Netgear GS728TPP User Manual

350 East Plumeria DriveSan Jose, CA 95134USAMarch 2013202-11137-02v1.0GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesSoftware Administration Man

10GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Switch Management Interface The NETGEAR switch contains an embedded web server and management

100GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches The following screen displays: 2. To add an MST instance, configure the MST values and click

101 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesThe following table describes the information displayed on the screen for each configured MST

102GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches MST Port ConfigurationUse the MST Port Configuration screen to configure and display Multiple

103 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches5. Click APPLY to send the updated configuration to the switch.Configuration changes take pla

104GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches MulticastMulticast IP traffic is traffic that is destined to a host group. The class D addres

105 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To view the MFDB Table screen:1. Select Switching Multicast  MFDB  MFDB Table.The follo

106GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches MFDB StatisticsTo access the MFDB Statistics screen, click Switching Multicast  MFDB  MFD

107 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure Auto-Video:1. Select Switching Multicast  Auto-Video Configuration. The fol

108GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches few nodes. Packets are flooded into network segments where no node has any interest in receiv

109 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Enable. Packets with unknown multicast MAC addresses in the destination field are dropped.•

11 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConnect the Switch to the NetworkTo enable remote management of the switch through a web brows

110GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches The following table describes the fields in the IGMP Snooping Table.Table 19. IGMP Snooping

111 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches2. Select the VLAN ID and configure the IGMP Snooping values:• Fast Leave Admin Mode. Enable

112GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • IGMP Snooping Querier VLAN Status IGMP Snooping Querier ConfigurationUse this screen to ena

113 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesThe Querier Expiry Interval specifies the time interval in seconds after which the last queri

114GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 3. Click APPLY to send the updated configuration to the switch.Configuration changes take pla

115 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesTable 20. Querier VLAN Status FieldsField DescriptionVLAN ID Specifies the VLAN ID on which

116GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches that want to receive the data, instead of being flooded to all ports in a VLAN. This list is

117 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesMLD VLAN ConfigurationMLD snooping can be enabled on a per-VLAN basis. It is necessary to kee

118GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches QI = (Group Membership Interval – Maximum Response Time) / 28. Click ADD to enable MLD Snoopi

119 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConfiguration changes take place immediately.Static Multicast AddressThe Static Multicast Add

12GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Discover a Switch in a Network with a DHCP ServerThis section describes how to set up your swi

120GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 3. In the Multicast Address field, enter the multicast group MAC Address associated with the

121 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches3. Select the check box next to the interfaces to configure. You can select multiple interfac

122GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches You can select multiple interfaces to apply the same setting to the selected interfaces. Sele

123 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To search for an entry in the MAC Address Table:1. Select Switching Address Table  Basic

124GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Dynamic Address ConfigurationUse the Dynamic Address screen to set the amount of time to keep

12544. Configuring RoutingThe switch supports IP routing. Use the menus under the Routing tab to manage routing on the system. This chapter contains

126GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Configure IP SettingsUse the IP Configuration screen to configure routing parameters for the

127 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConfigure VLAN RoutingYou can configure the switch software with some ports supporting VLANs

128GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure VLAN settings:1. Select Routing  VLAN > VLAN Routing Wizard.The following

129 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConfigure VLAN Routing Use the VLAN Routing Configuration screen to view information about th

13 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches7. Select your switch by clicking the line that displays the switch, then click the Web Brows

130GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Configure and View RoutesFrom the Routing Table screen, you can configure static and default

131 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesAmong routes to the same destination, the route with the lowest preference value is the route

132GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Configure ARPThe Address Resolution Protocol (ARP) associates a Layer 2 MAC address with a La

133 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesARP CacheUse the ARP Cache screen to view entries in the ARP table, a table of the remote con

134GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches ARP Entry Configuration To add a static entry to the ARP table:1. Select Routing  ARP >

135 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesGlobal ARP ConfigurationUse the Global ARP Configuration screen to display and change the con

136GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches ARP Entry ManagementUse this screen to remove entries from the ARP Table.  To remove entries

13755. Configure Quality of ServiceUse the features you access from the QoS tab to configure Quality of Service (QoS) settings on the switch. The Qo

138GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Class of ServiceThe Class of Service (CoS) queueing feature lets you directly configure certa

139 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure global CoS settings:1. Select QoS  CoS  Basic  CoS Configuration.The follow

14GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Switch Discovery in a Network Without a DHCP ServerThis section describes how to use the Smart

140GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches CoS Interface ConfigurationUse the CoS Interface Configuration screen to apply an interface s

141 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches5. In the Interface Ingress Rate Limit field, specify the ingress rate allowed. The range is

142GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches divided by the sum of all the configured weights. The sum of the minimum bandwidths for all q

143 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesTraffic classes go from low (0) to high (3). For example, traffic with a priority of 0 is for

144GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Differentiated ServicesThe QoS feature provides Differentiated Services (DiffServ) support th

145 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesDiffserv ConfigurationUse the Diffserv Configuration screen to display DiffServ general statu

146GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches This feature changes (remarks) the DSCP tags for incoming traffic switched between trusted Qo

147 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesClass Configuration Use one of the Class Configuration screens to add a DiffServ class name,

148GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Use the buttons at the bottom of the screen to perform the following:• To remove a class, sel

149 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Source MAC. Enter the source MAC address and the mask.• Destination MAC. Enter the destinat

15 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches7. Select the Disabled radio button to disable DHCP.8. Enter the static switch IP address, gat

150GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure an IPv6 class:1. Select QoS  DiffServ  Advanced  IPv6 Class Configuration.T

151 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure the class match criteria:1. In the IPv6 Class Configuration screen, select the

152GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 4. Click APPLY to save the class. Configuration changes take effect immediately.Policy Config

153 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure the policy attributes:1. In the Policy Configuration screen, click the name of

154GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 3. If you select the Simple Policy radio button, you can configure the following fields:• Col

155 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesService ConfigurationUse the Service Configuration screen to activate a policy on an interfac

156GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To display and refresh service-level statistical information:1. Select QoS  DiffServ Adv

15766. Managing Device SecurityUse the features available from the Security tab to configure management security settings for port, user, and server

158GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Management Security SettingsFrom the Management Security menu, you can configure the login pa

159 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches4. To confirm the password, enter it again to make sure that you entered it correctly. This f

16GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches WARNING:When you change the IP address of your administrative system, connection to the rest o

160GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure global RADIUS server settings:1. Select Security  Management Security  RADIU

161 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesRADIUS Server ConfigurationUse the RADIUS Server Configuration screen to view and configure v

162GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Accounting Server ConfigurationUse the Accounting Server Configuration screen to view and con

163 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConfigure TACACS+TACACS+ provides a centralized user management system while still retaining

164GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 2. In the Key String field, specify the authentication and encryption key for TACACS+ communi

165 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches5. In the Key String field, specify the authentication and encryption key for TACACS+ communi

166GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches HTTP Authentication ListUse the HTTP Authentication List screen to configure the default HTTP

167 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesNote: Each authentication protocol can use up to three authentication methods. Local and None

168GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 3. From the list in the 1 column, select the HTTPS authentication method that must appear fir

169 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConfigure Management AccessFrom the Access tab, you can configure HTTP and Secure HTTP access

17 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesAccess the Management Interface from the WebTo access the switch management interface, use one

170GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 3. Click APPLY to update the switch with the HTTPS Authentication settings.Secure HTTP Config

171 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesAfter the session is inactive for the configured amount of time, the administrator is automat

172GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Import Certificates. Select this option to import certificate files. In the Certificate fie

173 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesAccess Profile Configuration  To set up a security access profile:1. Select Security > Ac

174GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Access Rule Configuration To add a security access rule:1. Select Security > Access >

175 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesPort AuthenticationIn port-based authentication mode, when 802.1x is enabled globally and on

176GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure global 802.1x settings:1. Select Security  Port Authentication  Basic  802.

177 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesPort AuthenticationUse the Port Authentication screen to enable and configure port access con

178GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches You can also select multiple check boxes to apply the same settings to the select ports, or s

179 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Protocol Version. Displays the protocol version associated with the selected port. The only

18GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 3. After the system authenticates you, the System Information screen displays.Screen menuConfi

180GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Port SummaryUse the Port Summary screen to view information about the port access control set

181 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesOperating Control Mode Indicates the control mode under which the port is actually operating.

182GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Traffic ControlFrom the Traffic Control menu, you can configure MAC filters, storm control, p

183 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure storm control settings:1. Select Security  Traffic Control > Storm Control

184GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Port Security Interface ConfigurationA MAC address can be defined as allowable by one of two

185 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Max Allowed Dynamically Learned MAC. Sets the maximum number of dynamically learned MAC add

186GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Table 24. Dynamic MAC addresses table fields.Field DescriptionVLAN ID The VLAN ID correspond

187 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConfigure Access Control ListsAccess control lists (ACLs) ensure that only authorized users h

188GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To create an ACL:1. Select Security  ACL  ACL Wizard. The following screen displays: 2. F

189 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• ACL Based on Source IPv6 L4 Port. Creates an ACL based on the source IPv6 layer 4 port numb

19 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesSome items in the menu expand to reveal multiple submenu links, as shown in the following: Li

190GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 4. In the Binding Configuration area, the Inbound only packet filtering direction for an ACL

191 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure a MAC ACL:1. Select Security  ACL > Basic > MAC ACL. The following scre

192GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure MAC ACL rules:1. Select Security  ACL > Basic  MAC Rules. The following s

193 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switchesaddresses with aa:bb:xx:xx:xx:xx result in a match (where x is any hexadecimal number). A MAC

194GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure MAC ACL interface bindings:1. Select Security  ACL > Basic  MAC Binding C

195 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesMAC Binding TableUse the MAC Binding Table screen to view or delete the MAC ACL bindings.Sele

196GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches network administrator defines an ACL rule that says port number 20 can receive TCP packets. H

197 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesIP RulesUse the IP Rules screen to define rules for IP-based standard ACLs. The access list d

198GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Logging. When set to Enable, logging is enabled for this ACL rule (subject to resource avai

199 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 2. Select the ACL ID to add the rule to, and select the check box in the Extended ACL Rule t

2GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches SupportThank you for selecting NETGEAR products. After installing your device, locate the seria

20GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches The Device View is available by selecting System  Device View.Depending upon the status of th

200GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches during the current report interval. A fixed 5-minute report interval is used for the entire s

201 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switchesalternative ways of specifying a match criterion for the same Service Type field in the IP he

202GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 3. Click ADD.To delete an IPv6 ACL, select the check box associated with the rule and click D

203 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 3. Configure the settings for the new rule.• Rule ID. Enter a whole number in the range of 1

204GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Select one of the keywords from the list: DOMAIN, ECHO, FTP, FTPDATA, HTTP, SMTP, SNMP, TEL

205 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesThe following screen displays: 2. Select an existing IP ACL from the ACL ID menu.The packet

206GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches IP Binding TableUse the IP Binding Table screen to view or delete the IP ACL bindings.To disp

20777. Monitoring the SystemUse the features available from the Monitoring tab to view various information about the switch and its ports and to con

208GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches PortsThe screens available from the Ports menu contain various information about the number a

209 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Unicast Packets Received. The number of subnetwork-unicast packets delivered to a higher la

21 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesThe following image shows the device view of the NETGEAR switch.Figure 2. Ports and LEDs on th

210GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Port StatisticsThe Port Statistics screen displays a summary of per-port traffic statistics o

211 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• To clear the counters for a specific interfaces, select the check box associated with the p

212GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Port Role. Each MST bridge port that is enabled is assigned a port role for each spanning t

213 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Packets Received 65-127 Octets. The total number of packets (including bad packets) receive

214GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Overruns. The total number of frames discarded as this port was overloaded with incoming pa

215 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesUse the buttons at the bottom of the screen to perform the following actions:• Click CLEAR to

216GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Last Frame Source. The source MAC Address attached to the most recently received EAPOL fram

217 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To display cable information:1. Select Monitoring  Ports  Cable Test.The following screen

218GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Failure Location. The estimated distance in meters from the end of the cable to the failure

219 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure the Buffered Logs settings:1. Select Monitoring  Logs  Buffered Logs.The fol

22GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches If you right-click the graphic, the main menu displays.Figure 4. Device View Drop Down MenusHe

220GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches The syslog message includes the following fields:• Date• Time• Module (AAA in the example abo

221 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Port. Specify the port on the host to which syslog messages are sent. The default port is 5

222GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Trap LogsUse the Trap Logs screen to view information about the SNMP traps generated on the s

223 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesMirroringThe screen you access from the Mirroring menu enables you to view and configure port

224GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Enable. Multiple-port mirroring is active on the selected port (that is, on all the configu

225 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesSystem Resources UtilizationThe switch architecture uses a Ternary Content Addressable Memory

22688. MaintenanceUse the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains menus that provide

227 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesResetThe Reset menu contains links that provide access to the features described in the follo

228GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Factory DefaultUse the Factory Default screen to reset the system configuration to the factor

229 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesUpload a File from the SwitchThe switch supports system file uploads from the switch to a rem

23 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switchesobject for interface configuration is in -SWITCHING-MIB, which is a private MIB. Some interfac

230GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To upload a file from the switch to the TFTP server:1. Select Maintenance  Upload  TFTP F

231 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches8. Select the Start File Transfer check box to enable the file upload when you click APPLY9.

232GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Download a File to the SwitchThe switch supports system file downloads from a remote system t

233 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To download a file to the switch from a TFTP server:1. Select Maintenance  Download  TFTP

234GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 6. In the Remote File Name field, specify the name of the file to download from the TFTP serv

235 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Text Configuration. A text-based configuration file.3. In the Select File field, enter the

236GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure Dual Image settings:1. Select Maintenance > File Management > Dual Image

237 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches The following screen displays:The Dual Image Status screen displays the following:• Image1 V

238GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches TroubleshootingThe Troubleshooting menu contains links that provide access to the features de

239 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesThe initial value is blank. This information is not retained across a power cycle. The maximu

24GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Interface Naming ConventionThe switch supports physical and logical interfaces. Interfaces are

240GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 2. In the Ping field, select either Global or Link Global to select either the global IPv6 Ad

241 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure the Traceroute settings and send probe packets to discover the route to a host

242GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Remote DiagnosticsThe Remote Diagnostics screen lets you enable Telnet for diagnostic purpose

24399. HelpUse the features available from the Help tab to connect to online resources for assistance, and to register your device.

244GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Online HelpThe Online Help link provides links to the sections described in the following sec

245 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesUser GuideUse the User Guide screen to access this guide, which is available on the NETGEAR w

246GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches RegistrationUse the Registration screen to register your switch. Completing the registration

247 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To register the switch:1. Select Help  Registration.The following screen displays:2. Click

248AA. Hardware Specifications and Default ValuesThe GS752TP, GS728TP, and GS728TPP switches conform to the TCP/IP, UDP, HTTP, ICMP, TFTP, DHCP, IEE

249GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesMAC addresses 8 KGreen Ethernet Automatic power-down on port when link is down, short cable mo

2522. Configuring System InformationUse the features in the System tab to define the switch’s relationship to its environment. The System tab contai

250GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesSwitch Features and DefaultsFeature Sets Supported DefaultAuto negotiation/static speed/duplex

251GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesPassword control access 1 Idle time-out = 5 minutesPassword = passwordManagement security 1 pr

252GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesNumber of ARP cache entries 1024 in switch mode, approximately 100 in router modeN/A Number o

253BB. Configuration ExamplesThis chapter contains information about how to configure the following features:• Virtual Local Area Networks (VLANs) •

254GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesVirtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a b

255GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Packets leaving the switch are either tagged or untagged, depending on the setting for that

256GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesAccess Control Lists (ACLs)ACLs ensure that only authorized users have access to specific reso

257GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Destination MAC. 01:02:1A:BC:DE:EF• Destination MAC Mask. 00:00:00:00:FF:FF• Source MAC. 02:

258GS752TP, GS728TP, and GS728TPP Gigabit Smart Switchesdepartments. Traffic from the Finance department is identified by each packet’s network IP add

259GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesDifferentiated Services (DiffServ)Standard IP-based networks are designed to provide best effo

26GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches ManagementThis section describes how to display the switch status and specify some basic switc

260GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Layer 4 protocol (such as TCP or UDP)• Layer 4 source and destination ports• Source and dest

261GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Dropping. Drops a packet upon arrival. This is useful for emulating access control list oper

262GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches3. Configure the following settings for Class1:• Protocol Type. UDP• Source IP Address. 192.12

263GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesAlso the confirmed action on this flow is to send the packets with a committed rate of 10,000

264GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesAccess control is achieved by enforcing authentication of supplicants that are attached to a c

265GS752TP, GS728TP, and GS728TPP Gigabit Smart Switchesa force-authorized state and does not require any authentication. When the Port Control settin

266GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesMSTPSpanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge

267GS752TP, GS728TP, and GS728TPP Gigabit Smart Switchesreceive and transmit MSTP BPDUs. The MST configuration identifier has the following components

268GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesIn this example, ports g1–g5 are connected to host stations, so those links are not subject to

269GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesFor more information, see CST Configuration on page 94.5. In the CST Port Configuration scree

27 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• System Location. Enter the location of this switch. You can use up to 160 alphanumeric chara

270GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConfigure VLAN Routing with Static RouteVLAN Routing OverviewVLANs divide broadcast domains in

271GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesNote: You can use the VLAN Routing Wizard for creating VLANs, adding ports, and enabling them

272CC. Notification of ComplianceNETGEAR Wired ProductsRegulatory Compliance InformationThis section includes user requirements for operating this p

GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches273FCC Guidelines for Human ExposureThis equipment complies with FCC radiation exposure limits s

274IndexNumerics802.1p to queue mapping 142802.1x 263configuration 175sample configuration 264Aaccess control 172ACLs 187management interface 169Acces

275GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesEEAP statistics 215EAPOL 215Ffactory defaults 228Fan Status LED 20firmware download 232flow co

276GS752TP, GS728TP, and GS728TPP Gigabit Smart Switchessearching address table 122MAC ACLs 190binding configuration 193binding table 195rules 191samp

277GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesSpanning Tree Protocol (STP) 91SSL 170static multicast address 119storm control 182STP configu

28GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure the network information for the management interface:1. Select System  Managem

29 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesWhen the management VLAN is set to a different value, an IP connection can be made only throug

Table of Contents | 3ContentsChapter 1 Getting StartedGetting Started with the NETGEAR Switch . . . . . . . . . . . . . . . . . . . . . . . .

30GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure the global settings for an IPv6 Interface:1. Select System  Management  IPv6

31 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesIPv6 Network Neighbors To view the IPv6 Network Interface Neighbors:Select System  Managemen

32GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches TimeThe switch software supports the Simple Network Time Protocol (SNTP). You can also set the

33 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure the time by using the CPU clock cycle as the source:1. Select System  Manageme

34GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches The SNTP Global Status table on the Time Configuration screen displays information about the s

35 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure a new SNTP server:1. Select System  Management  Time  SNTP Server Configurat

36GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Table 5. SNTP Server Status Table FieldsField DescriptionAddress Specifies all the existing s

37 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches3. In the DNS Default Name field, enter a default DNS name to include in DNS queries. When the

38GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches The Dynamic Host Configuration table shows host name-to-IP address entries that the switch has

39 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure the Green Ethernet Configuration features:1. Select System  Management  Green

4GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesDHCP Snooping Global Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 67DHCP Sn

40GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Green Ethernet Interface ConfigurationUsing the Green Ethernet Interface Configuration feature

41 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConfiguration changes take effect immediately.Green Ethernet DetailUse this screen to display

42GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Tw_sys_rx Echo (uSec). Displays the amount of time the Tw_sys_rx Echo has been present on th

43 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Energy Detect Operational Status. Displays the operational status of the Energy Detect mode

44GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches PoE ConfigurationTo view global PoE power information and to configure PoE SNMP trap settings,

45 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesPoE Port ConfigurationUse the PoE Port Configuration screen to configure per-port PoE settings

46GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches power level that the PD can actually use is slightly lower. The classes are defined as follows

47 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To create a timer:1. Select System  PoE  Advanced  Timer Global Configuration. The follow

48GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure timer settings:1. Select System  PoE  Advanced  Timer Schedule Configuration

49 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesSNMPFrom SNMP menu under the System tab, you can configure SNMP settings for SNMP V1/V2 and SN

5GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesConfigure and View Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

50GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To add a new SNMP community:1. Select System  SNMP  SNMP V1/V2  Community Configuration.

51 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switchesall valid Community Names or the set request is rejected. If you select Disable, the Community

52GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 2. Click APPLY. Configuration changes take effect immediately.Trap FlagsUse the Trap Flags scr

53 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesSNMP Supported MIBsThe screen allows you to view a list of the supported MIBs. To access the S

54GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure SNMPv3 settings for the user account:1. Select System  SNMP  SNMP V3  User C

55 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesLLDPThe IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations o

56GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches LLDP ConfigurationUse the LLDP Configuration screen to specify LLDP and LLDP-MED parameters th

57 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesThis occurs when a new endpoint device links with the LLDP-MED network connectivity device. Th

58GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Auto Advertise. Advertise the current IP address of the device as the management IP address.

59 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switcheshas the VLAN ID, priority, DSCP, tagged bit status, and unknown bit status. This information i

6GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesMAC Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

60GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Network Policy• Location Identification• Extended Power via MDI: PSE• Extended Power via MDI

61 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches2. To view more details about a port, click the name of the port in the Interface column of th

62GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Auto-Negotiation Supported Specifies whether the interface supports port-speed autonegotiation

63 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesNeighbors InformationUse the LLDP Neighbors Information screen to view the data that a specifi

64GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 2. To view more information about the remote device, click the link in the MSAP Entry column.T

65 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesPort ID Subtype Identifies the type of data displayed in the remote system’s Port ID field.Por

66GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Software Revision The software version advertised by the remote device.Serial Number The ser

67 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesServices—DHCP SnoopingDHCP snooping is a useful feature that provides security by filtering un

68GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches The following screen displays: 2. Next to DHCP Snooping Mode, select Enable or Disable to turn

69 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesThe following screen displays: 2. In the Go To Interface field, enter the interface name and

7GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesSupport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

70GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches DHCP Snooping Binding Configuration To configure DHCP binding settings:1. Select System Ser

71 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesTable 11. DHCP Snooping Dynamic Binding Configuration fields.Field DescriptionInterface Displ

7233. Configuring Switching InformationUse the features you access from the Switching tab to define Layer 2 features. The Switching tab contains lin

73 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesPortsThe screens you access from the Ports menu allow you to view and monitor the physical por

74GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 2. Next to Global Flow Control (IEEE 802.3x) Mode, enable or disable IEEE 802.3x flow control

75 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesYou can select multiple ports and LAGs to apply the same setting to the selected interfaces. S

76GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Link Aggregation GroupsLink aggregation groups (LAGs), which are also known as port channels,

77 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure LAG settings:1. Select Switching LAG  Basic  LAG Configuration. The followi

78GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 4. Click APPLY to send the updated configuration to the switch. Configuration changes take ef

79 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches4. Click the box below each port to include the port in the LAG. The following screen shows an

811. Getting StartedThis manual describes how to configure and operate the GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches by using the web-ba

80GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches 3. Click APPLY to send the updated configuration to the switch. Configuration changes take ef

81 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesVLANsAdding virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both

82GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches  To configure VLANs:1. Select Switching VLAN  Basic  VLAN Configuration. The following sc

83 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesVLAN Membership ConfigurationUse this screen to configure VLAN port membership for a particula

84GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches In the following screen, ports 6, 7, and 8 are being added as tagged members to VLAN 2.6. From

85 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches To configure PVID information:1. Select Switching VLAN  Advanced  Port PVID Configuratio

86GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches • Disable. All frames are forwarded in accordance with the IEEE 802.1Q VLAN standard. The fact

87 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesThe following screen displays: 2. Next to Voice VLAN Status, enable or disable voice VLAN on t

88GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Voice VLAN Port Setting To configure Voice VLAN port settings:1. Select Switching Voice VLA

89 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• 00:12:43. CISCO2• 00:0F:E2. H3C• 00:60:B9. NITSUKO• 00:D0:1E. PINTEL• 00:E0:75. VERILINK• 00

9 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesGetting Started with the NETGEAR SwitchThis chapter provides an overview of starting your NETGE

90GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Auto-VoIP ConfigurationAuto-VoIP automatically makes sure that time-sensitive voice traffic is

91 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches2. To configure Auto-VoIP interface settings for a physical port or a LAG port, click PORT, LA

92GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches STP ConfigurationThe STP Switch Configuration screen contains fields for enabling STP on the s

93 GS752TP, GS728TP, and GS728TPP Gigabit Smart SwitchesThe Forward BPDU while STP Disabled field specifies whether spanning tree BPDUs should be forw

94GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches CST ConfigurationTo configure Common Spanning Tree (CST) and Internal Spanning Tree on the swi

95 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Spanning Tree Maximum Hops. Specify the maximum number of bridge hops the information for a

96GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches CST Port ConfigurationUse the CST Port Configuration screen to configure Common Spanning Tree

97 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches• Path Cost. Set the Path Cost to a new value for the specified port in the Common and Interna

98GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches Table 14. CST Status Information.Field DescriptionInterface Select a physical or port channel

99 GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches The following table describes the Rapid STP Status information displayed on the screen.Table