Netgear MS510TXM User Manual

User Manual
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch with 2 SFP+ Por
MS510TXM MS510TXUP
ts
NETGEAR, Inc. May 2021 202-12154-03
350 East Plumeria Drive
San Jose, CA 95134, USA
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Support and Community
Visit netgear.com/support to get your questions answered and access the latest downloads.
You can also check out our NETGEAR Community for helpful advice at
community.netgear.com.
Regulatory and Legal
Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR's Privacy Policy, visit
By using this device, you are agreeing to NETGEAR's Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.
Do not use this device outdoors. The PoE source is intended for intra building connection only.
https://www.netgear.com/about/privacy-policy.
Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes only.
Revision History
Publication Part Number
202-12154-03 May 2021 We made minor changes to the following sections:
202-12154-02 January 2021 We made minor corrections.
202-12154-01 January 2021 First publication.
Publish Date Comments
Switch management options and default management mode
Credentials for the device UI.
Configure HTTP access settings
We made very minor changes to other sections as well. We removed the following section: Discover the switch in a network without a
DHCP server using the Smart Control Center.
User Manual2

Contents

Chapter 1 Get Started
Available publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Switch management options and default management mode . . . . . . . . .14
About managing the switch with the device UI . . . . . . . . . . . . . . . . . . . . . . . 15
Software requirements for the device UI . . . . . . . . . . . . . . . . . . . . . . . . . .15
Supported web browsers for the device UI . . . . . . . . . . . . . . . . . . . . . . .15
Navigation tabs, configuration menus, and page menu. . . . . . . . . . . . .16
Configuration and status options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
Buttons in the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
User-defined fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Context-sensitive help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
About on-network and off-network access. . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Access the switch on-network and connected to the Internet . . . . . . . . . . 19
Use a Windows-based computer to access the switch
on-network and connected to the Internet . . . . . . . . . . . . . . . . . . . . . . . .20
Use the NETGEAR Insight mobile app to only discover the
IP address of the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Use the NETGEAR Switch Discovery Tool to discover the
switch when it is connected to the Internet. . . . . . . . . . . . . . . . . . . . . . . .22
Discover the switch in a network with a DHCP server using
the Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
Use other options to discover the switch IP address. . . . . . . . . . . . . . . .25
Access the switch on-network and connected to the
Internet when you know the switch IP address. . . . . . . . . . . . . . . . . . . . .25
Access the switch off-network and not connected to the Internet . . . . . . . 27
Credentials for the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Register the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Register the switch with your NETGEAR account and
access the switch online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Register the switch with your NETGEAR account and get
a registration key for offline access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Access the switch offline with a registration key. . . . . . . . . . . . . . . . . . . .32
Change the language of the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Change the management mode of the switch . . . . . . . . . . . . . . . . . . . . . . . 35
About changing the management mode . . . . . . . . . . . . . . . . . . . . . . . . .35
Change the management mode to NETGEAR Insight
Mobile App and Insight Cloud Portal. . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
Change the management mode back to Directly Connect
to Web Browser Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Use the Device View of the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Configure interface settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
3
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Access the NETGEAR support website. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Access the user manual online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Chapter 2 Configure System Information
Switch system information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51
View or define system information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51
View the temperature and fan status . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52
View the software versions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53
View the system CPU status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54
Configure the CPU thresholds. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
Management access IP network and VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Configure the IPv4 network and VLAN settings for the
device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57
Configure the IPv6 network settings for the device UI . . . . . . . . . . . . . .58
View the IPv6 network neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Time and SNTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Configure the time settings manually . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
Configure the time settings with SNTP and configure the
global SNTP settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63
View the SNTP global status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66
Configure an SNTP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
Configure daylight saving time settings . . . . . . . . . . . . . . . . . . . . . . . . . .72
View the daylight saving time status . . . . . . . . . . . . . . . . . . . . . . . . . . . . .74
Denial of service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Configure Auto-DoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75
Configure denial of service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76
Domain Name System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79
Configure the global DNS settings and add a DNS server. . . . . . . . . . .79
Remove a DNS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80
Configure and view host name-to-IP address information. . . . . . . . . . .81
Green Ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Configure the global green Ethernet settings . . . . . . . . . . . . . . . . . . . . .84
Configure green Ethernet interface settings. . . . . . . . . . . . . . . . . . . . . . .85
Manage switch discovery with UPnP and SSDP. . . . . . . . . . . . . . . . . . . . . . . 86
Power over Ethernet (model MS510TXUP). . . . . . . . . . . . . . . . . . . . . . . . . . . 87
PoE concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .87
Device class power requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .87
Power allocation and power budget concepts. . . . . . . . . . . . . . . . . . . . .88
Configure the global PoE settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90
Manage the uninterrupted PoE feature . . . . . . . . . . . . . . . . . . . . . . . . . . .91
Configure the PoE port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92
PoE timer schedules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Create a PoE timer schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96
Specify the settings for an absolute PoE timer schedule . . . . . . . . . . . .97
Specify the settings for a recurring PoE timer schedule . . . . . . . . . . . . .99
Change the settings for a recurring PoE timer schedule entry . . . . . 101
Delete a PoE timer schedule entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
User Manual4
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Delete a PoE timer schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
SNMPv1, SNMPv2, and SNMPv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104
Configure the SNMPv1 and SNMPv2 community . . . . . . . . . . . . . . . . 104
Configure SNMPv1 and SNMPv2 trap settings. . . . . . . . . . . . . . . . . . . 107
Configure SNMPv1 and SNMPv2 trap flags . . . . . . . . . . . . . . . . . . . . . 109
View the supported MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Configure SNMPv3 users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Link Layer Discovery Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113
Configure LLDP global settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Configure LLDP port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
View the LLDP-MED network policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Configure the LLDP-MED port settings . . . . . . . . . . . . . . . . . . . . . . . . . 117
View the local information advertised through LLDP . . . . . . . . . . . . . 119
View the LLDP neighbors information . . . . . . . . . . . . . . . . . . . . . . . . . . 121
DHCP Layer 2 relay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124
Enable the DHCP L2 relay for the switch . . . . . . . . . . . . . . . . . . . . . . . . 125
Enable the DHCP L2 relay for a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . 126
Configure an interface as a DHCP L2 relay . . . . . . . . . . . . . . . . . . . . . . 127
Display the DHCP L2 relay interface statistics. . . . . . . . . . . . . . . . . . . . 128
DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129
Enable DHCP snooping for the switch. . . . . . . . . . . . . . . . . . . . . . . . . . 129
Enable DHCP snooping for a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
Configure DHCP snooping interface settings. . . . . . . . . . . . . . . . . . . . 131
Add a static DHCP binding and display dynamic DHCP bindings . . 133
Remove a static DHCP binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Configure DHCP snooping persistent settings. . . . . . . . . . . . . . . . . . . 135
View or clear DHCP snooping statistics . . . . . . . . . . . . . . . . . . . . . . . . . 136
Dynamic ARP inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137
Configure the global DAI settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
Configure DAI VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
Configure DAI interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
Create a DAI access control list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142
Configure a rule for an existing DAI ACL. . . . . . . . . . . . . . . . . . . . . . . . 143
Delete a rule from an existing DAI ACL . . . . . . . . . . . . . . . . . . . . . . . . . 144
Delete a DAI access control list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
Display the DAI statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
Chapter 3 Configure Switching
Port settings and maximum frame size. . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
Link aggregation groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .151
Configure LAG settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152
Configure LAG membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
Set the LACP system priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
Set the LACP port priority settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .157
Configure VLAN settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158
Configure VLAN membership. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
View the VLAN status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
User Manual5
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Configure the PVID settings for an interface. . . . . . . . . . . . . . . . . . . . . 164
Configure a MAC-based VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
Configure protocol-based VLAN groups. . . . . . . . . . . . . . . . . . . . . . . . 168
Configure protocol-based VLAN group membership . . . . . . . . . . . . 170
Configure a voice VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Configure the GARP switch settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . 173
Configure GARP ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174
Auto-VoIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .176
Configure the Auto-VoIP protocol-based settings . . . . . . . . . . . . . . . . 176
Configure the Auto-VoIP OUI-based properties . . . . . . . . . . . . . . . . . 178
Configure the VoIP OUI-based port settings . . . . . . . . . . . . . . . . . . . . 179
Manage the VoIP OUI table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180
Display the Auto-VoIP status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182
Auto-VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .183
Configure the Auto-VLAN properties. . . . . . . . . . . . . . . . . . . . . . . . . . . 183
Configure the Auto-VLAN port settings. . . . . . . . . . . . . . . . . . . . . . . . . 184
Manage the OUI table for Auto-WiFi and Auto-Camera VLANs . . . . 186
Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .188
Configure the STP settings and view the STP status . . . . . . . . . . . . . . 188
Configure the CST settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190
Configure the CST port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192
View the CST port status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
View the Rapid STP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196
Manage the MST settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197
Configure and view the port settings for an MST instance. . . . . . . . . 200
Display the STP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203
Multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204
View, search, or clear the MFDB table . . . . . . . . . . . . . . . . . . . . . . . . . . 204
Display the MFDB statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206
Configure the auto-video multicast settings. . . . . . . . . . . . . . . . . . . . . 207
IGMP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208
Configure IGMP snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208
Configure IGMP snooping for interfaces. . . . . . . . . . . . . . . . . . . . . . . . 210
View, search, or clear the IGMP snooping table. . . . . . . . . . . . . . . . . . 211
Configure IGMP snooping for VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . 213
Disable IGMP snooping on a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214
Configure one or more IGMP multicast router interfaces. . . . . . . . . . 215
Configure an IGMP multicast router VLAN . . . . . . . . . . . . . . . . . . . . . . 216
IGMP snooping querier overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217
Configure an IGMP snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . 217
Configure an IGMP snooping querier for a VLAN . . . . . . . . . . . . . . . . 218
Remove the IGMP snooping querier from a VLAN . . . . . . . . . . . . . . . 220
Display the status of the IGMP snooping querier VLANs . . . . . . . . . . 220
MLD snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .222
Enable MLD snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222
Configure MLD snooping for interfaces . . . . . . . . . . . . . . . . . . . . . . . . 223
Configure the MLD VLAN settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225
Modify the MLD snooping settings for a VLAN . . . . . . . . . . . . . . . . . . 226
User Manual6
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Remove MLD snooping from a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . 227
Configure one or more MLD multicast router interfaces . . . . . . . . . . 228
Configure an MLD multicast router VLAN . . . . . . . . . . . . . . . . . . . . . . . 229
Configure an MLD snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . . 230
Configure the MLD snooping querier VLAN settings . . . . . . . . . . . . . 231
Multicast VLAN registration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .232
Configure the global MVR settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233
Configure an MVR group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234
Remove an MVR group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235
Configure an MVR interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236
Configure the interface members of an MVR group . . . . . . . . . . . . . . 238
Display the MVR statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239
MAC address table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240
View, search, or clear the MAC address table. . . . . . . . . . . . . . . . . . . . 240
Set the dynamic address aging interval. . . . . . . . . . . . . . . . . . . . . . . . . 242
Add a static MAC address to the MAC address table . . . . . . . . . . . . . 243
Remove a static MAC address from the MAC address table . . . . . . . 244
Layer 2 loop protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245
Configure global Layer 2 loop protection. . . . . . . . . . . . . . . . . . . . . . . 245
Configure the loop protection settings for ports and
display the loop protection state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
Chapter 4 Configure Routing
Routing concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
IPv4 routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .250
Manage the IPv4 routing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
View the IPv4 routing statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251
IPv6 routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255
Manage the IPv6 routing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255
Display the IPv6 route table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 256
Configure the IPv6 VLAN interface settings . . . . . . . . . . . . . . . . . . . . . 257
Configure prefix settings for an IPv6 routing VLAN . . . . . . . . . . . . . . . 259
Delete a prefix setting from an IPv6 routing VLAN . . . . . . . . . . . . . . . 261
Display the IPv6 and ICMPv6 statistics for an IPv6 routing VLAN . . . 262
Display the IPv6 neighbor table or clear IPv6 neighbor entries . . . . 266
Configure an IPv6 static route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268
Delete an IPv6 static route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270
Configure the IPv6 route preference for the switch. . . . . . . . . . . . . . . 271
VLAN routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .272
Create a routing interface with the VLAN Static Routing Wizard. . . . 272
Manage a VLAN routing interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
Remove the routing function from a VLAN . . . . . . . . . . . . . . . . . . . . . . 275
Router discovery for a VLAN routing interface. . . . . . . . . . . . . . . . . . . . . . .276
Routes and the routing table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .278
Manually add a route and display the routing table . . . . . . . . . . . . . . 278
Modify a route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 280
Delete a route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281
Address Resolution Protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282
User Manual7
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Display the ARP cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282
Add or change a static entry in the ARP table . . . . . . . . . . . . . . . . . . . 284
Delete a static ARP entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
Configure the ARP table settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286
Remove ARP entries from the ARP cache . . . . . . . . . . . . . . . . . . . . . . . 287
Chapter 5 Configure Quality of Service
Quality of Service concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290
Class of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .290
CoS configuration concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290
Configure the global CoS settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291
Configure the CoS settings for an interface . . . . . . . . . . . . . . . . . . . . . 292
Configure the CoS queue settings for an interface . . . . . . . . . . . . . . . 294
Map 802.1p priorities to queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295
Map DSCP values to queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297
Differentiated Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .298
Defining DiffServ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298
Configure the DiffServ mode and display the entries in the
DiffServ private MIB tables. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299
Configure a DiffServ class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300
Configure IPv6 DiffServ class settings . . . . . . . . . . . . . . . . . . . . . . . . . . 306
Configure a DiffServ policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311
Configure the DiffServ service interface . . . . . . . . . . . . . . . . . . . . . . . . 317
Display DiffServ service statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321
Chapter 6 Manage Device Security
Device admin password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 324
RADIUS servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .325
Configure the global RADIUS server settings. . . . . . . . . . . . . . . . . . . . 325
Configure a RADIUS authentication server on the switch. . . . . . . . . . 327
Configure a RADIUS accounting server. . . . . . . . . . . . . . . . . . . . . . . . . 331
TACACS+ servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .334
Configure the global TACACS+ settings . . . . . . . . . . . . . . . . . . . . . . . . 334
Add a TACACS+ server to the switch. . . . . . . . . . . . . . . . . . . . . . . . . . . 335
Modify the settings for a TACACS+ server on the switch . . . . . . . . . . 337
Remove a TACACS+ server from the switch . . . . . . . . . . . . . . . . . . . . . 337
Authentication lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .338
Configure an HTTP authentication list . . . . . . . . . . . . . . . . . . . . . . . . . . 338
Configure an HTTPS authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 340
Configure the dot1x authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 341
Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .342
HTTP and HTPPS management access . . . . . . . . . . . . . . . . . . . . . . . . . . . . .344
Configure HTTP access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 344
Configure HTTPS access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345
Browser security warning with HTTPS access . . . . . . . . . . . . . . . . . . . . 346
Manage certificates for HTTPS access . . . . . . . . . . . . . . . . . . . . . . . . . . 347
Management access profiles and rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . .351
User Manual8
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Add an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351
Add a rule to the access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 352
Activate the access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
Display the access profile summary and the number of
filtered packets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355
Deactivate an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 356
Remove an access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357
Port authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 358
Configure the global 802.1X settings . . . . . . . . . . . . . . . . . . . . . . . . . . 358
Manage port authentication on individual ports . . . . . . . . . . . . . . . . . 360
Display the port summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365
Display the client summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366
MAC filters for traffic control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .368
Create a MAC filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 368
Delete a MAC filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 370
Display the MAC filter summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371
Storm control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .372
Configure global storm control settings . . . . . . . . . . . . . . . . . . . . . . . . 372
Configure storm control settings for one or more ports. . . . . . . . . . . 373
Port security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .375
Configure the global port security mode . . . . . . . . . . . . . . . . . . . . . . . 375
Configure a port security interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376
Display learned security MAC addresses and convert them
to static MAC addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 378
Protected ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .379
Private VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .380
Configure a private VLAN type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381
Configure a private VLAN association with a primary and
secondary VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 382
Remove an existing private VLAN association . . . . . . . . . . . . . . . . . . . 383
Configure the private VLAN port mode. . . . . . . . . . . . . . . . . . . . . . . . . 384
Configure primary and secondary VLANs on a private
VLAN host interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 385
Remove primary and secondary VLANs from a private
VLAN host interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 387
Configure primary and secondary VLANs on a private
VLAN promiscuous interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388
Remove primary and secondary VLANs from a private
VLAN promiscuous interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 390
Access control lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .391
Use the ACL Wizard to create a simple ACL . . . . . . . . . . . . . . . . . . . . . 391
Configure a MAC ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 397
Configure MAC ACL rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400
Configure MAC bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 404
Display or delete MAC ACL bindings in the MAC binding table . . . 406
Configure a basic or extended IPv4 ACL. . . . . . . . . . . . . . . . . . . . . . . . 407
Configure rules for a basic IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . 411
Configure rules for an extended IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . 415
Configure an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422
User Manual9
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Configure rules for an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 425
Configure IP ACL interface bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . 432
Display or delete IP ACL bindings in the IP ACL binding table . . . . . 434
Configure VLAN ACL bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435
Chapter 7 Monitor the Switch and the Traffic
Monitor the switch and the ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439
Display or clear switch statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439
Display port statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 441
Display and manage detailed port statistics. . . . . . . . . . . . . . . . . . . . . 444
Display or clear EAP and EAPoL statistics . . . . . . . . . . . . . . . . . . . . . . . 450
Perform a cable test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 451
Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .453
Manage and display the memory log . . . . . . . . . . . . . . . . . . . . . . . . . . 453
Manage and display the flash log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 455
Manage the server log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457
Display or clear the trap logs and the counters . . . . . . . . . . . . . . . . . . 460
Port mirroring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .461
Chapter 8 Maintain or Troubleshoot the Switch
Reboot from the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 465
Reset to factory default settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466
Reset the switch to factory default settings but maintain the
registration status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466
Reset the switch to factory default settings and reset the
registration status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 467
Export a file from the switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 469
Use TFTP to export a file from the switch to a TFTP server. . . . . . . . . 469
Use HTTP to export a file from the switch to a computer . . . . . . . . . . 470
Update software or download a file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .471
Use TFTP to download a file to the switch or update the
software image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472
Use HTTP to download a file to the switch or update the
software image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474
Use an HTTP session to download and install an SSL
security certificate file on the switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . 476
Manage software images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .477
Copy a software image. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 478
Configure dual image settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479
View the dual image status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 481
Diagnostics and troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .482
Ping an IPv4 address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482
Ping an IPv6 address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483
Send an IPv4 traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 485
Send an IPv6 traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 487
Enable remote diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 488
User Manual10
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Appendix A Configuration Examples
Virtual Local Area Networks (VLANs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491
VLAN configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 492
Access control lists (ACLs). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .493
MAC ACL example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 493
Basic IPv4 ACL example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . 494
Differentiated Services (DiffServ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .495
Class. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496
DiffServ traffic classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 497
Create policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 497
DiffServ example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 498
802.1X access control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .499
802.1X example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 501
Multiple Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .502
MSTP example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504
VLAN routing interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505
Appendix B Specifications and Default Settings
Switch default settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 508
General feature default settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .510
System setup and maintenance settings . . . . . . . . . . . . . . . . . . . . . . . . . . .517
Port characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .517
Traffic control settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .518
Quality of Service settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .518
Security settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .519
System management settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .519
Settings for other features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .520
Hardware technical specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .520
Model MS510TXM hardware technical specifications. . . . . . . . . . . . . 521
Model MS510TXUP hardware technical specifications. . . . . . . . . . . . 522
User Manual11
1

1Get Started

This user manual describes how you can use the device user interface (UI) to configure and operate the following switches:
MS510TXM: NETGEAR 8-Port Multi-Gigabit/10G Ethernet Smart Managed Pro Switch with 2 SFP+ Ports
This high-speed model provides four 100M/1000M/2.5G ports, four 100M/1000M/2.5G/5G/10G ports, and two dedicated 1G/10G SFP+ fiber uplink ports.
MS510TXUP: NETGEAR 8-Port Multi-Gigabit/10G Ethernet Ultra60 PoE++ Smart Managed Pro Switch with 2 SFP+ Ports
This high-speed PoE++ (802.3bt) model provides four 100M/1000M/2.5G Ultra60 PoE++ ports, four 100M/1000M/2.5G/5G/10G Ultra60 PoE++ ports, and two dedicated 1G/10G SFP+ fiber uplink ports.
Each PoE++ port can deliver up to 60W, while the maximum PoE power budget across all active PoE++ ports is 295W.
The manual describes the software configuration procedures and
available within those procedures.
This chapter contains the following sections:
Available publications
Switch management options and default management mode
About managing the switch with the device UI
About on-network and off-network access
Access the switch on-network and connected to the Internet
Access the switch off-network and not connected to the Internet
Credentials for the device UI
Register the switch
Change the language of the device UI
Change the management mode of the switch
Use the Device View of the device UI
explains the options that are
12
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Configure interface settings
Access the NETGEAR support website
Access the user manual online
Note: For more information about the topics covered in this manual, visit the
support website at netgear.com/support.
Note: Firmware updates with new features and bug fixes are made available
from time to time at products can regularly check the site and download new firmware, or you can check for and download new firmware manually. If the features in this guide, you might need to update your firmware.
or behavior of your product does not match what is described
netgear.com/support/download/. Some

Available publications

The following information is available at netgear.com/support/download/:
Installation Guide
Hardware Installation Guide
Product Data Sheet
For information about the NETGEAR Insight app and Insight Cloud portal, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit
netgear.com/support.
Get Started User Manual13
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch

Switch management options and default management mode

If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up a custom configuration. Just connect power, connect to your network and to your other devices, and you’re done.
The switch provides administrative management options that let you configure, monitor, and control and the network from a web browser. If you are an Insight Premium or Pro subscriber, you can choose to manage the switch by using the NETGEAR Insight app on a smartphone or tablet or from the Insight Cloud portal that is available from a web browser on your Windows-based computer, Mac, or tablet.
the network. The device UI is enabled by default, allowing you to configure the switch
The switch provides the following management options that let you network and configure, monitor, and control the switch:
Device UI: By default, the management mode of the switch is set to Directly Connect to Web Browser Interface, which lets you access the device UI. In this mode, you can change all settings of the switch.
NETGEAR Insight app and Insight Cloud portal: If you set the management mode of the switch to NETGEAR Insight Mobile App and Insight Cloud Port following applications to manage the switch remotely:
- NETGEAR Insight app. As an Insight Premium or Insight Pro subscriber
use the NETGEAR Insight app to discover the switch on the network and add the switch to a NETGEAR Insight network location. You can then set up the switch in the network and manage and monitor the switch remotely from your smartphone or tablet. You can choose from four methods to add the switch to the NETGEAR Insight app: You can scan your network for the switch, scan the QR code or the barcode of the switch, or add the serial number of the switch. A free trial is available for new customers.
- Insight Cloud portal:
the NETGEAR Insight Cloud portal to set up the switch in the network, perform advanced remote setup, configuration, and management, monitor the switch, analyze the switch and network usage, and, if necessary, troubleshoot the switch and the network. A free trial is available for new customers.
As an Insight Premium or Insight Pro subscriber
discover
the switch on the
al, you can use the
, you can
, you can use
For more information about NETGEAR Insight, visit netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit
To use the NETGEAR Insight app or Insight Cloud portal methods, you must change the management method so, you can also change the management method back to Directly Connect to Web Browser Interface and use the device UI. For more information, see of the switch on page 35.
Get Started User Manual14
netgear.com/support.
to NETGEAR Insight Mobile App and Insight Cloud Portal. After you do
netgear.com/insight and
Change the management mode
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch

About managing the switch with the device UI

This manual describes how to use the device UI to manage and monitor the switch.
For information about using the NETGEAR Insight app and Insight Cloud portal to manage the switch, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit

Software requirements for the device UI

To access the switch by using a web browser, the browser must meet the following software requirements:
HTML version 4.0, or later
HTTP version 1.1, or later
netgear.com/support.

Supported web browsers for the device UI

The following browsers were tested and support the device UI. Later browser versions might function fine but were not tested.
The supported web browsers include the following:
Mozilla Firefox version 67
Chrome version 78
Microsoft Edge
Microsoft Internet Explorer (IE) version 1
Safari on MAC OS X version 13.0.3
Safari on Windows OS versions 5.1.7
1
Get Started User Manual15
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch

Navigation tabs, configuration menus, and page menu

The System Information page is the start page in the device UI. The following figure shows the System Information page for model MS510TXUP.
Navigation tabs
Page menus
Configuration menus
Language menu
Configuration status
and options
Logout button
Buttons
Help page
Figure 1. Switch navigation tabs, configuration menus, and page menu
The navigation tabs along the top of the device UI give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which feature you configure.
When you select a tab, the features for that tab appear as menus directly under
the tabs. The
configuration menus in the blue bar change according to the navigation tab that is selected.
The configuration pages for each feature are available as submenu links in the page menu on the left side of the page. Some items in the menu expand to reveal multiple submenu links, as the following figure shows.
Get Started User Manual16
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
Link
Submenu
links
Figure 2. Switch page menu link and submenu links

Configuration and status options

The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.
Each page contains access to the HTML-based help that explains the fields and configuration options for the page.

Buttons in the device UI

Each page also contains command buttons. The following table shows the command buttons that are used throughout the pages in the device UI:
Table 1. Command buttons in the device UI
Button Function
Add Clicking the Add button adds the new item configured in the heading row of a table.
Apply Clicking the Apply button to save
Cancel Clicking the Cancel button cancels the configuration on the page and resets the data on the
page to the previous values of the switch.
Clear Clicking the Clear button clears all the counters and resets the switch summary and detailed
statistics to default values.
Delete Clicking the Delete button removes the selected item.
Refresh Clicking the Refresh button refreshes the page with the latest information from the device.
your settings. Configuration changes take effect immediately.
Get Started User Manual17
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch

User-defined fields

User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page. All characters can be used except for the ones stated in the following table (unless specifically noted in a procedure for a feature).
Table 2. Invalid characters for user-defined fields
Invalid characters for user-defined fields
\ | / < > * ?

Context-sensitive help

When you log in to the switch, every page contains a link to the online help ( ) that contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Configuration page is open, the help topic for that page displays if you click the link to the online help.

About on-network and off-network access

You can access the switch either on-network or off-network:
On-network and connected to the Internet: When you use the device UI, for easiest access, we recommend that you cable the switch to a network that is connected to the Internet and that includes a router or DHCP server that assigns IP addresses, power on
switch, and
the
to connect to the device UI. We refer to this setup as on-network or online.
For more information, see on page 19).
Off-network and not connected to the Internet: You can also configure the switch connected directly only to the computer that you are using to c switch is not connected to the network and the Internet. We refer to this setup as
off-network or offline. If your network does not include a DHCP server (or a router that
functions as a DHCP server), you must access the switch off-network.
For more information, see Internet on page 27.
Note: We recommend that you register the switch to activate your warranty.
For more information, see Register the switch on page 30.
then use a computer that is connected to the same network as the switch
Access the switch on-network and connected to the Internet
onfigure it. That is, the
Access the switch off-network and not connected to the
Get Started User Manual18
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch

Access the switch on-network and connected to the Internet

The DHCP client on the switch is enabled by default, allowing a DHCP server or router on the network to assign an IP address to the switch.
If the switch is on-network, connected to a DHCP server, and connected to the Internet, you can use a Windows-based computer to access the device UI. We also recommend that you register the switch with NETGEAR to activate your warranty. For more information about accessing the device UI, see
on-network and connected to the Internet on page 20.
Use a Windows-based computer to access the switch
If you use a Mac, or if you do not know
tools to discover the IP address of the switch on the network:
NETGEAR Insight mobile app: You can install the NETGEAR Insight mobile app on an iOS or Android mobile device and discover the IP address of the switch. See NETGEAR Insight mobile app to only discover the IP address of the switch on page 21.
NETGEAR Switch Discovery Tool (NSDT): If you use a Windows-based computer or Mac, you can use the NSDT to discover the switch on your network. See
NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet on page 22.
NETGEAR Smart Control Center (SCC): You can install the SCC on a Windows-based computer. See
Control Center on page 24
Other tools: You can also get the IP address of the switch from the DHCP server in the network or use a third-party IP scanner utility. See switch IP address on page 25.
When you know the IP address, you can configure the switch in the following ways:
Device UI: For configuration of all switch features, access the switch over the device UI. See
Access the switch on-network and connected to the Internet when you know the
switch IP address on page 25.
NETGEAR Smart Control Center (SCC): For features, use the SCC on a Windows-based computer. By default, you can use the SCC to discover the IP address of the switch, but you cannot use the SCC to perform any actions on the switch. However, if you enable the configuration option of the SCC, you can use it to configure the switch. See
Discover the switch in a network with a DHCP server using the Smart
the IP address of the switch, use one of the following
Use the
Use the
Use other options to discover the
configuration of a limited number of switch
Smart Control Center on page 342.
For more information about the SCC, visit
NETGEAR Insight app and Insight Cloud portal: Y mode of the switch so that you can use the NETGEAR Insight app and Insight Cloud portal to manage the switch remotely. For more information, see management mode of the switch on page 35.
Get Started User Manual19
netgear.com/support/product/SCC.
ou can change the management
Change the
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch

Use a Windows-based computer to access the switch on-network and connected to the Internet

To use a Windows-based computer to determine the switch IP address and access the switch on-network and connected to the Internet:
1. Cable the switch to a network with a router or DHCP server that manages IP addresses.
2. Power on the switch.
The DHCP server assigns the switch an IP address.
3. Connect your
You can use a WiFi or wired network connection.
4. Open Windows Explorer.
5. Click the Network
6. If prompted, enable the Network Discovery feature.
7. Under Network Infrastructure, locate the switch model number.
The model number is either MS510TXM or MS510TXUP
8. Double-click either MS510TXM-XXXXXX represents the last six digits of the switch MAC address.
The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you activated the warranty.
9. Enter your credentials, which depend on the page that displays:
Register to activate your warranty page displays: If you did not yet activate your
warranty, the Register to activate your warranty page displays.
Register Your Device: To
-
button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch.
computer to the same network as the switch.
link.
.
or MS510TXUP-XXXXXX, in which XXXXXX
activate your warranty, click the Register Your Device
If you do not have a NETGEAR account, you can create one.
- Enter Registration Key: If you obtained a registration key, enter it. For more information, see registration key for offline access on page 31.
- Skip Registration & Access the UI: Y activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected.
If you do not activate your warranty, the Register to activate your warranty page continues to display when you log in.
Device UI login page displays: NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials:
Get Started User Manual20
Register the switch with your NETGEAR account and get a
If you previously registered the switch with
ou do not need to register the switch to
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
- Device admin password: Enter the device admin password. The default device
admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.
- Insight network password: If you previously logged in to the device UI, you
changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)
For information about the credentials, see
10. Click the Go
11. If the Change Default Password page displays, specify and confirm a new device admin
password,
The System Information page displays. You can now configure the switch.
button.
click the Submit button, and log in again with your new password.
Credentials for the device UI on page 28.

Use the NETGEAR Insight mobile app to only discover the IP address of the switch

If the switch is connected to a WiFi router or access point, and the switch is connected to the Internet, the NETGEAR Insight mobile app lets you discover the IP address of the switch in your network.
If you do not use the NETGEAR Insight app to claim the switch by adding it to an Insight network location, the switch is not registered and your warranty is not activated.
Using the NETGEAR Insight app to discover the IP address of the switch is not the same as managing the switch with the Insight app or the Insight Cloud Portal.
Note: The default management mode of the switch is the device UI. If you
want to use the Insight app or the Insight Cloud Portal to manage the switch, you first must change the management mode (see
management mode to NETGEAR Insight Mobile App and Insight Cloud Portal on page 36). After you do so, you can manage the switch
with Insight and add the switch to an Insight network location.
Change the
Get Started User Manual21
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
To use the NETGEAR Insight app to discover the IP address of the switch in your network when the switch is connected to the Internet:
1. On your mobile device, go to the app store, search for NETGEAR Insight, and download
the latest version of the app.
2. Connect your mobile device to the WiFi network of the WiFi router or access point to which the switch is connected.
3. Open the NETGEAR Insight mobile app.
4. If you did not set up a NETGEAR account, tap Create
onscreen instructions.
5. Enter the email address and password for your account and tap LOG IN.
NETGEAR
Account and follow the
After you log in to your account, the IP address of the switch
6. Write down the switch IP address.
You can use this IP address to access the switch directly from information about how to access the device UI of the switch, see
on-network and connected to the Internet when you know the switch IP address on page 25.
displays in the device list.
a web browser. For
Access the switch

Use the NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet

For easiest access, we recommend that you cable the switch to a network with a router or DHCP server that assigns IP addresses, power on the switch, and then use a computer that is connected to the same network as the switch.
The NETGEAR Switch Discovery Tool (NSDT) lets you discover the switch in your network and access the device UI of the switch from a Mac or a Windows-based computer.
To install the NETGEAR Switch Discovery T switch in your network when the switch is connected to the Internet:
1. Download the NSDT
netgear.com/support/product/netgear-switch-discovery-tool.aspx.
by visiting
ool and discover the IP address of the
Depending on the computer that you are using, download either the Mac version or the Windows version.
2. Temporarily disable the firewall, Internet security, antivirus programs, or all of these on the computer that
Get Started User Manual22
you use to configure the switch.
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
3. Unzip the NSDT files, and click or double-click the .exe file (for example,
NSDT-1.2.102.exe) to install the program on your computer.
You might see the tool icon appear on your Mac dock or Windows desktop.
4. Reenable the
security services on your computer.
5. Power on the switch.
The DHCP server assigns the switch an IP address.
6. Connect your
computer to the same network as the switch.
You can use a WiFi or wired connection. The computer and the switch must be on the same Layer 2 network.
7. Open the Switch Discovery Tool.
T
o open the program, double-click the NETGEAR Switch Discovery Tool icon on your
dock on desktop.
The initial page displays a menu and a button.
8. From the Choose
9. Click the Start
a connection menu, select the network for this switch.
Searching button.
The NSDT displays the IP addresses of the switches that it discovers.
10. To access the switch from the NSDT, do the following:
a. Click the ADMIN PAGE
button next to your switch.
The page that displays depends on whether you activated the warranty.
b. Enter your credentials, which depend on the page that displays:
Register to activate your warranty page displays: If you did not yet activate
your warranty, the Register to activate your warranty page disp
- Register Your Device: To activate your warranty
, click the Register Your Device button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch.
If you do not have a NETGEAR account, you can create one.
- Enter Registration Key: If you obtained a registration key information, see
Register the switch with your NETGEAR account and get a
registration key for offline access on page 31.
- Skip Registration & Access the UI: Y
ou do not need to register the switch to activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected.
If you do not activate your warranty, the Register to activate your warranty page continues to display when you log in.
Device UI login page displays:
If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials:
lays.
, enter it. For more
Get Started User Manual23
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
- Device admin password: Enter the device admin password. The default
device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password.
- Insight network password: If you previously logged in to the device UI, you
changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)
For information about the credentials, see
c. If you enter a password, click the Go
Submit button.
d. If the Change Default Password page displays, specify and confirm a new device
admin
The System Information page displays. You can now configure the switch.
password, click the Submit button, and log in again with your new password.
Credentials for the device UI on page 28.
button; If you enter a registration key, click the

Discover the switch in a network with a DHCP server using the Smart Control Center

This section describes how to set up your switch in a network that includes a DHCP server. The DHCP client on the switch is enabled by default. When you connect the switch to your network, the DHCP server automatically assigns an IP address to the switch. Use the Smart Control Center (SCC) to discover the IP address automatically assigned to the switch.
For information about the SCC, visit
Note: By default, you can use the SCC to discover the IP address of the switch,
but you cannot use the SCC to perform any actions on the switch. However, if you enable the configuration option of the SCC, you can use it to configure the switch (see Smart Control Center on page 342).
netgear.com/support/product/SCC.
To install the switch in a network with a DHCP server:
1. Connect the
2. Power on the switch by connecting its power cord.
3. Install the SCC on your computer.
4. Start the SCC.
5. Click the Discover
Get Started User Manual24
switch to a network with a DHCP server.
button for the SCC to discover all the devices in the subnet.
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
6. Write down the switch IP address assigned by the DHCP server.
For information about how to access the device UI of the switch, see
on-network and connected to the Internet when you know the switch IP address on page 25.
Access the switch

Use other options to discover the switch IP address

If the switch is on-network, you can use one of the following options to determine the switch IP address:
Access the DHCP server: You can access the DHCP server (or router that functions as a DHCP server) in your network and view the IP address that is assigned to the switch. For more information, see the documentation for your DHCP server (or router).
Use an IP scanner utility: IP scanner An IP scanner utility lets you discover the IP address that is assigned to the switch.
For information about how to access the device UI of the switch, see Access the switch
on-network and connected to the Internet when you know the switch IP address on page 25.
utilities are available free of charge on the Internet.

Access the switch on-network and connected to the Internet when you know the switch IP address

If the switch is on-network and you know the switch IP address, you can access the device UI.
For the following procedure, the network must provide Internet access.
Get Started User Manual25
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
To access the switch on-network and connected to the Internet when you know the switch IP address:
1. Launch a web browser.
2. In the address field of your web browser, enter the IP address of the switch.
The page that displays depends on whether your browser is conne
cted to the Internet,
whether the switch is connected to the Internet, and whether you activated the warranty.
3. Enter your credentials, which depend on the page that displays:
Register to activate your warranty page displays: If you did not yet activate your
warranty, the Register to activate your warranty page displays.
Register Your Device: To
-
activate your warranty, click the Register Your Device button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch.
If you do not have a NETGEAR account, you can create one.
- Enter Registration Key: If you obtained a registration key, enter it. For more information, see
Register the switch with your NETGEAR account and get a
registration key for offline access on page 31.
- Skip Registration & Access the UI: Y
ou do not need to register the switch to activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected.
If you do not activate your warranty, the Register to activate your warranty page continues to display when you log in.
Device UI login page displays:
If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials:
- Device admin password:
Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password.
Insight network password: If you previously logged in to the device UI, you management mode to NETGEAR Insight, and you added the switch to
changed
the an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)
For information about the credentials, see
4. If you enter a password, click the Go
button; If you enter a registration key, click the Submit
Credentials for the device UI on page 28.
button.
5. If the Change Default Password page displays, specify and confirm a new device admin password,
click the Submit button, and log in again with your new password.
The System Information page displays. You can now configure the switch.
Get Started User Manual26
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch

Access the switch off-network and not connected to the Internet

The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.
Note: If you prefer to use the Smart Control Center (SCC) to configure the
switch, you must access the switch off-network as described in the following procedure and then enable the configuration option of the SCC (see Smart Control Center on page 342).
To access the switch off-network and not connected to the Internet:
1. Change the
the switch.
If the DHCP client of the switch is enabled and you remove the switch from the network with the DHCP server, the IP address reverts to the default IP with a subnet of 255.255.255.0. If you already disabled the DHCP client and assigned a static IP address to the switch, change the IP settings of your computer to be in the same subnet as the static IP address.
For more information about changing the IP settings on your computer following knowledge base articles at the NETGEAR website:
Windows-based computer: See the following article:
https://kb.netgear.com/27476/How-to-set-a-static-IP-address-in-Windows
Mac: See the following article:
https://kb.netgear.com/000037250/Setting-a-static-IP-address-on-your-network-a dapter-in-Mac-OS-for-direct-access-to-an-access-point
(The Mac article is written for an access point but is also valid for a switch.)
2. Connect your
3. Power on the switch by connecting its power cord.
4. Launch a
5. Open a web browser, and enter http://192.168.0.239.
IP settings of your computer to be in the same subnet as the IP settings of
address of 192.168.0.239
, see one of the
computer to the switch using an Ethernet cable.
web browser.
This is the default IP address of the switch. If you already di assigned a static IP address to the switch, enter the static IP address of the switch.
The Enter Registration Key page displays.
Get Started User Manual27
sabled the DHCP client and
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
6. Do one of the following:
Enter a registration key. If you obtained a registration key, do the following:
a. Type or paste the key.
For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 31.
b. Click the Submit button.
Do not register at this time and access the device UI: Do the following:
a. Click
b. Enter one of the following credentials:
7. If the Change Default Password page displays, specify and confirm a new device admin
password, click the Submit button, and log in again with your new password.
The System Information page displays. You can now configure the switch.
8. After you complete the configuration of the switch, reconfigure the computer that you used for
this process to its original TCP/IP settings.
the Skip
The Device UI login page displays.
-
Device admin password:
device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password.
- Insight network password: If you previously logged in to the device UI, you changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)
For information about the credentials, see Credentials for the device UI on page 28.
Registration & Access the UI button.
Enter the device admin password. The default
You can now connect your switch to your network using an Ethernet cable.

Credentials for the device UI

The information in this section applies to accessing the switch device UI in either
management mode. That is, it does not apply to accessing the NETGEAR Insight app and
Cloud portal.
To access the device UI, and depending on your situation, use one of the following credentials:
NETGEAR account credentials:
You can register the switch online to activate your warranty by entering your NETGEAR account credentials (see Register the switch with your NETGEAR account and access
Get Started User Manual28
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch
the switch online on page 30). If you do not have a NETGEAR account, you can create
one.
Alternatively, you can obtain a registration key and enter the key when the so that you are no longer prompted to activate your warranty (see
Register the switch
switch is offline
with your NETGEAR account and get a registration key for offline access on page 31).
Device admin password:
You can access the device UI with your device admin password.
The first time that you access the device UI, enter the default device admin password (password),
after which
you are required to customize the password for greater security. Subsequent times that you log in to the device UI, use your customized device admin password.
NETGEAR Insight network location password:
NETGEAR Insight can affect how you access the switch device UI. After you add the switch to an Insight network location and change the management mode of the switch so that you can use the NETGEAR Insight app and Insight Cloud portal to manage the switch remotely (see
Change the management mode of the switch on page 35), the
Insight network location password replaces the switch device admin password. To access the device UI, you must enter the Insight network locati
on password.
Even if you temporarily change the management mode of the switch back to Direct
Connect Web Browser Interface, for example to change settings that are not Insight-manageable or for debugging purposes, you must enter the Insight network location password.
For information about how the Insight network password functions, visit netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit
netgear.com/support.
The following table lists the essential credential options for access to the device UI.
Table 3. Credentials for access to the device UI
Management mode in the device UI
Default mode: Direct Connect Web Browser Interface (Local LAN Only)
NETGEAR Insight Mobile App and Insight Cloud Portal (Cloud/ Remote)
1. This situation occurs if you temporarily change the management mode of the switch from NETGEAR Insight Mobile App and
Insight Cloud Portal back to Direct Connect Web Browser Interface.
Added to an Insight network
No Device admin password
1
Yes
No Device admin password Limited device UI menu.
Yes Insight network password Limited device UI menu.
Credentials Device UI menu
Full device UI menu
Insight network password
Not managed through
NETGEAR Insight.
Managed through NETGEAR Insight.
Get Started User Manual29
8-Port Multi-Gigabit/10G Ethernet (Ultra60 PoE++) Smart Managed Pro Switch

Register the switch

You can register the switch online or offline to activate your warranty, after which you are no longer prompted to activate your warranty when you log in:
Online registration for on-network access: If your switch is on-network or connected to the Internet, you can register the switch with your NETGEAR account credentials and activate your warranty. During the registration process, the switch contacts a NETGEAR server. For more information, see access the switch online on page 30.
Registration for off-network access: Y is connected to the Internet and get a registration key. If the switch is off-network or not connected to the Internet, you can enter the registration key. After you do so, the Register to activate your warranty page no longer displays when you log in. For more information,
Register the switch with your NETGEAR account and get a registration key for
see
offline access on page 31.
Register the switch with your NETGEAR account and
ou can register your switch from any device that

Register the switch with your NETGEAR account and access the switch online

For registration and activation of your warranty with your NETGEAR account, the switch must be connected to the Internet so that it can communicate with a NETGEAR server.
If you do not have a NETGEAR account, you can create one during the registration process.
To register and access the switch online over the device UI with your NETGEAR account:
1. Connect your
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ether
2. Launch a web browser.
3. In the address field of your web browser, enter the IP address of the switch.
For information about finding the IP address of the switch, see
on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27.
The Register to activate your warranty page displays.
4. Click the Register switch with your email address and password and activate the warranty.
computer to the same network as the switch.
net cable.
Access the switch
Your Device button and follow the directions onscreen to register the
You are only prompted to do this once to confirm registration of your switch.
Get Started User Manual30
Loading...
+ 492 hidden pages