Device Status

DescriptionField

Firmware Version

Boot Version

CPLD Version

PS-1

MAX PoE

The release, version, and maintenance number of the firmware running

on the switch. For example, if the release is 1, the version is 2, and the

maintenance number is 4, the format is 1.2.4.

The version of the boot code that is in the flash memory to load the

firmware into the memory.

The version of the software for the complex programmable logic device

(CPLD ) on the switch.

The serial number of the switch.Serial Number

The status of the power supply in the switch:

Operational: The power supply is present and functioning properly.

•

Failed: The power supply is present, but the power cable is not plugged

•
in or a defective cable is plugged in.

The PoE system status on the switch:

ON: Less than 10W of PoE power is available for another PD.

•

OFF: At least 10W of PoE power available for another PD.

•

N/A: PoE is not supported by the switch.

•

The time in days, hours, and minutes since the switch was restarted.System Up Time

View the system CPU status

To view the system CPU status:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.

Main User Manual41Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select System > Management > System CPU Status.

The System CPU Status page displays.

The CPU memory status includes the total memory of the switch in KBytes and the
available memory space for the switch in KBytes.

The CPU utilization shows the CPU utilization by the various processes on the switch.

Configure the CPU thresholds

You to configure CPU thresholds that, when crossed, trigger a notification. The
notification occurs through SNMP trap and syslog messages.

To configure the CPU thresholds:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select System > Management > System CPU Status > CPU Threshold.

The CPU Threshold page displays.

6.

Configure the following CPU threshold settings:

•

Rising Threshold: Configure the rising threshold value. A notification is generated

when the total CPU utilization exceeds this threshold value over the configured
time period. The range is a percentage from 1 to 100.

•

Rising Interval: Configure the rising interval value. Configure this utilization

monitoring time period from 5 to 86400 seconds in multiples of 5 seconds.

•

Falling Threshold: Configure the falling threshold. A notification is triggered

when the total CPU utilization falls below this level for a configured period of time.

Information

Main User Manual42Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

The falling utilization threshold must be equal to or less than the rising threshold
value. The falling utilization threshold notification is generated only if a rising
threshold notification was generated previously. Configuring the falling utilization
threshold and time period is optional. If the falling CPU utilization values aare not
configured, they take the same value as the rising CPU utilization values. The range
is a percentage from 1 to 100.

•

Falling Interval: Configure the falling interval. YOu can configure the utilization

monitoring time period from 5 seconds to 86400 seconds in multiples of 5 seconds.

•

Free Memory Threshold: Configure the CPU free memory threshold value in KB.

7. Click the Apply button.

Your settings are saved.

8.

To save the settings to the running configuration, click the Save icon.

View or clear switch statistics

To view or clear the switch statistics:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select System > Management > Switch Statistics.

The Switch Statistics page displays.

6.

To clear all the counters, resetting all switch summary and detailed statistics to default
values, click the Clear button.

The discarded packets count cannot be cleared.

7.

To save the settings to the running configuration, click the Save icon.

The following table describes switch statistics information.

Information

Main User Manual43Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 8. Switch statistics information

DescriptionField

ifIndex

Octets Received

Packets Received Without Errors

Unicast Packets Received

Multicast Packets Received

Broadcast Packets Received

Receive Packets Discarded

Octets Transmitted

The ifIndex of the interface table entry associated with the processor
of this switch.

The total number of octets of data received by the processor (excluding
framing bits but including FCS octets).

The total number of packets (including broadcast packets and multicast
packets) received by the processor.

The number of subnetwork-unicast packets delivered to a higher-layer
protocol.

The total number of packets received that were directed to a multicast
address. This number does not include packets directed to the
broadcast address.

The total number of packets received that were directed to the
broadcast address. This does not include multicast packets.

The number of inbound packets that were discarded even though no
errors were detected to prevent their being deliverable to a
higher-layer protocol. A possible reason for discarding a packet could
be to free up buffer space.

The total number of octets transmitted out of the interface, including
framing characters.

The total number of packets transmitted out of the interface.Packets Transmitted Without Errors

Unicast Packets Transmitted

Multicast Packets Transmitted

Broadcast Packets Transmitted

Transmit Packets Discarded

Most Address Entries Ever Used

Address Entries in Use

Information

The total number of packets that higher-level protocols requested that
are transmitted to a subnetwork-unicast address, including those that
were discarded or not sent.

The total number of packets that higher-level protocols requested that
are transmitted to a multicast address, including those that were
discarded or not sent.

The total number of packets that higher-level protocols requested that
are transmitted to the broadcast address, including those that were
discarded or not sent.

The number of outbound packets that were discarded even though
no errors were detected to prevent their being deliverable to a
higher-layer protocol. A possible reason for discarding a packet could
be to free up buffer space.

The highest number of Forwarding Database Address Table entries
learned by this switch since the most recent reboot.

The number of learned and static entries in the Forwarding Database
Address Table for this switch.

The maximum number of virtual LANs (VLANs) allowed on this switch.Maximum VLAN Entries

Main User Manual44Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 8. Switch statistics information (Continued)

DescriptionField

Most VLAN Entries Ever Used

Static VLAN Entries

Dynamic VLAN Entries

VLAN Deletes

Time Since Counters Last Cleared

The largest number of VLANs that were active on this switch since the
last reboot.

The number of presently active VLAN entries on this switch that were
created statically.

The number of presently active VLAN entries on this switch that were
created by GVRP registration.

The number of VLANs on this switch that were created and then deleted
since the last reboot.

The elapsed time, in days, hours, minutes, and seconds, since the
statistics for this switch were last cleared.

View USB device information

To display the USB device information:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > USB Device Information.
The USB Device Information page displays.

The Device Status field displays the current status of the device. The status is one of
the following:

• Active: The device is USB plugged in and recognized by the switch.

• Inactive: The device is not mounted.

• Invalid: The device is not present or an invalid device is plugged in.

6.

To refresh the page, click the Refresh button.

Information

Main User Manual45Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

The following table describes the information in the USB Memory Statistics section.

Table 9. USB Memory Statistics information

DescriptionField

The USB flash device storage size in bytes.Total Size

The size of memory used on the USB flash device.Bytes Used

The size of memory free on the USB flash device.Bytes Free

The following table describes the information in the USB Directory Details section.

Table 10. USB Directory Details information

DescriptionField

The name of the file stored in the USB flash drive.File Name

The size of the file stored in the USB flash drive in bytesFile Size

The last modification time of the file stored in the USB flash drive.Modification Time

Loopback interface

You can create, configure, and remove loopback interfaces.

To configure a loopback interface:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

Main User Manual46Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

5.

Select System > Management > Loopback Interface.
The Loopback Interface page displays.

6.

From the Loopback Interface Type menu, select IPv4 or IPv6.

7.

From the Loopback ID menu, select an interface.

8.

Configure the following settings, depending on the type of loopback interface:

•

IPv4: For an IPv4 interface, configure the following settings:

Primary IP Address: Enter the primary IPv4 address for this interface in

•
dotted-decimal notation.

Primary IP Subnet Mask: Enter the primary IPv4 subnet mask in dotted-decimal

•
notation.

•

IPv6: For an IPv6 interface, configure the following settings:

IPv6 mode: Select Enable to use the IPv6 address after you specify it. You can

•
select this option only before you specify the IPv6 address.

IPv6 Prefix: Enter the IPv6 prefix.

•

Prefix Length: Enter the length for the IPv6 prefix.

•

EUI64: As an option, specify the 64-bit extended unique identifier (EUI-64).

•

9. Click the Apply button.

Your settings are saved.

10.

To save the settings to the running configuration, click the Save icon.

IPv4 management interfaces and VLANs

The main UI provides separate options for IPv4 interface and port-based IP management.

If you configure port-based IP management, VLAN-based IP management is disabled.
Similarly, if you configure VLAN-based IP management, port-based IP management is
disabled.

By default, the source interface for applications is VLAN 1. If you change the IPv4
management VLAN and port to a non-default value, the source interface to the VLAN
1 default VLAN and port are also automatically changed.

You can access the switch over the main UI by one of the following methods:

IPv4 service port: The service port is a dedicated Ethernet port for out-of-band

•
(OOB) management of the switch. Traffic on this port is segregated from operational

Main User Manual47Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

network traffic on the switch ports and cannot be switched or routed to the
operational network.

Management VLAN interface: The management VLAN is the logical interface used

•
for in-band connectivity with the switch over any of the switch's network interfaces.
To access the switch over a network you must first configure an IP address and subnet
mask for the switch.

Optional single management interface: By default, you can use any of the switch's

•
network interfaces as the management interface. However, you can restrict IPv4
management to one specific network interface.

Configure the IPv4 service port

You can configure network information on the IPv4 service port, also referred to as the
out-of-band (OOB) port. The service port is a dedicated Ethernet port for out-of-band
management of the switch. Traffic on this port is segregated from operational network
traffic on the switch ports and cannot be switched or routed to the operational network.

By default, no IP address is set for the OOB port, but its DHCP client is enabled so that
the port can receive an IP address from a DHCP server in your network. If the OOB port
does not receive an IP address from a DHCP server in your network, the IP address for
the port is set to 192.168.0.239 with 255.255.255.0 as the subnet mask. The same occurs
if you connect the OOB port directly to a computer and reboot the switch.

To configure the IPv4 service port:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Management Interfaces > IPv4 Service Port
Configuration.

The IPv4 Service Port Configuration page displays.

6.

Select a Service Port Configuration Protocol radio button:

Main User Manual48Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

• Bootp: During the next boot cycle, the BootP client on the device broadcasts a

BootP request to acquire information from a BootP server on the network.
The IP Address, Subnet Mask, and Default Gateway field display the information
is dynamically acquired.

• DHCP: During the next boot cycle, the DHCP client on the device broadcasts a

DHCP request to acquire information from a DHCP server on the network.
The IP Address, Subnet Mask, and Default Gateway field display the information
is dynamically acquired.

•

None: The device does not attempt to acquire network information dynamically.

You must configure the address settings manually:

IP Address: Specify the IP address of the interface.

•

Subnet Mask: Specify the IP subnet mask for the interface.

•

Default Gateway: Specify the default gateway for the IP interface.

•

7. Click the Apply button.
Your settings are saved.

8.

To save the settings to the running configuration, click the Save icon.

The following table describes the nonconfigurable fields on the page.

Table 11. IPv4 service port configuration information

DescriptionField

The burned-in MAC address used for out-of-band connectivity.Burned-in MAC Address

Indicates whether the link status is up or down.Interface Status

If the selection is DHCP, the DHCP client ID.DHCP Client Identifier

Configure an IPv4 management VLAN

For you to manage the switch over the main UI, you must define the management IP
address. A management VLAN interface is created by default and it gets an IP address
if a DHCP server is present. If the management VLAN interface cannot get an IP address,
the automatically assigned fallback IPv4 address is 169.254.100.100 and the subnet
mask is 255.255.0.0.

A management VLAN is used as the default source interface for the syslog, the message
log, an SNMP client, and so on. The network interface is disabled by default.

The management VLAN is the logical interface used for in-band connectivity with the
switch through any of the switch’s front panel ports. The configuration parameters

Main User Manual49Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

associated with the switch’s management VLAN do not affect the configuration of the
front panel ports through which traffic is switched or routed.

To access the switch over a network you must first configure an IP address and subnet
mask for the switch. You can configure the IP information using any of the following:

DHCP

•

Terminal interface through the EIA-232 port

•

After you establish in-band connectivity, you can change the IP information using any
of the following:

Terminal interface through the EIA-232 port

•

Terminal interface through Telnet

•

SNMP-based management

•

Web-based management

•

To configure an IPv4 management VLAN or reset the IPv4 management VLAN:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Management Interfaces > IPv4 Management
VLAN Configuration.

The IPv4 Management VLAN Configuration page displays.

6.

In the Management VLAN ID field, specify the management VLAN ID of the switch.
The IPv4 management VLAN is used for management of the switch. You can configure

any value in the range of 1 to 4093.

7. Select the Enable or Disable Routing Mode radio button to enable or disable global
routing on the switch.

The default value is Enable.

Main User Manual50Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

8.

Select the Configuration Method DHCP or Manual radio button to specify the switch
startup action:

•

DHCP: The switch requests IP address information from a DHCP server.

•

Manual: The switch loads the IP address information that you specify:

IP Address: Specify the IP address of the interface.

•
The default value is 169.254.100.100.

Subnet Mask: Specify the IP subnet mask for the interface. This is also referred

•
to as the subnet/network mask and defines the portion of the interface’s IP
address that is used to identify the attached network.
The default value is 255.255.0.0.

Gateway: Specify the gateway for the interface.

•
The default value is 0.0.0.0.

9. Click the Apply button.

Your settings are saved.

10.

To save the settings to the running configuration, click the Save icon.

Note: If you need to reset the IPv4 management VLAN, in the Reset IPv4 Management
Interface section of the page, select the Set Management Interface to Default check
box and click the Apply button. Doing so deletes the port-based IPv4 management
interface configuration and sets the IPv4 management interface back to the default
VLAN 1.

The Current IPv4 Management Interface Status section displays the following
nonconfigurable fields.

Table 12. Nonconfigurable IPv4 management interface status information

DescriptionField

Displays the current IPv4 management VLAN.Management Interface

Indicates whether the link status is up or down.Link State

Routing Interface Status

Information

Indicates whether the link status is up or down for the management
interface.

The MAC address assigned to the management interface.MAC Address

Indicates whether the IP address configuration method is DHCP or manual.IP Address Configuration Method

The IP address of the management interface.IP Address

Main User Manual51Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 12. Nonconfigurable IPv4 management interface status information (Continued)

DescriptionField

The IP subnet mask for the management interface.Subnet Mask

The specified default gateway for the management interface.Gateway

Configure an IPv4 management interface

You can restrict IPv4 management to one specific interface. By default, you can use any
of the interfaces as an IPv4 management interface.

To configure an IPv4 management interface:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Management Interfaces > IPv4 Management
Interface Configuration.

The IPv4 Management Interface Configuration page displays.

6.

From the Interface menu, select the interface that must become the IPv4
management interface.

7.

Select the Set Management Interface option check box so that you can configure
the interface IP address settings

8.

Select a Configuration Method radio button:

•

DHCP: The switch obtains the management interface IP address settings from a

DHCP server in the network.

•

Manual: Configure the management interface IP address settings manually:

•

•

Information

IP Address: Specify the IP address for the management interface.

Subnet Mask: Specify the subnet mask for the management interface.

Main User Manual52Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Gateway: Specify the IP address of the default gateway for the management

•
interface.

9. Click the Apply button.

Your settings are saved.

10.

To save the settings to the running configuration, click the Save icon.

Note: If you need to reset the IPv4 management interface, in the Reset IPv4 Management
Interface section of the page, select the Set Management Interface to Default check box
and click the Apply button. Doing so deletes the IPv4 management interface
configuration and sets the IPv4 management interface back to the default setting.

The Current IPv4 Management Interface section displays the following nonconfigurable
fields.

Table 13. Nonconfigurable IPv4 management interface status information

DescriptionField

Displays the current IPv4 management interfaceManagement Interface

Indicates whether the link status is up or down.Link State

Routing Interface Status

Indicates whether the link status is up or down for the management
interface.

The MAC address assigned to the management interface.MAC Address

Indicates whether the IP address configuration method is DHCP or manual.IP Address Configuration Method

The IP address of the management interface.IP Address

The IP subnet mask for the management interface.Subnet Mask

The specified default gateway for the management interface.Gateway

IPv6 management interfaces and VLANs

The main UI provides separate options for IPv6 interface and port-based IP management.

If you configure port-based IP management, VLAN-based IP management is disabled.
Similarly, if you configure VLAN-based IP management, port-based IP management is
disabled.

Main User Manual53Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

By default, the source interface for applications is VLAN 1. If you change the IPv6
management VLAN and port to a non-default value, the source interface to the VLAN
1 default VLAN and port are also automatically changed.

You can access the switch over the main UI by one of the following methods:

IPv6 service port: The service port is a dedicated Ethernet port for out-of-band

•
management of the switch. Traffic on this port is segregated from operational network
traffic on the switch ports and cannot be switched or routed to the operational
network.

Management VLAN interface: The management VLAN is the logical interface used

•
for in-band connectivity with the switch over any of the switch's network interfaces.
To access the switch over a network you must first configure an IP address and subnet
mask for the switch. To configure an IPv6 management VLAN, you can either use
the same VLAN that is used for IPv4 management or a different VLAN. The switch
does not provide a default IPv6 management VLAN. If you want to use one, you must
create it manually.

Optional single management interface: By default, you can use any of the switch's

•
network interfaces as the management interface. However, you can restrict IPv6
management to one specific network interface.

Configure an IPv6 service port

You can configure IPv6 network information on the service port. The service port is a
dedicated Ethernet port for out-of-band management of the switch Traffic on this port
is segregated from operational network traffic on the switch ports and cannot be switched
or routed to the operational network.

To configure the IPv6 service port:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

Main User Manual54Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

5.

Select System > Management > Management Interfaces > IPv6 Service Port
Configuration.

The IPv6 Service Port Configuration page displays.

6. Select the IPv6 mode Enable or Disable radio button.
This specifies the IPv6 administrative mode on the service port.

7.

Select the Service Port Configuration Protocol None or DHCP radio button.
This specifies whether the device acquires network information from a DHCPv6

server. Selecting None disables the DHCPv6 client on the service port.

If you select the DHCP radio button, the DHCPv6 Client DUID field displays the client
identifier used by the DHCPv6 client when sending messages to the DHCPv6 server.

8.

Select the IPv6 Stateless Address AutoConfig mode Enable or Disable radio button:

• Enable: The service port can acquire an IPv6 address through IPv6 Neighbor

Discovery Protocol (NDP) and through the use of router advertisement messages.

•

Disable: The service port does not use the native IPv6 address autoconfiguration

feature to acquire an IPv6 address.

This sets the IPv6 stateless address autoconfiguration mode on the service port.

9.

To configure the IPv6 gateway, do the following:
a. select the Change IPv6 Gateway check box.

The IPv6 gateway is the default gateway for the IPv6 service port interface.

b.

In the IPv6 Gateway field, specify the default gateway for the IPv6 service port
interface.

10. Click the Apply button.
Your settings are saved.

11.

To save the settings to the running configuration, click the Save icon.

Manage IPv6 addresses for the IPv6 service port

You can add a static IPv6 address that is specific to the IPv6 service port. You can also
remove an IPv6 address that you no longer need for the IPv6 service port.

To add or remove an IPv6 address for the IPv6 service port:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

Information

Main User Manual55Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Management Interfaces > IPv6 Service Port
Configuration.

The IPv6 Service Port Configuration page displays.

The Add/Delete IPv6 Address table lists the static IPv6 addresses that you manually
added to the service port interface.

6.

To add an IPv6 address, in the Add/Delete IPv6 Address section, do the following:
a.

In the IPv6 Address field, specify the IPv6 address that you want to add.

b.

From the EUI FLAG menu, select True to enable the Extended Universal Identifier
(EUI) flag for the IPv6 address, or select False to omit the flag.

c. Click the Add button.

The IPv6 address is added to the IPv6 service port.

7.

To remove an IPv6 address, in the Add/Delete IPv6 Address section, do the following:
a.

Select the check box for the IPv6 address that you want to remove.

b. Click the Delete button.

The IPv6 address is removed from the IPv6 service port.

8.

To save the settings to the running configuration, click the Save icon.

Configure an IPv6 management VLAN

For you to manage the switch over the main UI, you must define the management IP
address. A management VLAN interface is created by default and it gets an IP address
if a DHCP server is present. If the management VLAN interface cannot get an IP address,
the automatically assigned fallback IPv4 address is 169.254.100.100 and the subnet
mask is 255.255.0.0.

A management VLAN is used as the default source interface for the syslog, the message
log, an SNMP client, and so on. The network interface is disabled by default.

Main User Manual56Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

The management VLAN is the logical interface used for in-band connectivity with the
switch through any of the switch’s front panel ports. The configuration parameters
associated with the switch’s management VLAN do not affect the configuration of the
front panel ports through which traffic is switched or routed.

To access the switch over a network you must first configure an IP address and subnet
mask for the switch. You can configure the IP information using any of the following:

DHCP

•

Terminal interface through the EIA-232 port

•

After you establish in-band connectivity, you can change the IP information using any
of the following:

Terminal interface through the EIA-232 port

•

Terminal interface through Telnet

•

SNMP-based management

•

Web-based management

•

To configure an IPv6 management VLAN, you can either use the same VLAN that is used
for IPv4 management or a different VLAN. The switch does not provide a default IPv6
management VLAN. If you want to use one, you must create it manually.

To configure an IPv6 management VLAN or reset the IPv6 management VLAN:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Management Interfaces > IPv6 Management
VLAN Configuration.

The IPv6 Management VLAN Configuration page displays.

6.

In the Management VLAN ID field, specify the management VLAN ID of the switch.

Main User Manual57Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

The IPv6 management VLAN is used for management of the switch. You can configure
any value in the range of 1 to 4093.

7.

Select the IPv6 Enable Mode Enable or Disable radio button to specify he
administration mode for the IPv6 management VLAN.

8.

Select the Address Autoconfigure Mode Enable or Disable radio button to specify
the address autoconfiguration mode.

If you enable this mode, the IPv6 network settings (IPv6 prefix and prefix length) are
automatically configured for the configured management VLAN interface. By default,
for VLAN 1, the mode is enabled so that the settings are automatically configured.

Note: The Address Autoconfigure mode option is available only if unicast routing
is globally disabled.

9.

Select the Address DHCP Mode Enable or Disable radio button to specify if the
IPv6 settings are obtained from a DHCP server.

10. Click the Apply button.
Your settings are saved.

11.

To save the settings to the running configuration, click the Save icon.

Note: If you need to reset the IPv6 management interface, in the Reset IPv6 Management
Interface section of the page, select the Set Management Interface to Default check
box and click the Apply button. Doing so deletes the IPv6 management interface
configuration.

The Current IPv6 Management Interface Status section displays the following
nonconfigurable fields.

Table 14. Current IPv6 management interface status information

DescriptionField

Management Interface

The IPv6 management interface. (By default, no IPv6 management
interface is configured).

Indicates if the link status is up or down.Link State

Status/Operational Mode

Information

Indicates if the link status is up or down for the IPv6 management interface.IPv6 Routing Interface

The MAC address that is assigned to the IPv6 management interface.MAC Address

Indicates if IPv6 is enabled or disabled on the IPv6 management interface.IPv6 Enable Mode

Main User Manual58Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 14. Current IPv6 management interface status information (Continued)

DescriptionField

IPv6 Routing Mode

Stateless Address Autoconfig
Mode

DHCPv6 Client Mode

IPv6 Prefix/Prefix Length

Indicates if IPv6 routing is enabled or disabled on the IPv6 management
interface.

Indicates if the IPv6 address autoconfiguration mode is enabled or
disabled on the IPv6 management interface.

Indicates if the DHCPv6 Client Mode is enabled or disabled on the IPv6
management interface.

The IPv6 address of the default gateway of the switch.IPv6 Default Gateway

The IPv6 address of the next hop interface of the switch.IPv6 Next Hop Interface

The IPv6 prefix and prefix length that is used for the IPv6 management
interface.

The EUI-64 flag of the IPv6 address on the IPv6 management interface.EU164

The current state of the IPv6 address on the IPv6 management interface.Current State

Manage IPv6 addresses for the IPv6 management VLAN

You can add a static IPv6 address that is specific to the IPv6 management VLAN. You
can also remove an IPv6 address that you no longer need for the IPv6 management
VLAN.

To add or remove an IPv6 address for the IPv6 management VLAN:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Management Interfaces > IPv6 Management
VLAN Configuration.

The IPv6 Management VLAN Configuration page displays.

Information

Main User Manual59Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

If the Address Autoconfigure Mode is enabled, the autoconfigured IPv6 prefix and
prefix length are displayed in the IPv6 VLAN Interface Configuration section.

6.

To add an IPv6 address, in the IPv6 VLAN Interface Configuration section, do the
following:

a.

In the IPv6 Prefix/Prefix Length field, specify the IPv6 address and prefix length
that you want to add.

b.

From the EUI64 menu, select True to enable the Extended Universal Identifier
(EUI) flag for the IPv6 address, or select False to omit the flag.

c. Click the Add button.

The IPv6 address is added to the IPv6 management VLAN.

7.

To remove an IPv6 address, in the IPv6 VLAN Interface Configuration section, do the
following:

a.

Select the check box for the IP address and prefix that you want to remove.

b. Click the Delete button.

The IPv6 address is removed from the IPv6 management VLAN.

8.

To save the settings to the running configuration, click the Save icon.

Manage the IPv6 default route addresses for the IPv6 management VLAN

You can add an IPv6 default route address that is specific to the IPv6 management VLAN.
You can also remove an IPv6 default route address that you no longer need for the IPv6
management VLAN.

To add or remove an IPv6 default route address for the IPv6 management VLAN:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

Main User Manual60Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

5.

Select System > Management > Management Interfaces > IPv6 Management
VLAN Configuration.

The IPv6 Management VLAN Configuration page displays.

6.

To add an IPv6 default route address, in the IPv6 Default Route Configuration section,
do the following:

a.

Select the Change IPv6 Default Route check box.

b.

In the IPv6 Default Route Address field, specify the IPv6 address and prefix
length that you want to add.

c. Click the Add button.

The IPv6 default route address is added to the IPv6 management VLAN.

7.

To remove an IPv6 default route address, in the IPv6 Default Route Configuration
section, do the following:

a.

Select the check box for the IPv6 default route address that you want to remove.

b. Click the Delete button.

The IPv6 default route address is removed from the IPv6 management VLAN.

8.

To save the settings to the running configuration, click the Save icon.

Configure an IPv6 management interface

You can restrict IPv6 management to one specific interface. By default, you can use any
of the interfaces as an IPv6 management interface.

To configure an IPv6 management interface:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

Main User Manual61Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

5.

Select System > Management > Management Interfaces > IPv6 Management
Interface Configuration.

The IPv6 Management Interface Configuration page displays.

6.

From the Interface menu, select the interface that must become the IPv6
management interface.

7.

Select the Set Management Interface option check box so that you can configure
the interface settings.

8. Select the Routing Mode Enable or Disable radio button to enable or disable routing
on the IPv6 management interface.

9. Select the IPv6 Enable Mode Enable or Disable radio button to enable or disable
IPv6 on the IPv6 management interface.

10.

Select the Stateless Address Autoconfigure Mode Enable or Disable radio button
to enable or disable the on the IPv6 management interface.

You can enable this mode only if unicast routing is globally disabled.

11. Select the DHCPv6 Client Mode Enable or Disable radio button to enable or disable
the DHCPv6 client mode on the IPv6 management interface.

12. Click the Apply button.
Your settings are saved.

13.

To save the settings to the running configuration, click the Save icon.

Note: If you need to reset the IPv6 management interface, in the Reset IPv6 Management
Interface section of the page, select the Set Management Interface to Default check
box and click the Apply button. Doing so deletes the IPv6 management interface
configuration.

The Current IPv6 Management Interface Status section displays the following
nonconfigurable fields.

Table 15. Current IPv6 management interface status information

DescriptionField

Management Interface

The IPv6 management interface. (By default, no IPv6 management
interface is configured).

Status/Operational Mode

Information

Indicates if the link status is up or down.Link State

Indicates if the link status is up or down for the IPv6 management interface.IPv6 Routing Interface

The MAC address that is assigned to the IPv6 management interface.MAC Address

Main User Manual62Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 15. Current IPv6 management interface status information (Continued)

DescriptionField

Indicates if IPv6 is enabled or disabled on the IPv6 management interface.IPv6 Enable Mode

IPv6 Routing Mode

Stateless Address Autoconfig
Mode

DHCPv6 Client Mode

IPv6 Prefix/Prefix Length

Indicates if IPv6 routing is enabled or disabled on the IPv6 management
interface.

Indicates if the IPv6 address autoconfiguration mode is enabled or
disabled on the IPv6 management interface.

Indicates if the DHCPv6 Client Mode is enabled or disabled on the IPv6
management interface.

The IPv6 address of the default gateway of the switch.IPv6 Default Gateway

The IPv6 address of the next hop interface of the switch.IPv6 Next Hop Interface

The IPv6 prefix and prefix length that is used for the IPv6 management
interface.

The EUI-64 flag of the IPv6 address on the IPv6 management interface.EU164

The current state of the IPv6 address on the IPv6 management interface.Current State

Manage IPv6 addresses for the IPv6 management interface

You can add a static IPv6 address that is specific to the IPv6 management interface. You
can also remove an IPv6 address that you no longer need for the IPv6 management
interface.

To add or remove an IPv6 address for the IPv6 management interface:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Management Interfaces > IPv6 Management
Interface Configuration.

Main User Manual63Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

The IPv6 Management Interface Configuration page displays.

6.

To add an IPv6 address, in the IPv6 Management Interface Configuration section,
do the following:

a.

Select the Set Management Interface check box.
It is likely that you already did this when you started the configuration of the IPv6
management interface.

b.

In the IPv6 Prefix field, specify the IPv6 address that you want to add.

c.

In the Prefix Length field, specify the prefix length for the IPv6 address that you
want to add.

d.

From the EUI64 menu, select Enable to enable the Extended Universal Identifier
(EUI) flag for the IPv6 address, or select Disable to omit the flag.

e. Click the Add button.

The IPv6 address is added to the IPv6 management interface.

7.

To remove an IPv6 address, in the IPv6 Management Interface Configuration section,
do the following:

a.

Select the check box for the IPv6 that you want to remove.

b. Click the Delete button.

The IPv6 address is removed from the IPv6 management interface.

8.

To save the settings to the running configuration, click the Save icon.

Manage the IPv6 default route addresses for the IPv6 management interface

You can add an IPv6 default route address that is specific to the IPv6 management
interface. You can also remove an IPv6 default route address that you no longer need
for the IPv6 management interface.

To add or remove an IPv6 default route address for the IPv6 management interface:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

Information

Main User Manual64Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Management Interfaces > IPv6 Management
Interface Configuration.

The IPv6 Management Interface Configuration page displays.

6.

To add an IPv6 default route address, in the IPv6 Default Route Configuration section,
do the following:

a.

Select the Change IPv6 Default Route check box.

b.

In the IPv6 Default Route Address field, specify the IPv6 address and prefix
length that you want to add.

c. Click the Add button.

The IPv6 default route address is added to the IPv6 management interface.

7.

To remove an IPv6 default route address, in the IPv6 Default Route Configuration
section, do the following:

a.

Select the check box for the IPv6 default route address that you want to remove.

b. Click the Delete button.

The IPv6 default route address is removed from the IPv6 management interface.

8.

To save the settings to the running configuration, click the Save icon.

Time and SNTP settings

The switch supports the Simple Network Time Protocol (SNTP). As its name suggests,
it is a less complicated version of Network Time Protocol (NTP), which is a system for
synchronizing the clocks of networked computer systems, primarily when data transfer
is handled through the Internet. You can also set the system time manually.

Configure the time setting manually

To configure the time setting manually

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.

Information

Main User Manual65Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Time > Time Configuration.
The Time Configuration page displays.

6. Select the Clock Source Local radio button.
The default is SNTP.

7.

In the Date field, specify the current date in months, days, and years.

8.

In the Time field, specify the current time in hours, minutes, and seconds.

9. Click the Apply button.
Your settings are saved.

10.

To save the settings to the running configuration, click the Save icon.

Configure the time settings with SNTP and configure the global SNTP settings

To configure the time by using SNTP and configure the global SNTP settings:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

Main User Manual66Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

5.

Select System > Management > Time > Time Configuration.
The Time Configuration page displays.

6. Select the Clock Source SNTP radio button.
The default is SNTP.

In the SNTP Global Configuration section of the page, configure the following settings.

7.

Select a Client mode radio button to specify the operation mode of the SNTP client:
on the switch:

•

Disable: SNTP is not operational. No SNTP requests are sent from the client and

no received SNTP messages are processed.

• Unicast: SNTP operates in a point-to-point mode. A unicast client sends a request

to a designated server at its unicast address and expects a reply from which it can
determine the time and, optionally, the round-trip delay and local clock offset
relative to the server.
The default selection is Unicast. You can add the IP address or DNS name of one
or more SNTP servers for the switch to poll. For more information, see Configure
SNTP servers on page 71.

•

Broadcast: SNTP operates uses a local broadcast address instead of a multicast

address. The broadcast address has a single subnet scope while a multicast
address has an Internet wide scope.

8.

In the Port field, specify the local UDP port on which the SNTP client receives server
packets.

The port number is 123 or in a range from 1025 to 65535. The default is 123. When
the default value is configured, the actual client port value used in SNTP packets is
assigned by the operating system.

9.

From the Source Interface menu, select the interface that the SNTP client must use:

•

None: The primary IP address of the originating (outbound) interface is used as

the source address.

•

Routing interface: The primary IP address of a physical port is used as the source

address.

•

Routing VLAN: The primary IP address of a VLAN routing interface is used as the

source address.

•

Routing loopback interface: The primary IP address of a routing loopback

interface is used as the source address.

•

Tunnel interface: The IPv6 tunnel interface.

• Service port: The management port source IP address is used as the source

address.

By default VLAN 1 is used as the source interface.

Information

Main User Manual67Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

10.

In the Unicast Poll Interval field, specify the number of seconds between unicast
poll requests expressed as a power of 2. to The range is from 6 to 10. The default is

6.

11.

In the Broadcast Poll Interval field, specify the number of seconds between
broadcast poll requests expressed as a power of 2.

Broadcasts received prior to the expiry of this interval are discarded. The range is
from 6 to 10. The default is 6.

12.

In the Unicast Poll Timeout field, specify the number of seconds to wait for an SNTP
response to a unicast poll request.

The range is from 1 to 30. The default is 5.

13.

In the Unicast Poll Retry field, specify the number of times to retry a unicast poll
request to an SNTP server after the first time-out before the switch attempts to use
the next configured server.

The range is from 0 to 10. The default is 1.

14.

In the Time Zone Name field, specify a time zone.
In the Offset Hours and Offset Minutes fields, you can also specify the number of

hours and number of minutes that the time zone is different from the Coordinated
Universal Time (UTC). The time zone can affect the display of the current system
time.

Note: When you use an SNTP or NTP time server, the time data that is received from
the server is based on the UTC, which is the same as Greenwich Mean Time (GMT).
This might not be the time zone in which the switch is located.

15.

In the Offset Hours field, specify the number of hours that the time zone is different
from UTC.

The range is from -12 to 14. The default is 0.

16.

In the Offset Minutes field, specify the number of minutes that the time zone is
different from UTC.

The range is from 0 to 59. The default is 0.

17. Click the Apply button.
Your settings are saved.

18.

To save the settings to the running configuration, click the Save icon.

Information

Main User Manual68Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

View the SNTP global status

When you select the SNTP option as the clock source, you can view the SNTP global
status.

To view SNTP global status:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Time > Time Configuration.
The Time Configuration page displays.

The SNTP Global Status section displays the following nonconfigurable fields:

Table 16. SNTP global status information

DescriptionField

The SNTP version that the client supports.Version

Supported mode

Last Attempt Time

The SNTP modes that the client supports. Multiple modes can be supported by

a client.

The local date and time (UTC) that the SNTP client last updated the system clock.Last Update Time

The local date and time (UTC) of the last SNTP request or receipt of an unsolicited

message.

Information

Main User Manual69Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 16. SNTP global status information (Continued)

DescriptionField

Last Attempt Status

Server IP Address

The status of the last SNTP request or unsolicited message for both unicast and

broadcast modes. If no message was received from a server, a status of Other

is displayed. These values are appropriate for all operational modes.

Other: None of the following enumeration values.

•

Success: The SNTP operation was successful and the system time was updated.

•

Request Timed Out: A directed SNTP request timed out without receiving a

•
response from the SNTP server.

Bad Date Encoded: The time provided by the SNTP server is not valid.

•

Version Not Supported: The SNTP version supported by the server is not

•
compatible with the version supported by the client.

Server Unsynchronized: The SNTP server is not synchronized with its peers.

•
This is indicated through the leap indicator field on the SNTP message.

Server Kiss Of Death: The SNTP server indicated that no further queries were

•
to be sent to this server. This is indicated by a stratum field equal to 0 in a

message received from a server.

The IP address of the server for the last received valid packet. If no message was

received from any server, an empty string is shown.

Unicast Server Max Entries

Information

The address type of the SNTP server address for the last received valid packet.Address Type

The claimed stratum of the server for the last received valid packet.Server Stratum

The reference clock identifier of the server for the last received valid packet.Reference Clock ID

The mode of the server for the last received valid packet.Server mode

The maximum number of unicast server entries that can be configured on this

client.

Main User Manual70Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 16. SNTP global status information (Continued)

DescriptionField

The number of current valid unicast server entries configured for this client.Unicast Server Current

Entries

Broadcast Count

The number of unsolicited broadcast SNTP messages that were received and

processed by the SNTP client since the last reboot.

Configure SNTP servers

SNTP assures accurate time synchronization for network device clock, up to the
millisecond. Time synchronization is performed by a network SNTP server. The switch
operates as an SNTP client only and does provide time services to other devices.

Time sources are established by stratums. Stratums define the accuracy of the reference
clock. The higher the stratum (zero is the highest), the more accurate the clock. The
switch receives time from stratum 1 or stratum 0 devices because the switch itself is a
stratum 2 device.

The following are examples of stratums:

Stratum 0: A real-time clock is used as the time source, for example, a GPS system.

•

Stratum 1: A server that is directly linked to a stratum 0 time source is used. Stratum

•
1 time servers provide primary network time standards.

Stratum 2: The time source is distanced from the stratum 1 server over a network

•
path. For example, a stratum 2 server receives the time over a network link, through

NTP, from a stratum 1 server.

Information received from SNTP servers is evaluated based on the time level and server
type.

SNTP time definitions are assessed and determined by the following time levels:

T1: Time that the original request was sent by the client.

•

T2: Time that the original request was received by the server.

•

T3: Time that the server sent a reply.

•

T4: Time that the client received the server's reply.

•

The switch can poll unicast server types for the server time. The switch polls for unicast
information to detect a server for which the IP address is known. SNTP servers that you
configure on the switch are the only ones that are polled for synchronization information.
T1 through T4 are used to determine the server time. This is the preferred method for

Main User Manual71Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

synchronizing device time because it is the most secure method. If this method is
selected, SNTP information is accepted only from SNTP servers that are configured on
the switch.

The switch retrieves synchronization information, either by actively requesting information
or at every poll interval.

Add an SNTP server To add an SNTP server:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Time > SNTP Server Configuration.
The SNTP Server Configuration page displays.

6.

From the Server Type menu, select the type of SNTP address to enter in the address
field.

The address can be an IPv4 address, IPv6 address, or host name (DNS). The default
is DNS.

7.

In the Address field, specify the IP address or the host name of the SNTP server.
This is an IP address or a text string of up to 64 characters, containing the encoded

unicast IP address or host name of an SNTP server. Unicast SNTP requests are sent
to this address. If this address is a DNS host name, the host name is resolved into an
IP address each time an SNTP request is sent to it.

8.

In the Port field, specify the port number.
This is the UDP port on the SNTP server to which SNTP requests are sent. The range

is from 1 to 65535. The default is 123.

9.

In the Priority field, specify the priority order in which the switch must query the
servers.

The SNTP client on the switch continues to send SNTP requests to different servers
until a successful response is received, or all servers were tried. The priority indicates
the order in which the switch must query the servers. The switch first sends a request

Main User Manual72Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

to an SNTP server with a priority of 1, then to a server with a priority of 2, and so on.
If any servers are assigned the same priority, the SNTP client contacts the servers in
the order that they are listed in the table. The priority range is from 1 to 3. By default,
the first server that you add gets priority 1, the second server priority 2, and the third
server priority 3.

10.

In the NTP Version field, specify the NTP version that is supported by the switch.
The range is from 1 to 4. The default is 4.

11. Click the Add button.
The SNTP server entry is added.

12. To add additional SNTP servers, repeat the previous steps.
You can configure up to three SNTP servers.

13.

To save the settings to the running configuration, click the Save icon.

The SNTP Server Status table displays the following information.

Table 17. SNTP server status information

DescriptionField

The IP address of the SNTP server.Address

Last Update Time

Last Attempt Status

The local date and time (UTC) that the response from the server was used to
update the system clock.

The local date and time (UTC) that the SNTP server was last queried.Last Attempt Time

The status of the last NTP request to the server:

Other: No packet was received from the server.

•

Success: The SNTP operation was successful and the system time was updated.

•

Request Timed Out: A directed SNTP request timed out without receiving

•
a response from the SNTP server.

Bad Date Encoded: The time provided by the SNTP server is not valid.

•

Version Not Supported: The SNTP version supported by the server is not

•
compatible with the version supported by the client.

Server Unsynchronized: The SNTP server is not synchronized with its peers.

•
This is indicated through the leap indicator field on the SNTP message.

Server Kiss Of Death: The SNTP server indicated that no further queries were

•
to be sent to this server. This is indicated by a stratum field equal to 0 in a
message received from a server.

Information

Main User Manual73Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 17. SNTP server status information (Continued)

DescriptionField

The number of SNTP requests made to the server since the last reboot.Requests

The number of failed SNTP requests made to the server since the last reboot.Failed Requests

Change the settings for an existing SNTP server To change the settings for

an existing SNTP server:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Time > SNTP Server Configuration.
The SNTP Server Configuration page displays.

6.

Select the check box next to the configured server.

7. Change the settings as needed.

8. Click the Apply button.

Your settings are saved.

9.

To save the settings to the running configuration, click the Save icon.

Remove an SNTP server To remove an SNTP server:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

Information

Main User Manual74Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Time > SNTP Server Configuration.
The SNTP Server Configuration page displays.

6.

Select the check box next to the configured server to remove.

7. Click the Delete button.

The server is removed.

8.

To save the settings to the running configuration, click the Save icon.

Configure daylight saving time settings

You can configure settings for summer time, which is also known as daylight saving
time. Used in some countries around the world, summer time is the practice of
temporarily advancing clocks during the summer months. Typically clocks are adjusted
forward one or more hours near the start of spring and are adjusted backward in autumn.

To configure the daylight saving time settings:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Time > Daylight Saving Configuration.
The Daylight Saving Configuration page displays.

6.

Select one of the following Daylight Saving (DST) radio buttons:

• Disable: Disable daylight saving time.

Information

Main User Manual75Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

• Recurring: Daylight saving time occurs at the same time every year. You must

manually configure the start and end times and dates for the time shift.
Configure the settings that are described in Step 7.

• Recurring EU: The system clock uses the standard recurring summer time settings

used in countries in the European Union. With this option, the rest of the applicable
fields on the page are automatically populated and you cannot change them.
Configure the settings that are described in Step 7.

• Recurring USA: The system clock uses the standard recurring daylight saving

time settings used in the United States. With this option, the rest of the applicable
fields on the page are automatically populated and you cannot change them.
Configure the settings that are described in Step 7.

•

Non Recurring: Daylight saving time settings are in effect only between the start

date and end date of the specified year. With this option, the summer time settings
do not repeat on an annual basis.
Configure the settings that are described in Step 8.

7.

If you select Recurring, Recurring EU, or Recurring USA radio button, configure
the fields that are shown in the following table.

Begins At

Ends At

DescriptionField

These fields are used to configure the start values of the day and time.

Week: Configure the start week.

•

Day: Configure the start day.

•

Month: Configure the start month.

•

Hours: Configure the start hours.

•

Minutes: Configure the start minutes.

•

These fields are used to configure the end values of day and time.

Week: Configure the end week.

•

Day: Configure the end day.

•

Month: Configure the end month.

•

Hours: Configure the end hours.

•

Minutes: Configure the end minutes.

•

Configure recurring offset in minutes. The valid range is 1-1440 minutes.Offset

Configure the time zone.Zone

8.

If you select the Non Recurring, configure the fields that are shown in the following
table.

Main User Manual76Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

DescriptionField

Begins At

Ends At

Offset

These fields are used to configure the start values of the date and time.

Month: Configure the start month.

•

Date: Configure the start date.

•

Year: Configure the start year.

•

Hours: Configure the start hours.

•

Minutes: Configure the start minutes.

•

These fields are used to configure the end values of date and time.

Month: Configure the end start date.

•

Date: Configure the end date.

•

Year: Configure the end year.

•

Hours: Configure the end hours.

•

Minutes: Configure the end minutes.

•

Configure the non-recurring offset in minutes. The valid range is 1-1440

minutes.

Configure the time zone.Zone

9. Click the Apply button.

Your settings are saved.

10.

To save the settings to the running configuration, click the Save icon.

View the daylight saving time status

You can display information about the summer time settings and whether the time shift
for summer time is currently in effect.

To view the daylight saving time status:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

Information

Main User Manual77Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Time > Daylight Saving Configuration.
The Daylight Saving Configuration page displays.

6.

To refresh the page, click the Refresh button.
The following table displays the nonconfigurable daylight saving (DST) status

information.

Table 18. Daylight saving status information

Daylight Saving (DST)

Begins At

Ends At

Offset (in Minutes)

DescriptionField

The Daylight Saving value, which is one of the following:

Disable

•

Recurring

•

Recurring EU

•

Recurring USA

•

Non Recurring

•

Displays when the daylight saving time begins. This field is not displayed

when daylight saving time is disabled.

Displays when the daylight saving time ends. This field is not displayed when

daylight saving time is disabled.

The offset value in minutes.This field is not displayed when daylight saving

time is disabled.

Information

Main User Manual78Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 18. Daylight saving status information (Continued)

DescriptionField

Zone

The zone acronym. This field is not displayed when daylight saving time is

disabled.

Displays whether daylight saving time is in effect.Daylight Saving (DST) in Effect

Precision Time Protocol

Precision Time Protocol (PTP, IEEE 1588) is a protocol that enables precise
synchronization of clocks with a sub-microsecond accuracy across a packet-based
network. PTP lets network devices of different precision and resolution synchronize to
a grandmaster clock through an exchange of packets across the network. The switch
supports a PTP end-to-end transparent clock, which is enabled by default, both globally
and at the port level.

Note: The switch itself is not affected by PTP.

Manage the global PTP settings

By default, PTP is enabled globally on the switch. You can disable PTP to globally, in
which case the switch does not support PTP pass-through.

To configure the PTP end-to-end transparent clock settings globally:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > PTP TC > Global Configuration.
The Global Configuration page displays.

Information

Main User Manual79Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

6. Select the Admin Mode Enable or Disable radio button.

The default is Enable.

7. Click the Apply button.

Your settings are saved.

8.

To save the settings to the running configuration, click the Save icon.

Manage the PTP interface settings

On a standalone switch, by default, PTP is enabled globally on all interfaces. In a switch
stack, by default, PTP is disabled for all interfaces. You can select individual interfaces
on which you can enable or disable PTP. If you disable PTP on an interface, the interface
does not support PTP pass-through.

To configure the PTP end-to-end transparent clock settings for one or more
interfaces:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > PTP TC > Interface Configuration.
The Interface Configuration page displays.

6.

Select whether to display physical interfaces, LAGs, or both by clicking one of the
following links above the table heading:

•

1: Only physical interfaces are displayed. This is the default setting.

• LAG: Only LAGs are displayed.

•

All: Both physical interfaces and LAGs are displayed.

7.

Select one or more interfaces by taking one of the following actions:

•

To configure a single interface, select the check box associated with the interface,
or type the interface number in the Go To Interface field and click the Go button.

Information

Main User Manual80Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

•

To configure multiple interfaces with the same settings, select the check box
associated with each interface.

•

To configure all interfaces with the same settings, select the check box in the
heading row.

8.

From the Configured Mode menu, select Enable or Disable.
The default is Enable.

9. Click the Apply button.

Your settings are saved.

The Operational Mode field shows whether PTP is enabled or disabled for an
interface.

10.

To save the settings to the running configuration, click the Save icon.

Domain Name System

You can configure information about Domain Name System (DNS) servers that the
network uses and how the switch operates as a DNS client.

Configure the global DNS settings and add a DNS server

You can configure the global DNS settings and DNS server information.

To configure the global DNS settings and add a DNS server:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > DNS > DNS Configuration.
The DNS Configuration page displays.

Information

Main User Manual81Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

6. Select the DNS Status Disable or Enable radio button:

• Enable: Allows the switch to send DNS queries to a DNS server to resolve a DNS

domain name. The default value is Enable.

•

Disable: Prevents the switch from sending DNS queries.

7.

In the DNS Default Name field, enter the name that must be includes in DNS queries.
When the switch looks up on an unqualified host name, this field provides the domain

name. For example, if the default domain name is netgear.com and you enter test,
then test is changed to test.netgear.com to resolve the name). The maximum length
of the name is 255 characters.

8.

In the Retry Number field, specify the number of times that the switch must retry to
send DNS queries to the DNS server.

Enter a number from 0 to 100. The default is 2.

9.

In the Response Timeout (secs) field, specify the time in seconds that the switch
must wait for a response to a DNS query.

Enter a number from 0 to 3600. The default is 3.

10.

From the Source Interface menu, select the interface that must be the source
interface for DNS:

•

None: The primary IP address of the originating (outbound) interface is used as

the source address.

•

Routing interface: The primary IP address of a physical port is used as the source

address.

•

Routing VLAN: The primary IP address of a VLAN routing interface is used as the

source address.

•

Routing loopback interface: The primary IP address of a routing loopback

interface is used as the source address.

•

Tunnel interface: The IPv6 tunnel interface.

• Service port: The management port source IP address is used as the source

address.

By default, VLAN 1 is used as the source interface.

11. Click the Apply button.

Your settings are saved.

12.

To save the settings to the running configuration, click the Save icon.

Information

Main User Manual82Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

13.

To add a DNS server to which the switch sends DNS queries, do the following:
a.

In the DNS Server Address field in the DNS Server Configuration table, enter
an IP address in standard IPv4 or IPv6 dot notation.

b. Click the Add button.

The server is added to the table. You can specify up to eight DNS servers. The
precedence is set in the order that you add the servers.

14.

To save the settings to the running configuration, click the Save icon.

The following table displays non-configurable DNS server information.

Table 19. DNS server configuration information

DescriptionField

The sequence number of the DNS server.Serial No

Preference

The preference of the DNS server. The preference is determined by
the order in which you add the servers.

Remove a DNS server

You can remove a DNS server that you no longer need.

To remove a DNS server:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > DNS > DNS Configuration.
The DNS Configuration page displays.

6.

In the DNS Server Configuration table, select the check box for the DNS server.

Main User Manual83Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

Note: If you do not select a DNS server, all the DNS servers are removed after you

click the Delete button.

7. Click the Delete button.

The DNS server is removed.

8.

To save the settings to the running configuration, click the Save icon.

Configure and view host name-to-IP address information

You can manually map host names to IP addresses or view dynamic host mappings.

Add a static entry to the dynamic host mapping table To add a static entry

to the local dynamic host mapping table:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > DNS > Host Configuration.
The Host Configuration page displays.

6.

In the Host Name field, specify the static host name.
The maximum length of the name is 255 characters.

7.

In the IP Address field, enter the IP address to associate with the host name.

8. Click the Add button.

The entry displays in the Dynamic Host Mapping table.

9.

To save the settings to the running configuration, click the Save icon.

Information

Main User Manual84Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Remove an entry from the dynamic host mapping table To remove an

entry from the dynamic host mapping table:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > DNS > Host Configuration.
The Host Configuration page displays.

6. Select the check box next to the entry that you want to remove.

7. Click the Delete button.

The entry is removed.

8.

To save the settings to the running configuration, click the Save icon.

Change the host name or IP address in an entry of the dynamic host mapping table, view all entries, or clear all entries To change the host name

or IP address in an entry of the dynamic host mapping table, view all entries, or clear
all entries:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

Main User Manual85Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

5.

Select System > Management > DNS > Host Configuration.
The Host Configuration page displays.

6. Select the check box next to the entry to update.

7.

Enter the new information in the appropriate field.

8. Click the Apply button.

Your settings are saved.

9.

To clear all the dynamic host name entries from the list, click the Clear button.

10.

To save the settings to the running configuration, click the Save icon.

The dynamic host mapping table shows host name-to-IP address entries that the switch
learned. The following table describes the dynamic host fields.

Table 20. Dynamic Host Mapping information

DescriptionField

Lists the host name that you assign to the specified IP address.Host

Time since the dynamic entry was first added to the table.Total

Time since the dynamic entry was last updated.Elapsed

The type of the dynamic entry.Type

Lists the IP address associated with the host name.Addresses

Switch database management template

A switch database management (SDM) template determines the maximum resources
the switch can use for various features. SDM templates allow different combinations of
scaling factors and therefore allocations of resources, depending on how the switch is
used. That is, SDM templates let you reallocate switch resources to support a different
combination of features based on your network requirements.

The following table shows how the hardware resources are divided.

Information

Main User Manual86Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 21. SDM hardware resources

Number of IPv6 EntriesNumber of IPv4 EntriesModels SupportedTemplate Name

10% of total available90% of total availableAll modelsIPv4-Basic

90% of total available10% of total availableAll modelsIPv6-Basic

10% of total available90% of total availableM4250-16XFIPv4-Advanced

90% of total available10% of total availableM4250-16XFIPv6-Advanced

The main UI provides more information about the templates (see the steps in this task).

The default SMD is IP4v-Basic. You can change the SDM template for the switch.

To change the SDM template

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login

button.
The first time that you log in, no password is required. However, you then must

specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > SDM Template Preference.
The SDM Template Preference page displays.

6. From the SDM Next Template ID menu, select a template.

By default, the IPv4-Basic template is selected.

7. Click the Apply button.

Your settings are saved.

8.

To save the settings to the running configuration, click the Save icon.

9. To activate the new template, restart the switch.
The following table displays Summary information.

Information

Main User Manual87Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 22. SDM template summary information

DescriptionField

Identifies the template.SDM Template

ARP Entries

ECMP Next Hops

The maximum number of entries in the Address Resolution Protocol (ARP) cache

for routing interfaces.

The maximum number of IPv4 unicast forwarding table entries.IPv4 Unicast Routes

The maximum number of IPv6 Neighbor Discovery Protocol (NDP) cache entries.IPv6 NDP Entries

The maximum number of IPv6 unicast forwarding table entries.IPv6 Unicast Routes

The maximum number of next hops that can be installed in the IPv4 and IPv6

unicast forwarding tables.

The maximum number of IPv4 multicast forwarding table entries.IPv4 Multicast Routes

The maximum number of IPv6 multicast forwarding table entries.IPv6 Multicast Routes

The maximum number of VLAN entries, which is 4093 for any SDM template.Maximum VLAN Entries

Green Ethernet settings

You can configure the green Ethernet features to reduce power consumption.

Configure the global green Ethernet settings

You can configure the global green Ethernet settings.

To configure the global green Ethernet settings:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

Main User Manual88Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Green Ethernet > Green Ethernet Configuration.
The Green Ethernet Configuration page displays.

6. Select the Auto Power Down Mode Disable or Enable radio button.
By default, this mode is disabled. When a port link is down, the underlying physical

layer goes down for a short period and then checks for port link pulses again so that
auto-negotiation remains possible. In this way, the switch saves power when no link
partner is present for the port.

7. Select the EEE Mode Disable or Enable radio button.
By default, this mode is disabled. Energy Efficient Ethernet (EEE) combines the MAC

with a family of physical layers that support operation in a low power mode. It is
defined by the IEEE 802.3az standard. Lower power mode enables both the send
and receive sides of the link to disable some functionality for power savings when
lightly loaded. Transition to low power mode does not change the link status. Frames
in transit are not dropped or corrupted in transition to and from low power mode.
Transition time is transparent to upper layer protocols and applications.

8. Click the Apply button.
Your settings are saved.

9.

To save the settings to the running configuration, click the Save icon.

Configure green Ethernet interface settings

You can configure green Ethernet settings for individual interfaces.

To configure the green Ethernet interface settings:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

Information

Main User Manual89Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

The System Information page displays.

5.

Select System > Management > Green Ethernet > Green Ethernet Interface
Configuration.

The Green Ethernet Interface Configuration page displays.

6.

Select one or more interfaces by taking one of the following actions:

•

To configure a single interface, select the check box associated with the interface,
or type the interface number in the Go To Interface field and click the Go button.

•

To configure multiple interfaces with the same settings, select the check box
associated with each interface.

•

To configure all interfaces with the same settings, select the check box in the
heading row.

7. From the Auto Power Down mode menu, select Enable or Disable.
By default, this mode is disabled for the interface. When a port link is down, the

underlying physical layer goes down for a short period and then checks for port link
pulses again so that auto-negotiation remains possible. In this way, the switch saves
power when no link partner is present for the port.

8. From the EEE mode menu, select Enable or Disable.
By default, this mode is disabled for an interface. When a port link is down, the

underlying physical layer goes down for a short period and then checks for port link
pulses again so that auto-negotiation remains possible. In this way, the switch saves
power when no link partner is present for the port.

9. Click the Apply button.
Your settings are saved.

10.

To save the settings to the running configuration, click the Save icon.

Configure and display detailed green Ethernet settings for an interface

You can select a single interface and configure and display detailed green Ethernet
settings.

To configure and display detailed green Ethernet settings for a single interface:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.

Information

Main User Manual90Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select System > Management > Green Ethernet > Green Ethernet Details.
The Green Ethernet Details page displays.

6.

From the Interface menu, select the interface.

7. From the Energy Detect Admin Mode menu, select to enable or disable this mode.
By default, this mode is disabled for the interface. When a port link is down, the

underlying physical layer goes down for a short period and then checks for port link
pulses again so that auto-negotiation remains possible. In this way, the switch saves
power when no link partner is present for the port.

8. From the EEE Admin Mode menu, select to enable or disable this mode.
With Energy Efficient Ethernet (EEE) mode enabled, the port transitions to low power

mode during a link idle condition. The default value is Disabled.

9.

In the EEE Transmit Idle Time field, enter the period that the interface must remain
idle (without receiving packets for transmission) before entering the low-power idle
(LPI) state.

The range is from 600 to 4294967295 seconds. The default is 600 seconds.

10.

In the EEE Transmit Wake Time field, enter the period that the interface must remain
in the LPI state before returning to the active state after it receives a packet for
transmission.

The range is from 8 to 65535 seconds. The default is 17 seconds.

11. Click the Apply button.
Your settings are saved.

12.

To save the settings to the running configuration, click the Save icon.

The following table describes the nonconfigurable fields.

Information

Main User Manual91Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 23. Green Ethernet local device information

DescriptionField

Cumulative Energy Saved on this
port due to Green mode(s) (Watts
* Hours)

Rx Low Power Idle Event Count

Rx Low Power Idle Duration (uSec)

Tx Low Power Idle Event Count

Tx Low Power Idle Duration (uSec)

Tw_sys_tx Echo (uSec)

Tw_sys_rx Echo (uSec)

The cumulative energy saved on the port because of the green modes
that are enabled on the port in watts * hours.

The operational state (Active or Inactive) of the Energy Detect mode.Energy Detect Operational Status

The reason for the operational state that is displayed in the previous field.Reason

The total number of times that the port entered the low-power idle (LPI)
state since the EEE counters were reset.

The total period (in 10 us increments) that the port remained in the LPI
state since the EEE counters were reset.

The total number of times that the link partner of the port entered the LPI
state since the EEE counters were reset.

The total period (in 10 us increments) that the link partner of the port
remained in the LPI state since the EEE counters were reset.

The value of ‘Tw_sys’ that the port can support.Tw_sys_tx (uSec)

The link partner’s ‘transmit Tw_sys’ that the port uses to compute the
‘Tw_sys’ that it requests from its link partner.

The value of ‘Tw_sys’ that the port requested from its link partner.Tw_sys_rx (uSec)

The link partner’s ‘receive Tw_sys’ that the port uses to compute the
‘Tw_sys’ that it can support.

Fallback Tw_sys (uSec)

Tx_dll_enabled

Tx_dll_ready

Information

The value of the ‘fallback Tw_sys’ that the port requested from its link
partner.

The initialization status of the transmit EEE transmit Data Link Layer (DLL)
function on the port.

The transmit DLL status, which indicates if the ‘tx system’ initialization is
complete and if port is ready to receive or update LLDPDUs that contain
EEE TLVs.

The status of the EEE capability negotiation on the port.Rx_dll_enabled

Main User Manual92Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 23. Green Ethernet local device information (Continued)

DescriptionField

Rx_dll_ready

The receive DLL status, which indicates if the ‘rx system’ initialization is
complete and if port is ready to receive or update LLDPDUs that contain
EEE TLVs.

The time since the counters were reset.Time Since Counters Last Cleared

Display green Ethernet information for the link partner of an interface

The switch can detect green Ethernet information for the link partner of an interface,
that is for the remote device.

To display the green Ethernet information for the link partner of an interface:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select System > Management > Green Ethernet > Green Ethernet Details.
The Green Ethernet Details page displays.

6.

Scroll down to the Remote Device Information section.

7.

From the Interface menu, select the interface.
The following table describes the nonconfigurable fields.

Information

Main User Manual93Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 24. Green Ethernet remote device information

DescriptionField

The identifier that is assigned to the link partner of the port.Remote ID

The value of ‘Tw_sys’ that the link partner can support.Remote Tw_sys_tx (uSec)

The value of ‘transmit Tw_sys’ that the link partner returns to the port.Remote Tw_sys_tx Echo (uSec)

The value of ‘Tw_sys’ that the link partner requests from the port.Remote Tw_sys_rx (uSec)

The value of ‘receive Tw_sys’ that the link partner returns to the port.Remote Tw_sys_rx Echo (uSec)

The value of ‘fallback Tw_sys’ that the link partner returns to the port.Remote Fallback Tw_sys (uSec)

Display the green Ethernet statistics summary

The green Ethernet statistics summary displays information about both the switch and
the interfaces.

To display the green Ethernet statistics summary:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select System > Management > Green Ethernet > Green Ethernet Summary.
The Green Ethernet Summary page displays.

6.

To refresh the page, click the Refresh button.
The following table describes the nonconfigurable fields in the Green Ethernet

Statistics Summary section.

Main User Manual94Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 25. Green Ethernet statistics summary information

DescriptionField

The power consumption by all ports on the switch in mWatts (mW).Current Power Consumption (mW)

Percentage Power Saving (%)

Cumulative Energy Saving (W*H)

The percentage of power saved on all ports on the switch when green

Ethernet mode is enabled.

The cumulative energy saved on the switch in (watts * hour) when all

green features are enabled.

The following table describes the nonconfigurable fields in the Green Ethernet
Feature Summary section.

Table 26. Green Ethernet feature summary information

DescriptionField

The unit is always 1.Unit

Green Features supported on this

unit

The green features that are supported on the switch:

Energy-Detect

•

EEE (Energy Efficient Ethernet)

•

LPI-History (EEE low power idle history)

•

LLDP-Cap-Exchg (EEE LLDP capability exchange)

•

Pwr-Usg-Est (Power usage estimates).

•

The following table describes the nonconfigurable fields in the Green Ethernet
Interface Summary section.

Main User Manual95Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

Table 27. Green Ethernet interface summary information

DescriptionField

The interface for which information is displayed.Interface

Energy Detect Admin Mode

EEE Admin mode

Indicates the status of the mode (Enable or Disable).

If the mode is enabled and a port link is down, the underlying physical

layer goes down for a short period and then checks for port link pulses

again so that auto-negotiation remains possible. In this way, the switch

saves power when no link partner is present for the port.

The operational state (Active or Inactive) of the Energy Detect mode.Energy Detect Operational Status

Indicates the status of the mode (Enable or Disable).

If this mode is enabled, the port transitions to low power mode during

a link idle condition.

Configure and display the green Ethernet EEE LPI history for an interface

You can configure and display the green Ethernet EEE low-power idle (LPI) history for
an interface.

To configure and display the green Ethernet EEE LPI history for an interface:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select System > Management > Green Ethernet > Green Ethernet LPI History.
The Green Ethernet LPI History page displays.

6.

From the Interface menu, select the interface.

Main User Manual96Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

7.

In the Sampling Interval field, enter the interval at which EEE LPI data is collected.
The range is from 30 to 36000 seconds.The default is 3600 seconds.

8.

In the Max Samples To Keep field, enter the maximum number of samples to keep.
The range is from 1 to 168.The default is 168.

The Percentage LPI time field displays the time that the interface was in LPI mode
since the EEE counters were reset.

9. Click the Apply button.
Your settings are saved.

10.

To save the settings to the running configuration, click the Save icon.

11.

To refresh the page, click the Refresh button.
The following table describes the nonconfigurable fields.

Table 28. Interface green mode EEE LPI history information

DescriptionField

The sample index.Sample No.

The period that past since the sample was recorded.Time Since The Sample Was

Recorded

Percentage Time spent in LPI

mode since last sample

Percentage Time spent in LPI

mode since last reset

The percentage of time that the interface was in LPI mode since the last

sample was recorded.

The percentage of time that the interface was in LPI mode since the EEE

counters were reset.

Bonjour settings

A Mac that supports Bonjour can discover the switch in the network so that you can find
the switch IP address and log in to the main UI of the switch. Bonjour is enabled by
default. You can disable Bonjour for security reasons.

Information

Main User Manual97Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

Enable or disable Bonjour

To enable or diable Bonjour:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Management > Bonjour > Bonjour Configuration.
The Bonjour Configuration page displays.

6.

Select one of the following radio buttons:

•

Enable. Bonjour is enabled. This is the default setting.

• Disable. Bonjour is disabled.

7. Click the Apply button.
Your settings are saved.

8.

To save the settings to the running configuration, click the Save icon.

Display Bonjour information

To display Bonjour information:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

4. Enter admin as the user name, enter your local device password, and click the Login
button.

Main User Manual98Configure Switch System

Information

AV Line of Fully Managed Switches M4250 Series Main User Manual

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5. Select System > Management > Bonjour > Bonjour Details.
The Bonjour Details page displays.

The Bonjour Administration Mode field displays whether Bonjour is enabled or
disabled.

6.

To refresh the page, click the Refresh button.
The following table describes the nonconfigurable fields on the page.

Table 29. Bonjour Published Services

DescriptionField

The Bonjour service names in the switch.Service Name

The Bonjour service type names in the switch.Type

The Bonjour service domain in the switch.Domain

The Bonjour service port number.Port

The Bonjour service text.TXT Data

IPv4 DHCP server

You can configure settings for an IPv4 DHCP server, DHCP pools, and DHCP bindings.
You can also view DHCP statistics and, if they occur, DHCP conflicts.

Configure a DHCP server

To configure a DHCP server:

1. Launch a web browser.

2.

In the address field of your web browser, enter the IP address of the switch.
The login page displays.

3. Click the Main UI Login button.
The main UI login page displays in a new tab.

Information

Main User Manual99Configure Switch System

AV Line of Fully Managed Switches M4250 Series Main User Manual

4. Enter admin as the user name, enter your local device password, and click the Login
button.

The first time that you log in, no password is required. However, you then must
specify a local device password to use each subsequent time that you log in.

The System Information page displays.

5.

Select System > Services > DHCP Server > DHCP Server Configuration.
The DHCP Server Configuration page displays.

6. Select the Admin Mode Disable or Enable radio button.
This setting specifies whether the DHCP service is enabled or disabled.

The default is Disable.

7.

In the Ping Packet Count field, specify the number of packets a server sends to a
pool address to check for duplication as part of a ping operation.

The value can be 0 or from 2 to 10. Setting the value to 0 disables the function. The
default is 2.

8.

Select the Conflict Logging Mode Disable or Enable radio button.
This setting specifies whether conflict logging on a DHCP server is enabled or

disabled. The default is Enable.

9. Select the BootP Automatic Mode Disable or Enable radio button.
This setting specifies whether BootP for dynamic pools is enabled or disabled. The

default value is Disable.

10.

To exclude addresses, do the following:
a.

In the IP Range From field, enter the lowest address in the range or a single
address to be excluded.

b.

In the IP Range To field, to exclude a range, enter the highest address in the
range. To exclude a single address, enter the same IP address as specified in the
IP Range From field, or leave it as 0.0.0.0.

c. Click the Add button.

The addresses that must be excluded are added to the switch.

11. Click the Apply button.
Your settings are saved.

12.

To save the settings to the running configuration, click the Save icon.

Information

Main User Manual100Configure Switch System