User Manual
Table Of Contents
- 24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management
- Contents
- 1 Get Started
- Available publications
- Switch management options and default management mode
- Manage the switch by using the device UI
- About on-network and off-network access
- Access the switch on-network and connected to the Internet
- Use a Windows-based computer to access the switch on-network and connected to the Internet
- Use the NETGEAR Insight mobile app to discover the IP address of the switch
- Use the NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet
- Discover the switch in a network with a DHCP server using the Smart Control Center
- Use other options to discover the switch IP address
- Access the switch on-network and connected to the Internet when you know the switch IP address
- Access the switch off-network and not connected to the Internet
- Credentials for the device UI
- Register the switch
- Change the language of the device UI
- Change the management mode of the switch
- Use the Device View of the device UI
- Configure interface settings
- Access the NETGEAR support website
- Access the user manual online
- 2 Configure System Information
- View or define switch system information
- Configure the switch IP address settings
- Configure the IPv6 network interface
- Configure the time settings
- Configure Denial of Service settings
- Configure the DNS settings
- Configure Green Ethernet settings
- Manage switch discovery with UPnP and SSDP
- Use the Device View
- Configure Power over Ethernet
- Configure SNMP
- Configure LLDP
- Configure DHCP snooping
- Set up PoE timer schedules
- 3 Configure Switching
- Configure the port settings and maximum frame size
- Configure link aggregation groups
- Configure VLANs
- Configure a voice VLAN
- Configure Auto-VoIP
- Configure Spanning Tree Protocol
- Configure multicast
- Manage IGMP snooping
- Configure IGMP snooping
- Configure IGMP snooping for interfaces
- View, search, or clear the IGMP snooping table
- Configure IGMP snooping for VLANs
- Modify IGMP snooping settings for a VLAN
- Disable IGMP snooping on a VLAN
- Configure one or more IGMP multicast router interfaces
- Configure an IGMP multicast router VLAN
- IGMP snooping querier overview
- Configure an IGMP snooping querier
- Configure an IGMP snooping querier for a VLAN
- Display the status of the IGMP snooping querier for VLANs
- View, search, and manage the MAC address table
- Configure Layer 2 loop protection
- 4 Configure Quality of Service
- 5 Manage Device Security
- Change the device admin password for the device UI
- Manage the RADIUS settings
- Configure the TACACS+ settings
- Manage the Smart Control Center
- Configure management access
- Control access with profiles and rules
- Configure port authentication
- Set up traffic control
- Configure access control lists
- Use the ACL Wizard to create a simple ACL
- Configure a MAC ACL
- Configure MAC ACL rules
- Configure MAC bindings
- View or delete MAC ACL bindings in the MAC binding table
- Configure a basic or extended IPv4 ACL
- Configure rules for a basic IPv4 ACL
- Configure rules for an extended IPv4 ACL
- Configure an IPv6 ACL
- Configure rules for an IPv6 ACL
- Configure IP ACL interface bindings
- View or delete IP ACL bindings in the IP ACL binding table
- Configure VLAN ACL bindings
- 6 Monitor the System
- 7 Maintain or Troubleshoot the Switch
- A Configuration Examples
- B Specifications and Default Settings
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports
User Manual9
Remove a TACACS+ server from the switch . . . . . . . . . . . . . . . . . . . . . 254
Configure authentication lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255
Configure the dot1x authentication list . . . . . . . . . . . . . . . . . . . . . . . . . 258
Manage the Smart Control Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259
Configure management access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .260
Configure HTTP access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260
Configure HTTPS access settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262
Browser security warning with HTTPS access . . . . . . . . . . . . . . . . . . . . 263
Manage certificates for HTTPS access . . . . . . . . . . . . . . . . . . . . . . . . . . 264
Control access with profiles and rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .268
Add an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268
Add a rule to the access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270
Activate the access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271
Display the access profile summary and the number of
filtered packets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272
Deactivate an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
Remove an access profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
Configure port authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275
Configure the global 802.1X settings . . . . . . . . . . . . . . . . . . . . . . . . . . 276
Manage port authentication on individual ports . . . . . . . . . . . . . . . . . 277
View the port summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282
View the client summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284
Set up traffic control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285
Manage MAC filtering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
Configure storm control settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289
Configure port security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293
Configure protected ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297
Configure access control lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .298
Use the ACL Wizard to create a simple ACL . . . . . . . . . . . . . . . . . . . . . 299
Configure a MAC ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305
Configure MAC ACL rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 308
Configure MAC bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312
View or delete MAC ACL bindings in the MAC binding table . . . . . . 314
Configure a basic or extended IPv4 ACL. . . . . . . . . . . . . . . . . . . . . . . . 315
Configure rules for a basic IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . 319
Configure rules for an extended IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . 323
Configure an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331
Configure rules for an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 334
Configure IP ACL interface bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . 341
View or delete IP ACL bindings in the IP ACL binding table . . . . . . . 343
Configure VLAN ACL bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 344
Chapter 6 Monitor the System
Monitor the switch and the ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348
View or clear switch statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348
View port statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351
View and manage detailed port statistic . . . . . . . . . . . . . . . . . . . . . . . . 354
View or clear EAP and EAPoL statistics . . . . . . . . . . . . . . . . . . . . . . . . . 360