User Manual
Table Of Contents
- 8-Port Gigabit (PoE+) Ethernet Smart Managed Pro Switch with (2 SFP or 2 Copper Ports and) Cloud Management
- Contents
- 1 Get Started
- Available publications
- Model descriptions
- Switch management options and default management mode
- Manage the switch by using the device UI
- About on-network and off-network access
- Access the switch on-network and connected to the Internet
- Use a Windows-based computer to access the switch on-network and connected to the Internet
- Use the NETGEAR Insight mobile app to only discover the IP address of the switch
- Use the NETGEAR Switch Discovery Tool to discover the IP address of the switch when it is connected to the Internet
- Discover the switch in a network with a DHCP server using the Smart Control Center
- Use other options to discover the switch IP address
- Access the switch on-network and connected to the Internet when you know the switch IP address
- Access the switch off-network and not connected to the Internet
- Credentials for the device UI
- Register the switch
- Change the language of the device UI
- Change the management mode of the switch
- Use the Device View of the device UI
- Configure interface settings
- Access the NETGEAR support website
- Access the user manual online
- 2 Configure System Information
- View or define system information
- Configure the IP network settings for management access
- Configure the time settings
- Configure denial of service settings
- Configure DNS settings
- Configure green Ethernet settings
- Use the Device View
- Configure Power over Ethernet
- Configure SNMP
- Configure Link Layer Discovery Protocol
- Configure DHCP snooping
- Set up PoE timer schedules
- 3 Configure Switching
- Configure the port settings and maximum frame size
- Configure link aggregation groups
- Configure VLANs
- Configure Auto-VoIP
- Configure Spanning Tree Protocol
- Configure multicast
- Manage IGMP snooping
- Configure IGMP snooping
- Configure IGMP snooping for interfaces
- View, search, or clear the IGMP snooping table
- Configure IGMP snooping for VLANs
- Modify IGMP snooping settings for a VLAN
- Disable IGMP snooping on a VLAN
- Configure one or more IGMP multicast router interfaces
- Configure an IGMP multicast router VLAN
- IGMP snooping querier overview
- Configure an IGMP snooping querier
- Configure an IGMP snooping querier for a VLAN
- Display the status of the IGMP snooping querier for VLANs
- Manage MLD snooping
- Enable MLD snooping
- Configure MLD snooping for interfaces
- Configure the MLD VLAN settings
- Modify the MLD snooping settings for a VLAN
- Remove MLD snooping from a VLAN
- Configure one or more MLD multicast router interfaces
- Configure an MLD multicast router VLAN
- Configure an MLD snooping querier
- Configure the MLD snooping querier VLAN settings
- View, search, and manage the MAC address table
- Configure Layer 2 loop protection
- 4 Configure Routing
- 5 Configure Quality of Service
- 6 Manage Device Security
- Change the device admin password for the device UI
- Manage the RADIUS settings
- Configure the TACACS+ settings
- Configure authentication lists
- Manage the Smart Control Center
- Configure management access
- Control access with profiles and rules
- Configure port authentication
- Set up traffic control
- Configure access control lists
- Use the ACL Wizard to create a simple ACL
- Configure a MAC ACL
- Configure MAC ACL rules
- Configure MAC bindings
- View or delete MAC ACL bindings in the MAC binding table
- Configure a basic or extended IPv4 ACL
- Configure rules for a basic IPv4 ACL
- Configure rules for an extended IPv4 ACL
- Configure an IPv6 ACL
- Configure rules for an IPv6 ACL
- Configure IP ACL interface bindings
- View or delete IP ACL bindings in the IP ACL binding table
- Configure VLAN ACL bindings
- 7 Monitor the Switch and the Traffic
- 8 Maintain or Troubleshoot the Switch
- A Configuration Examples
- B Specifications and Default Settings
8-Port Gigabit (PoE+) Ethernet Smart Managed Pro Switch with (2 SFP or 2 Copper Ports and)
Cloud Management
Configuration Examples User Manual477
When a port is enabled for bridging (the default) rather than routing, all normal bridge
processing is performed for an inbound packet, which is then associated with a VLAN. Its
MAC destination address (MAC DA) and VLAN ID are used to search the MAC address
table. If routing is enabled for the VLAN, and the MAC DA of an inbound unicast packet is
that of the internal bridge-router interface, the packet is routed. An inbound multicast packet
is forwarded to all ports in the VLAN, plus the internal bridge-router interface, if it was
received on a routed VLAN.
Because a port can be configured to belong to more than one VLAN,
VLAN routing
might be
enabled for all of the VLANs on the port, or for a subset. VLAN routing can be used to allow
more than one physical port to reside on the same subnet. It could also be used when a
VLAN spans multiple physical networks, or when additional segmentation or security is
required. A port can be either a VLAN port or a router port, but not both. However, a VLAN
port can be part of a VLAN that is itself a router port.
Complete these steps to configure a switch to perform interVLAN routing:
1. Use
the IP Configuration page to enable routing
on the switch.
For more information about this step, see
Configure the router settings on page 236.
2. Determine the IP
addresses that you want to assign to the VLAN interface on the switch.
For the switch to be able to route between the VLANs, the VLAN interfaces must be
configured with an IP address. When the switch receives a packet destined for another
subnet/VLAN, the switch looks at the routing table to determine where to forward the
packet.
The packet
is then passed to the VLAN interface of the destination. It is then sent
to the port where the end device is attached.
3. Use the VLAN Routing Wizard page to create a routing VLAN, configure the IP address and
subnet mask,
and add the member ports.
For more information about this step, see
Create a routing interface with the VLAN Static
Routing Wizard on page 242.
In the following figure, VLAN 70 is a routing interface VLAN with IP address
203.0.113.118 and subnet mask 255.255.255.0. For information ab
out viewing the
member ports of the VLAN, see
View the VLAN status on page 156. (The figure also
shows a second routing interface VLAN with ID 65.)