User Manual 24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management G S 7 2 4TP v2 G S 7 2 4TP P May 2021 202-12036-03 NETGEAR, Inc.
4-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads. You can also check out our NETGEAR Community for helpful advice at community.netgear.com. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports (continued) 202-12036-03 (continued) May 2021 (continued) • Configure HTTPS access settings • Reset the switch to factory default settings and reset the registration status We added the following sections: • Manage switch discovery with UPnP and SSDP • Browser security warning with HTTPS access • We made multiple minor changes, including changes in terminology. 202-12036-02 March 2020 We changed Reboot the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 202-11765-02 May 2018 We made the following major changes: • Added the DHCPv6 option to Configure the IPv6 network interface on page 57 • Added Configure Layer 2 loop protection on page 199 • Added Configure DiffServ IPv6 class settings on page 223 • Revised Manage port authentication on individual ports on page 277 • Added View the client summary on page 284 • Revised Use the ACL Wizard to create a simple ACL on page 299
Contents Chapter 1 Get Started Available publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Switch management options and default management mode . . . . . . . . .14 Manage the switch by using the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Software requirements to use the device UI . . . . . . . . . . . . . . . . . . . . . . .15 Supported web browsers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Access the NETGEAR support website . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Access the user manual online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Chapter 2 Configure System Information View or define switch system information . . . . . . . . . . . . . . . . . . . . . . . . . . .51 View or define system information . . . . . . . . . . . . . . . . . . . . . . . . . .
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View LLDP neighbors information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114 Configure DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117 Configure the global DHCP snooping settings . . . . . . . . . . . . . . . . . . 118 Enable DHCP for all interfaces in a VLAN . . . . . . . . . . . . . . . . . . . . . . . 119 Configure DHCP snooping interface settings. . . . . .
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View, search, or clear the IGMP snooping table. . . . . . . . . . . . . . . . . . 184 Configure IGMP snooping for VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . 185 Modify IGMP snooping settings for a VLAN . . . . . . . . . . . . . . . . . . . . . 187 Disable IGMP snooping on a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187 Configure one or more IGMP multicast router interfaces. . . . . . . . . .
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Remove a TACACS+ server from the switch . . . . . . . . . . . . . . . . . . . . . 254 Configure authentication lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255 Configure the dot1x authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 258 Manage the Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259 Configure management access . . . . . . . . . .
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Perform a cable test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362 Configure and view the logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .364 Manage and view the memory log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364 Manage and view the flash log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366 Manage the server log .
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 802.1X access control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .413 802.1X example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 414 Multiple Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415 MSTP example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 1 Get Started This user manual describes how you can use the device user interface (UI) to configure and operate the following NETGEAR Smart Managed Pro switches: • GS724TPv2. NETGEAR 24-Port Gigabit PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management. This model provides a PoE power budget of 190W. • GS724TPP. NETGEAR 24-Port Gigabit Hi-Power PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management. This model provides a PoE power budget of 380W.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Note: In this manual, we refer to both switch models as the switch. Unless noted otherwise, all information applies to both switch models. Note: For more information about the topics covered in this manual, visit the support website at netgear.com/support. Note: Firmware updates with new features and bug fixes are made available from time to time at netgear.com/support/download/.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Switch management options and default management mode If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up a custom configuration. Just connect power, connect to your network and to your other devices, and you’re done. The switch provides administrative management options that let you configure, monitor, and control the network.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage the switch by using the device UI This manual describes how to use the device UI to manage and monitor the switch. For information about using the NETGEAR Insight app and Insight Cloud portal to manage the switch, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit netgear.com/support.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Navigation tabs, configuration menus, and page menu The following figure shows the System Information page for model GS724TPP. Navigation tabs Configuration menus Logout button Language menu Help page Buttons Page menus Configuration status and options Figure 1.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Link Submenu links Figure 2. Switch page menu link and submenu links Configuration and status options The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports User-defined fields User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page. All characters can be used except for the ones stated in the following table (unless specifically noted in a procedure for a feature). Table 2. Invalid characters for user-defined fields Invalid characters for user-defined fields \ | / < > * ? Context-sensitive help When you log in to the swit
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Access the switch on-network and connected to the Internet The DHCP client on the switch is enabled by default, allowing a DHCP server or router on the network to assign an IP address to the switch. If the switch is on-network, connected to a DHCP server, and connected to the Internet, you can use a Windows-based computer to access the device UI of the switch and register the switch with NETGEAR.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Use a Windows-based computer to access the switch on-network and connected to the Internet For the following procedure, the network must provide Internet access. To use a Windows-based computer to determine the switch IP address and access the switch on-network and connected to the Internet: 1. Cable the switch to a network with a router or DHCP server that manages IP addresses. 2. Power on the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports - Device admin password: Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To use the NETGEAR Insight app to discover the IP address of the switch in your network when the switch is connected to the Internet: 1. On your mobile device, go to the app store, search for NETGEAR Insight, and download the latest version of the app. 2. Connect your mobile device to the WiFi network of the WiFi router or access point to which the switch is connected. 3. Open the NETGEAR Insight mobile app. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. Unzip the NSDT files, and click or double-click the .exe file (for example, NSDT-1.2.102.exe) to install the program on your computer. You might see the tool icon appear on your Mac dock or Windows desktop. 4. Reenable the security services on your computer. 5. Power on the switch. The DHCP server assigns the switch an IP address. 6. Connect your computer to the same network as the switch.
-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Device UI login page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials: - Device admin password: Enter the device admin password. The default device admin password is password.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Write down the switch IP address assigned by the DHCP server. For information about how to access the device UI of the switch, see Access the switch on-network and connected to the Internet when you know the switch IP address on page 25. Use other options to discover the switch IP address If the switch is on-network, you can use one of the following options to determine the switch IP address: • Access the DHCP server.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To access the switch on-network and connected to the Internet when you know the switch IP address: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you activated the warranty. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Access the switch off-network and not connected to the Internet The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 31. b. Click the Submit button. • Do not register at this time and access the device UI: Do the following: a. Click the Skip Registration & Access the UI button. The Device UI login page displays. b. Enter one of the following credentials: - Device admin password: Enter the device admin password.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Alternatively, you can obtain a registration key and enter the key when the switch is offline so that you are no longer prompted to activate your warranty (see Register the switch with your NETGEAR account and get a registration key for offline access on page 31). • Device admin password: You can access the device UI with your device admin password.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Register the switch You can register the switch online or offline to activate your warranty, after which you are no longer prompted to activate your warranty when you log in: • Online registration for on-network access: If your switch is on-network or connected to the Internet, you can register the switch with your NETGEAR account credentials and activate your warranty.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet create a NETGEAR account, click the Create account link, follow the directions onscreen to create an account, and register the switch with your email address and password. For information about the credentials, see Credentials for the device UI on page 28. 5.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The switch is registered with NETGEAR. 6. If the My Products page does not display, select My Products from the menu. The page adjusts. 7. Select the radio button for the newly registered switch, and click the Get Registration Key button. The registration key is displayed, and an email with the registration key is sent to your NETGEAR account email address.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Launch a web browser. 5. Open a web browser, and enter http://192.168.0.239. This is the default IP address of the switch. If you already disabled the DHCP client and assigned a static IP address to the switch, enter the static IP address of the switch. The Enter Registration Key page displays. 6. Enter the registration key. 7. Click the Submit button.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Register to activate your warranty page displays. 4. Click the Skip Registration & Access the UI button. The Device UI login page displays. 5.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports configuration saved on the cloud server, including the switch device admin password (that is, the password is reset to the Insight network location password). - • If you use the Insight app or the Insight Cloud portal, you can temporarily change the management mode of the switch back to Directly Connect to Web Browser Interface.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select the NETGEAR Insight Mobile App and Insight Cloud Portal radio button. An Alert pop-up window displays. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports A pop-up window displays. d. Navigate to a location on your computer and save the file. The file transfer begins. The page displays information about the file transfer progress. 12. Reset the switch to factory default settings: a. Select Maintenance > Reset > Factory Default. The Default Settings page displays. b.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The file transfer begins. The page displays information about the progress of the file transfer. The switch applies the configuration automatically. 14. Reboot the switch: a. Select Maintenance > Reset > Device Reboot. The Device Reboot page displays. b. Select the check box. c. Click the Apply button. An Alert pop-up window displays. d. Click the OK button to confirm. The switch reboots. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select System > Device View.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the ports and port LEDs in the Device View. Port or port LED Color Description Ethernet port Black No Ethernet link is established. Solid green An Ethernet link is established. Solid red An error occurred on the port or the port is administratively disabled. Upper Ethernet Solid dark green port LED Solid green No Ethernet link is established.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Right-click the specific port that you want to view or configure to see a menu that displays statistics and configuration options. Select the menu option to access the page that contains the configuration or monitoring options.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure interface settings The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are Gigabit interfaces and are numbered on the front panel. You configure the logical interfaces by using the software. The following table describes the naming convention for all interfaces available on the switch. Table 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports log in to the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. To configure a single port by using the Go To Interface field: 1. Ensure that the page is displaying all ports, and not only the LAGs. 2. In the Go To Interface field, type the port number, for example g3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The row for the selected interface is highlighted, and the interface number appears in the heading row. 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved. To configure a single LAG: 1. Click the LAG link or the All link to display the LAGs. 2. Select the check box next to the LAG number. The row for the selected interface is highlighted, and the interface number appears in the heading row.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved. To configure all ports: 1. Ensure that the page is displaying only ports, and not LAGs. 2. Select the check box in the heading row. The check box associated with every port is selected, and the rows for all ports are highlighted. 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The rows for the selected ports and LAGs are highlighted. 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved. To configure all ports and LAGs: 1. Click the All link to display all ports and LAGs. 2. Select the check box in the heading row. The check box associated with every port and LAG is selected, and the rows for all ports and LAGs are highlighted. 3. Configure the desired settings. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Help > Support. The Support page displays. 7. To access the NETGEAR support site for the switch, click the Apply button. Access the user manual online The user manual (the guide you are now reading) is available at the NETGEAR download center at netgear.com/support/download/. To access the user manual online from the device UI: 1.
2 2 Configure System Information This chapter contains the following sections: • View or define switch system information • Configure the switch IP address settings • Configure the IPv6 network interface • Configure the time settings • Configure Denial of Service settings • Configure the DNS settings • Configure Green Ethernet settings • Use the Device View • Configure Power over Ethernet • Configure SNMP • Configure LLDP • Configure DHCP snooping • Set up PoE timer schedules 50
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View or define switch system information You can view or define system information, view temperature information, view fan information, and view software information. View or define system information When you log in, the System Information page displays. You can configure and view general device information. To view or define system information: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Location. Enter the location of this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Contact. Enter the contact person for this switch. You can use up to 255 alphanumeric characters. The default is blank. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Field Description System Up Time The time in days, hours, and minutes since the last switch reboot. Base Mac Address Universally assigned hardware address of the switch. View the fan status The fans remove the heat generated by the power, CPU, and other components, and allow the switch to function normally. Model GS724TPv2 integrates two fans. Model GS724TPP integrates three fans. You can view the fan status.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable temperature and fan status information. Table 5. Fan status Field Description FAN The fan index used to identify the fan for the switch. Description The description of the fan temperature sensor. Type Specifies whether the fan module is fixed or removable. Speed The fan speed. Duty level (%) The duty level of the fan.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. To refresh the page, click the Refresh button. The following table describes the nonconfigurable information displayed in the Versions section of the System Information page. Field Description Model Name The model name of the switch. Boot Version The version of the bootloader software of the switch. Software Version The version number of the code currently running on the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select System > Management > IP Configuration. The IP Configuration page displays. 7. Select the appropriate radio button to specify how to configure the network information for the switch device UI: • Static IP Address. Specifies that the IP address, subnet mask, and default gateway must be manually configured.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • When a new management VLAN is configured, connectivity through the existing management VLAN is lost. • The management station must be reconnected to the port in the new management VLAN. 10. Click the Apply button. Your settings are saved.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select System > Management > IPv6 Network Configuration. The IPv6 Network Global Configuration page displays. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To view the IPv6 Network Neighbor Table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 6. IPv6 network interface neighbor table information (continued) Field Description Neighbor State The state of the neighboring switch: • reachable (1). The neighbor is reachable by this switch. • stale (2). Information about the neighbor is scheduled for deletion. • delay (3). No information was received from the neighbor during the delay period. • probe (4). The switch is attempting to probe for this neighbor.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select System > Management > Time > Time Configuration. 7. Select the Clock Source Local radio button. 8. In the Date field, specify the current date by entering the month, day, and year (MM/DD/YYYY). 9.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the time settings with SNTP To configure the time by using SNTP: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The local clock can be set to SNTP only if the following two conditions are met: • An SNTP server is configured. • The switch can contact the SNTP server. 8. Next to Client Mode, select the mode of operation of the SNTP client: • Unicast. SNTP operates in a point-to-point fashion.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 12. In the Broadcast Poll Interval field, specify the number of seconds between broadcast poll requests expressed as a power of 2. Broadcasts received prior to the expiry of this interval are discarded. The range is from 6 to 10. The default value is 6. 13. In the Unicast Poll Timeout field, specify the number of seconds to wait for an SNTP response to a unicast poll request. The range is from 1 to 30.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the SNTP global status If you configure the time settings with SNTP, you can view information about the switch’s SNTP client and the global SNTP status. To view information about the switch’s SNTP client and the SNTP global status: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Click the Refresh button to update the page with the latest information about the switch. The following table displays the nonconfigurable SNTP Global Status information. Table 7. SNTP Global Status information Field Description Version The SNTP version that the client supports. Supported mode The SNTP modes that the client supports. Multiple modes can be supported by a client.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 7. SNTP Global Status information (continued) Field Description Reference Clock ID The reference clock identifier of the server for the last received valid packet. Server mode The mode of the server for the last received valid packet. Unicast Server Max Entries The maximum number of unicast server entries that can be configured on this client.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports method is selected, SNTP information is accepted only from SNTP servers defined on the device using the SNTP Server Configuration page. The device retrieves synchronization information, either by actively requesting information or at every poll interval. You can view and modify information for adding and modifying Simple Network Time Protocol SNTP servers. Add an SNTP server To add an SNTP server: 1.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports address is a DNS host name, then that host name is resolved into an IP address each time an SNTP request is sent to it. 9. If the UDP port on the SNTP server to which SNTP requests are sent is not the standard port (123), specify the port number in the Port field. The valid range is 1 to 65535. The default is 123. 10. In Priority field, specify the priority order which to query the servers.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 8. SNTP Server Status information (continued) Field Description Last Attempt Status The status of the last SNTP request or unsolicited message for both unicast and broadcast modes. If no message was received from a server, a status of Other is displayed. These values are appropriate for all operational modes: • Other. The status of the last request is unknown, or no SNTP responses were received. • Success.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select System > Management > Time > SNTP Server Configuration. The SNTP Server Configuration page displays. 7. Select the check box next to the configured server. 8. Specify new values in the available fields. 9. Click the Apply button. Your settings are saved. Remove an SNTP server To remove an SNTP server: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure daylight saving time settings You can configure settings for summer time, which is also known as daylight saving time. Used in some countries around the world, summer time is the practice of temporarily advancing clocks during the summer months. Typically clocks are adjusted forward one or more hours near the start of spring and are adjusted backward in autumn. To configure the daylight saving time settings: 1.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select a Daylight Saving (DST) radio button: • Disable. Disable daylight saving time. • Recurring. Daylight saving time occurs at the same time every year. The start and end times and dates for the time shift must be manually configured. • Recurring EU. The system clock uses the standard recurring summer time settings used in countries in the European Union.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The fields that are described in the following table are visible on the page only if the DayLight Saving (DST) Recurring, Recurring EU, or Recurring USA radio button is selected. Table 9. Daylight saving setting is Recurring, Recurring EU, or Recurring USA Field Description Begins At These fields are used to configure the start values of the date and time. • Week. Configure the start week. • Day. Configure the start day.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the daylight saving time status The Daylight Saving (DST) Status section shows information about the summer time settings and whether the time shift for summer time is currently in effect. To view the daylight saving time status: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table displays the nonconfigurable information on the page. Table 11. Daylight Saving (DST) Status information Field Description Daylight Saving (DST) The Daylight Saving value, which is one of the following: • Disable • Recurring • Recurring EU • Recurring USA • Non Recurring Begins At Displays when the daylight saving time begins. This field is not displayed when daylight saving time is disabled.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the DNS settings You can configure information about DNS servers that the network uses and how the switch operates as a DNS client. Configure the global DNS settings You can configure global DNS settings and DNS server information. To configure the global DNS settings: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the Disable or Enable radio button to specify whether to disable or enable the administrative status of the DNS client. • Enable. Allow the switch to send DNS queries to a DNS server to resolve a DNS domain name. The DNS is enabled by default. • Disable. Prevent the switch from sending DNS queries. 8. In the DNS Default Name field, enter the default DNS domain name to include in DNS queries.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the fields that are shown in the DNS Server Configuration table. Table 12. DNS Server Configuration information Field Description ID The identification of the DNS Server. Preference Shows the preference of the DNS server. The preferences are determined by the order in which they were entered.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the Host Name (1 to 255 characters) field, specify the static host name to add. Its length cannot exceed 255 characters and it is a required field. 8. In the IPv4/IPv6 Address field, enter the IP address to associate with the host name. 9. Click the Add button. The entry displays in the list on the page. Remove an entry from the dynamic host mapping table To remove an entry from the dynamic host mapping table: 1.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the check box next to the entry to remove. 8. Click the Delete button. Change the host name or IP address in an entry of the dynamic host mapping table and view all entries To change the host name or IP address in an entry of the dynamic host mapping table and view all entries: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Dynamic Host Mapping table shows host name-to-IP address entries that the switch learned. The following table describes the dynamic host fields. Table 13. Dynamic Host Mapping information Field Description Host Lists the host name that you assign to the specified IP address. Total Time since the dynamic entry was first added to the table. Elapsed Time since the dynamic entry was last updated.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select System > Management > Green Ethernet > Green Ethernet Configuration. The Green Ethernet Configuration page displays. 7. Select the Auto Power Down Mode Disable or Enable radio button. By default, this mode is disabled.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select System > Management > Green Ethernet > Green Ethernet Interface Configuration. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports not dropped or corrupted in transition to and from low power mode. Transition time is transparent to upper layer protocols and applications. 10. Click the Apply button. Your settings are saved. Manage switch discovery with UPnP and SSDP By default, Universal Plug and Play (UPnP) and Simple Service Discovery Protocol (SSDP) are enabled on the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the Enable or Disable radio button. By default, the Enable radio button is selected so that both UPnP and SSDP are enabled and the switch can be discovered in the network. 8. Click the Apply button. Your settings are saved. The UPnP / SSDP Administrative Mode field shows the status of UPnP and SSDP. Use the Device View For device view information, see Use the Device View of the device UI on page 40.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Device class power requirements PoE and PoE+ use Ethernet cables to supply power to PoE-capable devices on the network, such as WiFi access points, IP cameras, VoIP phones, and switches. The switch is compliant with the IEEE 802.3at standard (PoE+) and backward compatible with the IEEE 802.3af standard (PoE). The switch can pass power through to any powered device (PD) that supports these standards.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports the total available power budget. (For information about the total available power budget, see PoE concepts on page 88.) An example for model GS724TPv2: Port 1 delivers 4.4W to a PD. The available power budget is 185.6W (190W–4.4W). An example for model GS724TPP: A Class 4 PD is attached to Port 1, a Class 2 PD to Port 2, and another Class 4 PD to Port 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The delivered power is stated in the Output Power (Watt) column. Configure PoE trap settings and view PoE information You can configure the PoE trap settings and view PoE information such as nominal power, threshold power, and consumed power. To configure the PoE trap settings and view PoE information: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable fields on the page. Table 16. PoE Configuration fields Field Description Firmware Version The firmware version of the PoE firmware component. Power Status The power status. Nominal Power The maximum amount of power in watts that the switch can deliver to all ports.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select one or more ports by taking one of the following actions: • To configure a single port, select the check box associated with the port, or type the port number (for example, g1) in the Go To Interface field and click the Go button. • To configure multiple ports with the same settings, select the check box associated with each interface.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 11. From the Detection Type menu, select how the port detects the attached PD: • pre-ieee. The port performs legacy detection. • ieee auto. The port performs a 4-point resistive detection. This is the default setting. • auto. The port performs a 4-point resistive detection, and if required, continues with legacy detection. 12.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 17. PoE Port Configuration (continued) Field Description Status The operational status of the port. The possible values are as follows: • Disabled. No power is delivered. • DeliveringPower. Power is being drawn by the PD. • Fault. A problem occurred with the power. • Test. The port is in test mode. • otherFault. The port is idle because of an error condition. • Searching.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Add an SNMP community: To add an SNMP community: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports from one 192.168.1.0 through 192.168.1.255 (inclusive) is allowed access. To allow access from only one station, use a management station IP mask value of 255.255.255.255, and use that machine’s IP address for client address. 9. In the Community String field, specify a community name. 10. From the Access Mode menu, select the access level for this community, which is either Read/Write or Read Only. 11.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 9. Click the Apply button. Your settings are saved. Delete an SNMP community To delete an SNMP community: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Add an SNMP trap receiver To add an SNMP trap receiver: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 11. Click the Add button. The receiver configuration is added. Modify information about an existing SNMP recipient To modify information about an existing SNMP recipient: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the supported MIBs You can view a list of all MIBs that are supported by the switch. To view the supported MIBs: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To configure authentication and encryption settings for the SNMPv3 admin profile by using the web interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN. LLDP is a one-way protocol without any request/response sequences.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure LLDP port settings You can specify per-interface LLDP settings. To configure the LLDP interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • To configure all interfaces with the same settings, select the check box in the heading row. 8. Use the following menus to configure the LLDP settings for the selected ports: • Admin Status. Select the status for transmitting and receiving LLDP packets: - Tx Only. Enable only transmitting LLDP PDUs on the selected ports. - Rx Only. Enable only receiving LLDP PDUs on the selected ports. - Tx and Rx.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 19. LLDP-MED network policy information (continued) Field Description VLAN Type Indicates whether the VLAN associated with the policy is tagged or untagged. User Priority The priority associated with the policy. DSCP The DSCP associated with a particular policy type. Configure LLDP-MED port settings You can enable LLDP-MED mode on an interface and configure its properties.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Use the following menus to enable or disable the following LLDP-MED settings for the selected port: • LLDP-MED Status. The administrative status of LLDP-MED on the interface. When LLDP-MED is enabled, the transmit and receive function of LLDP is effectively enabled on the interface. • Notification. When Notification is enabled, the port sends a topology change notification if a device is connected or removed.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select System > LLDP > Advanced > Local Information. The page includes only the interfaces on which LLDP is enabled. The following table describes the LLDP device information and port summary information. Field Description Chassis ID Subtype The type of information used to identify the switch in the Chassis ID field. Chassis ID The hardware platform identifier for the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the detailed local information that displays for the selected port. Field Description Managed Address Address SubType The type of address the device UI uses, such as an IPv4 address. Address The address used to manage the device. Interface SubType The port subtype. Interface Number The number that identifies the port.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View LLDP neighbors information You can view the data that a specific interface receives from other LLDP-enabled systems. To view LLDP information received from a neighbor device: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the information that displays for all LLDP neighbors that were discovered. Field Description MSAP Entry The Media Service Access Point (MSAP) entry number for the remote device. Local Port The interface on the local system that received LLDP information from a remote system. Chassis ID Subtype The type of data displayed in the Chassis ID field on the remote system.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Field Description Managed Addresses Address SubType The type of the management address. Address The advertised management address of the remote system. Interface SubType The port subtype. Interface Number The port on the remote device that sent the information. MAC/PHY Details Auto-Negotiation Supported Specifies whether the remote device supports port-speed autonegotiation. The possible values are True or False.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Field Description Location Information Civic The physical location, such as the street address, that the remote device advertised in the location TLV, for example, 123 45th St. E. The field value length range is 6–160 characters. Coordinates The location map coordinates that the remote device advertised in the location TLV, including latitude, longitude, and altitude.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the global DHCP snooping settings You can view and configure the global settings for DHCP snooping. To configure the global DHCP snooping settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports When MAC address validation is enabled, the device checks packets that are received on an untrusted interface to verify that the MAC address and the DHCP client hardware address match. If the addresses do not match, the device drops the packet. 9. Click the Apply button. Your settings are saved. Enable DHCP for all interfaces in a VLAN To enable DHCP snooping for all interfaces that are members of a VLAN: 1.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure DHCP snooping interface settings You can view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded. If a port is configured as untrusted, any DHCP (or BootP) responses received on that port are discarded. To configure DHCP snooping interface settings: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To configure static DHCP bindings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Dynamic Binding Configuration table shows information about the DHCP bindings that were learned on each interface on which DHCP snooping is enabled. The following table describes the dynamic bindings information. Table 20. DHCP Dynamic Configuration information Field Description Interface The interface on which the DHCP client message was received.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Specify the settings for a recurring PoE timer schedule A recurring schedule allows you to set up a single schedule that starts at a particular date and that recurs either with a specific end date or indefinitely. For a single recurring PoE timer schedule, you can add a daily, weekly, and monthly schedule configuration. That is, these schedule configurations are not mutually exclusive but complement each other.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports c. Timer Schedule Entry. To add a new entry, select new. Selecting an existing entry lets you make changes to that entry. 8. In the Timer Schedule Configuration section, specify the recurrence pattern: a. In the Time Start field, enter the time of day in the HH:MM format to specify when the timer schedule must start. b.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Change the settings for a recurring PoE timer schedule entry You can change the settings for an existing recurring PoE timer schedule entry. (You cannot do this for an existing absolute PoE timer schedule.) To change the settings for an existing recurring PoE timer schedule entry: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Delete a PoE timer schedule entry You can delete a PoE timer schedule entry that you no longer need. To delete a PoE timer schedule entry: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Delete a PoE timer schedule You can delete a PoE timer schedule that you no longer need. All entries that are part of the PoE timer schedule are also deleted. To delete a PoE timer schedule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
3 3 Configure Switching This chapter contains the following sections: • Configure the port settings and maximum frame size • Configure link aggregation groups • Configure VLANs • Configure a voice VLAN • Configure Auto-VoIP • Configure Spanning Tree Protocol • Configure multicast • View, search, and manage the MAC address table • Configure Layer 2 loop protection 131
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the port settings and maximum frame size You can view, configure, and monitor the physical port information for the ports (that is, the physical interfaces) on the switch. To configure the port settings and maximum frame size: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the Frame Size field, specify the maximum Ethernet frame size that each interface can support. The frame size includes the Ethernet header, CRC, and payload. The range is 1522 to 10000. The default maximum frame size is 1522. 8. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch).
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 14. From the Duplex Mode menu, select the duplex mode for the selected port. Possible values are as follows: • Auto. Indicates that speed is set by the auto-negotiation process. • Full. Indicates that the interface supports transmission between the devices in both directions simultaneously. • Half. Indicates that the interface supports transmission between the devices in only one direction at a time.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 21. Port Configuration information (continued) Field Description Frame Size (1522 to 10000) The maximum Ethernet frame size that each interface can support. The frame size depends on your selection from the Frame Size menu above the table and applies to each interface. MAC Address Displays the physical address of the specified interface.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Disable. Spanning tree is disabled for this LAG. • Enable. Spanning tree is enabled for this LAG. Enable is the default. 12. From the Link Trap menu, select Enable or Disable to specify whether to send a trap when the link status changes. The default is Enable, which causes the trap to be sent. 13. From the LAG Type menu, select Static or LACP: • Static.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Switching > LAG > Basic > LAG Membership. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 9. In the Timeout field, configure the administrative LACP time-out value: • Long. Specifies a long time-out value. • Short. Specifies a short time-out value. 10. Click the Apply button. Your settings are saved. Configure VLANs Adding virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 11. Click the Add button. The VLAN is added to the switch. Delete a VLAN To delete a VLAN from the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Reset the VLAN configuration on the switch to the default settings If you reset the VLAN configuration on the switch to the default settings, all VLANs that you added are deleted. (The predefined VLANS are not deleted). The VLAN default values are as follows: • All ports are assigned to the default VLAN of 1. • All ports are configured with a PVID of 1.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure VLAN membership To configure VLAN membership: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. In the Group Operation menu, select one of the following options, which applies to all ports in the VLAN: • Untag All. For all ports and LAGs that are members of the VLAN, tags are removed from all egress packets. • Tag All. For all ports and LAGs that are members of the VLAN, all egress packets are tagged. • Remove All.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the VLAN status You can view the status of all currently configured VLANs. To view the VLAN status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 24. VLAN status (continued) Field Definition VLAN Type The VLAN type: • Default (VLAN ID = 1). Always present. • Auto-VoIP (VLAN ID = 4088). Always present. • Static. A VLAN that you configured. • Dynamic. A VLAN that is created through GVRP registration, that you did not convert to a static VLAN, and that GVRP can therefore remove. Member Ports The ports that are included in the VLAN.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Switching > VLAN > Advanced > Port PVID Configuration. 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports With the Admit All and VLAN Only selections, VLAN-tagged frames are forwarded in accordance to the 802.1Q VLAN specification. 13. From the Ingress Filtering menu, select one of the following options: • Enable. The frame is discarded if this port is not a member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is identified by the VLAN ID in the tag.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 9. From the Interface Mode menu, select the voice VLAN mode for selected interfaces: • Disable. This is the default value. • None. Allow the IP phone to use its own configuration to send untagged voice traffic. • VLAN ID. Configure the phone to send tagged voice traffic. You must enter the VLAN ID in the Value field (see the next step). • Dot1p. Configure voice VLAN 802.1p priority tagging for voice traffic.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports VoIP frames that are received on ports that for which the Auto-VoIP feature is enabled are marked with the specified CoS traffic class value. To configure the Auto-VoIP protocol-based settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. From the Class Value menu, specify the CoS tag value to be reassigned for packets received on the voice VLAN when Remark CoS is enabled. 9. In the Protocol Based Global Settings section, specify the Auto VoIP Mode settings: a. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Switching > Auto-VoIP > OUI-based > Port Settings. 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage the OUI table Device hardware manufacturers can include an OUI in a network adapter to help identify a hardware device. The OUI is a unique 24-bit number assigned by the IEEE registration authority.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Switching > Auto-VoIP > OUI-based > OUI Table. The OUI Table page displays. 7. In the Telephony OUI(s) field, specify the VoIP OUI prefix to be added in the format AA:BB:CC. You can configure up to 32 OUIs. 8. In the Description field, enter the description for the OUI. The maximum length of description is 32 characters. 9. Click the Add button.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Click the Delete button. The telephony OUI entries are removed. Display the Auto-VoIP status You can display the Auto-VoIP status. To view the Auto-VoIP status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 26. Auto-VoIP status information (continued) Field Description Number of Voice Channels Detected The number of VoIP channels prioritized successfully. Configure Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of network devices. STP also provides one path between end stations on a network, eliminating loops.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the STP settings and view the STP status You can configure the STP settings and view the STP status on the switch. To configure the STP settings and view the STP status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports c. Configuration Name. Specify a name to identify the STP, RSTP, or MSTP configuration. The name can be up to 32 alphanumeric characters. d. Configuration Revision Level. Specify an identifier to identify the STP, RSTP, or MSTP configuration. The values can be from 0 to 65535. The default value is 0. e. Forward BPDU while STP Disabled. Enable or disable the bridge protocol data unit (BPDU) flood.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 27. STP Configuration status (continued) Field Description CST Regional Root The priority and base MAC address of the CST regional root. CST Path Cost The path cost to the CST tree regional root. Configure the CST settings You can configure Common Spanning Tree (CST) and Internal Spanning Tree on the switch. To configure CST settings: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Specify the CST options: • Bridge Priority. When switches or bridges are running STP, each is assigned a priority. After exchanging BPDUs, the switch with the lowest priority value becomes the root bridge. Specify the bridge priority value for the Common and Internal Spanning Tree (CST). The valid range is 0–61440. The bridge priority is a multiple of 4096.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the CST port settings You can configure Common Spanning Tree (CST) and Internal Spanning Tree on a specific port on the switch. A port can become diagnostically disabled (D-Disable) when DOT1S experiences a severe error condition. The most common cause is when the DOT1S software experiences BPDU flooding. The flooding criteria are such that DOT1S receives more than 15 BPDUs in a 3-second interval.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 16. Click the Apply button. Your settings are saved. 17. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable information on the page. Table 28. CST port configuration Field Description Port State The forwarding state of this port. The default is Disabled. Port ID The port identifier for the specified port within the CST.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The CST Port Status page displays. 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the Rapid STP information You can view information about the status of the Rapid Spanning Tree (RSTP) port. To view information about RSTP: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 30. Rapid STP status information (continued) Field Description Mode Specifies the spanning tree operation mode. Different modes are STP, RSTP, and MSTP. Fast Link Indicates whether the port is enabled as an edge port. Status The forwarding state of this port. Manage the MST settings You can configure Multiple Spanning Tree (MST) on the switch. Configure an MST instance To configure an MST instance: 1.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Configure the MST values: • MST ID. Specify the ID of the MST to create. The valid values for this are 1 to 64. This is visible only when the select option of the MST ID select box is selected. The switch supports up to four instances. • Priority. The bridge priority value for the MST. When switches or bridges are running STP, each is assigned a priority.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Switching > STP > Advanced > MST Configuration. The MST Configuration page displays. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Switching > STP > Advanced > MST Port Configuration. Note: If no MST instances are configured on the switch, the page displays a “No MSTs Available” message. 7. From the Select MST menu, select the MST instance. You can select only instances that you added to the switch (see Configure an MST instance on page 170). 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 11. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information on the page. Table 32. MST port status information Field Description Auto-calculated Port Path Cost Displays whether the path cost is automatically calculated (Enabled) or not (Disabled). Path cost is calculated based on the link speed of the port if the configured value for Port Path Cost is zero.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the STP statistics You can view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To view Spanning Tree statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • All. Both physical interfaces and LAGs are displayed. 8. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable information on the page. Table 33. STP Statistics Field Description Interface The physical port or LAG on the switch. STP BPDUs Received The number of STP BPDUs received at the selected port.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the MFDB statistics To view the MFDB statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage IGMP snooping Internet Group Management Protocol (IGMP) snooping is a feature that allows a switch to forward IPv4 multicast traffic intelligently. Multicast IPv4 traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 36. IGMP Snooping Configuration information (continued) Field Description VLAN IDs Enabled For IGMP Snooping The IDs of the VLANs that are enabled for IGMP snooping. VLAN IDs Enabled For IGMP Snooping Querier The IDs of the VLANs that are enabled for IGMP snooping querier. Configure IGMP snooping for interfaces To configure IGMP snooping for interfaces: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Enter a value between 0 and 3600 seconds. The default is 0 seconds. A value of zero indicates an infinite time-out, that is, no expiration. 13. From the Fast Leave Mode menu, select whether fast leave mode is enabled. The option are Enable and Disable. The default is Disable. 14. Click the Apply button. Your settings are saved.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Click the Go button. If the address exists, the entry is displayed. An exact match is required. The following table describes the nonconfigurable information on the page. Table 37. IGMP Snooping Table information Field Description MAC Address The multicast MAC address for which the switch holds forwarding and/or filtering information.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Switching > Multicast > IGMP Snooping > IGMP Snooping VLAN Configuration. 7. Select the check boxes for one or more VLANs. If you select the check box for a single VLAN, the VLAN ID displays in the VLAN ID field. 8. Configure the IGMP snooping values for the selected VLAN or VLANs: • Admin Mode. Enable or disable IGMP snooping for the specified VLAN ID. The default is Disable.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Modify IGMP snooping settings for a VLAN To modify IGMP snooping settings for a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure an IGMP multicast router VLAN You can configure an interface to forward only snooped IGMP packets from a specific VLAN to the multicast router connected to the interface. This configuration is usually not required because the switch automatically detects a multicast router and forwards the IGMP packets accordingly.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. In the VLAN ID field, enter the VLAN ID. 9. From the Multicast Router menu, select Enable or Disable. 10. Click the Apply button. Your settings are saved. IGMP snooping querier overview IGMP snooping requires that one central switch or router periodically queries all end-devices on the network to announce their multicast memberships. This central device is the IGMP querier.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Switching > Multicast > IGMP Snooping Querier > Querier Configuration. 7. Configure the following settings: • Querier Admin Mode. Enable or disable IGMP snooping for the switch. The default is Disable. • Snooping Querier IP Address. Enter the snooping querier IP address to be used as the source address in periodic IGMP queries.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 38. Querier VLAN Status information (continued) Field Description Operational Version The operational IGMP protocol version of the querier. Last Querier Address The IP address of the last querier from which a query was snooped on the VLAN. Last Querier Version The IGMP protocol version of the last querier from which a query was snooped on the VLAN.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Switching > Address Table > Basic > Address Table. 7. Use the Search menu and field to search for a MAC address, VLAN ID, or interface number: • MAC Address.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 39. MAC address table information (continued) Field Description Interface The interface upon which this address was learned. Status The status of this entry. The meanings of the values are as follows: • Static. The value of the corresponding instance was added by the system or a user and cannot be relearned. • Learned. The value of the corresponding instance was learned, and is being used. • Management.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the Address Aging Timeout (seconds) field, specify the time-out period in seconds for aging out dynamically learned forwarding information. The value can be any number between 10 and 1000000 seconds. The default is 300 seconds. 8. Click the Apply button. Your settings are saved. Add a static MAC address to the MAC address table To add a static MAC address to the MAC address table: 1.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. From the Interface menu, select the interface. 8. In the Static MAC Address field, enter the MAC address. 9. From the VLAN ID menu, select the VLAN ID that must be associated with the MAC address. 10. Click the Add button. The static MAC address is added to the switch. Configure Layer 2 loop protection Loops inside a network are costly because they consume resources and reduce the performance of the network.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Loop protection is supported on physical interfaces and static LAG interfaces, but not on dynamic LAG interfaces. Configure global Layer 2 loop protection To configure L2 loop protection globally: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 9. From the Max PDU Receive menu, select the maximum number of packets to be received before an action is taken. The default is 1. 10. In the Disable Timer field, enter the time in seconds after which a port is disabled when a loop is detected. The range is from 0 to 604800 seconds. The default is 0 seconds. 11. Click the Apply button. Your settings are saved.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information displayed on the page. Table 40. L2 Loop Protection Interface Information Field Description Loop Detected Shows whether a loop is detected on the interface. If the interface is disabled and then reenabled, the status changes to No again. Loop Count The number of packets that were received after the loop was detected.
4 4 Configure Quality of Service This chapter contains the following sections: • Quality of Service concepts • Manage Class of Service • Manage Differentiated Services 204
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Quality of Service concepts In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports ports, in accordance with the configured default priority of the ingress port. This process is also used for cases where a trusted port mapping cannot be honored, such as when a non-IP packet arrives at a port configured to trust the IP DSCP value. Configure the global CoS settings A global configuration setting is automatically applied to all interfaces on the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Either configure the same CoS trust mode settings for all CoS-configurable interfaces or configure CoS settings per interface: • To configure the same CoS trust mode settings for all CoS configurable interfaces, do the following: a. Select the Global radio button. b. From the Global Trust Mode menu, select one of the following trust mode options for ingress traffic on the switch: - Untrusted.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • DSCP. The six most significant bits of the DiffServ field are called the Differentiated Services Code Point (DSCP) bits. 10. In the Interface Shaping Rate field, specify the maximum outbound transmission rate bandwidth in kbps. This setting is used to shape the outbound transmission rate in increments of 1 percent in a range of 0–100.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 10. From the Scheduler Type menu, select one of the following options: • Strict. The interface services traffic with the highest priority on a queue first. • Weighted. The interface uses weighted round robin to associate a weight to each queue. This is the default setting. 11. Click the Apply button. Your settings are saved.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the 802.1p to Queue Mapping table, map each of the eight 802.1p priorities to a queue (internal traffic class) from 0 to 7. The 802.1p Priority row contains traffic class selectors for each of the eight 802.1p priorities to be mapped. The priority goes from low (0) to high (7). For example, traffic with a priority of 0 is for most data traffic and is sent using best effort.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select QoS > CoS > Advanced > DSCP to Queue Mapping. 7. For each DSCP value, select from the corresponding Queue menu which internal traffic class must be mapped to the DSCP value. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-based networks provide best-effort data delivery service. Best-effort service implies that the network delivers the data in a timely fashion, although there is no guarantee.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the DiffServ mode and display the entries in the DiffServ private MIB tables You can enable or disable DiffServ and display the current and maximum number of rows in each of the main DiffServ private MIB tables. To configure the DiffServ mode and display the entries in the DiffServ private MIB tables: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the administrative mode for DiffServ: • Enable. Differentiated services are active. This is the default setting. • Disable. The DiffServ configuration is retained and can be changed but is not active. 8. Click the Apply button. Your settings are saved. The following table describes the information displayed in the Status table on the page. Table 41.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 10. Define the criteria that must be associated the DiffServ class by selecting one of the following radio buttons: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class. The only selection from the Match Every menu is Any. • Reference Class. Select this radio button to reference another class for criteria.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Ethernet Type. Select this radio button to require the EtherType value in the Ethernet frame header to match the specified EtherType value. After you select the radio button, select the EtherType keyword from the menu of common protocols that are mapped to their Ethertype value. You can also select User Value from the menu and enter a value in the hexadecimal range from 600 to ffff. • Source MAC.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports After you select the radio button, use the following fields to configure the destination IP address match criteria: - Address. The destination IP address format to match in dotted-decimal. - Mask. The bit mask in IP dotted-decimal format indicating which parts of the destination IP address to use for matching against packet content. • Destination L4 Port.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > Class Configuration. The Class Name page displays. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the check box next to the class name. 8. Click the Delete button. The class is removed. Configure DiffServ IPv6 class settings The switch supports QoS ACL and DiffServ functionality for IPv6 by providing support for IPv6 packet classification. An IPv6 ACL serves the same purpose as an IPv4 ACL.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The IPv6 Class Name page displays. 7. Enter a class name in the Class Name field. The Class Name field also lists all the existing IPv6 class names, from which one can be selected for modification or deletion. 8. From the Class Type menu, select the class type. The switch supports only the class type value All, which means that all the various match criteria defined for the class are satisfied for a packet match.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Reference Class. Select this radio button to reference another class for criteria. The match criteria defined in the reference class function as match criteria in addition to the match criteria that you define for the selected class. After selecting this option, the classes that can be referenced are displayed. Select the class to reference. A class can reference one other class of the same type. • Protocol Type.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Rename an existing IPv6 DiffServ class To rename an existing IPv6 DiffServ class: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > IPv6 Class Configuration. The IPv6 Class Name page displays. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select QoS > DiffServ > Advanced > Policy Configuration. The Policy Configuration page displays. 7. Enter a policy name in the Policy Name field. You cannot specify the policy type. By default, the policy type is In, indicating that the policy applies to ingress packets. 8. From the Member Class menu, select an existing class that you want to associate with the new policy. 9. Click the Add button. The new policy is added.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Mark IP Precedence. Select this radio button to require packets to be marked with an IP precedence value before being forwarded. You must select an IP precedence value from 0 to 7 from the menu. • Mirror. Select this radio button to require packets to be mirrored to an interface or LAG, one of which you must select from the menu. • Redirect.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > Policy Configuration. The Policy Configuration page displays. 7. Select the check box next to the policy name. 8. Do one of the following: • To change the class, select another class rom the Member Class menu. • To remove the class, select None, from the Member Class menu. 9. Click the Apply button. Your settings are saved.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the DiffServ service interface You can assign (attach) a policy to an interface. Attach a DiffServ policy to an interface To attach a DiffServ policy to an interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > Service Configuration. The Service Interface Configuration page displays. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. The Service Interface Configuration page displays. 6. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select QoS > DiffServ > Advanced > Service Statistics. The Service Statistics page displays. 7. Click the Refresh button to refresh the page with the latest information about the switch. The following table describes the information available on the Service Statistics page. Table 45.
5 5 Manage Device Security This chapter contains the following sections: • Change the device admin password for the device UI • Manage the RADIUS settings • Configure the TACACS+ settings • Manage the Smart Control Center • Configure management access • Control access with profiles and rules • Configure port authentication • Set up traffic control • Configure access control lists 239
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Change the device admin password for the device UI You can change the device admin password for the user with the user name admin. To change the device admin password for the device UI: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The password is displayed in dots. 10. Click the Apply button. Your settings are saved. Manage the RADIUS settings RADIUS servers provide additional security for networks. The RADIUS server maintains a user database, which contains per-user authentication information. The switch passes information to the configured RADIUS server, which can authenticate a user name and password before authorizing use of the network.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. In the Timeout Duration field, specify the time-out value, in seconds, for request retransmissions. The range is from 1 to 30. The default value is 5. 9. From he Accounting Mode menu, select to enable or disable RADIUS accounting on the server. The default is Disabled. 10. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable fields displayed on the page. Table 46.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Server Configuration. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information in the Statistics table on the page. Table 47. RADIUS authentication server statistics information Field Description Server Address The address of the RADIUS server or the name of the RADIUS server for which the statistics are displayed.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Server Configuration. The Server Configuration page displays. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Accounting Server Configuration. The previous figure does not show the Accounting Server Statistics section. 7. In the Accounting Server Address field, specify the IP address of the RADIUS accounting server to add. 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 48. RADIUS accounting server statistics information (continued) Field Description Accounting Retransmissions The number of RADIUS accounting-request packets retransmitted to this RADIUS accounting server. Accounting Responses The number of RADIUS packets received on the accounting port from this server.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Accounting Server Configuration. The Accounting Server Configuration page displays. 7. Select the check box next to the server IP address. 8. Modify the configuration for the selected accounting server. 9. Click the Apply button. Your settings are saved.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the TACACS+ settings TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. TACACS+ provides the following services: • Authentication. Provides authentication during login and through user names and user-defined passwords. • Authorization. Performed at login.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the Key String field, specify the authentication and encryption key for TACACS+ communications between the switch and the TACACS+ server. The range is from 0 to 128. The key must match the key configured on the TACACS+ server. 8. In the Connection Timeout field, specify the maximum number of seconds allowed to establish a TCP connection between the switch and the TACACS+ server. The range is from 1 to 30 seconds.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Security > Management Security > TACACS+ > TACACS+ Server Configuration. 7. In the TACACS+ Server field, enter the TACACS+ server IP address. 8. In the Priority field, specify the priority for the TACACS+ server. The priority determines the order in which the TACACS+ servers are contacted when attempting to authenticate a user. A value of 0 is the highest priority. The range is from 0 to 65535. 9.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Security > Management Security> TACACS+ > TACACS+ Server Configuration. The TACACS+ Server Configuration page displays. 7. Select the check box next to the server IP address. 8. Click the Delete button. The TACACS+ server is removed. Configure authentication lists A login list specifies one or more authentication methods to validate switch or port access for the admin user. You can configure a default login list.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Security > Management Security > Authentication List > HTTP Authentication List. 7. Select the check box next to the httpList name. 8. From the menu in the 1 column, select the authentication method that must be used first in the selected authentication login list. If you select a method that does not time out as the first method, such as Local, no other method is tried, even if you specified more than one method.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure an HTTPS authentication list You can configure the default login list for secure HTTP (HTTPS). To configure an HTTPS authentication list: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • RADIUS. The user’s ID and password are authenticated using the RADIUS server. If you select RADIUS or Tacacs+ as the first method and an error occurs during the authentication, the switch uses Method 2 to authenticate the user. • Tacacs+. The user’s ID and password are authenticated using the TACACS+ server.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > Authentication List > Dot1x Authentication List.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 11. Click the Apply button. Your settings are saved. Configure HTTPS access settings Secure HTTP (HTTPS) enables the transmission of HTTP over an encrypted Secure Sockets Layer (SSL) or Transport Layer Security (TLS) connection. When you manage the switch over the device UI, HTTPS can help ensure that communication between the management system and the switch is protected from eavesdroppers and man-in-the-middle attacks.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports This selection enables or disables HTTPS. The default value is Disable. Note: You can download SSL certificates only when HTTPS is disabled. 8. In the HTTPS Port field, type the HTTPS port number. The range is from 1025 to 65535. The default is port 443. 9. In the HTTPS Session Soft Timeout (Minutes) field, enter the inactivity time-out for HTTPS sessions. The range is from 1 to 60 minutes. The default value is 5 minutes.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Microsoft Edge: If Microsoft Edge displays a There is a problem with this website’s security certificate warning or a similar warning, select Details > Go on to the webpage. For information about installing a specific security certificate on the switch, see Manage certificates for HTTPS access on page 264 and Use an HTTP session to download and install an SSL security certificate file on the switch on page 388.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Certificate Present field displays whether a certificate is present on the switch. 7. In the Certificate Management section, select the Generate Certificates radio button. 8. Click the Apply button. The switch generates an SSL certificate. The Certificate Generation Status field shows progress information.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > Access > HTTPS > Certificate Management. 7. The Certificate Management page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To configure the certificate transfer settings for HTTPS sessions: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. From the Server Address Type menu, select IPv4 or DNS to indicate the format for the TFTP Server IP field. The default is IPv4. 9. In the TFTP Server IP field, specify the address or host name of the TFTP server. The address can be an IP address in standard x.x.x.x format or a host name. The host name must start with a letter of the alphabet. 10. In the Remote File Path field, enter the path of the file to download.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Add a rule to the access profile After you add the access profile, you can add one or more security access rules to the access profile. If you access the switch from a computer, make sure that you add a permit rule for the type of service that you use (for example, HTTPS), your computer’s IP address, and your computer’s subnet mask.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. From the Rule Type menu, select Permit or Deny to permit or deny access when the selected rules are matched. A Permit rule allows access from a device that matches the rule criteria. A Deny rule blocks a device that matches the rule criteria. 8. From the Service Type menu, select the access method to which the rule is applied. The policy is restricted by the selected access method.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Deactivate an access profile You can deactivate an access profile. 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the global 802.1X settings You can configure global port access control settings on the switch. To globally enable all 802.1X features: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports - • Disabled. When port-based authentication is globally disabled, the switch does not check for 802.1X authentication before allowing traffic on any ports, even if the ports are configured to allow only authenticated users. VLAN Assignment Mode. This selection specifies whether a port can be placed in a particular VLAN. The default value is Disable.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • MAB. Specify whether to enable or disable MAC-based Authentication Bypass (MAB) for 802.1x-unaware clients at the specified port. MAB only functions if the port control mode is MAC-based. By default, MAB is disabled. • Guest VLAN ID. Specify the VLAN ID for the guest VLAN. The range is from 0 to 4093. The default value is 0. Enter 0 to reset the guest VLAN ID on the interface.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the port authentication status information available on the page. Table 50. Port authentication status information Field Description Control Direction The control direction for the specified port, which is always Both. The control direction dictates the degree to which protocol exchanges take place between supplicant and authenticator.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > Port Authentication > Advanced > Port Authentication. The Port Authentication page displays. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Security > Port Authentication > Advanced > Port Summary. 7. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the fields on the Port Summary page. Table 51. Port summary Field Description Port The port whose settings are displayed in the current table row.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the client summary You can view information about supplicant devices that are connected to the local authenticator ports. If no active 802.1X sessions exist, the table is empty. To view the client summary: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 52. Client Summary information (continued) Field Description Filter ID The policy filter ID assigned by the authenticator to the supplicant device. VLAN ID The VLAN ID assigned by the authenticator to the supplicant device. VLAN Assigned The reason for the VLAN ID assigned by the authenticator to the supplicant device. Session Timeout The session time-out imposed by the RADIUS server on the supplicant device.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If a packet with the MAC address and VLAN ID that you specify is received on a port that is not part of the inbound filter, the packet is dropped. 11. In the Port and LAG tables in the Destination Port Members section, select the ports and LAGs that must be included in the outbound filter. A packet with the MAC address and VLAN ID that you specify can be transmitted only from a port that is part of the outbound filter.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Click the Delete button. The filter is removed. View the MAC filter summary You can view the MAC filters that are configured on the switch. To view the MAC filter summary: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 53. MAC Filter Summary information (continued) Field Description Source Port Members The ports to be used for filtering inbound packets. Destination Port Members The ports to be used for filtering outbound packets. Configure storm control settings A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Security > Traffic Control > Storm Control. 7. In the Storm Control section, from the Ingress Control Mode menu, select one of the following modes for storm control: • Disabled. Storm control is disabled. This is the default setting. • Unknown Unicast.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure storm control settings for one or more ports After you configure the global settings, you can specify storm control settings for one or more ports. To configure storm control settings for one or more ports: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The default settings in the Port Settings section depends on the global storm control settings (see Configure global storm control settings on page 289), which apply to all ports. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure port security Port security lets you lock one or more ports on the switch. When a port is locked, the port can only forward packets with a source MAC addresses that you specifically allowed. The port discards all other packets. Configure the global port security mode To configure the global port security mode: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The default is Disable. 8. Click the Apply button. Your settings are saved. By default, port security is disabled for individual ports. Note: After you enable port security for individual ports (see Configure a port security interface on page 294), you can return to this page and click the Refresh button to refresh the page with the latest information about the ports.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Max Learned MAC Address. Specify the maximum number of dynamically learned MAC addresses on the selected interfaces. The default is 4096. If you specify 0, the selected interfaces do not learn any MAC addresses. • Max Static MAC Address. Specify the maximum number of statically locked MAC addresses on the selected interfaces. The default is 48. • Enable Violation Shutdown.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Security > Traffic Control > Port Security > Security MAC Address. 7. From the Port List menu, select the individual interface. Port security must be enabled on the selected interface. The Dynamic MAC Address Table displays the MAC addresses and their associated VLANs that were learned on the selected port.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To configure an ACL: 1. Create an IPv4-based, IPv6-based, or MAC-based ACL ID. 2. Create a rule and assign it to a unique ACL ID. 3. Define the rules, which can identify protocols, source, and destination IP and MAC addresses, and other packet-matching criteria. 4. Use the ID number to assign the ACL to a port or to a LAG. To view ACL configuration examples, see Access control lists (ACLs) on page 406.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > ACL Wizard. 7. From the ACL Type menu, select the type of ACL. You can select from the following ACL types: • ACL Based on Destination MAC. Creates an ACL based on the destination MAC address, destination MAC mask, and VLAN. • ACL Based on Source MAC. Creates an ACL based on the source MAC address, source MAC mask, and VLAN.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • ACL Based on Source IPv6 L4 Port. Creates an ACL based on the source IPv6 Layer 4 port number. Note: For L4 port options, two rules are created (one for TCP and one for UDP). 8. In the Sequence Number field, enter a whole number in the range of 1 to 2147483647 that is used to identify the rule. 9. From the Action menu, select Permit or Deny to specify the action that must be taken if a packet matches the rule’s criteria.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports ACL Based On Fields Destination IPv4 L4 Port • • Destination L4 port (protocol). Specify the destination IPv4 L4 port protocol. Destination L4 port (value). Specify the destination IPv4 L4 port value. Source IPv4 L4 Port • • Source L4 port (protocol). Specify the source IPv4 L4 port protocol. Source L4 port (value). Specify the source IPv4 L4 port value. Destination IPv6 L4 Port • • Destination L4 port (protocol).
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Modify an ACL rule that you created with the ACL Wizard To modify an ACL rule that you created with the ACL Wizard: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about the ACL Wizard, see Use the ACL Wizard to create a simple ACL on page 299. Configure a MAC ACL A MAC ACL consists of a set of rules that are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken, and the additional rules are not checked for a match.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The MAC ACL Table displays the number of ACLs currently configured in the switch and the maximum number of ACLs that can be configured. The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs. 7. In the Name field, specify a name for the MAC ACL. The name string can include alphabetic, numeric, hyphen, underscore, or space characters only.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Basic > MAC ACL. The MAC ACL page displays. 7. Select check box that is associated with the rule.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Click the Delete button. The rule is removed. Configure MAC ACL rules You can define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. A default deny all rule is the last rule of every list. Add a rule to a MAC ACL To add a rule to a MAC ACL: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure does not show all columns. 7. From the ACL Name menu, select the MAC ACL. 8. In the Sequence Number field, enter a whole number in the range from 1 to 2147483647 to identify the rule. 9. From the Action menu, select the action that must be taken if a packet matches the rule’s criteria: • Permit. Forwards packets that meet the ACL criteria. • Deny. Drops packets that meet the ACL criteria. 10.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • IPv4 • IPv6 • IPX • MPLS Multicast • MPLS Unicast • NetBios • Novell • PPPOE • RARP • User Value 18. If you select User Value from the EtherType Key menu, in the EtherType User Value field, specify the customized EtherType value that must be used. This value must be compared against the information in an Ethernet frame. The range is from 0x0600 to 0xFFFF. 19.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Basic > MAC Rules. The MAC Rules page displays. 7.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. From the ACL ID menu, select an ACL. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface. 8. In the Sequence Number field, optionally specify a number to indicate the order of the access list relative to other access lists already assigned to the interface and direction. A low number indicates high precedence order.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the columns in the Interface Binding Status table on the page. Table 55. Interface Binding Status table Field Description Interface The interface of the ACL assigned. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure shows examples. 7. To delete a MAC ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed. The following table describes the nonconfigurable information on the page. Table 56. MAC Binding Table Field Description Interface The interface of the ACL assigned.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Create an IPv4 rule (see Configure rules for a basic IPv4 ACL on page 319 or Configure rules for an extended IPv4 ACL on page 323). 3. Associate the IPv4 ACL with one or more interfaces (see Configure IP ACL interface bindings on page 341). You can view or delete IPv4 ACL configurations in the IP ACL Binding table (see View or delete IP ACL bindings in the IP ACL binding table on page 343.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure shows an example. The IP ACL page shows the current size of the ACL table compared to the maximum size of the ACL table. The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs. The maximum size is 100. The Current Number of ACL field displays the current number of all ACLs configured on the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Advanced > IP ACL.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The IP ACL Configuration page displays. 7. Select the check box that is associated with the IP ACL. 8. Click the Delete button. The IP ACL is removed. Configure rules for a basic IPv4 ACL You can define rules for IP-based standard ACLs (basic ACLs). The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Security > ACL > Advanced > IP Rules. If no rules exist, the Basic ACL Rule Table might show the message No rules were configured for this ACL. If one or more rules exist for the ACL, the rules display in the Basic ACL Rule Table. 7. From the ACL ID menu, select the IP ACL for which you want to add a rule. For basic IP ACLs, this must be an ID in the range from 1 to 99. 8. Click the Add button. 9.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • • Match Every. Select one of the radio buttons to specify whether all packets must match the selected IP ACL rule: - Enable. All packets must match the selected IP ACL rule and are either permitted or denied. - Disable. Not all packets need to match the selected IP ACL rule. Interface. Select one of the radio buttons to specify whether all packets must be mirrored or redirected: - Mirror.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Advanced > IP Rules. The IP Rules page displays. 7. From the ACL ID menu, select the ACL that includes the rule that you want to modify. 8. In the Basic ACL Rule Table, click the rule. The rule is a hyperlink. The Standard ACL Rule Configuration page displays. 9. Modify the basic IP ACL rule criteria. 10. Click the Apply button.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 9. Click the Delete button. The rule is removed. Configure rules for an extended IPv4 ACL You can define rules for extended IPv4 ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. Note: An implicit deny all rule is included at the end of an ACL list.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure does not show all columns on the page. If no rules exists, the Extended ACL Rule Table might show the message No rules were configured for this ACL. If one or more rules exist for the ACL, the rules display in the Extended ACL Rule Table. 7. From the ACL ID/Name menu, select the IP ACL for which you want to add a rule. For extended IP ACLs, this must be an ID in the range from 100 to 199 or a name. 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Logging. If the selection form the Action menu is Deny, you can enable logging for the ACL by selecting the Enable radio button. (Logging is subject to resource availability in the device.) • • Interface.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The only relevant matching condition for L4 port numbers is Equal. This means that an IP ACL rule matches only if the Layer 4 source port number is equal to the specified port number or port protocol. - Range.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports You can select either the Port radio button or the Range radio button: - Port. If you select the Port radio button, you can either enter the port number yourself or select one of the following protocols from the menu. • The destination IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • ICMP. If your selection from the Protocol Type menu is ICMP, you can select either the Type or Message radio button: - - If you select the Type radio button, note the following: • The Type and Code fields are enabled only if the protocol is ICMP. Use these fields to specify a match condition for ICMP packets: • If you specify information in the Type field, the IP ACL rule matches the specified ICMP message type.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The ToS mask denotes the bit positions in the ToS bits value that are used for comparison against the IP ToS field in a packet. For example, to check for an IP ToS value for which bit 7 is set and is the most significant value, for which bit 5 is set, and for which bit 1 is cleared, use a ToS bits value of 0xA0 and a ToS mask of 0xFF. 10. Click the Apply button. Your settings are saved.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Delete an extended IPv4 ACL rule To delete an extended IPv4 ACL rule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure an IPv6 ACL An IPv6 ACL consists of a set of rules that are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken, and the additional rules are not checked for a match. You must specify the interfaces to which an IPv6 ACL applies, as well as whether it applies to inbound or outbound traffic.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the IPv6 ACL field, specify a name to identify the IPv6 ACL. This is the IPv6 ACL name string, which includes up to 31 alphanumeric characters only. The name must start with an alphabetic character. 8. Click the Add button. The IPv6 ACL is added. The following table describes the nonconfigurable information displayed on the page. Table 57.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Security > ACL > Advanced > IPv6 ACL. The IPv6 Configuration page displays. 7. Select the check box that is associated with the IPv6 ACL. 8. Click the Delete button. The IPv6 ACL is removed. Configure rules for an IPv6 ACL You can define rules for IPv6 ACLs.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure does not show all columns on the page. If no rules exists, the IPv6 ACL Rule Table might show the message No rules were configured for this ACL. If one or more rules exist for the ACL, the rules display in the IPv6 Rules table. 7. From the ACL Name menu, select the IPv6 ACL for which you want to add a rule. An IPv6 ACL can contain up to 50 rules. 8. Click the Add button. 9.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Logging. If you select the Deny radio button, you can enable logging for the ACL by selecting the Enable radio button. (Logging is subject to resource availability in the device.) If the access list trap flag is also enabled, periodic traps are generated, indicating the number of times this rule was evoked during the report interval. A fixed five-minute report interval is used for the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • The source IP UDP port protocols are domain, echo, snmp, ntp, rip, time, who, and tftp. Each of these values translates into its equivalent port number, which is used as both the start and end of the port range. Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The only relevant matching condition for L4 port numbers is Equal.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports You can select either the Port radio button or the Range radio button: - Port. If you select the Port radio button, you can either enter the port number yourself or select one of the following protocols from the menu: • The destination IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports - If you select the Message radio button, select the type of the ICMPv6 message to match with the selected IPv6 ACL rule. Specifying a type of message implies that both the ICMPv6 type and ICMPv6 code are specified. The ICMPv6 message is decoded into the corresponding ICMPv6 type and ICMPv6 code within the ICMP type.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Security > ACL > Advanced > IPv6 Rules. The IPv6 Rules page displays. 7. From the ACL Name menu, select the ACL that includes the rule that you want to delete. 8. In the IPv6 ACL Rule Table, select the check box that is associated with the rule. 9. Click the Delete button. The rule is removed.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. From the ACL ID menu, select an existing IP ACL for you which you want to add an IP ACL interface binding. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface. 8. In the Sequence Number field, optionally specify a number to indicate the order of the access list relative to other access lists already assigned to this interface and direction.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information on the page. Table 58. IP Binding Status table Field Description Interface The selected interface. Direction The selected packet filtering direction for the ACL, which is always Inbound. ACL Type The type of ACL assigned to the selected interface and direction.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. To delete an IP ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed. The following table describes the fields in the IP ACL Binding Table on the page. Table 59. IP ACL Binding Table Field Description Interface The interface. Direction The selected packet filtering direction for the ACL, which is always Inbound.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
6 6 Monitor the System This chapter contains the following sections: • Monitor the switch and the ports • Configure and view the logs • Configure port mirroring 347
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Monitor the switch and the ports You can view and clear port and switch statistics and perform a cable test. View or clear switch statistics You can view detailed statistical information about the traffic that the switch processes. To view or clear the switch statistics: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Click the Refresh button to refresh the page with the latest information about the switch. 8. To clear all the statistics counters, click the Clear button. Clearing resets all switch summary and detailed statistics to default values. However, the discarded packets count cannot be cleared. The following table describes the switch statistics displayed on the page. Table 60.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 60. Switch statistics (continued) Field Description Receive Packets Discarded The number of inbound packets that were chosen to be discarded, even though no errors were detected, in order to prevent their being delivered to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View port statistics You can view a summary of per-port traffic statistics on the switch. To view port statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Select one or more interfaces by taking one of the following actions: • To view a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To view multiple interfaces, select the check box associated with each interface. The following table describes the per-port statistics displayed on the page. Table 61.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure does not show all fields on the Port Detailed Statistics page. 7. From the Interface menu, select the interface with the statistics to view. 8. From the MST ID menu, select the MST ID associated with the interface (if available). 9. To refresh the page with the latest information about the switch, click the Refresh button. 10. To clear all the counters, click the Clear button.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 62. Detailed port statistics (continued) Field Description Port Role Each MST bridge port that is enabled is assigned a port role for each spanning tree. The port role is one of the following values: Root, Designated, Alternate, Backup, Master, or Disabled. STP Mode The Spanning Tree Protocol administrative mode that is associated with the port or port channel. The options are as follows: • Enable.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 62. Detailed port statistics (continued) Field Description Packets RX and TX 512-1023 The total number of packets (including bad packets) received or transmitted that Octets were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 62. Detailed port statistics (continued) Field Description Receive Packets Discarded The number of inbound packets that were discarded even though no errors were detected to prevent their being delivered to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 62. Detailed port statistics (continued) Field Description Packets Transmitted 256-511 The total number of packets (including bad packets) received that were between Octets 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 62. Detailed port statistics (continued) Field Description STP BPDUs Transmitted The number of STP BPDUs transmitted from the selected port. RSTP BPDUs Received The number of RSTP BPDUs received at the selected port. RSTP BPDUs Transmitted The number of RSTP BPDUs transmitted from the selected port. MSTP BPDUs Received The number of MSTP BPDUs received at the selected port.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Monitoring > Ports > EAP Statistics. The previous figure does not show all fields on the EAP Statistics page. 7. To refresh the page with the latest information about the switch, click the Refresh button. 8.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 63. EAP statistics Field Description EAPOL Invalid Frames Received The number of EAPoL frames that were received by this authenticator in which the frame type is not recognized. EAPOL Length Error Frames The number of EAPoL frames that were received by this authenticator in which Received the frame type is not recognized.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Monitoring > Ports > Cable Test. 7. Select one or more interfaces by taking one of the following actions: • To test a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To test multiple interfaces, select the check box associated with each interface. • To test all interfaces, select the check box in the heading row.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure and view the logs The switch generates messages in response to events, faults, or errors occurring on the platform as well as changes in configuration or other occurrences. These messages are stored locally and can be forwarded to one or more centralized points of collection for monitoring purposes or long-term archival storage.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select one of the following Admin Status radio buttons: • Enable. Enable system logging. This is the default setting. • Disable. Prevent the system from logging messages. 8. From the Behavior menu, specify the behavior of the log when it is full: • Wrap. When the buffer is full, the oldest log messages are deleted as the system logs new messages. • Stop on Full.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 11. To refresh the page with the latest information about the switch, click the Refresh button. 12. To clear the messages from the buffered log in the memory, click the Clear button. Manage and view the flash log The flash log is a persistent log, that is, is a log that is stored in persistent storage. Persistent storage survives across platform reboots. The first log type is the system startup log.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Log messages with the selected severity level and all log messages of greater severity are logged. For example, if you select Warning, the logged messages include Warning, Error, Critical, Alert, and Emergency. The default severity level is Error (3). The severity can be one of the following levels: - Emergency (0). The highest warning level.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Enable the server log and add a remote syslog host To enable the server log and add a remote syslog host: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Severity Filter. Use the menu to select the severity of the logs that must be sent to the logging host. Logs with the selected severity level and all logs of greater severity are sent to the host. For example, if you select Error, the logged messages include Error, Critical, Alert, and Emergency. The severity can be one of the following levels: - Emergency (0). The highest warning level.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Monitoring > Logs > Server Log. The Server Log Configuration page displays. 7. Select the check box that is associated with the host. 8. Change the information as needed. 9. Click the Apply button. Your settings are saved.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View or clear the trap logs and the counter You can view information about the SNMP traps generated on the switch. You can also display information about the traps that were sent. To view or clear the trap logs and the counters: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. To refresh the page with the latest information about the switch, click the Refresh button. 9. To clear the messages from the trap logs in the memory and clear the counters, click the Clear button. The following table describes the nonconfigurable information that is displayed on the page. Table 65.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports In the Source Interface Configuration section, perform the following steps. 10. Select whether to display physical interfaces, LAGs, the CPU, or al by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • CPU. Only the CPU is displayed. • All.
7 Maintain or Troubleshoot the Switch 7 This chapter contains the following sections: • Reboot the switch • Reset the switch to its factory default settings • Export a file from the switch • Download a file to the switch or update the software • Manage software images • Perform diagnostics and troubleshooting 375
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Reboot the switch You can reboot the switch from the device UI. However, if you can physically access the switch, you can reboot the switch by pressing a button on the front panel: • Model GS724TPv2. Press the single-function Reset button for more than one second. • Model GS724TPP. Press the multi-function Reset button for less than 5 seconds.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Reset the switch to its factory default settings You can reset the system configuration to the factory default values. All changes that you made are lost. If the IP address changes, your web session might disconnect. Note: If you reset the switch to the default configuration, the IP address is reset to 192.168.0.239, and the DHCP client is enabled.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • Enter your device admin password.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To use the device UI to reset the switch to factory default settings and reset the registration status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Export a file from the switch You can export configuration (ASCII) or log (ASCII log) files from the switch to a file server by using TFTP or to a computer by using HTTP. Use TFTP to export a file from the switch to a TFTP server You can upload (export) configuration (ASCII or log ASCII) files from the switch to a TFTP server on the network. To export a file from the switch to a TFTP server: 1.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. From the File Type menu, select the type of file: • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Use HTTP to export a file from the switch to a computer You can upload (export) files of various types from the switch to a computer through an HTTP session by using your web browser. To export a file from the switch to a computer by using HTTP: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The page displays information about the file transfer progress. The page refreshes automatically when the file transfer completes. Download a file to the switch or update the software You can manually check for the latest software version (also referred to as firmware version) through the device UI of the switch, download the firmware, and upload the firmware to the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Note: We recommended that you do not overwrite the active image. 9. From the Server Address Type menu, select the format for the TFTP Server IP field: • IPv4. Indicates that the TFTP server address is an IP address in dotted-decimal format. This is the default setting. • DNS. Indicates that the TFTP server address is a host name. 10.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Use HTTP to download a file to the switch or update the software image You can download a software (firmware) image, configuration files, and SSL files from a computer to the switch by using an HTTP session over a web browser. To download a file to the switch using HTTP: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports image. This is a safety feature for faults occurring during the boot upgrade process. This the default setting. • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Use an HTTP session to download and install an SSL security certificate file on the switch Note: You are not required to obtain an SSL certificate. The security warning that might display in your browser prompts you to confirm that the self-signed certificate of the switch is valid. Once you do so, the browser warning might no longer display when you log in.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Security > Access > HTTPS. HTTPS Configuration page displays. 7. Select the Admin Mode Disable radio button. 8. Click the Apply button. Your settings are saved. Because you changed the access mode from HTTPS to HTTP, you are logged out of the switch. 9. Wait one minute, refresh your browser, and log back in to the switch (see steps 3 through 5). 10.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Note: A switch that runs an older (legacy) software version might not load a configuration file that is created by a newer software version. In such a situation, the switch displays a warning. Copy a software image You can copy a software image from one location (primary or backup) to another. To copy a software image: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure dual image settings The Dual Image feature allows the switch to retain two images in permanent storage. You can select which image must be loaded when the reboots, specify an image description, or delete an image. This feature reduces switch down time when you are upgrading or downgrading the software image.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 9. Click the Apply button. Your settings are saved. 10. After activating the image, reboot the switch (see Reboot the switch on page 376). If you do not reboot the switch, it continues running the image shown in the Current-active field until the next time that the switch reboots. Delete a software image To delete a software image: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the dual image status You can view information about the active and backup images on the switch. To view dual image status information: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Perform diagnostics and troubleshooting You can send a ping or a traceroute, and you can perform a memory dump. Ping an IPv4 Address You can configure the switch to send a ping request to a specified IPv4 address. You can use this option to check whether the switch can communicate with a particular IPv4 device. When you send a ping, the switch sends a specified number of ping requests and the results are displayed.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Maintenance > Troubleshooting > Ping IPv4. 7. In the IP Address/Host Name field, enter the IP address or host name of the device that must be pinged. 8. In the Count field, enter the number of echo requests that must be sent. The default value is 3. The range is 1 to 15. 9. In the Interval (secs) field, enter the time between ping packets in seconds.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If a reply to the ping is not received, the following message displays: PING x:y::z:w (x:y::z:w): size data bytes --- x:y::z:w ping statistics --count packets transmitted, 0 packets received, 100% packet loss To ping an IPv6 address: 1. Connect your computer to the same network as the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the IPv6 Address/Hostname field, enter the IPv6 address or host name of the station that must be pinged. The format is xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx. The maximum number of characters is 255. 8. In the Count field, enter the number of echo requests that must be sent. The range is 1 to 15. The default value is 3. 9. In the Interval (secs) field, enter the time in seconds between ping packets.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To send an IPv4 traceroute: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the IP Address/Hostname field, enter the IP address or host name of the device for which the path must be discovered. 8. In the Probes Per Hop field, enter the number of probes per hop. The default value is 3. The range is 1 to 10. 9. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 10.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports A traceroute request is sent to the specified IP address or host name. The results are displayed below the configurable data in the Results field. Send an IPv6 traceroute You can configure the switch to send a traceroute request to a specified IPv6 address or host name. You can use this to discover the paths that packets take to a remote destination.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the IPv6 Address/Host Name field, enter the IPv6 address or host name of the device for which the path must be discovered. 8. In the Probes Per Hop field, enter the number of probes per hop. The default value is 3. The range is 1 to 10. 9. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 10.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 15. Click the Apply button. A traceroute request is sent to the specified IP address or host name. The results are displayed below the configurable data in the Results field. Enable remote diagnostics For enhanced security the remote diagnostic option is disabled by default. You can enable option to access the switch remotely. When remote access is enabled, you or technical support can perform remote diagnostics services.
A Configuration Examples A This appendix contains information about how to configure the following features. The appendix contains the following sections: • Virtual Local Area Networks (VLANs) • Access control lists (ACLs) • Differentiated Services (DiffServ) • 802.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router. Routers connect LANs together, routing the traffic to the appropriate port.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If the port is a member of the VLAN specified by the packet’s VLAN ID, the packet can be sent to other ports with the same VLAN ID. • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If an untagged packet enters port 4, the switch tags it with VLAN ID 20. The packet can access port 5 and port 6. The outgoing packet is stripped of its tag to become an untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Assign Queue ID. 0 • Match Every. False • CoS. 0 • Destination MAC. 01:02:1A:BC:DE:EF • Destination MAC Mask. 00:00:00:00:FF:FF • EtherType. User Value. • Source MAC. 02:02:1A:BC:DE:EF • Source MAC Mask. 00:00:00:00:FF:FF • VLAN ID. 2 For more information about MAC ACL rules, see Configure MAC ACL rules on page 308. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Source IP Address. 192.168.187.0 • Source IP Mask. 0.0.0.255 For additional information about IP ACL rules, see Configure rules for a basic IPv4 ACL on page 319. 3. Click the Add button. 4. On the IP Rules page, create a second rule for IP ACL 1 with the following settings: • Sequence Number. 2 • Action. Permit • Match Every. True 5. Click the Add button. 6.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Two basic types of QoS are supported: • Integrated Services. Network resources are apportioned based on request and are reserved (resource reservation) according to network management policy (RSVP, for example). • Differentiated Services. Network resources are apportioned based on traffic classification and priority, giving preferential treatment to data with strict timing requirements. The switch supports DiffServ.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports DiffServ traffic classes With DiffServ, you define which traffic classes to track on an ingress interface.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports definition to convey some QoS characteristics to downstream switches that do not routinely look at the DSCP value in the IP header. • Policing. A method of constraining incoming traffic associated with a particular class so that it conforms to the terms of the TCS. Special treatment can be applied to out-of-profile packets that are either in excess of the conformance specification or are nonconformant.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Source Mask. 255.255.255.0. • Source L4 Port. Other, and enter 4567 as the source port value. • Destination IP Address. 192.12.2.0. • Destination Mask. 255.255.255.0. • Destination L4 Port. Other, and enter 4568 as the destination port value. For more information about this page, see Configure a DiffServ class on page 216. 4. Click the Apply button. 5.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 802.1X access control Local area networks (LANs) are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure, or permit unauthorized users to attempt to access the LAN through equipment already attached. In such environments you might want to restrict access to the services offered by the LAN to those users and devices that are permitted to use those services.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports A port access entity (PAE) is able to adopt one of two distinct roles within an access control interaction: 1. Authenticator. A port that enforces authentication before allowing access to services available through that port. 2. Supplicant. A port that attempts to access services offered by the authenticator. Additionally, a third role exists: 3. Authentication server.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The selection from the Port Control menu for all other ports on which authentication is not needed must be Authorized. When the selection from the Port Control menu is Authorized, the port is unconditionally put in a force-authorized state and does not require any authentication. When the selection from the Port Control menu is Auto, the authenticator PAE sets the controlled port mode. 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports resulting in rapid transitioning of the port to the Forwarding state and the suppression of Topology Change Notification. These features are represented by the parameters pointtopoint and edgeport. MSTP is compatible to both RSTP and STP. It behaves in a way that is appropriate for STP and RSTP bridges. An MSTP bridge can be configured to behave entirely as a RSTP bridge or an STP bridge. So, an IEEE 802.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and only one MSTI or CIST). For example, port A can be forwarding for instance 1 while discarding for instance 2. The port states changed since IEEE 802.1D specification. To support multiple spanning trees, configure an MSTP bridge with an unambiguous assignment of VLAN IDs (VIDs) to spanning trees. For such a configuration, ensure the following: 1. The allocation of VIDs to FIDs is unambiguous. 2.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Perform the following procedures on each switch to configure MSTP: 1. On the VLAN Configuration page, create VLANs 300 and 500 (see Configure VLAN settings on page 141). 2. On the VLAN Membership page, include ports 1/0/1–1/0/8 as tagged (T) or untagged (U) members of VLAN 300 and VLAN 500 (see Configure VLAN settings on page 141). 3.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 12. Click the Add button. In this example, assume that Switch 1 became the root bridge for the MST instance 1, and Switch 2 became the root bridge for MST instance 2. Switch 3 supports hosts in the sales department (ports 1/0/1, 1/0/2, and 1/0/3) and in the HR department (ports 1/0/4 and 1/0/5). Switches 1 and 2 also include hosts in the sales and HR departments.
B B Specifications and Default Settings This appendix describes the default settings for the switch and for its software features.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Switch default settings The following table describes the switch default settings. Table 67. Switch default settings Feature Default IP address 192.168.0.239 Subnet mask 255.255.255.0 Default gateway 192.168.0.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 67. Switch default settings (continued) Feature Default MAC table address aging 300 seconds (dynamic addresses) Default VLAN IDs and names 1. Default VLAN. 4088. Auto-VoIP VLAN Note: All ports are members of VLAN 1. No ports are members of the Auto-VoIP VLAN or the Auto-Video VLAN.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 68. General feature default settings (continued) Feature Name/Setting Default 802.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 68.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 68. General feature default settings (continued) Feature Name/Setting Default Burst interval N/A Persistent Configuration Store Local Write delay 300 Differentiated Services (DiffServ) Admin mode Enabled Class of Service (CoS), Global Trust mode 802.1p 802.1p to queue mapping (802.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 68.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 68. General feature default settings (continued) Feature Name/Setting Default Class of Service (CoS), Interface Trust mode 802.1p Interface shaping rate 0 802.1p to queue mapping (802.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports System setup and maintenance settings The following table describes the system setup and maintenance settings. Table 69. System setup and maintenance settings Feature Sets Supported Default Boot code update 1 N/A DHCP 1 Enabled Static IP address 1 192.168.0.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 70. Port characteristics (continued) Feature Sets Supported Default Static 802.1Q tagging 256 VID = 1 Max member ports are equal to the number of ports on the switch Learning process Supports static and dynamic MAC entries Dynamic learning is enabled by default Traffic control settings The following table describes the traffic control settings. Table 71.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Security settings The following table describes the security settings. Table 73. Security settings Feature Sets Supported Default 802.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 74. System management settings (continued) Feature Sets Supported Default MIB support 1 Disabled Smart Control Center N/A Discovery option enabled but configuration option disabled Settings for other features The following table describes the settings for other features. Table 75.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Model GS724TPv2 hardware technical specifications Table 76. Hardware technical specifications for model GS724TPv2 Feature Description Network interfaces Twenty-four 10/100/1000BASE-T RJ-45 PoE+ copper ports Two dedicated 1000BASE-X fiber SFP ports Switch PoE+ power budget 190W Max.power consumption with PoE 228.53W Max.power consumption without PoE 23.35W Idle power consumption 13.86W Dimensions (W x D x H) 17.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 76. Hardware technical specifications for model GS724TPv2 (continued) Feature Description Safety certifications CB report / certificate IEC 60950-1:2005 (ed.2) + A1:2009 + A2:2013 UL listed: UL/cUL 60950-1 CE LVD: EN 60950-1:2006 + A11:2009 + A1:2010 + A12:2011 + A2:2013 RCM (AS/NZS) 60950.1:2015 CCC (China Compulsory Certificate): GB4943.
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 77.