User Manual 24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports G S 7 2 8TP v2 G S 7 2 8TP P v2 G S 7 5 2TP v2 G S 7 5 2TP P September 2021 202-12021-06 NETGEAR, Inc.
4-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads. You can also check out our NETGEAR Community for helpful advice at community.netgear.com. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports (continued) 202-12021-04 (continued) April 2021 (continued) • We changed the login steps in all tasks in the manual to document the new device UI login options. • We changed Manage the Smart Control Center. • We added Browser security warning with HTTPS access. • We changed Reset the switch to factory default settings and reset the registration status. • We made multiple minor changes, including changes in terminology.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports (continued) 202-12021-01 (continued) August 2019 (continued) In other chapters, we added the following sections: - PoE concepts - Device class power requirements - Power allocation and power budget concepts - Hardware technical specifications • Throughout the manual, we did the following: - We added or revised many standard sections. - We updated the Auto-VoIP VLAN information. - We made many other minor changes and improvements.
Contents Chapter 1 Get Started Available publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Switch management options and default management mode . . . . . . . . .16 Manage the switch by using the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Software Requirements to use the device UI . . . . . . . . . . . . . . . . . . . . . .17 Supported web browsers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports PoE Max LED in the Device View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44 LED Mode LED in the Device View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44 Configure interface settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Access the NETGEAR support website . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Access the user manual online . . .
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure SNMPv1 and SNMPv2 trap settings. . . . . . . . . . . . . . . . . . . 105 Configure SNMPv1 and SNMPv2 trap flags . . . . . . . . . . . . . . . . . . . . . 108 View the supported MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109 Configure SNMPv3 users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110 Configure Link Layer Discovery Protocol . . . . . . . . . . . . .
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure a MAC-based VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174 Configure protocol-based VLAN groups. . . . . . . . . . . . . . . . . . . . . . . . 176 Configure protocol-based VLAN group membership . . . . . . . . . . . . 178 Configure a voice VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .179 Configure GARP switch settings . . . . . . . . . . . . . . . . . . . .
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure multicast VLAN registration . . . . . . . . . . . . . . . . . . . . . . . . . . . . .241 Configure the global MVR settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242 Configure an MVR group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243 Configure MVR group membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244 Configure the MVR interface settings. . . . . . . .
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the global CoS settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300 Configure the CoS settings for an interface . . . . . . . . . . . . . . . . . . . . . 301 Configure the CoS queue settings for an interface . . . . . . . . . . . . . . . 303 Map 802.1p priorities to queue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305 Map DSCP values to queues . . . . . . . . . . . . . . . . . . . . . .
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Manage port authentication on individual ports . . . . . . . . . . . . . . . . . 373 View the port summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 377 View the client summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 379 Set up traffic control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .380 Manage MAC filtering. . . . .
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Use HTTP to export a file from the switch to a computer . . . . . . . . . . 487 Export a file from the switch to a USB device . . . . . . . . . . . . . . . . . . . . 488 Download a file to the switch or update the software . . . . . . . . . . . . . . . .489 Use TFTP to download a file to the switch or update the software image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Quality of service settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .544 Security settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .544 System management settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .545 Settings for other features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 1 Get Started This user manual describes how you can configure and operate the following NETGEAR 24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports by using the device user interface (UI): • GS728TPv2. NETGEAR 24-Port Gigabit PoE+ Smart Switch With 4 SFP Ports. This model provides a PoE power budget of 190W. • GS728TPPv2. NETGEAR 24-Port Gigabit PoE+ Smart Switch With 4 SFP Ports. This model provides a PoE power budget of 380W. • GS752TPv2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Note: In this manual, we refer to all switch models as the switch. Unless noted otherwise, all information applies to all switch models. Note: For more information about the topics covered in this manual, visit the support website at netgear.com/support. Note: Firmware updates with new features and bug fixes are made available from time to time at netgear.com/support/download/.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Switch management options and default management mode If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up a custom configuration. Just connect power, connect to your network and to your other devices, and you’re done. The switch provides administrative management options that let you configure, monitor, and control the network.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Manage the switch by using the device UI This manual describes how to use the device UI to manage and monitor the switch. For information about using the NETGEAR Insight app and Insight Cloud portal to manage the switch, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit netgear.com/support.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Navigation tab Language menu Configuration menu Logout button Page help Button Page menu Configuration status and options Figure 1. Switch navigation tabs, configuration menus, and page menu The navigation tabs along the top of the device UI give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which feature you configure.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Link Submenu links Figure 2. Switch page menu link and submenu links Configuration and Status Options The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports User-defined fields User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page. All characters can be used except for the ones stated in the following table (unless specifically noted in a procedure for a feature). Table 2. Invalid characters for user-defined fields Invalid characters for user-defined fields \ | / < > * ? Context-sensitive help When you log in to the switch, every
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Access the switch on-network and connected to the Internet The DHCP client on the switch is enabled by default, allowing a DHCP server or router on the network to assign an IP address to the switch. • If the switch is on-network, connected to a DHCP server, and connected to the Internet, you can use a Windows-based computer to access the device UI.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Use se a Windows-based computer to access the switch on-network and connected to the Internet For the following procedure, the network must provide Internet access. To use a Windows-based computer to determine the switch IP address and access the switch on-network and connected to the Internet: 1. Cable the switch to a network with a router or DHCP server that manages IP addresses. 2. Power on the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Device UI login page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials: - Device admin password: Enter the device admin password. The default device admin password is password.
-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To use the NETGEAR Insight app to discover the IP address of the switch in your network when the switch is connected to the Internet: 1. On your iOS or Android mobile device, go to the app store, search for NETGEAR Insight, download the latest version of the app, and install the app. 2. Connect your mobile device to the WiFi network of the WiFi router or access point to which the switch is connected. 3. Open the NETGEAR Insight app.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 3. Unzip the NSDT files, and click or double-click the .exe file (for example, NSDT-1.2.102.exe) to install the program on your computer. You might see the tool icon appear on your Mac dock or Windows desktop. 4. Reenable the security services on your computer. 5. Power on the switch. The DHCP server assigns the switch an IP address. 6. Connect your computer to the same network as the switch. You can use a WiFi or wired connection.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports - Device admin password: Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Write down the switch IP address assigned by the DHCP server. For information about how to access the device UI of the switch, see Access the switch on-network when you know the switch IP address on page 27. Use other options to discover the switch IP address If the switch is on-network, you can use one of the following options to determine the switch IP address: • Access the DHCP server.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To access the switch on-network when you know the switch IP address: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you activated the warranty. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Access the switch off-network and not connected to the Internet The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports a. Type or paste the key. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 33. b. Click the Submit button. • Do not register at this time and access the device UI: Do the following: a. Click the Skip Registration & Access the UI button. The Device UI login page displays. b.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Alternatively, you can obtain a registration key and enter the key when the switch is offline so that you are no longer prompted to activate your warranty (see Register the switch with your NETGEAR account and get a registration key for offline access on page 33). • Device admin password: You can access the device UI with your device admin password.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Register the switch You can register the switch online or offline to activate your warranty, after which you are no longer prompted to activate your warranty when you log in: • Online registration for on-network access: If your switch is on-network or connected to the Internet, you can register the switch with your NETGEAR account credentials and activate your warranty.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet create a NETGEAR account, click the Create account link, follow the directions onscreen to create an account, and register the switch with your email address and password. For information about the credentials, see Credentials for the device UI on page 30. 5.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The switch is registered with NETGEAR. 6. If the My Products page does not display, select My Products from the menu. The page adjusts. 7. Select the radio button for the newly registered switch, and click the Get Registration Key button. The registration key is displayed, and an email with the registration key is sent to your NETGEAR account email address.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Launch a web browser. 5. Open a web browser, and enter http://192.168.0.239. This is the default IP address of the switch. If you already disabled the DHCP client and assigned a static IP address to the switch, enter the static IP address of the switch. The Enter Registration Key page displays. 6. Enter the registration key. 7. Click the Submit button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Register to activate your warranty page displays. 4. Click the Skip Registration & Access the UI button. The Device UI login page displays. 5.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports configuration saved on the cloud server, including the switch device admin password (that is, the password is reset to the Insight network location password). - • If you use the Insight app or the Insight Cloud portal, you can temporarily change the management mode of the switch back to Directly Connect to Web Browser Interface.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select the NETGEAR Insight Mobile App and Insight Cloud Portal radio button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports A pop-up window displays. d. Navigate to a location on your computer and save the file. The file transfer begins. The page displays information about the file transfer progress. 12. Reset the switch to factory default settings: a. Select Maintenance > Reset > Factory Default. The Default Settings page displays. b. Select the Reset configuration to factory default (EXCEPT registered device status), and clear device logs radio button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The file transfer begins. The page displays information about the progress of the file transfer. The switch applies the configuration automatically. 14. Reboot the switch: a. Select Maintenance > Reset > Device Reboot. The Device Reboot page displays. b. Select the check box. c. Click the Apply button. An Alert pop-up window displays. d. Click the OK button to confirm. The switch reboots. The Device UI login page displays. 15.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select System > Device View. The Device View page displays. The following figure shows the Device View page for model GS728TPPv2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Power LED in the Device View The Power LED in the Device View is a bicolor LED that serves as an indicator of power and diagnostic status: • Solid green. The power is supplied to the switch and operating normally. Fan LED in the Device View The Fan LED in the Device View indicates the following status: • Solid yellow. The fan is faulty. • Off. The fan is operating normally.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Solid yellow. The port LEDs function in PoE Mode and indicate PoE information (PoE-powered or PoE fault). Note: The LED Mode button on the switch front panel lets you switch between Ethernet Mode and PoE Mode. Configure interface settings The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Use these links as follows: • To display all ports, click the 1 link. • To display all LAGs, click the LAGS link. • To display all ports and LAGs, click the All link. The procedures in this section describe how to select the ports and LAGs to configure. The procedures assume that you are already logged in to the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The check box associated with the interface is selected, the row for the selected interface is highlighted, and the interface number appears in the heading row. 4. Configure the desired settings. 5. Click the Apply button. Your settings are saved. To configure a single port: 1. Ensure that the page is displaying all ports, and not only the LAGs. 2. Select the check box next to the port number.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Click the Apply button. Your settings are saved. To configure multiple LAGs: 1. Click the LAG link or the All link to display the LAGs. 2. Select the check box next to each LAG to configure. The check box associated with each interface is selected, and the row for each selected interface is highlighted. 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved. To configure all ports: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To configure multiple ports and LAGs: 1. Click the All link to display all ports and LAGs. 2. Select the check box associated with each port and LAG to configure. The rows for the selected ports and LAGs are highlighted. 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved. To configure all ports and LAGs: 1. Click the All link to display all ports and LAGs. 2. Select the check box in the heading row.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Help > Support. The Support page displays. 7. To access the NETGEAR support site for the switch, click the Apply button.
2 2 Configure System Information This chapter contains the following sections: • View or define system information • Configure the IP network settings for management access • Configure the time settings • Configure denial of service settings • Configure DNS settings • Configure green Ethernet settings • Use the Device View • Configure Power over Ethernet • Configure SNMP • Configure Link Layer Discovery Protocol • Configure a DHCP L2 relay • Configure DHCP snooping • Configure Dyna
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports View or define system information When you log in, the System Information page displays. You can configure and view general device information. To view or define system information: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Location. Enter the location of this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Contact. Enter the contact person for this switch. You can use up to 255 alphanumeric characters. The default is blank. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Scroll down to the Fans section. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the CPU thresholds The CPU Utilization Threshold notification feature allows you to configure thresholds that, when exceeded, trigger a notification. The notification occurs through SNMP trap and syslog messages. To configure the CPU thresholds: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Rising Interval. This utilization monitoring time period can be configured from 5 to 86400 seconds in multiples of 5 seconds. • Falling Threshold. Notification is triggered when the total CPU utilization falls below this level for a configured period of time. The falling utilization threshold must be equal to or less than the rising threshold value.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select System > Management > USB Device Information. The Device Status field displays the current status of the device. The status is one of the following: • Active. The device is USB plugged in and recognized by the switch. • Inactive. The device is not mounted. • Invalid.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 11. USB directory details information Field Description File Size The size, in bytes, of the file stored in the USB flash drive. Modification Time The last modification time of the file stored in the USB flash drive.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select the appropriate radio button to determine how to configure the network information for the switch management interface: • Dynamic IP Address (DHCP). Specifies that the switch must obtain the IP address through a DHCP server. • Dynamic IP Address (BOOTP).
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • The management station must be reconnected to the port in the new management VLAN. 9. Click the Apply button. Your settings are saved. Configure the IPv6 network settings for the local browser interface You can configure IPv6 network information for the device UI, which is the logical interface used for in-band connectivity with the switch through any of the switch’s front-panel ports.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select System > Management > IPv6 Network Configuration. The IPv6 Network Global Configuration page displays. 7. Ensure that the Admin Mode Enable radio button is selected. 8. Determine how the switch acquires an IPv6 address: • IPv6 Address Auto Configuration Mode.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the time settings The switch supports the Simple Network Time Protocol (SNTP). As its name suggests, it is a less complicated version of Network Time Protocol, which is a system for synchronizing the clocks of networked computer systems, primarily when data transfer is handled through the Internet. You can also set the system time manually. Configure the time setting manually You can view and adjust date and time settings.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select the Clock Source Local radio button. 8. In the Date field, specify the current date in months, days, and years (MM/DD/YYYY). 9. In the Time field, specify the current time in hours, minutes, and seconds (HH:MM:SS). Note: If you do not enter a date and time, the switch calculates the date and time using the CPU’s clock cycle. 10. In the Time Zone Name field, specify a time zone.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports You can set the local clock to SNTP only if the following two conditions are met: • The SNTP server is configured. • The SNTP last attempt status is successful. 8. In the Time Zone Name field, specify a time zone. In the Offset Hours and Offset Minutes fields, you can also specify the number of hours and number of minutes that the time zone is different from the Coordinated Universal Time (UTC).
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 15. In the Broadcast Poll Interval field, specify the number of seconds between broadcast poll requests expressed as a power of 2. Broadcasts received prior to the expiry of this interval are discarded. The allowed range is 6 to 10. The default value is 6. 16. In the Unicast Poll Timeout field, specify the number of seconds to wait for an SNTP response to a unicast poll request. The allowed range is 1 to 30. The default value is 5.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select System > Management > Time > Time Configuration. When you select the SNTP option as the clock source, the SNTP Global Status is displayed below the SNTP Global Configuration section. 7. Click the Refresh button to refresh the page with the latest information about the switch. The following table displays the nonconfigurable SNTP Global Status information. Table 13.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 13. SNTP Global Status information (continued) Field Description Unicast Server Current Entries The number of current valid unicast server entries configured for this client. Broadcast Count The number of unsolicited broadcast SNTP messages that were received and processed by the SNTP client since the last reboot.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Add an SNTP server To add an SNTP server: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports address is a DNS host name, then that host name is resolved into an IP address each time an SNTP request is sent to it. 9. If the UDP port on the SNTP server to which SNTP requests are sent is not the standard port (123), specify the port number in the Port field. The valid range is 1 to 65535. The default value is 123. 10. In Priority field, specify the priority order in which the switch must query the servers.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 14. SNTP Server Status information (continued) Field Description Requests The number of SNTP requests made to this server since last agent reboot. Failed Requests The number of failed SNTP requests made to this server since the last reboot. Change the settings for an existing SNTP server To change the settings for an existing SNTP server: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Remove an SNTP server To remove an SNTP server: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Recurring USA. The system clock uses the standard recurring daylight saving time settings used in the United States. When this option is selected, the rest of the applicable fields on the page are automatically populated and cannot be edited. • Non Recurring. Daylight saving time settings are in effect only between the start date and end date of the specified year.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 16. Daylight saving setting is Non Recurring (continued) Field Description Ends At These fields are used to configure the end values of date and time. • Week. Configure the end week. • Day. Configure the end day. • Month. Configure the end month. • Hours. Configure the end hours. • Minutes. Configure the end minutes. Offset Specify the number of minutes to shift the summer time from the standard time.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. To refresh the page, click the Refresh button. The following table displays the nonconfigurable daylight saving status information. Table 17. Daylight Saving (DST) Status information Field Description Daylight Saving (DST) The Daylight Saving value, which is one of the following: • Disable • Recurring • Recurring EU • Recurring USA • Non Recurring Begins At The start date of daylight saving time.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure denial of service settings You can configure the Denial of Service (DoS) settings for the switch. The switch provides support for classifying and blocking specific types of DoS attacks. Configure Auto-DoS You can automatically enable all the DoS features available on the switch, except for the L4 Port attack.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. Click the Apply button. Your settings are saved. Configure denial of service You can select which types of denial of service (DoS) attacks the switch monitors and blocks. To configure individual DoS settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select the types of DoS attacks for the switch to monitor and block and configure any associated values: • Denial of Service Min TCP Header Size. Specify the minimum allowed TCP header size. If you select the Denial of Service TCP Fragment Enable radio button, the switch first drops packets for which the first TCP fragments include the following TCP payload: IP_Payload_Length - IP_Header_Size < Min_TCP_Header_Size.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Denial of Service IPv6 Fragment. Enabling IPv6 Fragment DoS prevention causes the switch to drop IPv6 packets for which the header is fragmented, the More flag is set to 1, and the payload length is smaller than 1240. By default, this option is disabled. • Denial of Service ICMP Fragment. Enabling ICMP Fragment DoS prevention causes the switch to drop fragmented ICMP packets. By default, this option is disabled.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure DNS settings You can configure information about DNS servers that the network uses and how the switch operates as a DNS client. Configure the global DNS settings and add a DNS server You can configure the global DNS settings and DNS server information. To configure the global DNS settings and add a DNS server: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select the Disable or Enable radio button to specify whether to disable or enable the administrative status of the DNS client. • Enable. Allow the switch to send DNS queries to a DNS server to resolve a DNS domain name. The DNS is enabled by default. • Disable. Prevent the switch from sending DNS queries. 8. In the DNS Default Name field, enter the default DNS domain name to include in DNS queries.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table displays DNS Server Configuration information. Table 18. DNS Server Configuration information Field Description ID The identification of the DNS Server. Preference Shows the preference of the DNS server. The preferences are determined by the order in which they were entered. Remove a DNS server You can remove a DNS server that you no longer need. To remove a DNS server: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure and view host name-to-IP address information You can manually map host names to IP addresses or view dynamic host mappings. Add a static entry to the dynamic host mapping table To add a static entry to the local dynamic host mapping table: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. Click the Add button. The entry displays in the list on the page. Remove an entry from the dynamic host mapping table To remove an entry from the dynamic host mapping table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure green Ethernet settings You can configure the green Ethernet features to reduce power consumption. Configure the global green Ethernet settings You can configure the global green Ethernet settings. To configure the global green Ethernet settings: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. Select the EEE Mode Disable or Enable radio button. By default, this mode is disabled. Energy Efficient Ethernet (EEE) combines the MAC with a family of physical layers that support operation in a low power mode. It is defined by the IEEE 802.3az standard. Lower power mode enables both the send and receive sides of the link to disable some functionality for power savings when lightly loaded.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the interface, or type the interface number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure Power over Ethernet You can configure the global Power over Ethernet (PoE) configuration settings and the PoE settings for each port. PoE concepts The following table shows the PoE+ capacity for each model. Table 20. PoE capacities Model Maximum Power Budget Maximum PoE Power Across All Active PoE+ Ports Per Individual Port GS728TPv2 190W GS728TPPv2 380W GS752TPv2. 380W GS752TPP 760W 30W PoE+ (IEEE 802.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table shows the device classes for PoE+ devices adhering to the IEEE 802.3at standard. The device classes for PoE devices adhering to the IEEE 802.3af standard are identical with the exception that Device Class 4 is not supported. Table 21.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To determine the delivered power by a PoE+ port: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable fields on the page. Table 22. PoE Configuration fields Field Description Firmware Version The firmware version of the PoE firmware component. Power Status The power status. Total Power Available Watts The maximum amount of power in watts that the switch can deliver to all ports.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports detects that the attached PD requests more power than IEEE 802.3af but is not an IEEE 802.3at Class 4 device, the PD does not receive power from the switch. 11. From the Power Limit Type menu, select how the port controls the maximum power that it can deliver: • None. The port draws up to Class 0 maximum power in low power mode and up to Class 4 maximum power in high power mode. • Class.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 23. PoE Port Configuration (continued) Field Description Class The class defines the range of power that a powered device (PD) is drawing from the switch. The class definitions are as follows: • 0: 0.44–16.2W • 1: 0.44–4.2W • 2: 0.44–7.4W • 3: 0.44–16.2W • 4: 0.44–31.6W • Unknown. The class cannot be detected, or no PD is attached to the port. Output Voltage (Volts) The voltage that is delivered to the PD in volts.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure SNMP You can configure SNMP settings for SNMPv1/v2 and SNMPv3. The switch software supports the configuration of SNMP groups and users that can manage traps that the SNMP agent generates. The switch uses both standard public MIBs for standard functionality and private MIBs that support additional switch functionality. All private MIBs begin with a hyphen (-) prefix.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. In the Management Station IP field, specify the IP address of the management station. 8. In the Management Station IP Mask field, specify the subnet mask to associate with the management station IP address. Together, the management station IP and the management station IP mask denote a range of IP addresses from which SNMP clients can use that community to access this device.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The System Information page displays. 6. Select System > SNMP > SNMP V1/V2 > Community Configuration. The Community Configuration page displays. 7. Select the check box next to the community to remove. 8. Click the Delete button. The community is removed. Configure SNMPv1 and SNMPv2 trap settings You can configure settings for each SNMPv1 or SNMPv2 management host that must receive notifications about traps generated by the device.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. In the Recipients IP field, enter the IPv4 address in the x.x.x.x format to receive SNMP traps from this device. 8. From the Version menu, select the trap version to be used by the SNMP trap receiver: • SNMP V1. The switch uses SNMPv1 to send traps to the receiver. The default setting is SNMP V1. • SNMP V2. The switch uses SNMPv2 to send traps to the receiver. 9.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select System > SNMP > SNMP V1/V2 > Trap Configuration. The Trap Configuration page displays. 7. Select the check box next to the recipient. 8. Update the desired fields. 9. Click the Apply button. Your settings are saved. Delete an SNMP trap recipient To delete an SNMP trap recipient: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure SNMPv1 and SNMPv2 trap flags You can enable or disable traps that the switch can send to an SNMP manager. When the condition identified by an active trap is encountered by the switch, a trap message is sent to any enabled SNMP trap receivers, and a message is written to the trap log. To configure the trap flags: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Link Up/Down. When enabled, SNMP traps are sent when the administrative or operational state of a physical or logical link changes. The default is Enable. • Spanning Tree. When enabled, SNMP traps are sent when various spanning tree events occur. The default is Enable. 8. Click the Apply button. Your settings are saved. View the supported MIBs This page displays a list of all MIBs supported by the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the SNMP Supported MIBs Status fields. Table 24. SNMP supported MIBs Field Description Name The RFC number if applicable and the name of the MIB. Description The RFC title or MIB description. Configure SNMPv3 users Any user can connect to the switch using the SNMPv3 protocol, but for authentication and encryption, the switch supports only one user (admin).
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select System > SNMP > SNMPv3 > User Configuration. The User Configuration page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Autodiscovery of LAN policies (such as VLAN, Layer 2 priority, and DiffServ settings), enabling plug and play networking. • Device location discovery for creation of location databases. • Extended and automated power management of Power over Ethernet endpoints.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. To configure nondefault values for the following LLDP properties, specify the following options: • TLV Advertised Interval. The number of seconds between transmissions of LLDP advertisements. • Hold Multiplier. The transmit interval multiplier value, where transmit hold multiplier × transmit interval = the time to live (TTL) value that the device advertises to neighbors. • Re-initializing Delay.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Management IP Address. Choose whether to advertise the management IP address from the interface. The possible field values are as follows: - Stop Advertise. Do not advertise the management IP address from the interface. - Auto Advertise. Advertise the current IP address of the device as the management IP address. The default is Auto Advertise. • Notification.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select System > LLDP > Advanced > LLDP-MED Network Policy. The LLDP-MED Network Policy page displays. 7. From the Interface menu, select the interface for which you want to view the information. Note: The menu includes only the interfaces on which LLDP is enabled.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the LLDP-MED port settings You can enable LLDP-MED mode on a port and configure its properties. To configure LLDP-MED settings for a port: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. Click the Apply button. Your settings are saved. View the local information advertised through LLDP You can view the data that each port advertises through LLDP. To view the local LLDP information: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the LLDP device information and port summary information. Field Description Chassis ID Subtype The type of information used to identify the switch in the Chassis ID field. Chassis ID The hardware platform identifier for the switch. System Name The user-configured system name for the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Field Description Address The address used to manage the device. Interface SubType The port subtype. Interface Number The number that identifies the port. MAC/PHY Details Auto Negotiation Supported Indicates whether the interface supports port speed autonegotiation. The possible values are True and False. Auto Negotiation Enabled The port speed autonegotiation support status.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Field Description Port ID The physical address of the port on the remote system from which the data was sent. System Name The system name associated with the remote device. If the field is blank, the name might not be configured on the remote system. 7. To view additional information about the remote device, click the link in the MSAP Entry column. A pop-up window displays information for the selected port.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Field Description MAC/PHY Details Auto-Negotiation Supported Specifies whether the remote device supports port-speed autonegotiation. The possible values are True or False. Auto-Negotiation Enabled The port speed autonegotiation support status. The possible values are True and False. Auto Negotiation Advertised The port speed autonegotiation capabilities. Capabilities Operational MAU Type The Medium Attachment Unit (MAU) type.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Field Description Network Policies Application Type The media application type associated with the policy advertised by the remote device. VLAN ID The VLAN ID associated with the policy. VLAN Type Specifies whether the VLAN associated with the policy is tagged or untagged. User Priority The priority associated with the policy. DSCP The DSCP associated with a particular policy type.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. From the Admin Mode menu, select to enable or disable the DHCP L2 relay on the selected interface. The default is Disable. 10. From the 82 Option Trust Mode menu, select to enable or disable an interface to be trusted for DHCP L2 Relay (Option-82) received. The default is Disable. 11. Click the Apply button. Your settings are saved. View DHCP L2 relay interface statistics You can view DHCP L2 relay interface statistics.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, VLANs, or al by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • VLAN. Only VLANs are displayed. • LAG. Only LAGs are displayed. • All. Physical interfaces, VLANs, and LAGs are displayed.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure DHCP snooping DHCP snooping is a useful feature that provides security by filtering untrusted DHCP messages and by building and maintaining a DHCP snooping binding table. An untrusted message is a message that is received from outside the network or firewall and that can cause traffic attacks within your network.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select the DHCP Snooping Mode Enable radio button. 8. To enable the verification of the sender’s MAC address for DHCP snooping, select the MAC Address Validation Enable radio button. When MAC address validation is enabled, the device checks packets that are received on an untrusted interface to verify that the MAC address and the DHCP client hardware address match. If the addresses do not match, the device drops the packet. 9.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select System> Services > DHCP Snooping > Global Configuration. The DHCP Snooping Global Configuration page displays. 7. In the VLAN ID field, specify the VLAN on which DHCP snooping is enabled. 8. From the DHCP Snooping Mode menu, select Enable. 9. Click the Apply button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 12. In the Burst Interval (secs) field, specify the burst interval value for rate limiting purposes on this interface. If the rate limit is N/A, then the burst interval is also nonapplicable, and the field displays N/A. 13. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the Interface menu, select the interface on which the DHCP client is authorized. 8. In the MAC Address field, specify the MAC address for the binding to be added. This is the key to the binding database. 9. From the VLAN ID menu, select the ID of the VLAN the client is authorized to use. 10. In the IP Address field, specify the IP address of the client. 11. Click the Add button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To configure DHCP snooping persistent settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. In the Write Delay field, specify the time to wait between writing bindings information to persistent storage. The delay allows the device to collect as many entries as possible (new and removed) before writing them to the persistent file. 9. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8. Click the Clear button to clear all interfaces statistics.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports When DAI is enabled on a VLAN, DAI is enabled on the interfaces (physical ports or LAGs) that are members of that VLAN. Individual interfaces are configured as trusted or untrusted. The trust configuration for DAI is independent of the trust configuration for DHCP snooping.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The System Information page displays. 6. Select System> Services > Dynamic ARP Inspection > DAI Configuration. 7. Select the Validate Source MAC Enable radio button. 8. Select the Validate Destination MAC Enable radio button. 9. Select the Validate IP Enable radio button. 10. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select System> Services > Dynamic ARP Inspection > DAI VLAN Configuration. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure DAI on an interface To configure DAI on LAG1 as a trusted port and rate limiting for ports 1–10: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Trust Mode field indicates whether the interface is trusted for dynamic ARP inspection purposes. All interfaces are untrusted by default. 10. In the Rate Limit (pps) field, specify the rate limit value for dynamic ARP inspection purposes. If the incoming rate of ARP packets per second exceeds the configured burst interval per second, ARP packets are dropped. If this value is None (N/A), no limit exists.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 12. In the Source MAC Address field, specify the MAC address of the host that is statically mapped to the IP address specified in the Source IP Address field. 13. Click the Add button. The rule is added to the table. 14. Repeat Step 11 through Step 13 to add a second rule. You can add up to 20 static IP address–MAC address mappings to a DAI ACL. 15. Select System> Services > Dynamic ARP Inspection > DAI VLAN Configuration. 16.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports View DAI Statistics per VLAN To view DAI statistics per VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Field Description Bad Source MAC The number of ARP packets that were dropped by DAI as the sender MAC address in the ARP packet did not match the source MAC in the Ethernet header. Bad Dest MAC The number of ARP packets that were dropped by DAI as the target MAC address in the ARP reply packet did not match the destination MAC in the Ethernet header.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Specify the settings for a recurring PoE timer schedule A recurring schedule allows you to set up a single schedule that starts at a particular date and that recurs either with a specific end date or indefinitely. For a single recurring PoE timer schedule, you can add a daily, weekly, and monthly schedule configuration. That is, these schedule configurations are not mutually exclusive but complement each other.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports c. Timer Schedule Entry. To add a new entry, select new. Selecting an existing entry lets you make changes to that entry. 8. In the Timer Schedule Configuration section, specify the recurrence pattern: a. In the Time Start field, enter the time of day in the HH:MM format to specify when the timer schedule must start. b. In the Time End field, enter the time of day in the HH:MM format to specify when the timer schedule must stop. c.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Change the settings for a recurring PoE timer schedule entry You can change the settings for an existing recurring PoE timer schedule entry. (You cannot do this for an existing absolute PoE timer schedule.) To change the settings for an existing recurring PoE timer schedule entry: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Delete a PoE timer schedule entry You can delete a PoE timer schedule entry that you no longer need. To delete a PoE timer schedule entry: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Delete a PoE timer schedule You can delete a PoE timer schedule that you no longer need. All entries that are part of the PoE timer schedule are also deleted. To delete a PoE timer schedule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
3 3 Configure Switching This chapter contains the following sections: • Configure the port settings and maximum frame size • Configure link aggregation groups • Configure VLANs • Configure Auto-VoIP • Configure Spanning Tree Protocol • Configure multicast • Manage IGMP snooping • Manage MLD snooping • Configure multicast VLAN registration • View, search, and manage the MAC address table • Configure Layer 2 loop protection 154
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the port settings and maximum frame size You can view, configure, and monitor the physical port information for the ports (that is, the physical interfaces) on the switch. To configure the port settings and maximum frame size: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 14. From the Duplex Mode menu, select the duplex mode for the selected port. Possible values are as follows: • Auto. Indicates that speed is set by the auto-negotiation process. • Full. Indicates that the interface supports transmission between the devices in both directions simultaneously. • Half. Indicates that the interface supports transmission between the devices in only one direction at a time. The default is Auto.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable data that is displayed. Table 28. Port Configuration information Field Description Port Type For normal ports this field is blank. Otherwise, the possible values are as follows: • Mirrored. The port is a mirrored port on which all the traffic is copied to the probe port. • Probe. Use this port to monitor a mirrored port. • Trunk Member.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To configure LAG settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 10. From the Hash Mode menu, select the load-balancing mode for a port channel (LAG): • 1 Src/Dest MAC, incoming port. This mode uses the source and destination MAC addresses and incoming port that are associated with the packet. • 2 Src IP and Src TCP/UDP Port fields. This mode uses the source IP address and source TCP or UDP port value that are associated with the packet. • 3 Dest IP and Dest TCP/UDP Port fields.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure LAG membership You can select two or more full-duplex Ethernet links to be aggregated together to form a link aggregation group (LAG), which is also known as a port channel. The switch can treat the port channel as a single link. To configure LAG membership: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. In the Ports table, click each port that you want to include as a member of the selected LAG. A selected port is displayed by a check mark. 10. Click the Apply button. Your settings are saved. Set the LACP system priority You can set the LACP system priority that applies to all LAGs on the switch. To set the LACP system priority: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. In the LACP System Priority field, specify the device’s link aggregation priority relative to the devices at the other ends of the links on which link aggregation is enabled. A higher value indicates a lower priority. You can change the value of the setting globally by specifying a priority from 1 to 65535. The default value is 32768. 8. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The System Information page displays. 6. Select Switching> LAG > Advanced > LACP Port Configuration. 7. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the interface, or type the interface number in the Go To Interface field and click the Go button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Each VLAN in a network is assigned an associated VLAN ID, which appears in the IEEE 802.1Q tag in the Layer 2 header of packets transmitted on a VLAN. An end station can omit the tag, or the VLAN portion of the tag, in which case the first switch port to receive the packet can either reject it or insert a tag using its default VLAN ID.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select Switching> VLAN > Basic > VLAN Configuration. 7. In the VLAN ID field, specify the VLAN identifier for the new VLAN. The range of the VLAN ID can be from 2 to 4093, excluding 4088 and 4089. (The default VLANs are 1, 4088, and 4089). 8. In the VLAN Name field, specify a name for the VLAN. The VLAN name can be up to 32 alphanumeric characters long, including blanks. The default is blank.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To reset the VLAN configuration on the switch to the default settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • T (Tagged). Select the ports on which all frames transmitted for this VLAN are tagged. The ports that are selected are included in the VLAN. • U (Untagged). Select the ports on which all frames transmitted for this VLAN are untagged. The ports that are selected are included in the VLAN.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 31. VLAN status (continued) Field Definition Routing Interface The interface associated with the VLAN, in the case that VLAN routing is configured for this VLAN. Member Ports The ports that are included in the VLAN. Configure the PVID settings You can assign a port VLAN ID (PVID) to an interface. The following requirements apply to a PVID: • You must define a PVID for all ports.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8. To display information for all physical ports and LAGs, click the ALL link. 9.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Disable. All frames are forwarded in accordance with the 802.1Q VLAN bridge specification. The default is Disable. 15. In the Port Priority field, specify the default 802.1p priority assigned to untagged packets arriving at the port. You can enter a number from 0 to 7. 16. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable fields. Table 32.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To configure a protocol-based VLAN group: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 11. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information displayed on the page. Table 33. Protocol Based VLAN Group Configuration information Field Description Group ID A number used to identify the group created by the user. Group IDs are automatically assigned when a group is created by the user. Ports Display all the member ports that belong to the group.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the Group ID menu, select the protocol-based VLAN group ID. The Group Name field shows the name that is associated with the group. 8. In the Ports table and LAG table, click each port and LAG that you want to include in the protocol-based VLAN group. A protocol-based VLAN group can include both port and LAGs. A selected port or LAG is displayed by a check mark. 9. Click the Apply button Your settings are saved. 10.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. From the Interface Mode menu, select the voice VLAN mode for selected interfaces: • Disable. This is the default value. • None. Allow the IP phone to use its own configuration to send untagged voice traffic. • VLAN ID. Configure the phone to send tagged voice traffic. • dot1p. Configure voice VLAN 802.1p priority tagging for voice traffic. When this is selected, enter the dot1p value in the Value field. • Untagged.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports GARP is part of the IEEE 802.1p extension to its 802.1D (spanning tree) specification. It includes the following: • GARP Information Declaration (GID). The part of GARP that generates data. • GARP Information Propagation (GIP). The part of GARP that distributes data. Note: It can take up to 10 seconds for the GARP configuration changes to take effect. To configure GARP switch settings: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. Click the Apply button. Your settings are saved. Configure GARP ports Note: It can take up to 10 seconds for the GARP configuration changes to take effect. To configure GARP ports: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure Auto-VoIP Voice over Internet Protocol (VoIP) enables telephone calls over a data network. Because voice traffic is typically more time-sensitive than data traffic, the Auto-VoIP feature helps provide a classification mechanism for voice packets so that they can be prioritized above data packets in order to provide better Quality of Service (QoS).
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. In the Protocol Based Global Settings section, specify the following global settings: a. From the Prioritization Type menu, select Traffic Class or Remark. This specifies the type of prioritization. b. From the Class Value menu, specify the CoS class value to be reassigned for packets that the voice VLAN receives. 8. In the Protocol Based Global Settings section, specify the Auto VoIP Mode settings: a.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the Auto-VoIP OUI-based properties With Organizationally Unique Identifier (OUI)–based Auto-VoIP, voice prioritization is provided based on OUI bits. To configure the Auto-VoIP OUI-based properties: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the OUI-based port settings The port settings page allows you to configure the OUI port settings. To configure the OUI-based port settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • 00:04:0D - AVAYA1 • 00:1B:4F - AVAYA2 9. Click the Add button. The telephony OUI entry is added. Delete one or more OUI prefixes from the OUI table To delete one or more OUI prefixes from the OUI table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Display the Auto-VoIP status You can display the Auto-VoIP status. To view the Auto-VoIP status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 34. Auto-VoIP status (continued) Field Description Number of Voice Channels Detected The number of VoIP channels prioritized successfully. Configure Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of network devices. STP also provides one path between end stations on a network, eliminating loops.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the STP settings and view the STP status You can configure the STP settings and view the STP status on the switch. To configure the STP settings and view the STP status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Configuration Revision Level. Specify an identifier used to identify the configuration currently being used. The values allowed are between 0 and 65535. The default value is 0. • Forward BPDU while STP Disabled. Enable or disable the BPDU Flood. This specifies whether spanning tree BPDUs are forwarded or not while spanning tree is disabled on the switch. 8. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the CST Settings You can configure a common spanning tree (CST) and internal spanning tree on the switch. To configure the CST settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Specify the CST options: • Bridge Priority. When switches or bridges are running STP, each is assigned a priority. After exchanging BPDUs, the switch with the lowest priority value becomes the root bridge. Specify the bridge priority value for the Common and Internal Spanning Tree (CST). The valid range is 0–61440. The bridge priority is a multiple of 4096.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the CST port settings You can configure a common spanning tree (CST) and internal spanning tree on a specific port on the switch. A port can become diagnostically disabled (D-Disable) when DOT1S experiences a severe error condition. The most common cause is when the DOT1S software experiences BPDU flooding. The flooding criteria are such that DOT1S receives more than 15 BPDUs in a 3-second interval.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 17. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable information displayed on the page. Table 37. CST port configuration Field Description Port State The forwarding state of this port. The default is Disabled. Port ID The port identifier for the specified port within the CST.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8. To refresh the page with the latest information about the switch, click the Refresh button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 38. CST port status (continued) Field Description Edge port Indicates whether the port is enabled as an edge port. It is either Enabled or Disabled. Point-to-point MAC Derived value of the point-to-point status. CST Regional Root Bridge identifier of the CST regional root. It is made up using the bridge priority and the base MAC address of the bridge. CST Path Cost Path cost to the CST regional root.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. The following table describes the Rapid STP status information displayed on the page. Table 39.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Switching > STP > Advanced > MST Configuration. 7. Configure the MST values: • MST ID. Specify the ID of the MST to create.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 40. MST configuration (continued) Field Description Root Path Cost Path cost to the designated root for this MST instance. Root Port Port to access the designated root for this MST instance. Modify an MST instance To modify an MST instance: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Delete an MST instance To delete an MST instance: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To configure and view the port settings for an MST instance: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • To configure all interfaces with the same settings, select the check box in the heading row. 10. Configure the MST values for the selected interfaces: • Port Priority. The priority for a particular port within the selected MST instance. The port priority is set in multiples of 16.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 41. MST port status information (continued) Field Description Designated Cost The cost of the port participating in the STP topology. Ports with a lower cost are less likely to be blocked if STP detects loops. Designated Bridge The bridge identifier of the bridge with the designated port. It is made up using the bridge priority and the base MAC address of the bridge.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8. To refresh the page with the latest information about the switch, click the Refresh button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To view, search, or clear the MFDB table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 43. MFDB table information (continued) Field Description Component The component that is responsible for this entry in the Multicast Forwarding Database. Possible values are IGMP snooping, GMRP, Static Filtering and MLD snooping. Description The text description of this multicast table entry. Possible values are Management Configured, Network Configured, and Network Assisted.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the MFDB Statistics fields. Table 44. MFDB Statistics information Field Description Max MFDB Table Entries The maximum number of entries that the Multicast Forwarding Database table can hold. Most MFDB Entries Since Last Reset The largest number of entries that were present in the Multicast Forwarding Database table since last reset. This value is also known as the MFDB high-water mark.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select one of the following radio buttons: • Select the Disable radio button to globally disable Auto-Video administrative mode for the switch. • Select the Enable radio button to globally enable Auto-Video administrative mode for the switch. The Auto-Video VLAN field shows the number of autoconfigured IGMP snooping VLANs. 8. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure IGMP snooping You can configure the settings for IGMP snooping, which is used to build forwarding lists for multicast traffic. To configure IGMP snooping: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. Select the Validate IGMP IP header Enable or Disable radio button. When IGMP IP header validation is enabled, any IGMP IP header must include the Router Alert, ToS, and TTL information. Otherwise, the IGMP packet is discarded. The default value is Enable. 9. Click the Apply button. Your settings are saved. 10. To refresh the page with the latest information about the switch, click the Refresh button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Switching> Multicast > IGMP Snooping > IGMP Snooping Interface Configuration. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Enter a value greater or equal to 1 and less than the group membership interval in seconds. The default is 10 seconds. The configured value must be less than the group membership interval. 12. In the MRouter Timeout field, specify the time that the switch must wait to receive a query on an interface before removing it from the list of interfaces with multicast routers attached. Enter a value between 0 and 3600 seconds.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The IGMP Snooping Table page displays. 7. In the Search By MAC Address field, specify the MAC address whose MFDB table entry you want to view. Enter six two-digit hexadecimal numbers separated by colons, for example 00:01:23:43:45:67. 8. Click the Go button. If the address exists, the entry is displayed. An exact match is required. The following table describes the information in the IGMP snooping table. Table 46.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Query Interval. Set the IGMP query interval for the specified VLAN ID. The valid range is 1 to 1800 seconds. The default is 60 seconds. 9. Click the Apply button. Your settings are saved. Modify IGMP snooping settings for a VLAN To modify IGMP snooping settings for a VLAN: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Disable IGMP snooping on a VLAN and remove it from the table To disable IGMP snooping on a VLAN and remove it from the table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To configure one or more IGMP multicast router interfaces: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select Switching> Multicast > IGMP Snooping > Multicast Router VLAN Configuration. 7. From the Interface menu, select the interface. 8. In the VLAN ID field, enter the VLAN ID. 9. From the Multicast Router menu, select Enable or Disable. 10. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure an IGMP snooping querier for VLANs You can configure IGMP queriers for use with VLANs on the network. To configure IGMP snooping for a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports - • Enable. The snooping querier participates in querier election, in which the lowest IP address operates as the querier in that VLAN. The other querier moves to non-querier state. Snooping Querier VLAN Address. Specify the snooping querier IP address to be used as the source address in periodic IGMP queries sent on the specified VLAN. 9. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable information displayed on the page. Table 47. Querier VLAN Status information Field Description VLAN ID The VLAN ID on which IGMP snooping querier is administratively enabled and the VLAN exists in the VLAN database. Operational State The operational state of the IGMP snooping querier on a VLAN. It can be in any of the following states: • Querier.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Enable MLD snooping You can enable MLD snooping, which is used to build forwarding lists for multicast traffic. To enable MLD snooping: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable MLD Snooping Configuration fields. Table 48. MLD Snooping Configuration information Field Definition Multicast Control Frame Count The number of multicast control frames that were processed by the CPU.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 13. From the Fast Leave menu, select to enable or disable Fast Leave on the interface. If Fast Leave is enabled, the interface can be immediately removed from the Layer 2 forwarding table when the switch receives an MLD leave message for a multicast group without first sending MAC-based general queries. The default is Disable. 14. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. From the Fast Leave menu, select to enable or disable the MLD snooping Fast Leave mode for the specified VLAN ID. 9. In the Membership Interval field, set the value for the group membership interval of MLD snooping for the specified VLAN ID. The valid range is Maximum Response Time + 1 to 3600. 10. In the Maximum Response Time field, set the value for the maximum response time of MLD snooping for the specified VLAN ID.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The System Information page displays. 6. Select Switching> Multicast > MLD Snooping > MLD VLAN Configuration. The MLD VLAN Configuration page displays. 7. Select the check box next to the VLAN ID. 8. Change the settings. 9. Click the Apply button. Your settings are saved. Remove MLD snooping from a VLAN To remove MLD snooping from a VLAN: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure one or more MLD multicast router interfaces To configure one or more MLD multicast router interfaces: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 9. Launch a web browser. 10. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 15. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the Interface menu, select the interface for which you want the multicast router to be enabled. 8. In the VLAN ID field, specify the VLAN ID. 9. From the Multicast Router menu, select to enable or disable the multicast router for the VLAN ID. 10. Click the Apply button. Your settings are saved. Configure an MLD snooping querier You can configure the settings for an MLD snooping querier.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Switching> Multicast > MLD Snooping > Querier Configuration. 7. Configure the following settings: • Querier Admin Mode. Enable or disable MLD snooping for the switch. The default is Disable. • Querier Address. Enter an IP address. This specifies the snooping querier address to be used as the source address in periodic MLD queries.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable information displayed on the page. Table 49. MLD Snooping Querier VLAN Configuration information Field Description Operational State The operational state of the MLD snooping querier on a VLAN. It can be in any of the following states: • Querier. Snooping switch is the querier in the VLAN.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the global MVR settings To configure the global MVR settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. In the MVR Global Query Response Time field, set the maximum time that the switch must wait for an IGMP group membership report before removing the port from the multicast group membership. This time applies only to receiver-port leave processing.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Switching > MVR > Advanced > MVR Group Configuration. 7. In the MVR Group IP field, specify the IP address for the new MVR group. 8. In the Count field, specify the number of contiguous MVR groups.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 10. From the Type menu, specify whether the port is an MVR receiver or an MVR source by selecting receiver or a source. The default port type is none. 11. From the Immediate Leave menu, specify whether the Immediate Leave feature is enabled by selecting Enable or Disable. The default is Disable. 12. Click the Apply button. Your settings are saved. 13.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable information displayed on the page. Table 52. MVR Statistics information Field Definition IGMP Query Received The number of received IGMP queries. IGMP Report V1 Received The number of received IGMP V1 reports. IGMP Report V2 Received The number of received IGMP V2 reports.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports View, search, or clear the MAC address table To view, search, or clear the MAC address table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Use the Search menu and field to search for a MAC address, VLAN ID, or interface number: • Search by MAC Address. From the Search menu, select MAC Address, and enter the 6-byte hexadecimal MAC address in two-digit groups separated by colons, for example, 01:23:45:67:89:AB. Then click the Go button. If the address exists, that entry is displayed as the first entry followed by the remaining (higher) MAC addresses.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports is compared with the MAC address of the switch. If the MAC address does not match, the packet is forwarded to all ports that are members of the same VLAN, just like any other broadcast packet. The packet is not forwarded to the port from which it was received.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. To enable or disable loop protection feature, select the Admin Mode Enable or Disable radio button. By default, the Disable radio button is selected. 8. From the Transmit Interval menu, select the time in seconds between transmission of loop packets. The default transmit interval is 5 seconds. 9. From the Max PDU Receive menu, select the maximum number of packets to be received before an action is taken. The default is 1. 10.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Both. The switch both logs a message and disables the interface. 11. Click the Apply button. Your settings are saved. 12. Click the Clear button to clear all the statistics in the table. 13. Click the Refresh button to refresh the page with the latest information about the switch. The following table describes the nonconfigurable information displayed on the page. Table 54.
4 4 Configure Routing This chapter contains the following sections.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Routing concepts The switch supports IP routing. When a packet enters the switch, the switch checks the destination MAC address to determine if it matches any of the configured routing interfaces. If it does, the switch searches the host table for a matching destination IP address. If a matching entry is found, the packet is routed to the host.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable information displayed on the page. Table 56. IP Statistics information Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 56. IP Statistics information (continued) Field Description IpReasmOKs The number of IP datagrams successfully reassembled. IpReasmFails The number of failures detected by the IP reassembly algorithm (for whatever reason: timed out, errors, and so on). This is not necessarily a count of discarded IP fragments since some algorithms can lose track of the number of fragments by combining them as they are received.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 56. IP Statistics information (continued) Field Description IcmpOutParmProbs The number of ICMP parameter problem messages sent. IcmpOutSrcQuenchs The number of ICMP source quench messages sent. IcmpOutRedirects The number of ICMP redirect messages sent. For a host, this is always zero, since hosts do not send redirects. IcmpOutEchos The number of ICMP echo (request) messages sent.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Routing> IPv6 > Basic > Global Configuration. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select Routing> IPv6 > Basic > Route Table. 7. From the Routes Displayed menu, select one of the following options: • All Routes. Show all active IPv6 routes. • Best Routes Only. Show only the best active routes. • Configured Routes Only. Show only the manually configured routes. 8. To refresh the page with the latest information about the switch, click the Refresh button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Only one interface can function as a client. The default value is Disable. 10. From the Stateless Address AutoConfig Mode menu, select to enable or disable the stateless address autoconfiguration mode on an interface. The default value is Disable. 11. From the Admin Mode menu, select to enable or disable the IPv6 mode. The default is Disable.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The default value is Disable. 21. From the Destination Unreachables menu, select to enable or disable the mode for sending ICMPv6 destination unreachable messages on this interface. If this mode is disabled, the interface does not send ICMPv6 destination unreachable messages. By default, the IPv6 destination unreachables mode is enabled. 22. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select Routing> IPv6 > Advanced > Prefix Configuration. 7. From the Interface menu, select the interface to be configured. When the selection is changed, the page refreshes, causing all fields to be updated for the newly selected interface. 8. In the IPv6 Prefix field, specify the IPv6 prefix for an interface. 9. In the Prefix Length field, specify the IPv6 prefix length for an interface. 10.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports View the IPv6 routing statistics To view the IPv6 routing statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The previous figure shows the top of the page only. 7. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable IPv6 data that is displayed. Table 59. IPv6 Statistics information Field Description Ip6InReceives The total number of input datagrams received, including those received in error.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 59. IPv6 Statistics information (continued) Field Description Ip6InAddrErrors The number of input datagrams discarded because the IPv6 address in their IPv6 header's destination field was not a valid address to be received at this entity. This count includes invalid addresses (for example, ::0) and unsupported addresses (such as addresses with unallocated prefixes).
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 59. IPv6 Statistics information (continued) Field Description Ip6ReasmOKs The number of IPv6 datagrams successfully reassembled. This counter is incremented at the interface to which these datagrams were addressed, which might not be necessarily the input interface for some of the fragments. Ip6ReasmFails The number of failures detected by the IPv6 reassembly algorithm (for whatever reason: timed out, errors, and so on).
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable ICMPv6 data that is displayed. Table 60. ICMPv6 Statistics information Field Description Icmp6InMsgs The number of ICMP messages received, which includes all those counted by IPv6IfIcmpInErrors. This counter is incremented at the interface to which these ICMP messages were addressed, which might not be the input interface for the messages.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 60. ICMPv6 Statistics information (continued) Field Description Icmp6OutEchos The number of ICMP Echo (request) messages sent. Icmp6OutEchoReplies The number of ICMP Echo Reply messages sent. Icmp6OutGroupMembQueries The number of ICMPv6 Group Membership Query messages sent. Icmp6OutGroupMembResponses The number of ICMPv6 Group Membership Response messages sent.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 61. IPv6 Neighbor Table information (continued) Field Description Neighbor State The state of the neighbor cache entry. Following are the states for dynamic entries in the IPv6 neighbor discovery cache: • Incmp. Address resolution is being performed on the entry.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Routing> IPv6 > Advanced > Static Route Configuration. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports best route metric is chosen. To avoid problems with mismatched metrics, you must configure different preference values for each of the protocols. To configure IPv6 route preferences: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure VLAN routing You can configure the switch with some ports supporting VLANs and some ports supporting routing. You can also configure the switch to allow traffic on a VLAN to be treated as if the VLAN were a router port. When a port is enabled for bridging (the default setting) rather than routing, all normal bridge processing is performed for an inbound packet, which is then associated with a VLAN.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports By default, the selection is blank, which means that the port is excluded from the VLAN but can be dynamically registered (autodetected) in the VLAN through GVRP. 11. In the LAG table, click each LAG once, twice, or three times to configure one of the following modes or reset the LAG to the default settings: • T (Tagged). Select the LAGs on which all frames transmitted for this VLAN are tagged.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select Routing> VLAN > VLAN Routing Configuration. 7. From the VLAN menu, select the VLAN. This menu displays the IDs of all VLANs that are configured on the switch. 8. In the IP Address field, enter the IP address to be configured for the VLAN routing interface. 9. In the Subnet Mask field, enter the subnet mask to be configured for the VLAN routing interface. 10. Click the Add button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Routing> Router Discovery > Router Discovery Configuration. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Manage routes and view the routing table The routing table collects routes from multiple sources: static routes and local routes. The routing table can learn multiple routes to the same destination from multiple sources. The routing table lists all routes. Manually add a route and view the routing table To manually add a default route or static route and view the routing table: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the Route Type menu, select one of the following route types. • DefaultRoute. Creates a default route. You must specify the next hop address and preference. • Static. Creates a static route. You must specify the network address, subnet mask, next hop address, and preference.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 63. Learned Routes information (continued) Field Description Protocol The protocol that created the specified route. The possibilities are one of the following: • Local • Static Route Type The route type can be Connected, Static, or Dynamic, depending on the protocol. Next Hop Interface The outgoing router interface to use when forwarding traffic to the destination.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Routing> Routing Table > Route Configuration. The Configure Routes page displays. 7. Select the check box for the route that you want to modify. 8. Modify the settings. For more information, see Manually add a route and view the routing table on page 286. 9.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Configure Routes page displays. 7. Select the check box for the route that you want to delete. 8. Click the Delete button. The route is deleted. Configure Address Resolution Protocol The Address Resolution Protocol (ARP) associates a Layer 2 MAC address with a Layer 3 IPv4 address.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports View the ARP cache You can view ARP entries in the ARP cache. The ARP cache is a table that lists the remote connections that were recently detected by the switch. To view entries in the ARP cache: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Possible values are 20, 50, 100, 200, and All. If you select All, the browser might be slow to display the information. • Click the < button to display the previous page of the table data entries. • Click the > button to display the next page of the table data entries. 8. To refresh the page with the latest information about the switch, click the Refresh button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable information displayed on the page. You can navigate through the table by doing the following: • From the Rows per page menu, select how many table entries are displayed per page. Possible values are 20, 50, 100, 200, and All. If you select All, the browser might be slow to display the information. • Click the < button to display the previous page of the table data entries.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Remove ARP entries from the ARP cache You can remove entries from the ARP cache. To remove entries from the ARP cache: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. Click the Apply button. Your settings are saved.
5 5 Configure Quality of Service This chapter contains the following sections: • Quality of Service concepts • Manage Class of Service • Manage Differentiated Services 298
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Quality of Service concepts In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports ports, in accordance with the configured default priority of the ingress port. This process is also used for cases where a trusted port mapping cannot be honored, such as when a non-IP packet arrives at a port configured to trust the IP DSCP value. Configure the global CoS settings A global configuration setting is automatically applied to all interfaces on the switch. To configure CoS trust mode settings on all interfaces: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • To configure the same CoS trust mode settings for all CoS configurable interfaces, do the following: a. Select the Global radio button. b. From the Global Trust Mode menu, select one of the following trust mode options for ingress traffic on the switch: - Untrusted. Do not trust any CoS packet marking at ingress. • - 802.1p. The eight priority tags that are specified in IEEE 802.1p are p0 to p7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • 802.1p. The eight priority tags that are specified in IEEE 802.1p are p0 to p7. The QoS setting lets you map each of the eight priority levels to one of seven internal hardware priority queues. The default value is 802.1p. • DSCP. The six most significant bits of the DiffServ field are called the Differentiated Services Code Point (DSCP) bits. 10.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Queue Management Type field displays the queue depth management technique that is used for queues on the interface. By default, this method is Taildrop, irrespective of your selection from the Scheduler Type menu. 11. Click the Apply button. Your settings are saved. Map 802.1p priorities to queue You can view or change which internal traffic classes are mapped to the 802.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. In the 802.1p to Queue Mapping table, map each of the eight 802.1p priorities to a queue (internal traffic class). The 802.1p Priority row contains traffic class selectors for each of the eight 802.1p priorities to be mapped. The priority goes from low (0) to high (7). For example, traffic with a priority of 0 is for most data traffic and is sent using best effort.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. For each DSCP value, select from the corresponding Queue menu which internal traffic class must be mapped to the DSCP value. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position. Before traffic in a lower queue is sent, it must wait for traffic in higher queues to be sent.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Defining DiffServ To use DiffServ for QoS, you must first define the following categories and their criteria: 1. Class. Create classes and define class criteria. 2. Policy. Create policies, associate classes with policies, and define policy statements. 3. Service. Add a policy to an inbound interface. Packets are classified and processed based on defined criteria. The classification criteria are defined by a class.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the DiffServ mode and display the entries in the DiffServ private MIB tables You can enable or disable DiffServ and display the current and maximum number of rows in each of the main DiffServ private MIB tables. To configure the DiffServ mode and display the entries in the DiffServ private MIB tables: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select the administrative mode for DiffServ: • Enable. Differentiated services are active. This is the default setting. • Disable. The DiffServ configuration is retained and can be changed but is not active. 8. Click the Apply button. Your settings are saved. The following table describes the information displayed in the Status table on the DiffServ Configuration page. Table 66.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 11. Define the criteria that must be associated the DiffServ class: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class. The only selection from the Match Every menu is Any. • Reference Class. Select this radio button to reference another class for criteria.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports - • Mask. The MAC mask, which specifies the bits in the source MAC address to compare against the Ethernet frame. Use Fs and zeros to configure the MAC mask. An F means that the bit is checked, and a zero in a bit position means that the data is not significant.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports DSCP value from 0 to 63. The DSCP value is defined as the high-order 6 bits of the Service Type octet in the IP header. • Precedence Value. Select this radio button to require the packet’s IP precedence value to match the specified number from 0 to 7, which you must select from the menu. The IP Precedence field in a packet is defined as the high-order 3 bits of the Service Type octet in the IP header. • IP ToS.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Class Name page displays. 7. Click the class name, which is a hyperlink. The page on which you can change the class configuration displays. 8. Change the class configuration as needed. 9. Click the Apply button. Your settings are saved. Delete a DiffServ class To delete a DiffServ class: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure DiffServ IPv6 class settings The switch supports QoS ACL and DiffServ functionality for IPv6 by providing support for IPv6 packet classification. An IPv6 ACL serves the same purpose as an IPv4 ACL. An Ethernet IPv6 packet is distinguished from an IPv4 packet by its unique Ethertype value, so all IPv6 classifiers include the Ethertype field, even though you cannot configure its value on the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Enter a class name in the Class Name field. The Class Name field also lists all the existing IPv6 class names, from which one can be selected for modification or deletion. 8. From the Class Type menu, select the class type. The switch supports only the class type value All, which means that all the various match criteria defined for the class are satisfied for a packet match.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 11. Define the criteria that must be associated the IPv6 DiffServ class: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class. The only selection from the Match Every menu is Any. • Reference Class. Select this radio button to reference another class for criteria.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Rename an existing IPv6 DiffServ class To rename an existing IPv6 DiffServ class: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > IPv6 Class Configuration. The Class Name page displays. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select QoS > DiffServ > Advanced > Policy Configuration. 7. Enter a policy name in the Policy Name field. You cannot specify the policy type. By default, the policy type is In, indicating that the policy applies to ingress packets. 8. From the Member Class menu, optionally select an existing class that you want to associate with the new policy. 9. Click the Add button. The new policy is added. 10.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports This is an integer value in the range 0 to 7. 12. Configure the policy attributes: • Drop. Select this radio button to require each inbound packet to be dropped. • Mark VLAN CoS. Select this radio button to specify the VLAN priority, which you must select from the menu. The VLAN priority is expressed as an integer value in the range from 0 to 7. • Mark IP Precedence.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports must select a DSCP code from the menu. The DSCP value is defined as the high-order six bits of the Service Type octet in the IP header. 14. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information displayed on the page. Table 69. DiffServ policy configuration policy attribute Field Description Policy Name The name of the DiffServ policy.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. Click the Apply button. Your settings are saved. Change the policy attributes for an existing DiffServ policy To change the policy attributes for an existing DiffServ policy: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Change or remove a class from an existing DiffServ policy To change or remove a class from an existing DiffServ policy: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable information displayed on the page. Table 70. Service Interface Configuration information Field Description Direction Shows the traffic direction of this service interface (either In or Out). Operational Status Shows the operational status of this service interface (either Up or Down). Change the DiffServ policy for an interface To change the DiffServ policy for an interface: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. From the Policy In Name menu, select another policy name. 10. Click the Apply button. Your settings are saved. Remove a DiffServ policy from an interface To remove a DiffServ policy from an interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports View DiffServ service statistic You can display service-level statistical information about all interfaces to which DiffServ policies are attached. To view the DiffServ service statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the information available on the Service Statistics page. Table 71. DiffServ Service Statistics information Field Description Interface All valid port numbers on the switch with a DiffServ policy that is attached in the inbound direction. Direction The traffic direction of interface is inbound (In). This field shows only the direction for which a DiffServ policy is attached.
6 6 Manage Device Security This chapter contains the following sections: • Change the device admin password for the device UI • Manage the RADIUS settings • Configure the TACACS+ settings • Configure authentication lists • Manage the Smart Control Center • Configure management access • Control access with profiles and rules • Configure port authentication • Set up traffic control • Configure access control lists 334
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Change the device admin password for the device UI You can change the device admin password for device UI: To change the device admin password for the device UI: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Use the following guidelines for a new password: • The minimum length of the password must be eight characters. • The password must include at least one uppercase letter, one lowercase letter, and one numeral. • Although it is not required, we recommend that you include a special character in the password. If the new password does not conform to the requirements, the switch rejects the password.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Therefore, the maximum delay in receiving a RADIUS response on the switch equals the maximum number of retransmissions multiplied by the time-out period multiplied by the number of configured RADIUS servers. If the RADIUS request was generated by a user login attempt, all user interfaces are blocked until the switch receives a RADIUS response. To configure the global RADIUS server settings: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports CAUTION: The maximum delay in receiving a RADIUS response on the switch equals the maximum number of retransmissions multiplied by the time-out period multiplied by the number of configured RADIUS servers. If the RADIUS request was generated by a user login attempt, all user interfaces are blocked until the switch receives a RADIUS response. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure a RADIUS authentication server on the switch You can configure various settings for a RADIUS authentication server. Add a primary RADIUS authentication server to the switch To add a primary RADIUS authentication server to the switch and view or reset the RADIUS authentication server statistics: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports You must select Yes before you can configure the RADIUS secret. After you add the RADIUS server, this field indicates whether the shared secret for this server was configured. 10. In the Secret field, type the shared secret text string used for authenticating and encrypting all RADIUS communications between the switch and the RADIUS server. This secret must match the RADIUS encryption. 11. From the Active menu, select Primary. 12.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The System Information page displays. 6. Select Security > Management Security > RADIUS > Server Configuration. The Server Configuration page displays. 7. Select the check box next to the server IP address. 8. Modify the configuration for the selected server. 9. Click the Apply button. Your settings are saved. Remove a RADIUS authentication server from the switch To a remove a RADIUS authentication server from the switch: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure a RADIUS accounting server You can configure various settings for a RADIUS accounting server on the network. Add a RADIUS accounting server to the switch To add a RADIUS accounting server to the switch and view or clear the RADIUS accounting server statistics: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. In the Port field, specify the UDP port number the server uses to verify the RADIUS accounting server authentication. The default UDP port number is 1813. 9. From the Secret Configured menu, select Yes to add a RADIUS secret in the next field. You must select Yes before you can configure the RADIUS secret. After you add the RADIUS accounting server, this field indicates whether the shared secret for this server was configured. 10.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. Modify the configuration for the selected accounting server. 9. Click the Apply button. Your settings are saved. Remove a RADIUS accounting server from the switch To a remove a RADIUS accounting server from the switch: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the TACACS+ settings TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. TACACS+ provides the following services: • Authentication. Provides authentication during login and through user names and user-defined passwords. • Authorization. Performed at login.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. In the Key String field, specify the authentication and encryption key for TACACS+ communications between the switch and the TACACS+ server. The valid range is 0–128. The key must match the key configured on the TACACS+ server. 8. In the Connection Timeout field, specify the maximum number of seconds allowed to establish a TCP connection between the switch and the TACACS+ server. 9. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. In the TACACS+ Server field, enter the TACACS+ server IP address. 8. In the Priority field, specify the priority for the TACACS+ server. The priority determines the order in which the TACACS+ servers are contacted when attempting to authenticate a user. A value of 0 is the highest priority. The valid range is 0–65535. 9. In the Port field, specify the authentication port value for TACAS+ server sessions.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select Security > Management Security> TACACS+ > TACACS+ Server Configuration. The TACACS+ Server Configuration page displays. 7. Select the check box next to the server IP address. 8. Click the Delete button. The TACACS+ server is removed. Configure authentication lists A login list specifies one or more authentication methods to validate switch or port access for the admin user. You can configure a default login list.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > Authentication List > HTTP Authentication List. 7. Select the check box next to the httpList name. 8. From the menu in the 1 column, select the authentication method that must be used first in the selected authentication login list.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 12. Click the Apply button. Your settings are saved. Configure an HTTPS authentication list You can configure the default login list for secure HTTP (HTTPS). To configure an HTTPS authentication list: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. From the menu in the 1 column, select the authentication method that must be used first in the selected authentication login list. If you select a method that does not time out as the first method, such as Local, no other method is tried, even if you specified more than one method. This setting does not display when you first create a new login list. User authentication occurs in the order the methods are selected.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Manage the Smart Control Center By default, the configuration option of the Smart Control Center (SCC) is disabled. You still can use the SCC to discover the IP address of the switch, but you cannot use the SCC to perform any actions on the switch. If you enable the configuration option of the SCC, you can use it to configure the switch. For more information about the SCC, visit netgear.com/support/product/SCC.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select the one of the following SCC Admin Mode radio buttons: • Enable. The SCC can discover the switch and perform actions on the switch. • Disable. The SCC can discover the switch but cannot perform any actions on the switch. This is the default setting. 8. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure the HTTPS settings Secure HTTP (HTTPS) enables the transmission of HTTP over an encrypted Secure Sockets Layer (SSL) or Transport Layer Security (TLS) connection. When you manage the switch over the device UI, HTTPS can help ensure that communication between the management system and the switch is protected from eavesdroppers and man-in-the-middle attacks. The hash algorithms that SSL uses are MD5 and SHA-1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. In the HTTPS Port field, type the HTTPS port number. The value must be in the range of 1025 to 65535. Port 443 is the default value. The configured value is displayed. 9. In the HTTPS Session Soft Timeout (Minutes) field, enter the inactivity time-out for HTTPS sessions. The value must be in the range of 1 to 60 minutes. The default value is 5 minutes. The configured value is displayed. 10.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Microsoft Edge: If Microsoft Edge displays a There is a problem with this website’s security certificate warning or a similar warning, select Details > Go on to the webpage. For information about installing a specific security certificate on the switch, see Manage certificates for HTTPS access on page 359 and Use an HTTP session to download and install an SSL security certificate file on the switch on page 494.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Certificate Present field displays whether a certificate is present on the switch. 7. In the Certificate Management section, select the Generate Certificates radio button. 8. Click the Apply button. The switch generates an SSL certificate. The Certificate Generation Status field shows information about the progress.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 10. In the Remote File Path field, enter the path of the file to download. You can enter up to 96 characters. The default is blank. 11. In the Remote File Name field, enter the name of the file on the TFTP server to download. You can enter up to 32 characters. The default is blank. 12. Select the Start File Transfer check box. 13. Click the Apply button. The file transfer starts.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable data that is displayed. Table 73. Access profile configuration profile summary Field Description Rule Type The action performed when the rules are matched. Service Type The service type chosen. The policy is restricted by the service type chosen. Source IP Address The source IP address of the client originating the management traffic. Mask The subnet mask of the IP Address.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Security > Access > Access Control > Access Rule Configuration. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Activate the access profile After you add rules to the access profile, you can activate the access profile. CAUTION: If you configure a security access profile incorrectly and you activate the access profile, you might no longer be able to access the switch’s device UI. If that situation occurs, you must reset the switch to factory default settings (see Reset the switch to its factory default settings on page 482).
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Display the access profile summary and the number of filtered packets After you added rules to the active profile, you can view the entries in the summary. If the access profile is active, you can also view the number of filtered packets. To display the access profile summary and the number of filtered packets: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 74. Access profile configuration profile summary (continued) Field Description Mask The subnet mask of the IP Address. Priority The priority of the rule. Deactivate an access profile You can deactivate an access profile. To deactivate an access profile: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Remove an access profile You can remove an access profile that you no longer need. Before you can remove the access profile, you must deactivate it (see Deactivate an access profile on page 369). To remove an access profile: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure port authentication With port-based authentication, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions. At any given time, only one supplicant is allowed to attempt authentication on a port in this mode. Ports in this mode are under bidirectional control.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 6. Select Security > Port Authentication > Basic > 802.1X Configuration. 7. Select the Port Based Authentication State Enable radio button. This enables the 802.1X administrative mode on the switch. The default value is Disable. Note: If 802.1X is enabled, authentication is performed by a RADIUS server. This means that the primary authentication method must be RADIUS.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Manage port authentication on individual ports You can enable and configure port access control on one or more physical ports. Configure 802.1X settings for a port To configure 802.1X settings for a port: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. Specify the following settings: • Port Control. Defines the port authorization state. The control mode is set only if the link status of the port is link up. Select one of the following options: - Auto. The switch automatically detects the mode of the interface. - Authorized. The switch places the interface into an authorized state without being authenticated.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Server Timeout. Specify the time that elapses before the switch resends a request to the authentication server. 10. Click the Apply button. Your settings are saved. The following table describes the port authentication status information available on the page. Table 75. Port authentication status information Field Description Control Direction The control direction for the specified port, which is always Both.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Security > Port Authentication > Advanced > Port Summary.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports View the client summary You can display information about supplicant devices that are connected to the local authenticator ports. If no active 802.1X sessions exist, the table is empty. To view the client summary: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 77. Client Summary information (continued) Field Description Supplicant Mac Address The supplicant’s device MAC address. Session Time The time since the supplicant logged in seconds. Filter ID The policy filter ID assigned by the authenticator to the supplicant device. VLAN ID The VLAN ID assigned by the authenticator to the supplicant device.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • 01:80:C2:00:00:20 to 01:80:C2:00:00:21 • FF:FF:FF:FF:FF:FF 10. In the Port and LAG tables in the Source Port Members section, select the ports and LAGs that must be included in the inbound filter. If a packet with the MAC address and VLAN ID that you specify is received on a port that is not part of the inbound filter, the packet is dropped. 11.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The MAC Filter Configuration page displays. 7. From the MAC Filter menu, select the filter. 8. Click the Delete button. The filter is removed. View the MAC filter summary You can view the MAC filters that are configured on the switch. To view the MAC filter summary: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the information displayed on the page. Table 78. MAC Filter Summary information Field Description MAC Address The MAC address of the filter in the format XX:XX:XX:XX:XX:XX. VLAN ID The VLAN ID used with the MAC address to fully identify packets you want filtered. Source Port Members The ports to be used for filtering inbound packets.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Security > Traffic Control > Storm Control. 7. In the Storm Control section, from the Ingress Control Mode menu, select one of the following modes for storm control: • Disabled. Storm control is disabled. This is the default setting. • Unknown Unicast.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure storm control settings for one or more ports After you configure the global settings, you can specify storm control settings for one or more ports. To configure storm control settings for one or more ports: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The default settings in the Port Settings section depends on the global storm control settings (see Configure global storm control settings on page 384), which apply to all ports. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure port security settings A MAC address can be defined as allowable by one of two methods: dynamically or statically. Both methods are used concurrently when a port is locked. Dynamic locking implements a first arrival mechanism for port security. You specify how many addresses can be learned on the locked port. If the limit was not reached, then a packet with an unknown source MAC address is learned and forwarded normally.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports View learned MAC addresses and convert them to static MAC addresses After you enabled port security globally (see Configure the global port security mode on page 387) and enabled port security for specific interfaces (see Configure port security settings on page 389), you can convert a dynamically learned MAC address to a statically locked address.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 11. From the Port List menu, select the individual interface. The Dynamic MAC Address Table displays the MAC addresses and their associated VLANs that were learned on the selected port. Field Description VLAN ID The VLAN ID corresponding to the MAC address. MAC Address The MAC addresses learned on a specific port. 12.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure a private VLAN To configure a private VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. Click the Apply button. Your settings are saved. Configure private VLAN associations To configure private VLAN associations: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable information displayed on the page. Table 80. Private VLAN Association information Field Description Isolated VLAN The isolated VLAN associated with the selected primary VLAN. Community VLAN(s) The list of community VLANs associated with the selected primary VLAN. Configure the private VLAN port mode To configure the private VLAN port mode: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 10. In the Host Secondary VLAN field, enter the secondary VLAN ID for host association mode. The range of the VLAN ID is 2–4093. 11. Click the Apply button. Your settings are saved. The Operational VLAN(s) field displays the operational VLANs. Configure a private VLAN promiscuous interface To configure a private VLAN promiscuous interface: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To configure an ACL: 1. Create an IPv4-based or IPv6-based or MAC-based ACL ID. 2. Create a rule and assign it to a unique ACL ID. 3. Define the rules, which can identify protocols, source, and destination IP and MAC addresses, and other packet-matching criteria. 4. Use the ID number to assign the ACL to a port or to a LAG. To view ACL configuration examples, see Access control lists (ACLs) on page 518.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > ACL Wizard. 7. From the ACL Type menu, select the type of ACL. You can select from the following ACL types: • ACL Based on Destination MAC. Creates an ACL based on the destination MAC address, destination MAC mask, and VLAN. • ACL Based on Source MAC. Creates an ACL based on the source MAC address, source MAC mask, and VLAN.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • ACL Based on Source IPv4 L4 Port. Creates an ACL based on the source IPv4 Layer 4 port number. • ACL Based on Destination IPv6 L4 Port. Creates an ACL based on the destination IPv6 Layer 4 port number. • ACL Based on Source IPv6 L4 Port. Creates an ACL based on the source IPv6 Layer 4 port number. Note: For L4 port options, two rules are created (one for TCP and one for UDP). 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports ACL Based On Fields Destination IPv6 • • Destination Prefix. Specify the destination prefix. Destination Prefix Length. Specify the destination prefix length. Source IPv6 • • Source Prefix. Specify the source destination prefix. Source Prefix Length. Specify the source prefix length. Destination IPv4 L4 Port • • Destination L4 port (protocol). Specify the destination IPv4 L4 port protocol. Destination L4 port (value).
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Modify an ACL rule that you created with the ACL Wizard To modify an ACL rule that you created with the ACL Wizard: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the ACL Wizard, see Use the ACL Wizard to create a simple ACL on page 401. Configure a MAC ACL A MAC ACL consists of a set of rules that are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken, and the additional rules are not checked for a match. Rules for the MAC ACL are created using the MAC ACL Rule Configuration page.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Add a MAC ACL To add a MAC ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. Click the Add button. The MAC ACL is added. Each configured ACL displays the following information: • Rules. The number of rules currently configured for the MAC ACL. • Direction. The direction of packet traffic affected by the MAC ACL, which can be Inbound or blank. Change the name of a MAC ACL To change the name of a MAC ACL: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Delete a MAC ACL To delete a MAC ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Add a rule to a MAC ACL To add a rule to a MAC ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 10. In the Assign Queue field, specify the hardware egress queue identifier that must be used to handle all packets matching this ACL rule. The valid range of queue IDs is 0 to 7. 11. From the Mirror Interface menu, select the specific egress interface to which the matching traffic stream must be copied, in addition to being forwarded normally by the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Novell • PPPoE • Reverse ARP • User Value 18. In the EtherType User Value field, specify the customized EtherType value that must be used when you select User Value from the EtherType Key menu. This value must be compared against the information in an Ethernet frame. The valid range of values is 0x0600 to 0xFFFF. 19.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The System Information page displays. 6. Select Security > ACL > Basic > MAC Rules. The MAC Rules page displays. 7. Select the check box that is associated with the rule. 8. Click the Delete button. The rule is removed. Configure MAC bindings When an ACL is bound to an interface, all the rules that are defined are applied to the selected interface. You can assign MAC ACL lists to ACL priorities and interfaces.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the ACL ID menu, select an ACL. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface. 8. In the Sequence Number field, optionally specify a number to indicate the order of the access list relative to other access lists already assigned to the interface and direction. A low number indicates high precedence order.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the information displayed in the Interface Binding Status table. Table 81. Interface Binding Status table Field Description Interface The interface of the ACL assigned. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. To delete a MAC ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed. The following table describes the information that is displayed in the MAC binding table. Table 82. MAC Binding Table Field Description Interface The interface of the ACL assigned. Direction The selected packet filtering direction for the ACL.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. Create an IPv4 rule (see Configure rules for a basic IPv4 ACL on page 422 or Configure rules for an extended IPv4 ACL on page 427). 3. Associate the IPv4 ACL with one or more interfaces (see Configure IP ACL interface bindings on page 445). You can view or delete IPv4 ACL configurations in the IP ACL Binding table (see View or delete IP ACL bindings in the IP ACL binding table on page 447. Add an IP ACL To add an IP ACL: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The IP ACL page shows the current size of the ACL table compared to the maximum size of the ACL table. The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs. The maximum size is 100. The Current Number of ACL field displays the current number of all ACLs configured on the switch. The Maximum ACL field displays the maximum number of IP ACLs that can be configured on the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Change the number or name of an IPv4 ACL To change the number or name of an IPv4 ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. Specify the following match criteria for the rule: • Sequence Number. Enter an ACL sequence number in the range of 1 to 2147483647 that is used to identify the rule. An IP ACL can contain up to 50 rules. • Action. Select the ACL forwarding action, which is one of the following: - Permit. Forward packets that meet the ACL criteria. - Deny. Drop packets that meet the ACL criteria. • Egress Queue.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Interface Redirect. From the Redirect menu, select the egress interface to which the matching traffic stream must be redirected, bypassing any forwarding decision normally performed by the switch. This field cannot be set if a mirror interface is already configured for the IP ACL rule. • Source IP Address.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The rule is a hyperlink. The Standard ACL Rule Configuration page displays. 9. Modify the basic IP ACL rule criteria. 10. Click the Apply button. Your settings are saved. Delete a basic IPv4 ACL rule To delete a basic IPv4 ACL rule: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure rules for an extended IPv4 ACL You can define rules for extended IP-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. Note: An implicit deny all rule is included at the end of an ACL list.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The previous figure does not show all columns on the page. If no rules exists, the Extended ACL Rule Table shows the message No rules have been configured for this ACL. If one or more rules exist for the ACL, the rules display in the Extended ACL Rule Table. 7. From the ACL ID/Name menu, select the IP ACL for which you want to add a rule. For extended IP ACLs, this must be an ID in the range from 101 to 199 or a name. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports - Deny. Drop packets that meet the ACL criteria. • Egress Queue. If the selection from the Action menu is Permit, select the hardware egress queue identifier that is used to handle all packets matching this IP ACL rule. The range of queue IDs is 0 to 7. • Logging. If the selected radio button for the action is Deny, you can enable logging for the ACL by selecting the Enable radio button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports - If you select the Port radio button, you can either enter the port number yourself or select one of the following protocols from the menu: • The source IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp. • The source IP UDP port protocols are domain, echo, snmp, ntp, rip, time, who, and tftp.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The wildcard mask determines which bits are used and which bits are ignored. A wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard of 255.255.255.255 indicates that all of the bits are important. • Dst L4. The options are available only when the protocol is set to TCP or UDP. Use the destination L4 port option to specify relevant matching conditions for L4 port numbers in the extended ACL rule.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • IGMP Type. If you specify the IGMP type, the IP ACL rule matches the specified IGMP message type. Possible values are in the range 0 to 255. If this field is left empty, it means any. • ICMP. Select either the Type or Message radio button: - - If you select the Type radio button, note the following: • The Type and Code fields are enabled only if the protocol is ICMP.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports ToS mask value is a hexadecimal number that is composed of numbers 00 to FF. The ToS mask denotes the bit positions in the ToS bits value that are used for comparison against the IP ToS field in a packet. For example, to check for an IP ToS value for which bit 7 is set and is the most significant value, for which bit 5 is set, and for which bit 1 is cleared, use a ToS bits value of 0xA0 and a ToS mask of 0xFF. 10.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 10. Click the Apply button. Your settings are saved. Delete an extended IPv4 ACL rule To delete an extended IPv4 ACL rule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Multiple steps are involved in defining an IPv6 ACL and applying it to the switch: 1. Add an IPv6 ACL ID (see Add an IPv6 ACL on page 435). An IPv6 ACL must start with a name string that is up to 31 alphanumeric characters in length. The name must start with an alphabetic character. 2. Create an IPv6 rule (see Configure rules for an IPv6 ACL on page 438). 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. In the IPv6 ACL field, specify a name to identify the IPv6 ACL. This is the IPv6 ACL name string, which includes up to 31 alphanumeric characters only. The name must start with an alphabetic character. 8. Click the Add button. The IPv6 ACL is added. The following table describes the nonconfigurable information displayed on the page. Table 83.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The System Information page displays. 6. Select Security > ACL > Advanced > IPv6 ACL. The IPv6 Configuration page displays. 7. Select the check box that is associated with the IPv6 ACL. 8. Click the Delete button. The IPv6 ACL is removed. Configure rules for an IPv6 ACL You can define rules for IPv6 ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The previous figure does not show all columns on the page. If no rules exists, the IPv6 ACL Rule Table shows the message No rules have been configured for this ACL. If one or more rules exist for the ACL, the rules display in the IPv6 ACL Rule Table. 7. From the ACL Name menu, select the IPv6 ACL for which you want to add a rule. An IPv6 ACL can contain up to 50 rules. 8. Click the Add button. 9.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Logging. If you select the Deny radio button, you can enable logging for the ACL by selecting the Enable radio button. (Logging is subject to resource availability in the device.) If the access list trap flag is also enabled, periodic traps are generated, indicating the number of times this rule was evoked during the report interval. A fixed five-minute report interval is used for the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The relevant matching conditions for L4 port numbers is equal. That is, the IPv6 ACL rule matches only if the Layer 4 source port number is equal to the specified port number or port protocol.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Each of these values translates into its equivalent port number, which is used as both the start and end of the port range. Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The relevant matching conditions for L4 port numbers is equal.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports port-unreachable, router-solicitation, router-advertisement, router-renumbering, time-exceeded, and unreachable. • Fragments. Either select the Enable radio button to allow initial fragments (that is, the fragment bit is asserted) or leave the default Disable radio button selected to prevent initial fragments from being used.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The System Information page displays. 6. Select Security > ACL > Advanced > IPv6 Rules. The IPv6 Rules page displays. 7. From the ACL Name menu, select the ACL that includes the rule that you want to modify. 8. In the IPv6 ACL Rule Table, click the rule. The rule is a hyperlink. The IPv6 ACL Rule Configuration page displays. 9. Modify the IPv6 ACL rule criteria. 10. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. Click the Delete button. The rule is removed. Configure IP ACL interface bindings When you bind a basic IPv4, extended IPv4, or IPv6 ACL to an interface, all the rules that you defined for the IP ACL are applied to the selected interface. If resources on the switch are insufficient, an attempt to bind an ACL to an interface fails. To bind an IP ACL to one or more interfaces: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the ACL ID menu, select an existing IP ACL for you which you want to add an IP ACL interface binding. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface. 8. In the Sequence Number field, optionally specify a number to indicate the order of the access list relative to other access lists already assigned to this interface and direction.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable information displayed on the page. Table 84. IP Binding Status table Field Description Interface The selected interface. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. To delete an IP ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed. The following table describes the information displayed in the IP ACL Binding Table. Table 85. IP ACL Binding Table Field Description Interface The interface. Direction The selected packet filtering direction for the ACL.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
7 7 Monitor the Switch and the Traffic This chapter contains the following sections: • Monitor the switch and the ports • Configure and view the logs • Configure port mirroring 451
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Monitor the switch and the ports You can view and clear port and switch statistics and perform a cable test. View or clear switch statistics You can view detailed statistical information about the traffic that the switch processes. To view or clear the switch statistics: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 86. Switch statistics Field Description ifIndex The interface index of the interface table entry associated with the processor of this switch. Octets Received The total number of octets of data received by the processor (excluding framing bits, but including FCS octets). Packets Received Without Errors The total number of packets (including broadcast packets and multicast packets) received by the processor.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 86. Switch statistics (continued) Field Description Most VLAN Entries Ever Used The largest number of VLANs that were active on this switch since the last reboot. Static VLAN Entries The number of active VLAN entries on this switch that were created statically. VLAN Deletes The number of VLANs on this switch that were created and then deleted since the last reboot.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select whether to display physical interfaces, link aggregation groups (LAGs), or both by clicking one of the following links above the table heading: • 1 (or the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only link aggregation groups are displayed. • All. Both physical interfaces and link aggregation groups are displayed. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Reset the counters for all interfaces on the switch To reset the counters for all interfaces on the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. From the MST ID menu, select the MST ID associated with the interface (if available). 9. To refresh the page with the latest information about the switch, click the Refresh button. 10. To clear all the counters, click the Clear button. This resets all statistics for this port to the default values. The following table describes the detailed port information displayed on the page.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 88. Detailed port statistics (continued) Field Description Physical Mode Indicates the port speed and duplex mode. In autonegotiation mode the duplex mode and speed are set from the autonegotiation process. Physical Status Indicates the port speed and duplex mode. Link Status Indicates whether the link is up or down. Link Trap Indicates whether or not the port sends a trap when link status changes.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 88. Detailed port statistics (continued) Field Description Packets Received 512-1023 Octets The total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 88. Detailed port statistics (continued) Field Description Total Received Packets Not Forwarded The number of valid frames received that were discarded (that is, filtered) by the forwarding process. 802.3x Pause Frames Received The number of MAC control frames received on this interface with an opcode indicating the PAUSE operation. This counter does not increment when the interface is operating in half-duplex mode.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 88. Detailed port statistics (continued) Field Description Broadcast Packets Transmitted The total number of packets that higher-level protocols requested be transmitted to the broadcast address, including those that were discarded or not sent.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports View or clear EAP and EAPoL statistics You can view information about Extensible Authentication Protocol (EAP) and EAP over LAN (EAPoL) packets that are received on physical ports. To view or clear EAP and EAPoL statistics: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the EAP statistics displayed on the page. Table 89. EAP statistics Field Description Port The port number. EAPOL Frames Received The number of valid EAPoL frames of any type that were received by this authenticator. EAPOL Frames Transmitted The number of EAPoL frames of any type that were transmitted by this authenticator.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The following table describes the nonconfigurable information displayed on the page. Table 90. Cable Test information Field Description Cable Status Indicates the cable status: • Normal. The cable is working correctly. • Open. The cable is disconnected or a faulty connector exists. • Short. An electrical short exists in the cable. • Cable Test Failed. The cable status could not be determined. The cable might in fact be working.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 10. Click the Apply button. Your settings are saved. The Memory Log table displays on the Memory Log page. The Total number of Messages field displays the number of messages the system logged in memory. Only the 200 most recent entries are displayed on the page. The rest of the page displays the Memory Log messages.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Monitoring > Logs > FLASH Log.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Total Number of Messages field shows is the total number of persistent log messages that are stored on the switch. The maximum number of persistent log messages displayed on the switch is 64. The following example shows the standard format for a persistent log message: *Jan 01 2018 00:00:18: AAA-5-CONNECT: New http connection for user admin, source 192.168.1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The Server Log page displays. 7. Select one of the following Admin Status radio buttons: • Enable. Send log messages to all configured hosts (syslog collectors or relays) using the values configured for each host. • Disable. Stop logging to all syslog hosts. Disable means no messages are sent to any collector or relay. 8. Click the Apply button. Your settings are saved. 9.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Modify the settings for a remote syslog host To modify the settings for a remote syslog host: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Monitoring > Logs > Trap Logs. 7.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Configure port mirroring Port mirroring lets you select the network traffic of specific switch ports for analysis by a network analyzer. You can select many switch ports as source ports but a single switch port only as the destination port. You can configure how traffic is mirrored on a source port by selecting packets that are received, transmitted, or both.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. Select an Admin Mode radio button: • Disable. Port mirroring is enabled. • Enable. Port mirroring is enabled. 8. From the Destination Port menu, select the destination port to which port traffic must be copied. You can configure only one destination port on the system. The port functions as a probe port and receives traffic from all configured source ports. If no port is configured, None is displayed. The default is None. 9.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 12. From the Direction menu, specify the direction of the traffic that must be mirrored from the selected source ports: • None. The value is not configured. This is the default setting. • Tx and Rx. Monitors transmitted and received packets. • Rx. Monitors received (ingress) packets only. • Tx. Monitors transmitted (egress) packets only. 13. Click the Apply button. Your settings are saved.
8 Maintain or Troubleshoot the switch 8 This chapter contains the following sections: • Reboot the switch • Reset the switch to its factory default settings • Export a file from the switch • Download a file to the switch or update the software • Manage software images • Perform diagnostics and troubleshooting 480
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Reboot the switch You can reboot the switch from the device UI. Note: If you can physically access the switch, you can reboot the switch by pressing the single-function Reset button on the front panel for more than one second. To reboot the switch: 1. Connect your computer to the same network as the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Reset the switch to its factory default settings You can reset the system configuration to the factory default values. All changes that you made are lost. If the IP address changes, your web session might disconnect. Note: If you reset the switch to the default configuration, the IP address is reset to 192.168.0.239, and the DHCP client is enabled.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To reset the switch to factory default settings and reset the registration status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Export a file from the switch You can export configuration (ASCII or log ASCII) files from the switch to a file server by using TFTP, HTTP, or USB.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the File Type menu, select the type of file: • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed. The most common usage of text-based configuration is to upload a working configuration from a device, edit it offline to personalize it for another similar device (for example, change the device name or IP address), and download it to that device.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The page displays information about the file transfer progress. The page refreshes automatically when the file transfer completes (or if it fails). Use HTTP to export a file from the switch to a computer You can upload (export) files of various types from the switch to a computer through an HTTP session by using your web browser. To export a file from the switch to a computer by using HTTP: 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Tech Support. The tech support file is a text-base file that contains a variety of hardware, software, and configuration information that can assist in device and network troubleshooting. • Crash Logs. Specify crash logs to retrieve them. 8. Click the Apply button. The file transfer begins. The page displays information about the file transfer progress.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the File Type menu, select the type of file: • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed. The most common usage of text-based configuration is to upload a working configuration from a device, edit it offline to personalize it for another similar device (for example, change the device name or IP address), and download it to that device. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Use TFTP to download a file to the switch or update the software image You can download a software (firmware) image, configuration files, and SSL files from a TFTP server to the switch. Before you download a file to the switch, the following conditions must be true: • The file to download from the TFTP server is on the server in the appropriate directory. • The file is in the correct format.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the File Type menu, select the type of file: • Software. The system software image, which is saved in one of two flash sectors called images (image1 and image2). The active image stores the active copy, while the other image stores a second copy. The device boots and runs from the active image. If the active image is corrupted, the system automatically boots from the nonactive image.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The default is the IPv4 address 0.0.0.0. 11. In the Transfer File Path field, specify the path on the TFTP server where the file is located. Enter up to 160 characters. Include the backslash at the end of the path. A path name with a space is not accepted. Leave this field blank to save the file to the root TFTP directory. 12. In the Remote File Name field, specify the name of the file to download from the TFTP server.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Note: We recommended that you do not overwrite the active image. 9. Select the Select File Browse button and locate the file that you want to download. The file name can contain up to 80 characters. 10. Click the Apply button. The file transfer begins. The page displays information about the progress of the file transfer. After a file transfer is started, wait until the page refreshes.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To disable HTTPS and use an HTTP session to download and install an SSL security certificate file on the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The page displays information about the progress of the file transfer. The page refreshes automatically when the file transfer completes (or if it fails). 14. From the File Type menu, select SSL Server Certificate PEM File. This is the key file, which must be in the format xxxxKEYxxxxx.pem. 15. Select the Select File Browse button and locate the file that you want to download. The file name can contain up to 80 characters. 16.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 7. From the File Type menu, select the type of file: • Software. The system software image, which is saved in one of two flash sectors called images (image1 and image2). The active image stores the active copy, the other image stores a second copy. The device boots and runs from the active image. If the active image is corrupted, the system automatically boots from the nonactive image.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Manage software images The switch maintains two versions of the switch software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded when the switch starts or reboots. This feature reduces switch down time when you are updating the switch software.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Maintenance > File Management > Copy. 7. Select the Source Image image1 or image2 radio button to specify the image to be copied. 8. Select the Destination Image image1 or image2 radio button to specify the destination image. 9. Click the Apply button. Your settings are saved.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Maintenance > File Management > Dual Image Configuration. 7. From the Image Name menu, select the image that is not the image displayed in the Current-active field. The Current-active field displays the name of the active image. 8.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports For information about the credentials, see Credentials for the device UI on page 30. 5. Click the Go button. The System Information page displays. 6. Select Maintenance > File Management > Dual Image > Dual Image Status. The following table describes the information available on the page. Table 92. Dual Image Status information Field Description Image1 Ver The version of the image1 code file.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To ping an IPv4 address: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 8. In the Count field, enter the number of echo requests that must be sent. The default value is 3. The range is 1 to 15. 9. In the Interval field, enter the time between ping packets in seconds. The default value is 3 seconds. The range is 1 to 60. 10. In the Size field, enter the size of the ping packet. The default value is 0 bytes. The range is 0 to 13000. 11.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To ping an IPv6 address: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Link Local. Pings a link-local IPv6 address over a specified interface. With this selection, the Interface menu displays, and you must select the interface. 8. In the IPv6 Address/Hostname field, enter the IPv6 address or host name of the station that must be pinged. The format is xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx. The maximum number of characters is 255. 9.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To send an IPv4 traceroute: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 10. In the Init TTL field, enter the initial TTL to be used. The default value is 1. The range is 1 to 255. 11. In the MaxFail field, enter the maximum number of failures allowed in the session. The default value is 5. The range is 1 to 255. 12.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports To send an IPv6 traceroute: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 10. In the Init TTL field, enter the initial TTL to be used. The default value is 1. The range is 1 to 255. 11. In the MaxFail field, enter the maximum number of failures allowed in the session. The default value is 5. The range is 1 to 255. 12.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 21 or Access the switch off-network and not connected to the Internet on page 29. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 32. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports When this option is enabled, all switch memories and switch registers are dumped to a file with a prefix of reg. This option is disabled by default. 13. To test if a core dump can be written to the USB device (available only if you specified USB as the protocol), do the following: a. Select the Write Core Test check box. CAUTION: Make sure that the Write Core check box is cleared when you click the Apply button.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • After 9 times: 20 minutes • After 12 times: 40 minutes • After 15 times: 60 minutes • After 18 times: 60 minutes Maintain or Troubleshoot the switch 514 User Manual
A Configuration Examples A This appendix contains the following sections: • Virtual local area networks (VLANs) • Access control lists (ACLs) • Differentiated Services (DiffServ) • 802.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Virtual local area networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router. Routers connect LANs together, routing the traffic to the appropriate port.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If the port is a member of the VLAN specified by the packet’s VLAN ID, the packet can be sent to other ports with the same VLAN ID. • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • If an untagged packet enters port 4, the switch tags it with VLAN ID 20. The packet can access port 5 and port 6. The outgoing packet is stripped of its tag to become an untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 2. On the MAC Rules page, create a rule for the Sales_ACL with the following settings: • Sequence Number. 1 • Action. Permit • Assign Queue ID. 0 • Match Every. False • CoS. 0 • Destination MAC. 01:02:1A:BC:DE:EF • Destination MAC Mask. 00:00:00:00:FF:FF • EtherType. User Value. • Source MAC. 02:02:1A:BC:DE:EF • Source MAC Mask. 00:00:00:00:FF:FF • VLAN ID.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Basic IPv4 ACL example configuration The following example shows how to create an IPv4-based ACL that prevents any IP traffic from the Finance department from being allowed on the ports that are associated with other departments. Traffic from the Finance department is identified by each packet’s network IP address. 1. On the IP ACL page, create a new IP ACL with an IP ACL ID of 1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Differentiated Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network delivers the data in a timely fashion, although there is no guarantee that it does. During times of congestion, packets might be delayed, sent sporadically, or dropped.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports • Secondary 802.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Traffic conditioning policy Traffic conditioning pertains to actions performed on incoming traffic. Several distinct QoS actions are associated with traffic conditioning: • Dropping. Drop a packet upon arrival. This is useful for emulating access control list operation using DiffServ, especially when DiffServ and ACL cannot coexist on the same interface. • Marking IP DSCP or IP Precedence.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports DiffServ example configuration To create a DiffServ class and policy and attach them to a switch interface, follow these steps: 1. On the QoS Class Configuration page, create a new class with the following settings: • Class Name. Class1 • Class Type. All For more information about this page, see Configure a DiffServ class on page 310. 2. Click the Class1 hyperlink to view the DiffServ Class Configuration page for this class. 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 9. On the Service Configuration page, select the check box next to interfaces g7 and g8 to attach the policy to these interfaces, and then click the Apply button. (See Configure the DiffServ service interface on page 328.) All UDP packet flows destined to the 192.12.2.0 network with an IP source address from the 192.12.1.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports The ports of an 802.1X authenticator switch provide the means by which it can offer services to other systems reachable through the LAN. Port-based network access control allows the operation of a switch’s ports to be controlled to ensure that access to its services is permitted only by systems that are authorized to do so.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports 802.1X example configuration This example shows how to configure the switch so that 802.1X-based authentication is required on the ports in a corporate conference room (1/0/5–1/0/8). These ports are available to visitors and must be authenticated before access is granted to the network. The authentication is handled by an external RADIUS server.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Multiple Spanning Tree Protocol Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) supports multiple instances of spanning tree to efficiently channel VLAN traffic over different interfaces. Each instance of the spanning tree behaves in the manner specified in IEEE 802.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports An MST region comprises of one or more MSTP bridges with the same MST configuration identifier, using the same MSTIs, and without any bridges attached that cannot receive and transmit MSTP BPDUs. The MST configuration identifier includes the following components: 1. Configuration identifier format selector 2. Configuration name 3. Configuration revision level 4.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Figure 4. MSTP example configuration Perform the following procedures on each switch to configure MSTP: 1. On the VLAN Configuration page, create VLANs 300 and 500 (see Configure VLAN settings on page 165). 2. On the VLAN Membership page, include ports 1/0/1–1/0/8 as tagged (T) or untagged (U) members of VLAN 300 and VLAN 500 (see Configure VLAN settings on page 165). 3.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Since the edge ports are not at risk for network loops, ports with Fast Link enabled transition directly to the forwarding state. 8. Click the Apply button. You can use the CST Port Status page to view spanning tree information about each port. 9. On the MST Configuration page, create a MST instances with the following settings: • MST ID. 1 • Priority. Use the default (32768) • VLAN ID.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Since a port can be configured to belong to more than one VLAN, VLAN routing might be enabled for all of the VLANs on the port, or for a subset. VLAN routing can be used to allow more than one physical port to reside on the same subnet. It could also be used when a VLAN spans multiple physical networks, or when additional segmentation or security is required. A port can be either a VLAN port or a router port, but not both.
B B Specifications and Default Settings This appendix contains the following sections: • Switch default settings • General feature default settings • System setup and maintenance settings • Port characteristics • Traffic control settings • Quality of service settings • Security settings • System management settings • Settings for other features • Hardware technical specifications 533
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Switch default settings The following table describes the switch default settings. Table 93. Switch default settings Feature Default IP address 192.168.0.239 Subnet mask 255.255.255.0 Default gateway 192.168.0.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 93.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 94. General feature default settings (continued) Feature Name/Setting Default Admin mode Disabled 82 Option trust mode Disabled Virtual LAN (IEEE 802.1Q) Default VLANs 1 (Default) 4088 (Auto-VoIP) 4089 (Auto-Video) Note: All ports are members of the default VLAN. Note: No ports are members of the Auto-VoIP VLAN or Auto-Video VLAN.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 94. General feature default settings (continued) Feature Name/Setting Default Max EAP requests 2 Supplicant time-out 30 Server time-out 30 STP/RSTP/MSTP, global Spanning tree state Enabled STP operation mode IEEE 802.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 94.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 94.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 94. General feature default settings (continued) Feature Name/Setting Default 802.1p to queue mapping (802.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 94.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 94.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Port characteristics The following table describes the port characteristics. Table 96. Port characteristics Feature Sets Supported Default Auto negotiating speed and full/half duplex All ports Auto negotiation Auto MDI/MDIX for cross over cables on all ports Enabled 802.3x flow control/back pressure All ports Disabled Port mirroring: TX, RX, both 1 Disabled Port trunking (aggregation) 16 Preconfigured 802.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Quality of service settings The following table describes the Quality of Service settings. Table 98. Quality of Service settings Feature Sets Supported Default Number of queues 8 N/A 802.1p 1 Enabled DSCP 1 Disabled Egress Rate limiting All ports Disabled Ingress Rate limiting All ports Disabled Security settings The following table describes the security settings. Table 99.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports System management settings The following table describes the system management settings. Table 100.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 101. Settings for other features (continued) Feature Sets Supported Default MLD Snooping N/A Disabled Protocol and MAC-based VLANs 128 N/A Dynamic ARP Inspection N/A Disabled Multiple VLAN Registration (MVR) N/A Disabled Hardware technical specifications The following table describes the main hardware technical specifications.
24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports Table 102. Hardware technical specifications (continued) Feature Model GS728TPv2 Electromagnetic certifications and compliance GS728TPPv2 GS758TPv2 GS758TPP CE mark, commercial FCC Part 15 Class A, VCCI Class A Class A EN 55022 (CISPR 22) Class A Class A C-Tick EN 55024 CCC (China Compulsory Certificate) 47 CFR FCC Part 15, Subpart B, Class A ICES-003: 2016 Issue 6, Class A ANSI C63.4:2014 IEC 60950-1:2005 (ed.
