User Manual
Table Of Contents
- 16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management
- Contents
- 1 Get Started
- Available publications
- Switch management options and default management mode
- Manage the switch by using the device UI
- About on-network and off-network access
- Access the switch on-network and connected to the Internet
- Use a Windows-based computer to access the switch on-network and connected to the Internet
- Use the NETGEAR Insight mobile app to discover the IP address of the switch
- Use the NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet
- Discover the switch in a network with a DHCP server using the Smart Control Center
- Use other options to discover the switch IP address
- Access the switch on-network and connected to the Internet when you know the switch IP address
- Access the switch off-network and not connected to the Internet
- Credentials for the device UI
- Register the switch
- Change the language of the device UI
- Change the management mode of the switch
- Use the Device View of the device UI
- Configure interface settings
- Access the NETGEAR support website
- Access the user manual online
- 2 Configure System Information
- View or define switch system information
- Configure the switch IP address settings
- Configure the IPv6 network interface
- Configure the time settings
- Configure Denial of Service settings
- Configure the DNS settings
- Configure green Ethernet settings
- Use the Device View
- Configure Power over Ethernet
- Configure SNMP
- Configure LLDP
- Configure DHCP snooping
- Set up PoE timer schedules
- 3 Configure Switching
- Configure the port settings and maximum frame size
- Configure link aggregation groups
- Configure VLANs
- Configure a voice VLAN
- Configure Auto-VoIP
- Configure Spanning Tree Protocol
- Configure multicast
- Manage IGMP snooping
- Configure IGMP snooping
- Configure IGMP snooping for interfaces
- View, search, or clear the IGMP snooping table
- Configure IGMP snooping for VLANs
- Modify IGMP snooping settings for a VLAN
- Disable IGMP snooping on a VLAN
- Configure one or more IGMP multicast router interfaces
- Configure an IGMP multicast router VLAN
- IGMP snooping querier overview
- Configure an IGMP snooping querier
- Configure an IGMP snooping querier for a VLAN
- Display the status of the IGMP snooping querier for VLANs
- View, search, and manage the MAC address table
- Configure Layer 2 loop protection
- 4 Configure Quality of Service
- 5 Manage Device Security
- Change the device admin password for the device UI
- Manage the RADIUS settings
- Configure the TACACS+ settings
- Manage the Smart Control Center
- Configure management access
- Control access with profiles and rules
- Configure port authentication
- Set up traffic control
- Configure access control lists
- Use the ACL Wizard to create a simple ACL
- Configure a MAC ACL
- Configure MAC ACL rules
- Configure MAC bindings
- View or delete MAC ACL bindings in the MAC binding table
- Configure a basic or extended IPv4 ACL
- Configure rules for a basic IPv4 ACL
- Configure rules for an extended IPv4 ACL
- Configure an IPv6 ACL
- Configure rules for an IPv6 ACL
- Configure IP ACL interface bindings
- View or delete IP ACL bindings in the IP ACL binding table
- Configure VLAN ACL bindings
- 6 Monitor the System
- 7 Maintain or Troubleshoot the Switch
- A Configuration Examples
- B Specifications and Default Settings
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports
User Manual7
Configure the TACACS+ settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .256
Configure a TACACS+ server on the switch . . . . . . . . . . . . . . . . . . . . . 257
Modify the settings for a TACACS+ server on the switch . . . . . . . . . . 258
Remove a TACACS+ server from the switch . . . . . . . . . . . . . . . . . . . . . 259
Configure authentication lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260
Configure the dot1x authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 263
Manage the Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .264
Configure management access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266
Configure HTTP access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266
Configure HTTPS access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267
Browser security warning with HTTPS access . . . . . . . . . . . . . . . . . . . . 268
Manage certificates for HTTPS access . . . . . . . . . . . . . . . . . . . . . . . . . . 269
Control access with profiles and rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .274
Add an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
Add a rule to the access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
Activate the access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277
Display the access profile summary and the number of
filtered packets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278
Deactivate an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279
Remove an access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 280
Configure port authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .281
Configure the global 802.1X settings . . . . . . . . . . . . . . . . . . . . . . . . . . 281
Manage port authentication on individual ports . . . . . . . . . . . . . . . . . 283
View the port summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288
View the client summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290
Set up traffic control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .291
Manage MAC filtering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291
Configure storm control settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295
Configure port security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299
Configure protected ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303
Configure access control lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .304
Use the ACL Wizard to create a simple ACL . . . . . . . . . . . . . . . . . . . . . 305
Configure a MAC ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311
Configure MAC ACL rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314
Configure MAC bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318
View or delete MAC ACL bindings in the MAC binding table . . . . . . 320
Configure a basic or extended IPv4 ACL. . . . . . . . . . . . . . . . . . . . . . . . 321
Configure rules for a basic IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . 325
Configure rules for an extended IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . 330
Configure an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337
Configure rules for an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 340
Configure IP ACL interface bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . 347
View or delete IP ACL bindings in the IP ACL binding table . . . . . . . 349
Configure VLAN ACL bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351
Chapter 6 Monitor the System
Monitor the switch and the ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
View or clear switch statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354