NETGEAR MS510TXM, MS510TXUP User Manual
User Manual
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch with 2 SFP+ Ports
MS510TXM
MS510TXUP
January 2021
202-12154-02
NETGEAR, Inc.
350 East Plumeria Drive
San Jose, CA 95134, USA
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Support and Community
Visit netgear.com/support to get your questions answered and access the latest downloads.
You can also check out our NETGEAR Community for helpful advice at
community.netgear.com.
Regulatory and Legal
Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à
https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at
https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit
https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR's Privacy Policy, visit
By using this device, you are agreeing to NETGEAR's Terms and Conditions at
https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of
purchase within your return period.
Do not use this device outdoors. The PoE source is intended for intra building connection only.
https://www.netgear.com/about/privacy-policy.
Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR
trademarks are used for reference purposes only.
Revision History
Publication
Part Number
202-12154-02 January 2021 We made minor corrections.
202-12154-01 January 2021 First publication.
Publish Date Comments
User Manual2
Contents
Chapter 1 Get Started
Available publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Switch management options and default management mode . . . . . . . . .14
About managing the switch with the device UI . . . . . . . . . . . . . . . . . . . . . . . 15
Software requirements for the device UI . . . . . . . . . . . . . . . . . . . . . . . . . .15
Supported web browsers for the device UI . . . . . . . . . . . . . . . . . . . . . . .15
Navigation tabs, configuration menus, and page menu. . . . . . . . . . . . .16
Configuration and status options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
Buttons in the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
User-defined fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Context-sensitive help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
About on-network and off-network access. . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Access the switch on-network and connected to the Internet . . . . . . . . . . 19
Use a Windows-based computer to access the switch on-network . . .20
Use the NETGEAR Insight mobile app to only discover the
IP address of the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Use the NETGEAR Switch Discovery Tool to discover the
IP address of the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Discover the switch in a network with a DHCP server using
the Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
Discover the switch in a network without a DHCP server
using the Smart Control Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
Use other options to discover the switch IP address. . . . . . . . . . . . . . . .27
Access the switch on-network when you know the switch IP address .27
Access the switch off-network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Credentials for the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Register the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Register the switch with your NETGEAR account and
access the switch online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Register the switch with your NETGEAR account and get
a registration key for offline access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Access the switch offline with a registration key. . . . . . . . . . . . . . . . . . . .33
Change the language of the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Change the management mode of the switch . . . . . . . . . . . . . . . . . . . . . . . 37
About changing the management mode . . . . . . . . . . . . . . . . . . . . . . . . .37
Change the management mode to NETGEAR Insight
Mobile App and Insight Cloud Portal. . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Change the management mode back to Directly Connect
to Web Browser Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
Use the Device View of the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42
Configure interface settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
3
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Access the NETGEAR support website. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Access the user manual online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Chapter 2 Configure System Information
Switch system information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52
View or define system information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52
View the temperature and fan status . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53
View the software versions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54
View the system CPU status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
Configure the CPU thresholds. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56
Management access IP network and VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Configure the IPv4 network and VLAN settings for the
device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57
Configure the IPv6 network settings for the device UI . . . . . . . . . . . . . .59
View the IPv6 network neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
Time and SNTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Configure the time settings manually . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
Configure the time settings with SNTP and configure the
global SNTP settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
View the SNTP global status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
Configure an SNTP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68
Configure daylight saving time settings . . . . . . . . . . . . . . . . . . . . . . . . . .73
View the daylight saving time status . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75
Denial of service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Configure Auto-DoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76
Configure denial of service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77
Domain Name System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Configure the global DNS settings and add a DNS server. . . . . . . . . . .79
Remove a DNS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .81
Configure and view host name-to-IP address information. . . . . . . . . . .82
Green Ethernet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .85
Configure the global green Ethernet settings . . . . . . . . . . . . . . . . . . . . .85
Configure green Ethernet interface settings. . . . . . . . . . . . . . . . . . . . . . .86
Manage switch discovery with UPnP and SSDP. . . . . . . . . . . . . . . . . . . . . . . 87
Power over Ethernet (model MS510TXUP). . . . . . . . . . . . . . . . . . . . . . . . . . . 88
PoE concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88
Device class power requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88
Power allocation and power budget concepts. . . . . . . . . . . . . . . . . . . . .89
Configure the global PoE settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .91
Manage the uninterrupted PoE feature . . . . . . . . . . . . . . . . . . . . . . . . . . .92
Configure the PoE port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93
PoE timer schedules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Create a PoE timer schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97
Specify the settings for an absolute PoE timer schedule . . . . . . . . . . . .98
Specify the settings for a recurring PoE timer schedule . . . . . . . . . . . . .99
Change the settings for a recurring PoE timer schedule entry . . . . . 101
Delete a PoE timer schedule entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
User Manual4
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Delete a PoE timer schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
SNMPv1, SNMPv2, and SNMPv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104
Configure the SNMPv1 and SNMPv2 community . . . . . . . . . . . . . . . . 104
Configure SNMPv1 and SNMPv2 trap settings. . . . . . . . . . . . . . . . . . . 107
Configure SNMPv1 and SNMPv2 trap flags . . . . . . . . . . . . . . . . . . . . . 109
View the supported MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Configure SNMPv3 users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Link Layer Discovery Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113
Configure LLDP global settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Configure LLDP port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
View the LLDP-MED network policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Configure the LLDP-MED port settings . . . . . . . . . . . . . . . . . . . . . . . . . 117
View the local information advertised through LLDP . . . . . . . . . . . . . 118
View the LLDP neighbors information . . . . . . . . . . . . . . . . . . . . . . . . . . 121
DHCP Layer 2 relay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124
Enable the DHCP L2 relay for the switch . . . . . . . . . . . . . . . . . . . . . . . . 125
Enable the DHCP L2 relay for a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Configure an interface as a DHCP L2 relay . . . . . . . . . . . . . . . . . . . . . . 126
Display the DHCP L2 relay interface statistics. . . . . . . . . . . . . . . . . . . . 128
DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129
Enable DHCP snooping for the switch. . . . . . . . . . . . . . . . . . . . . . . . . . 129
Enable DHCP snooping for a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
Configure DHCP snooping interface settings. . . . . . . . . . . . . . . . . . . . 131
Add a static DHCP binding and display dynamic DHCP bindings . . 133
Remove a static DHCP binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Configure DHCP snooping persistent settings. . . . . . . . . . . . . . . . . . . 135
View or clear DHCP snooping statistics . . . . . . . . . . . . . . . . . . . . . . . . . 136
Dynamic ARP inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137
Configure the global DAI settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
Configure DAI VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
Configure DAI interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
Create a DAI access control list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
Configure a rule for an existing DAI ACL. . . . . . . . . . . . . . . . . . . . . . . . 142
Delete a rule from an existing DAI ACL . . . . . . . . . . . . . . . . . . . . . . . . . 143
Delete a DAI access control list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
Display the DAI statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
Chapter 3 Configure Switching
Port settings and maximum frame size. . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
Link aggregation groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .150
Configure LAG settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
Configure LAG membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152
Set the LACP system priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
Set the LACP port priority settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .156
Configure VLAN settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
Configure VLAN membership. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
View the VLAN status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162
User Manual5
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Configure the PVID settings for an interface. . . . . . . . . . . . . . . . . . . . . 163
Configure a MAC-based VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
Configure protocol-based VLAN groups. . . . . . . . . . . . . . . . . . . . . . . . 167
Configure protocol-based VLAN group membership . . . . . . . . . . . . 169
Configure a voice VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
Configure the GARP switch settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . 172
Configure GARP ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173
Auto-VoIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .175
Configure the Auto-VoIP protocol-based settings . . . . . . . . . . . . . . . . 175
Configure the Auto-VoIP OUI-based properties . . . . . . . . . . . . . . . . . 176
Configure the VoIP OUI-based port settings . . . . . . . . . . . . . . . . . . . . 177
Manage the VoIP OUI table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178
Display the Auto-VoIP status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180
Auto-VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181
Configure the Auto-VLAN properties. . . . . . . . . . . . . . . . . . . . . . . . . . . 181
Configure the Auto-VLAN port settings. . . . . . . . . . . . . . . . . . . . . . . . . 183
Manage the OUI table for Auto-WiFi and Auto-Camera VLANs . . . . 184
Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .186
Configure the STP settings and view the STP status . . . . . . . . . . . . . . 187
Configure the CST settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
Configure the CST port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190
View the CST port status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192
View the Rapid STP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
Manage the MST settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Configure and view the port settings for an MST instance. . . . . . . . . 198
Display the STP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201
Multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .202
View, search, or clear the MFDB table . . . . . . . . . . . . . . . . . . . . . . . . . . 202
Display the MFDB statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203
Configure the auto-video multicast settings. . . . . . . . . . . . . . . . . . . . . 204
IGMP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .205
Configure IGMP snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206
Configure IGMP snooping for interfaces. . . . . . . . . . . . . . . . . . . . . . . . 207
View, search, or clear the IGMP snooping table. . . . . . . . . . . . . . . . . . 209
Configure IGMP snooping for VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . 210
Disable IGMP snooping on a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212
Configure one or more IGMP multicast router interfaces. . . . . . . . . . 212
Configure an IGMP multicast router VLAN . . . . . . . . . . . . . . . . . . . . . . 214
IGMP snooping querier overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215
Configure an IGMP snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . 215
Configure an IGMP snooping querier for a VLAN . . . . . . . . . . . . . . . . 216
Remove the IGMP snooping querier from a VLAN . . . . . . . . . . . . . . . 217
Display the status of the IGMP snooping querier VLANs . . . . . . . . . . 218
MLD snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .219
Enable MLD snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
Configure MLD snooping for interfaces . . . . . . . . . . . . . . . . . . . . . . . . 221
Configure the MLD VLAN settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223
Modify the MLD snooping settings for a VLAN . . . . . . . . . . . . . . . . . . 224
User Manual6
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Remove MLD snooping from a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . 225
Configure one or more MLD multicast router interfaces . . . . . . . . . . 225
Configure an MLD multicast router VLAN . . . . . . . . . . . . . . . . . . . . . . . 226
Configure an MLD snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . . 227
Configure the MLD snooping querier VLAN settings . . . . . . . . . . . . . 228
Multicast VLAN registration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .230
Configure the global MVR settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231
Configure an MVR group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
Remove an MVR group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233
Configure an MVR interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234
Configure the interface members of an MVR group . . . . . . . . . . . . . . 235
Display the MVR statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236
MAC address table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .237
View, search, or clear the MAC address table. . . . . . . . . . . . . . . . . . . . 238
Set the dynamic address aging interval. . . . . . . . . . . . . . . . . . . . . . . . . 239
Add a static MAC address to the MAC address table . . . . . . . . . . . . . 240
Remove a static MAC address from the MAC address table . . . . . . . 241
Layer 2 loop protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .242
Configure global Layer 2 loop protection. . . . . . . . . . . . . . . . . . . . . . . 242
Configure the loop protection settings for ports and
display the loop protection state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244
Chapter 4 Configure Routing
Routing concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
IPv4 routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .247
Manage the IPv4 routing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
View the IPv4 routing statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 248
IPv6 routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .251
Manage the IPv6 routing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251
Display the IPv6 route table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252
Configure the IPv6 VLAN interface settings . . . . . . . . . . . . . . . . . . . . . 253
Configure prefix settings for an IPv6 routing VLAN . . . . . . . . . . . . . . . 256
Delete a prefix setting from an IPv6 routing VLAN . . . . . . . . . . . . . . . 257
Display the IPv6 and ICMPv6 statistics for an IPv6 routing VLAN . . . 258
Display the IPv6 neighbor table or clear IPv6 neighbor entries . . . . 263
Configure an IPv6 static route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 264
Delete an IPv6 static route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266
Configure the IPv6 route preference for the switch. . . . . . . . . . . . . . . 267
VLAN routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .268
Create a routing interface with the VLAN Static Routing Wizard. . . . 268
Manage a VLAN routing interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270
Remove the routing function from a VLAN . . . . . . . . . . . . . . . . . . . . . . 271
Router discovery for a VLAN routing interface. . . . . . . . . . . . . . . . . . . . . . .272
Routes and the routing table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .274
Manually add a route and display the routing table . . . . . . . . . . . . . . 274
Modify a route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276
Delete a route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277
Address Resolution Protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .278
User Manual7
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Display the ARP cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278
Add or change a static entry in the ARP table . . . . . . . . . . . . . . . . . . . 280
Delete a static ARP entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281
Configure the ARP table settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282
Remove ARP entries from the ARP cache . . . . . . . . . . . . . . . . . . . . . . . 283
Chapter 5 Configure Quality of Service
Quality of Service concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286
Class of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .286
CoS configuration concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286
Configure the global CoS settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
Configure the CoS settings for an interface . . . . . . . . . . . . . . . . . . . . . 288
Configure the CoS queue settings for an interface . . . . . . . . . . . . . . . 290
Map 802.1p priorities to queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291
Map DSCP values to queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293
Differentiated Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .294
Defining DiffServ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294
Configure the DiffServ mode and display the entries in the
DiffServ private MIB tables. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295
Configure a DiffServ class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296
Configure IPv6 DiffServ class settings . . . . . . . . . . . . . . . . . . . . . . . . . . 302
Configure a DiffServ policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307
Configure the DiffServ service interface . . . . . . . . . . . . . . . . . . . . . . . . 313
Display DiffServ service statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317
Chapter 6 Manage Device Security
Device admin password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 320
RADIUS servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .321
Configure the global RADIUS server settings. . . . . . . . . . . . . . . . . . . . 321
Configure a RADIUS authentication server on the switch. . . . . . . . . . 323
Configure a RADIUS accounting server. . . . . . . . . . . . . . . . . . . . . . . . . 327
TACACS+ servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .330
Configure the global TACACS+ settings . . . . . . . . . . . . . . . . . . . . . . . . 330
Add a TACACS+ server to the switch. . . . . . . . . . . . . . . . . . . . . . . . . . . 331
Modify the settings for a TACACS+ server on the switch . . . . . . . . . . 332
Remove a TACACS+ server from the switch . . . . . . . . . . . . . . . . . . . . . 333
Authentication lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .334
Configure an HTTP authentication list . . . . . . . . . . . . . . . . . . . . . . . . . . 334
Configure an HTTPS authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 336
Configure the dot1x authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 337
Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .338
HTTP and HTPPS management access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339
Configure HTTP access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339
Configure HTTPS access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 341
Browser security message with HTTPS access . . . . . . . . . . . . . . . . . . . 342
Manage certificates for HTTPS access . . . . . . . . . . . . . . . . . . . . . . . . . . 343
Management access profiles and rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . .346
User Manual8
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Add an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347
Add a rule to the access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348
Activate the access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349
Display the access profile summary and the number of
filtered packets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 350
Deactivate an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351
Remove an access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 352
Port authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .353
Configure the global 802.1X settings . . . . . . . . . . . . . . . . . . . . . . . . . . 353
Manage port authentication on individual ports . . . . . . . . . . . . . . . . . 355
Display the port summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359
Display the client summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 361
MAC filters for traffic control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .362
Create a MAC filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362
Delete a MAC filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364
Display the MAC filter summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365
Storm control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .366
Configure global storm control settings . . . . . . . . . . . . . . . . . . . . . . . . 366
Configure storm control settings for one or more ports. . . . . . . . . . . 367
Port security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .369
Configure the global port security mode . . . . . . . . . . . . . . . . . . . . . . . 369
Configure a port security interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 370
Display learned security MAC addresses and convert them
to static MAC addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372
Protected ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .373
Private VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .374
Configure a private VLAN type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375
Configure a private VLAN association with a primary and
secondary VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376
Remove an existing private VLAN association . . . . . . . . . . . . . . . . . . . 377
Configure the private VLAN port mode. . . . . . . . . . . . . . . . . . . . . . . . . 378
Configure primary and secondary VLANs on a private
VLAN host interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 379
Remove primary and secondary VLANs from a private
VLAN host interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381
Configure primary and secondary VLANs on a private
VLAN promiscuous interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 382
Remove primary and secondary VLANs from a private
VLAN promiscuous interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 383
Access control lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .384
Use the ACL Wizard to create a simple ACL . . . . . . . . . . . . . . . . . . . . . 385
Configure a MAC ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 391
Configure MAC ACL rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 393
Configure MAC bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 397
Display or delete MAC ACL bindings in the MAC binding table . . . 399
Configure a basic or extended IPv4 ACL. . . . . . . . . . . . . . . . . . . . . . . . 400
Configure rules for a basic IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . 404
Configure rules for an extended IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . 408
Configure an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415
User Manual9
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Configure rules for an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418
Configure IP ACL interface bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . 424
Display or delete IP ACL bindings in the IP ACL binding table . . . . . 426
Configure VLAN ACL bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 428
Chapter 7 Monitor the Switch and the Traffic
Monitor the switch and the ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 431
Display or clear switch statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 431
Display port statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433
Display and manage detailed port statistics. . . . . . . . . . . . . . . . . . . . . 436
Display or clear EAP and EAPoL statistics . . . . . . . . . . . . . . . . . . . . . . . 442
Perform a cable test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 443
Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .445
Manage and display the memory log . . . . . . . . . . . . . . . . . . . . . . . . . . 445
Manage and display the flash log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 447
Manage the server log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 449
Display or clear the trap logs and the counters . . . . . . . . . . . . . . . . . . 452
Port mirroring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .453
Chapter 8 Maintain or Troubleshoot the Switch
Reboot from the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457
Reset to factory default settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .458
Reset the switch to factory default settings but maintain the
registration status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458
Reset the switch to factory default settings and reset the
registration status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459
Export a file from the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 461
Use TFTP to export a file from the switch to a TFTP server. . . . . . . . . 461
Use HTTP to export a file from the switch to a computer . . . . . . . . . . 462
Update software or download a file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .463
Use TFTP to download a file to the switch or update the
software image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464
Use HTTP to download a file to the switch or update the
software image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466
Use an HTTP session to download and install an SSL
security certificate file on the switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . 468
Manage software images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .469
Copy a software image. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470
Configure dual image settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471
View the dual image status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 473
Diagnostics and troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .474
Ping an IPv4 address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474
Ping an IPv6 address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475
Send an IPv4 traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477
Send an IPv6 traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479
Enable remote diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480
User Manual10
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Appendix A Configuration Examples
Virtual Local Area Networks (VLANs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483
VLAN configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 484
Access control lists (ACLs). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .485
MAC ACL example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 485
Basic IPv4 ACL example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . 486
Differentiated Services (DiffServ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .487
Class. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 488
DiffServ traffic classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489
Create policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489
DiffServ example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 490
802.1X access control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .491
802.1X example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 493
Multiple Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .494
MSTP example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496
VLAN routing interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .497
Appendix B Specifications and Default Settings
Switch default settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 500
General feature default settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .502
System setup and maintenance settings . . . . . . . . . . . . . . . . . . . . . . . . . . .509
Port characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .509
Traffic control settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .510
Quality of Service settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .510
Security settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .511
System management settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .511
Settings for other features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .512
Hardware technical specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .512
Model MS510TXM hardware technical specifications. . . . . . . . . . . . . 513
Model MS510TXUP hardware technical specifications. . . . . . . . . . . . 514
User Manual11
1
1Get Started
This user manual describes how you can use the device user interface (UI) to configure and
operate the following switches:
• MS510TXM: NETGEAR 8-Port Multi-Gigabit/10G Ethernet Smart Managed Pro Switch
with 2 SFP+ Ports
This high-speed model provides four 100M/1000M/2.5G ports, four
100M/1000M/2.5G/5G/10G ports, and two dedicated 1G/10G SFP+ fiber uplink ports.
• MS510TXUP: NETGEAR 8-Port Multi-Gigabit/10G Ethernet Ultra60 PoE++ Smart
Managed Pro Switch with 2 SFP+ Ports
This high-speed PoE++ (802.3bt) model provides four 100M/1000M/2.5G Ultra60 PoE++
ports, four 100M/1000M/2.5G/5G/10G Ultra60 PoE++ ports, and two dedicated 1G/10G
SFP+ fiber uplink ports.
Each PoE++ port can deliver up to 60W, while the maximum PoE power budget across
all active PoE++ ports is 295W.
The manual describes the software configuration procedures and explains the options that are
available within those procedures.
This chapter contains the following sections:
• Available publications
• Switch management options and default management mode
• About managing the switch with the device UI
• About on-network and off-network access
• Access the switch on-network and connected to the Internet
• Access the switch off-network
• Credentials for the device UI
• Register the switch
• Change the language of the device UI
• Change the management mode of the switch
• Use the Device View of the device UI
12
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
• Configure interface settings
• Access the NETGEAR support website
• Access the user manual online
Note: For more information about the topics covered in this manual, visit the
support website at netgear.com/support.
Note: Firmware updates with new features and bug fixes are made available
from time to time at
products can regularly check the site and download new firmware, or
you can check for and download new firmware manually. If the
features or behavior of your product does not match what is described
in this guide, you might need to update your firmware.
netgear.com/support/download/. Some
Available publications
The following information is available at netgear.com/support/download/:
• Installation Guide
• Hardware Installation Guide
• Product Data Sheet
For information about the NETGEAR Insight app and Insight Cloud portal, visit
netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base
articles about NETGEAR Insight, visit netgear.com/support.
Get Started User Manual13
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Switch management options and default management mode
If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up
a custom configuration. Just connect power, connect to your network and to your other
devices, and you’re done.
The switch provides administrative management options that let you configure, monitor, and
control the network. The device UI is enabled by default, allowing you to configure the switch
and the network from a web browser. You can also choose to manage the switch by using the
NETGEAR Insight app on a smartphone or tablet. Or, if you are an Insight Premium or Pro
subscriber, you can choose to manage the switch from the Insight Cloud portal that is
available from a web browser on your Windows-based computer, Mac, or tablet.
The switch provides the following management options that let you discover the switch on the
network and configure, monitor, and control the switch:
• Device UI: By default, the management mode of the switch is set to Directly Connect to
Web Browser Interface, which lets you access the device UI. In this mode, you can
change all settings of the switch.
• NETGEAR Insight app and Insight Cloud portal: If you set the management mode of
the switch to NETGEAR Insight Mobile App and Insight Cloud Portal, you can use the
following applications to manage the switch remotely:
- NETGEAR Insight app. With the NETGEAR Insight app, you can discover the switch
on the network and add the switch to the NETGEAR Insight app so that you can set
up the switch in the network and manage and monitor the switch remotely from your
smartphone or tablet. You can choose from four methods to add the switch to the
NETGEAR Insight app: You can scan your network for the switch, scan the QR code
or the barcode of the switch, or add the serial number of the switch.
- Insight Cloud portal: As an Insight Premium or Insight Pro subscriber, you can use
the NETGEAR Insight Cloud portal to set up the switch in the network, perform
advanced remote setup, configuration, and management, monitor the switch, analyze
the switch and network usage, and, if necessary, troubleshoot the switch and the
network. A free trial is available for new customers.
For more information about NETGEAR Insight, visit netgear.com/insight and
netgear.com/support/product/Insight.aspx. For knowledge base articles about
NETGEAR Insight, visit netgear.com/support.
To use the NETGEAR Insight app or Insight Cloud portal methods, you must change the
management method to NETGEAR Insight Mobile App and Insight Cloud Portal. After you do
so, you can also change the management method back to Directly Connect to Web Browser
Interface and use the device UI. For more information, see
of the switch on page 37.
Change the management mode
Get Started User Manual14
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
About managing the switch with the
device
UI
This manual describes how to use the device UI to manage and monitor the switch.
For information about using the NETGEAR Insight app and Insight Cloud portal to manage
the switch, visit
knowledge base articles about NETGEAR Insight, visit netgear.com/support.
Software requirements for the device UI
To access the switch by using a web browser, the browser must meet the following software
requirements:
• HTML version 4.0, or later
• HTTP version 1.1, or later
netgear.com/insight and netgear.com/support/product/Insight.aspx. For
Supported web browsers for the device UI
The following browsers were tested and support the device UI. Later browser versions might
function fine but were not tested.
The supported web browsers include the following:
• Mozilla Firefox version 67
• Chrome version 78
• Microsoft Edge
• Microsoft Internet Explorer (IE) version 11
• Safari on MAC OS X version 13.0.3
• Safari on Windows OS versions 5.1.7
Get Started User Manual15
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Navigation tabs, configuration menus, and page menu
The System Information page is the start page in the device UI. The following figure shows
the System Information page for model MS510TXUP.
Navigation tabs
Page menus
Configuration menus
Language menu
Configuration status
and options
Logout button
Buttons
Help page
Figure 1. Switch navigation tabs, configuration menus, and page menu
The navigation tabs along the top of the device UI give you quick access to the various switch
functions. The tabs are always available and remain constant, regardless of which feature
you configure.
When you select a tab, the features for that tab appear as menus
directly under the tabs. The
configuration menus in the blue bar change according to the navigation tab that is selected.
The configuration pages for each feature are available as submenu links in the page menu on
the left side of the page. Some items in the menu expand to reveal multiple submenu links, as
the following figure shows.
Get Started User Manual16
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Link
Submenu
links
Figure 2. Switch page menu link and submenu links
Configuration and status options
The area directly under the configuration menus and to the right of the links displays the
configuration information or status for the page you select. On pages that contain
configuration options, you might be able to enter information into fields, select options from
menus, select check boxes, and select radio buttons.
Each page contains access to the HTML-based help that explains the fields and
configuration options for the page.
Buttons in the device UI
Each page also contains command buttons. The following table shows the command buttons
that are used throughout the pages in the device UI:
Table 1. Command buttons in the device UI
Button Function
Add Clicking the Add button adds the new item configured in the heading row of a table.
Apply Clicking the Apply button
Cancel Clicking the Cancel button cancels the configuration on the page and resets the data on the
page to the previous values of the switch.
Clear Clicking the Clear button clears all the counters and resets the switch summary and detailed
statistics to default values.
Delete Clicking the Delete button removes the selected item.
Refresh Clicking the Refresh button refreshes the page with the latest information from the device.
to save your settings. Configuration changes take effect immediately.
Get Started User Manual17
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
User-defined fields
User-defined fields can contain 1 to 159 characters, unless otherwise noted on the
configuration web page. All characters can be used except for the ones stated in the following
table (unless specifically noted in a procedure for a feature).
Table 2. Invalid characters for user-defined fields
Invalid characters for user-defined fields
\ | / < > * ?
Context-sensitive help
When you log in to the switch, every page contains a link to the online help ( ) that contains
information to assist in configuring and managing the switch. The online help pages are
context sensitive. For example, if the IP Configuration page is open, the help topic for that
page displays if you click the link to the online help.
About on-network and off-network access
You can access the switch either on-network or off-network:
• On-network and connected to the Internet: When you use the device UI, for easiest
access, we recommend that you cable the switch to a network that is connected to the
Internet and that includes a router or DHCP server that assigns IP addresses, power on
switch, and then use a computer that is connected to the same network as the switch
the
to connect to the device UI. We refer to this setup as on-network or online.
For more information, see
on page 19).
• Off-network and not connected to the Internet:
connected directly only to the computer that you are using to configure it. That is, the
switch is not connected to the network and the Internet. We refer to this setup as
off-network or offline.
For more information, see
Note: We recommend that you register the switch to activate your warranty.
For more information, see Register the switch on page 31.
Access the switch on-network and connected to the Internet
You can also configure the switch
Access the switch off-network on page 28.
Get Started User Manual18
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Access the switch on-network and connected to the Internet
The DHCP client on the switch is enabled by default, allowing a DHCP server or router on the
network to assign an IP address to the switch.
If the switch is on-network, connected to a DHCP server, and connected to the Internet, you
can use a Windows-based computer to access the device UI. We also recommend that you
register the switch with NETGEAR to activate your warranty. For more information about
accessing the device UI, see
on-network on page 20.
If you use a Mac, or if you do not know the IP address of the switch, use one of the following
tools to discover the IP address of the switch on the network:
• NETGEAR Insight mobile app: You can install the NETGEAR Insight mobile app on an
iOS or Android mobile device and discover the IP address of the switch. See
NETGEAR Insight mobile app to only discover the IP address of the switch on page 21.
• NETGEAR Switch Discovery Tool (NSDT): If you use a Windows-based computer or
Mac, you can use the NSDT to discover the switch on your network. See
NETGEAR Switch Discovery Tool to discover the IP address of the switch on page 22.
• NETGEAR Smart Control Center (SCC): You can install the SCC on a Windows-based
computer. See one of the following sections:
Use a Windows-based computer to access the switch
Use the
Use the
• Discover the switch in a network with a DHCP server using the Smart Control
Center on page 24
• Discover the switch in a network without a DHCP server using the Smart Control
Center on page 25
• Other tools: You can also get the IP address of the switch from the DHCP server in the
network or use a third-party IP scanner utility. See
switch IP address on page 27.
When you know the IP address, you can configure the switch in the following ways:
• Device UI: For configuration of all switch features, access the switch over the device UI.
See
Access the switch on-network when you know the switch IP address on page 27.
• NETGEAR Smart Control Center (SCC): For configuration of a limited number of switch
features, use the SCC on a Windows-based computer. By default, you can use the SCC
utility to discover the IP address of the switch, but you cannot use the utility to perform
any actions on the switch. If you enable the configuration option of the SCC utility, you
can use it to configure the switch. See
For more information, see the SCC user manual, which you can download from
netgear.com/support/product/SCC.
• NETGEAR Insight app and Insight Cloud portal: You can change the management
mode of the switch so that you can use the NETGEAR Insight app and Insight Cloud
portal to manage the switch remotely. For more information, see
management mode of the switch on page 37.
Smart Control Center on page 338.
Use other options to discover the
Change the
Get Started User Manual19
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Use a Windows-based computer to access the switch on-network
To use a Windows-based computer to determine the switch IP address and access the
switch on-network:
1. Cable the switch to a network with a router or DHCP server that manages IP addresses.
2. Power on the switch.
The DHCP server assigns the switch an IP address.
3. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection.
4. Open Windows Explorer.
5. Click the Network link.
6. If prompted, enable the Network Discovery feature.
7. Under Network Infrastructure, locate the switch model number.
The model number is either MS510TXM or MS510TXUP.
8. Double-click either MS510TXM-XXXXXX or MS510TXUP-XXXXXX, in which XXXXXX
represents the last six digits of the switch MAC address.
The page that displays depends on whether your browser is connected to the Internet,
whether the switch is connected to the Internet, and whether you activated the warranty.
9. Enter your credentials, which depend on the page that displays:
• Register to activate your warranty page displays: If the switch is online and you
did not yet activate your warranty, the Register to activate your warranty page
displays.
- Register Your Device: To activate your warranty, click the Register Your Device
button, and follow the directions onscreen to register the switch with your
NETGEAR email address and password. After you activated your warranty, you
are no longer prompted to register the switch.
If you do not have a NETGEAR account, you can create one.
- Enter Registration Key: If you obtained a registration key, enter it. For more
information, see
registration key for offline access on page 32.
- Skip Registration & Access the UI: You do not need to register the switch to
activate your warranty, but if you do not activate your warranty within 30 days of
purchase, your warranty entitlement might be affected.
Register the switch with your NETGEAR account and get a
If you do not activate your warranty, the Register to activate your warranty page
continues to display when you log in.
Get Started User Manual20
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
• Device UI login page displays: If you previously registered the switch with
NETGEAR to activate your warranty, the Device UI login page displays. Enter one of
the following credentials:
- Device admin password: Enter the device admin password. The default device
admin password is password. The first time that you enter the default device
admin password, the Change Default Password page displays, requiring you to
customize the device admin password for greater security.
- Insight network password: If you previously logged in to the device UI, you
changed the management mode to NETGEAR Insight, and you added the switch
to an Insight network location, enter the Insight network password to access the
device UI. (In such a situation, the Insight network password replaces the switch
device admin password.)
For information about the credentials, see Credentials for the device UI on page 30.
10. Click the Go button.
11. If the Change Default Password page displays, specify and confirm a new device admin
password, click the Submit button, and log in again with your new password.
The System Information page displays. You can now configure the switch.
Use the NETGEAR Insight mobile app to only discover the IP address of the switch
If the switch is connected to a WiFi router or access point, and the switch is connected to the
Internet, the NETGEAR Insight mobile app lets you discover the IP address of the switch in
your network.
If you do not use the Netgear Insight app to claim the switch by adding it to an Insight network
location, the switch is not registered and your warranty is not activated.
Using the Netgear Insight app to discover the IP address of the switch is not the same as
managing the switch with the Insight app or the Insight Cloud Portal.
Note: The default management mode of the switch is the device UI. If you
want to use the Insight app or the Insight Cloud Portal to manage the
switch, you first must change the management mode (see
management mode to NETGEAR Insight Mobile App and Insight
Cloud Portal on page 38). After you do so, you can manage the switch
with Insight and add the switch to an Insight network location.
Change the
Get Started User Manual21
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
To use the NETGEAR Insight app to discover the IP address of the switch in your
network:
1. On your mobile device, go to the app store, search for NETGEAR Insight, and download
the latest version of the app.
2. Connect your mobile device to the WiFi network of the WiFi router or access point to which
the switch is connected.
3. Open
4. If
5. Enter
the NETGEAR Insight mobile app.
you did not set up a NETGEAR account, tap Create NETGEAR Account and follow the
onscreen instructions.
the email address and password for your account and tap LOG IN.
After you log in to your account, the IP address of the switch displays in the device list.
6. W
rite down the switch IP address.
You can use this IP address to access the switch directly from a web browser
information about how to access the device UI of the switch, see
on-network when you know the switch IP address on page 27.
Access the switch
. For
Use the NETGEAR Switch Discovery Tool to discover the IP address of the switch
For easiest access, we recommend that you cable the switch to a network with a router or
DHCP server that assigns IP addresses, power on the switch, and then use a computer that
is connected to the same network as the switch.
The NETGEAR Switch Discovery Tool (NSDT) lets you discover the switch in your network
and access the device UI of the switch from a Mac or a Windows-based computer
To install the NSDT, discover the switch in your network, and either
to activate your warranty or access the switch:
1. Download the NSDT by visiting
netgear.com/support/product/netgear-switch-discovery-tool.aspx.
register the switch
.
Depending on the computer that you are using, download either the Mac version or the
Windows version.
2. T
emporarily disable the firewall, Internet security, antivirus programs, or all of these on the
computer that you use to configure the switch.
Get Started User Manual22
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
3. Unzip the NSDT files, and click or double-click the .exe file (for example, NSDT-1.2.102.exe)
to install the program on your computer.
You might see the tool icon appear on your Mac dock or Windows desktop.
4. Reenable the security services on your computer.
5. Power on the switch.
The DHCP server assigns the switch an IP address.
6. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection. The computer and the switch must be on the
same Layer 2 network.
7. Open the Switch Discovery Tool.
To open the program, double-click the NETGEAR Switch Discovery Tool icon on your
dock on desktop.
The initial page displays a menu and a button.
8. From the Choose a connection menu, select the network for this switch.
9. Click the Start Searching button.
The NSDT displays the IP addresses of the switches that it discovers.
10. Save the switch IP address for later use.
11. To access the switch from the NSDT, do the following:
a. Click the ADMIN PAGE button next to your switch.
The page that displays depends on whether your network is connected to the Internet
and whether you activated the warranty.
b. Enter your credentials, which depend on the page that displays:
• Register to activate your warranty page displays: If the switch is online and
you did not yet activate your warranty, the Register to activate your warranty page
displays.
- Register Your Device: To activate your warranty, click the Register Your
Device button, and follow the directions onscreen to register the switch with
your NETGEAR email address and password. After you activate your
warranty, you are no longer prompted to register the switch.
If you do not have a NETGEAR account, you can create one.
- Enter Registration Key: If you obtained a registration key, enter it. For more
information, see
Register the switch with your NETGEAR account and get a
registration key for offline access on page 32.
- Skip Registration & Access the UI: You do not need to register the switch to
activate your warranty, but if you do not activate your warranty within 30 days
of purchase, your warranty entitlement might be affected.
If you do not activate your warranty, the Register to activate your warranty
page continues to display when you log in.
Get Started User Manual23
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
• Device UI login page displays: If you previously registered the switch with
NETGEAR to activate your warranty, the Device UI login page displays. Enter one
of the following credentials:
- Device admin password: Enter the device admin password. The default
device admin password is password. The first time that you enter the default
device admin password, the Change Default Password page displays,
requiring you to customize the device admin password.
- Insight network password: If you previously logged in to the device UI, you
changed the management mode to NETGEAR Insight, and you added the
switch to an Insight network location, enter the Insight network password to
access the device UI. (In such a situation, the Insight network password
replaces the switch device admin password.)
For information about the credentials, see Credentials for the device UI on page 30.
c. If you enter a password, click the Go button; If you enter a registration key, click the
Submit button.
d. If the Change Default Password page displays, specify and confirm a new device
admin password, click the Submit button, and log in again with your new password.
The System Information page displays. You can now configure the switch.
Discover the switch in a network with a DHCP server using the Smart Control Center
This section describes how to set up your switch in a network that includes a DHCP server.
The DHCP client on the switch is enabled by default. When you connect the switch to your
network, the DHCP server automatically assigns an IP address to the switch. Use the Smart
Control Center (SCC) to discover the IP address automatically assigned to the switch.
For information about the SCC, visit netgear.com/support/product/SCC.
To install the switch in a network with a DHCP server:
1. Connect the switch to a network with a DHCP server.
2. Power on the switch by connecting its power cord.
3. Install the SCC on your computer.
4. Start the SCC.
5. Click the Discover button for the SCC to discover all the devices in the subnet.
Get Started User Manual24
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
6. Write down the switch IP address assigned by the DHCP server.
For information about how to access the device UI of the switch, see
on-network when you know the switch IP address on page 27.
Access the switch
Discover the switch in a network without a DHCP server using the Smart Control Center
This section describes how to use the Smart Control Center (SCC) to set up your switch in a
network without a DHCP server. If your network does not include a DHCP service, you must
assign a static IP address to your switch.
If you prefer, you can assign the switch a static IP address even
a DHCP server.
As an offline option, if you connect your computer directly to the switch using an Ethernet
cable (that is, offline), you can also use the SCC to assign a static IP address to your switch.
After you do so, you can connect your switch to the network.
For information about the SCC, visit
To assign a static IP address:
1. Connect
Ethernet cable.
the switch to your existing network or directly to your computer using an
netgear.com/support/product/SCC.
if your network does include
Note: If you connect your computer directly to the switch using an Ethernet
cable, the IP address settings of your computer do not need to be in
the same IP subnet as the switch. The SCC can detect the IP address
settings of the switch even if they are in a different subnet.
2. Power
3. Install
Get Started User Manual25
on the switch by connecting its power cord.
the SCC on your computer.
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
4. Start the SCC.
5. Click
the Discover button for the SCC to find your switch.
The utility broadcasts Layer 2 discovery packets within the broadcast
the switch.
6. Select the switch, and then click the Configure Device button.
The page expands to display additional fields at the bottom.
7. Select
the Disabled radio button.
DHCP is disabled.
8. Enter
the static switch IP address, gateway IP address, and subnet mask that you want to
assign for the switch.
domain to discover
9. Type the device admin password to continue with the configuration change.
You must enter the device admin password each time that you use
switch settings. The default device admin password is password.
10. Click the Apply button.
Your settings are saved.
For information about how to access the device UI of the switch, see
on-network when you know the switch IP address on page 27.
Get Started User Manual26
the SCC to update the
Access the switch
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Use other options to discover the switch IP address
If the switch is on-network, you can use one of the following options to determine the switch
IP address:
• Access the DHCP server: You can access the DHCP server (or router that functions as
a DHCP server) in your network and view the IP address that is assigned to the switch.
For more information, see the documentation for your DHCP server (or router).
• Use an IP scanner utility: IP scanner utilities are available free of charge on the Internet.
An IP scanner utility lets you discover the IP address that is assigned to the switch.
For information about how to access the device UI of the switch, see Access the switch
on-network when you know the switch IP address on page 27.
Access the switch on-network when you know the switch IP address
If the switch is on-network and you know the switch IP address, you can access the device
UI.
For the following procedure, the network must provide Internet access.
To access the switch on-network when you know the switch IP address:
1. Launch a web browser.
2. In the address field of your web browser, enter the IP address of the switch.
The page that displays depends on whether your browser is connected to the Internet,
whether the switch is connected to the Internet, and whether you activated the warranty.
3. Enter your credentials, which depend on the page that displays:
• Register to activate your warranty page displays: If the switch is online and you
did not yet activate your warranty, the Register to activate your warranty page
displays.
- Register Your Device: To activate your warranty, click the Register Your Device
button, and follow the directions onscreen to register the switch with your
NETGEAR email address and password. After you activate your warranty, you are
no longer prompted to register the switch.
If you do not have a NETGEAR account, you can create one.
- Enter Registration Key: If you obtained a registration key, enter it. For more
information, see
registration key for offline access on page 32.
- Skip Registration & Access the UI: You do not need to register the switch to
activate your warranty, but if you do not activate your warranty within 30 days of
purchase, your warranty entitlement might be affected.
Register the switch with your NETGEAR account and get a
If you do not activate your warranty, the Register to activate your warranty page
continues to display when you log in.
Get Started User Manual27
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
• Device UI login page displays: If you previously registered the switch with
NETGEAR to activate your warranty, the Device UI login page displays. Enter one of
the following credentials:
- Device admin password: Enter the device admin password. The default device
admin password is password. The first time that you enter the default device
admin password, the Change Default Password page displays, requiring you to
customize the device admin password.
• Insight network password: If you previously logged in to the device UI, you
changed the management mode to NETGEAR Insight, and you added the switch to
an Insight network location, enter the Insight network password to access the
device UI. (In such a situation, the Insight network password replaces the switch
device admin password.)
For information about the credentials, see Credentials for the device UI on page 30.
4. If you enter a password, click the Go button; If you enter a registration key, click the Submit
button.
5. If the Change Default Password page displays, specify and confirm a new device admin
password, click the Submit button, and log in again with your new password.
The System Information page displays. You can now configure the switch.
Access the switch off-network
The default IP address of the switch is 192.168.0.239. The IP address of the computer that
you use to access the switch off-network must in the same subnet as the default IP address
of the switch.
To access the switch off-network and not connected to the Internet:
1. Change the IP settings of your computer to be in the same subnet as the IP settings of
the switch.
If the DHCP client of the switch is enabled and you remove the switch from the network
with the DHCP server, the IP address reverts to the default IP address of 192.168.0.239
with a subnet of 255.255.255.0. If you already disabled the DHCP client and assigned a
static IP address to the switch, change the IP settings of your computer to be in the same
subnet as the static IP address.
For more information about changing the IP settings on your computer, see one of the
following knowledge base articles at the NETGEAR website:
• Windows-based computer: See the following article:
https://kb.netgear.com/27476/How-to-set-a-static-IP-address-in-Windows
• Mac: See the following article:
https://kb.netgear.com/000037250/Setting-a-static-IP-address-on-your-network-a
dapter-in-Mac-OS-for-direct-access-to-an-access-point
Get Started User Manual28
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
(The Mac article is written for an access point but is also valid for a switch.)
2. Connect your computer to the switch using an Ethernet cable.
3. Power on the switch by connecting its power cord.
4. Launch a web browser.
5. Open a web browser, and enter http://192.168.0.239.
This is the default IP address of the switch. If you already disabled the DHCP client and
assigned a static IP address to the switch, enter the static IP address of the switch.
The Enter Registration Key page displays.
6. Do one of the following:
• Enter a registration key. If you obtained a registration key, do the following:
a. Type or paste the key.
For more information, see Register the switch with your NETGEAR account and
get a registration key for offline access on page 32.
b. Click the Submit button.
• Do not register at this time and access the device UI: Do the following:
a. Click the Skip Registration & Access the UI button.
The Device UI login page displays.
b. Enter one of the following credentials:
- Device admin password: Enter the device admin password. The default
device admin password is password. The first time that you enter the default
device admin password, the Change Default Password page displays,
requiring you to customize the device admin password.
- Insight network password: If you previously logged in to the device UI, you
changed the management mode to NETGEAR Insight, and you added the
switch to an Insight network location, enter the Insight network password to
access the device UI. (In such a situation, the Insight network password
replaces the switch device admin password.)
For information about the credentials, see Credentials for the device UI on
page 30.
7. If the Change Default Password page displays, specify and confirm a new device admin
password, click the Submit button, and log in again with your new password.
The System Information page displays. You can now configure the switch.
8. After you complete the configuration of the switch, reconfigure the computer that you used
for this process to its original TCP/IP settings.
You can now connect your switch to your network using an Ethernet cable.
Get Started User Manual29
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Credentials for the device UI
The information in this section applies to accessing the switch device UI in either
management mode. That is, it does not apply to accessing the NETGEAR Insight app and
Cloud portal.
To access the device UI, and depending on your situation, use one of the following
credentials:
• NETGEAR account credentials:
You can register the switch online to activate your warranty by entering your NETGEAR
account credentials (see
the switch online on page 31). If you do not have a NETGEAR account, you can create
one.
Alternatively, you can obtain a registration key and enter the key when the switch is offline
so that you are no longer prompted to activate your warranty (see
with your NETGEAR account and get a registration key for offline access on page 32).
Register the switch with your NETGEAR account and access
Register the switch
• Device admin password:
You can access the device UI with your device admin password.
The first time that you access the device UI, enter the default device admin password
(password), after which you are required to customize the password for greater security.
Subsequent times that you log in to the device UI, use your customized device admin
password.
• NETGEAR Insight network location password:
NETGEAR Insight can affect how you access the switch device UI. After you add the
switch to an Insight network location and change the management mode of the switch so
that you can use the NETGEAR Insight app and Insight Cloud portal to manage the
switch remotely (see
Insight network location password replaces the switch device admin password. To
access the device UI, you must enter the Insight network location password.
For information about how the Insight network password functions, visit
netgear.com/support/product/Insight.aspx. For knowledge base articles about
NETGEAR Insight, visit netgear.com/support.
Change the management mode of the switch on page 37), the
Get Started User Manual30
Loading...