350 East Plumeria DriveSan Jose, CA 95134USAAugust 2012202-10976-01v1.0ProSafe M5300 SwitchWeb Management User Guide
Getting Started10ProSafe M5300 Switch Accessing the switch directly from your Web browser displays the login screen shown below.Understanding the User
Configuring System Information100ProSafe M5300 Switch LLDP Remote Device InventoryTo display this page, click System LLDP LLDP Remote Device Inv
Configuring System Information101 ProSafe M5300 SwitchLLDP-MED Global ConfigurationUse the LLDP-MED Global Configuration page to specify LLDP-MED para
Configuring System Information102ProSafe M5300 Switch LLDP-MED Interface ConfigurationTo display this page, click System LLDP LLDP-MED Interface
Configuring System Information103 ProSafe M5300 SwitchLLDP-MED Local Device InformationTo display this page, click System LLDP LLDP-MED Local De
Field DescriptionNetwork Policy Information: Specifies if network policy TLV is present in the LLDP frames.Media Application Type Specifies the appli
Configuring System Information105 ProSafe M5300 SwitchLLDP-MED Remote Device InformationTo display this page, click System LLDP LLDP-MED Remote
Configuring System Information106ProSafe M5300 Switch The following table describes the LLDP-MED Remote Device Information fields.Field DescriptionRem
Configuring System Information107 ProSafe M5300 SwitchInventory Information: Specifies if inventory TLV is received in LLDP frames on this port.Hardwa
Configuring System Information108ProSafe M5300 Switch LLDP-MED Remote Device InventoryTo display this page, click System LLDP LLDP-MED Remote De
Configuring System Information109 ProSafe M5300 SwitchISDPThe Industry Standard Discovery Protocol (ISDP) is a proprietary Layer 2 network protocol wh
Getting Started11 ProSafe M5300 SwitchUse the following procedures to log on to the Web interface:1. Open a Web browser and enter the IP address of th
Field DescriptionNeighbors table last time changed The amount of time that has passed since the ISDP neighbor table was updated.Device ID The Device I
Configuring System Information111 ProSafe M5300 SwitchISDP Interface ConfigurationTo display this page, click System ISDP Advanced Interface Con
Field DescriptionDevice ID The device ID of the ISDP neighbor.Interface The interface on which the neighbor is discovered.Address Displays the address
Configuring System Information113 ProSafe M5300 SwitchISDP StatisticsUse the ISDP Statistics page to view information about the ISDP packets sent and
Configuring System Information114ProSafe M5300 Switch Timer ScheduleThe Timer Schedule feature allows you to configure time ranges to use in time-base
Configuring System Information115 ProSafe M5300 Switch3. Click ADD to add the new timer schedule with a specified name. The configuration changes take
Periodic TimerAbsolute TimerConfiguring System Information116ProSafe M5300 Switch To configure a timer schedule:1. Select the name of the schedule cr
Configuring System Information117 ProSafe M5300 Switch6. Use the Recurrence Pattern to show with what period the event will repeat. These fields are a
Configuring System Information118ProSafe M5300 Switch
11933. Configuring Switching InformationUse the features in the Switching tab to define Layer 2 features. The Switching tab contains links to the fo
Page LinkConfigurationPagesGetting Started12ProSafe M5300 Switch Configuration and Monitoring OptionsThe area directly under the feature links and to
Configuring Switching Information120ProSafe M5300 Switch BasicFrom the Basic link, you can access the following pages:• VLAN Configuration on page 12
Configuring Switching Information121 ProSafe M5300 Switch• All ports are configured with Ingress Filtering disabled.• All ports are configured to tran
Configuring Switching Information122ProSafe M5300 Switch AdvancedFrom the Advanced link, you can access the following pages:• VLAN Configuration on pa
Configuring Switching Information123 ProSafe M5300 SwitchTo configure VLAN membership:1. Use VLAN ID to select the VLAN ID for which you want to displ
Configuring Switching Information124ProSafe M5300 Switch VLAN StatusUse this page to display the status of all currently configured VLANs. To display
Configuring Switching Information125 ProSafe M5300 SwitchPort PVID ConfigurationThe Port PVID Configuration screen lets you assign a port VLAN ID (PVI
Configuring Switching Information126ProSafe M5300 Switch 6. Ingress Filtering:• When enabled, the frame is discarded if this port is not a member of t
Configuring Switching Information127 ProSafe M5300 SwitchProtocol Based VLAN Group ConfigurationYou can use a protocol based VLAN to define filtering
Configuring Switching Information128ProSafe M5300 Switch 4. Use VLAN ID to select the VLAN ID. It can be any number in the range of 1 to 4093. All the
Configuring Switching Information129 ProSafe M5300 SwitchIP Subnet Based VLANIP Subnet to VLAN mapping is defined by configuring an entry in the IP Su
Getting Started13 ProSafe M5300 SwitchDevice ViewThe Device View is a Java® applet that displays the ports on the switch. This graphic provides an alt
Configuring Switching Information130ProSafe M5300 Switch Port DVLAN ConfigurationUse this page to view and configure the double VLAN (DVLAN) tag setti
Configuring Switching Information131 ProSafe M5300 SwitchVoice VLAN ConfigurationUse this menu to configure the parameters for Voice VLAN Configuratio
Configuring Switching Information132ProSafe M5300 Switch 6. Click APPLY to update the switch with the changes.7. Click CANCEL to abandon the changes.F
Configuring Switching Information133 ProSafe M5300 SwitchGARP Port ConfigurationNote: It can take up to 10 seconds for GARP configuration changes to t
Configuring Switching Information134ProSafe M5300 Switch 6. Use Leave All Time (centiseconds) to control how frequently LeaveAll PDUs are generated. A
Configuring Switching Information135 ProSafe M5300 Switch To configure protocol-based Auto-VoIP settings:1. From the Prioritization Type menu, select
Configuring Switching Information136ProSafe M5300 Switch OUI-BasedThe OUI-based Auto VoIP feature helps provide a classification mechanism for voice p
Configuring Switching Information137 ProSafe M5300 SwitchOUI Port SettingsUse this page to configure the OUI-based Auto VoIP administrative mode on th
Configuring Switching Information138ProSafe M5300 Switch OUI TableUse this page to add and remove Organizationally Unique Identifiers (OUIs) from the
Configuring Switching Information139 ProSafe M5300 SwitchiSCSIThe Internet Small Computer System Interface (iSCSI) feature helps network administrator
Getting Started14ProSafe M5300 Switch Device View System LEDsIn addition to the port LEDs, the device view provides a representation of the system LED
Configuring Switching Information140ProSafe M5300 Switch To configure global iSCSI settings:1. In the iSCSI Status field, either Enable or Disable iSC
Configuring Switching Information141 ProSafe M5300 SwitchSessionsUse this page to view active iSCSI session information.To access the iSCSI Global Con
Configuring Switching Information142ProSafe M5300 Switch To configure iSCSI target settings:1. In the TCP Port field, specify the TCP port number for
Configuring Switching Information143 ProSafe M5300 SwitchSpanning Tree ProtocolThe Spanning Tree Protocol (STP) provides a tree topology for any arran
Configuring Switching Information144ProSafe M5300 Switch To configure the global STP settings:1. Use Spanning Tree Admin Mode to specify whether spann
Field DescriptionConfiguration digest key Identifier used to identify the configuration currently being used.MST ID Table consisting of the MST instan
Configuring Switching Information146ProSafe M5300 Switch CST ConfigurationUse the Spanning Tree CST Configuration page to configure Common Spanning Tr
Configuring Switching Information147 ProSafe M5300 Switchthe value must be less than or equal to (2 * Bridge Forward Delay) – 1 and greater than or eq
Configuring Switching Information148ProSafe M5300 Switch CST Port ConfigurationUse the Spanning Tree CST Port Configuration page to configure Common S
Configuring Switching Information149 ProSafe M5300 Switch4. Use Port Path Cost to set the Path Cost to a new value for the specified port in the commo
Getting Started15 ProSafe M5300 SwitchDevice View NavigationClick the port you want to view or configure to see a menu that displays statistics and co
Configuring Switching Information150ProSafe M5300 Switch CST Port StatusUse the Spanning Tree CST Port Status page to display Common Spanning Tree (CS
Configuring Switching Information151 ProSafe M5300 SwitchMST ConfigurationUse the Spanning Tree MST Configuration page to configure Multiple Spanning
Configuring Switching Information152ProSafe M5300 Switch To configure an MST instance:1. To add an MST instance, configure the MST values and click AD
Configuring Switching Information153 ProSafe M5300 SwitchMST Port StatusUse the Spanning Tree MST Port Status page to configure and display Multiple S
Configuring Switching Information154ProSafe M5300 Switch To configure MST port settings:1. Use MST ID to select one MST instance from existing MST ins
Configuring Switching Information155 ProSafe M5300 SwitchSTP StatisticsUse the Spanning Tree Statistics page to view information about the number and
Configuring Switching Information156ProSafe M5300 Switch MulticastMulticast IP traffic is traffic that is destined to a host group. Host groups are id
Configuring Switching Information157 ProSafe M5300 SwitchMFDB StatisticsUse this page to view statistical information about the multicast forwarding d
Configuring Switching Information158ProSafe M5300 Switch IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a s
Configuring Switching Information159 ProSafe M5300 SwitchIGMP Snooping ConfigurationUse the IGMP Snooping Configuration page to configure the paramete
Getting Started16ProSafe M5300 Switch Help Page AccessEvery page contains a link to the online help , which contains information to assist in configur
Configuring Switching Information160ProSafe M5300 Switch IGMP Snooping Interface ConfigurationUse the IGMP Snooping Interface Configuration page to co
Configuring Switching Information161 ProSafe M5300 SwitchIGMP VLAN ConfigurationUse the IGMP Snooping VLAN Configuration page to configure IGMP snoopi
Configuring Switching Information162ProSafe M5300 Switch Multicast Router ConfigurationThis page configures the interface as the one the multicast rou
Configuring Switching Information163 ProSafe M5300 SwitchMulticast Router VLAN ConfigurationThis page configures the interface to only forward the sno
Configuring Switching Information164ProSafe M5300 Switch IGMP Snooping Querier ConfigurationUse this menu to configure the parameters for IGMP Snoopin
Configuring Switching Information165 ProSafe M5300 SwitchIGMP Snooping Querier VLAN ConfigurationUse this page to configure IGMP queriers for use with
Field DescriptionOperational State Displays the operational state of the IGMP Snooping Querier on a VLAN. It can be in any of the following states:• Q
Configuring Switching Information167 ProSafe M5300 SwitchMLD Snooping From the MLD Snooping link, you can access the following pages:• MLD Snooping Co
Configuring Switching Information168ProSafe M5300 Switch MLD Snooping Interface ConfigurationTo access the MLD Snooping Interface Configuration page,
Configuring Switching Information169 ProSafe M5300 SwitchMLD VLAN ConfigurationTo access the MLD VLAN Configuration page, click Switching Multicast
Getting Started17 ProSafe M5300 SwitchInterface Naming ConventionThe ProSafe support physical and logical interfaces. Interfaces are identified by the
Configuring Switching Information170ProSafe M5300 Switch Multicast Router ConfigurationTo access the Multicast Router Configuration page, click Switch
Configuring Switching Information171 ProSafe M5300 SwitchMLD Snooping Querier ConfigurationUse this menu to configure the parameters for MLD Snooping
Configuring Switching Information172ProSafe M5300 Switch MLD Snooping Querier VLAN ConfigurationTo access the MLD Snooping Querier VLAN Configuration
Configuring Switching Information173 ProSafe M5300 SwitchMVR ConfigurationIGMP snooping helps limit multicast traffic when member ports are in the sam
Field DefinitionMVR Max Multicast Groups Displays the maximum number of multicast groups that MVR supports. MVR Current Multicast Groups Displays curr
Configuring Switching Information175 ProSafe M5300 SwitchMVR Interface ConfigurationTo display the MVR Interface Configuration page, click Switching &
Configuring Switching Information176ProSafe M5300 Switch MVR Group MembershipTo display the MVR Configuration page, click Switching > MVR > Adva
Configuring Switching Information177 ProSafe M5300 SwitchAddress TableFrom the Address Table link, you can access the following pages:• Basic on page
Configuring Switching Information178ProSafe M5300 Switch 1. Use Search By to search for MAC Addresses by MAC Address, VLAN ID, and port:• Searched by
Configuring Switching Information179 ProSafe M5300 SwitchAdvancedFrom the Advanced link, you can access the following pages:• Dynamic Addresses on pag
Getting Started18ProSafe M5300 Switch
Configuring Switching Information180ProSafe M5300 Switch Static MAC AddressUse this page to configure static MAC addresses in the MAC address table. E
Configuring Switching Information181 ProSafe M5300 SwitchPortsThe pages on the Ports tab allow you to view and monitor the physical port information f
Configuring Switching Information182ProSafe M5300 Switch To configure port settings:1. Select the check box associated with each Port to configure, or
Configuring Switching Information183 ProSafe M5300 SwitchTo access the Port Description page, click Switching Ports Port Description.1. Select the
Configuring Switching Information184ProSafe M5300 Switch Link Aggregation GroupsLink aggregation groups (LAGs), which are also known as port-channels,
Configuring Switching Information185 ProSafe M5300 SwitchTo configure LAG settings:1. Use LAG Name to enter the name you want assigned to the LAG. You
Field DescriptionLAG Description A description string attached to a LAG..LAG ID Identification of the LAG.LAG State Indicates whether the Link is up o
Configuring Switching Information187 ProSafe M5300 Switch5. Use Link Trap to specify whether you want to have a trap sent when link status changes. Th
Configuring Switching Information188ProSafe M5300 Switch
18944. RoutingThe Routing tab contains links to the following features:• Routing Table on page 189• IP on page 193• IPv6 on page 201• IPv6 on pa
1922. Configuring System InformationUse the features in the System tab to define the switch’s relationship to its environment. The System tab contai
Routing190ProSafe M5300 Switch BasicFrom the Basic link, you can access the following pages:• Route Configuration on page 190Route ConfigurationTo d
Routing191 ProSafe M5300 SwitchLearned RoutesField DescriptionRoute Type This field can be either default or static. If creating a default route, all
Routing192ProSafe M5300 Switch AdvancedFrom the Advanced link, you can access the following pages:• Route Configuration on page 190• Route Preferenc
Routing193 ProSafe M5300 SwitchIPThe IP folder contains links to the following web pages that configure and display IP routing data:• Basic on page
Routing194ProSafe M5300 Switch 5. Use ICMP Rate Limit Burst Size to control the ICMP error packets by specifying the number of ICMP error packets tha
Routing195 ProSafe M5300 SwitchField DescriptionIpInReceives The total number of input datagrams received from interfaces, including those received i
Routing196ProSafe M5300 Switch IpReasmFails The number of failures detected by the IP re-assembly algorithm (for whatever reason: timed out, errors,
Routing197 ProSafe M5300 SwitchAdvancedFrom the Advanced link, you can access the following pages:• IP Configuration on page 193• Statistics on page
Routing198ProSafe M5300 Switch To configure IP routing on an interface:1. Use Go To Interface to enter the Interface in unit/slot/port format and cli
Routing199 ProSafe M5300 Switch4. Use IP Address Configuration Method to enter the method by which an IP address is configured on the interface. Ther
2ProSafe M5300 Switch © NETGEAR, Inc. All rights reservedNo part of this publication may be reproduced, transmitted, transcribed, stored in a retrieva
Configuring System Information20ProSafe M5300 Switch System InformationAfter a successful login, the System Information page displays. Use this page t
Field DescriptionVLAN ID Displays the VLAN ID for the interface.Link State The state of the specified interface is either Active or Inactive. An inter
Routing201 ProSafe M5300 SwitchIPv6IPv6 is the next generation of the Internet Protocol. With 128-bit addresses, versus 32-bit addresses for IPv4, IP
Routing202ProSafe M5300 Switch IPv6 Global ConfigurationUse the Global Configuration page to enable IPv6 forwarding on the router and to enable the f
Routing203 ProSafe M5300 SwitchIPv6 Route TableUse the IPv6 Route Table page to display all active IPv6 routes and their settings.To display the IPv6
Routing204ProSafe M5300 Switch AdvancedFrom the Basic link, you can access the following pages:• IPv6 Global Configuration on page 202• IPv6
Routing205 ProSafe M5300 SwitchTo configure IPv6 interface information:1. Use Interface to select the interface to be configured or displayed. All p
Routing206ProSafe M5300 Switch IPv6 Prefix ConfigurationUse this page to manually configure an IPv6 address for an interface. To display the IPv6 Pre
Routing207 ProSafe M5300 SwitchIPv6 Statistics Use the IPv6 Statistics page to display IPv6 traffic statistics for one or all interfaces.To display t
Routing208ProSafe M5300 Switch To view statistics for an IPv6 interface, select the interface with the information to view from the Interface menu. W
Routing209 ProSafe M5300 SwitchDatagrams Successfully ReassembledThe number of IPv6 datagrams successfully reassembled. Note that this counter is inc
Configuring System Information21 ProSafe M5300 SwitchThe System Information provides various statuses:Switch StatusTo define system information:1. In
Routing210ProSafe M5300 Switch ICMPv6 StatisticsField DescriptionTotal ICMPv6 Messages Received The total number of ICMP messages received by the int
Routing211 ProSafe M5300 SwitchTotal ICMPv6 Messages TransmittedThe total number of ICMP messages which this interface attempted to send. Note that t
Routing212ProSafe M5300 Switch IPv6 Neighbor TableUse the IPv6 Neighbor Table page to display IPv6 neighbor details for a specified interface. To dis
Routing213 ProSafe M5300 SwitchNeighbor State Specifies the state of the neighbor cache entry. Following are the states for dynamic entries in the IP
Routing214ProSafe M5300 Switch IPv6 Route ConfigurationUse this page to configure static IPv6 routes.To display the IPv6 Route Configuration page, cl
Routing215 ProSafe M5300 SwitchIPv6 Route PreferencesUse this panel to configure the default preference for each protocol. These values are arbitrary
Routing216ProSafe M5300 Switch Tunnel ConfigurationProSafe software provides for the creation, deletion, and management of tunnel interfaces. These a
Routing217 ProSafe M5300 Switch9. Use Destination Address to specify the destination address for this tunnel in dotted decimal notation.10. Click AD
Routing218ProSafe M5300 Switch VLANYou can configure ProSafe M5300 Switch software with some ports supporting VLANs and some supporting routing. You
Routing219 ProSafe M5300 SwitchTo configure a VLAN routing interface by using the VLAN Routing Wizard:1. Use VLAN ID to specify the VLAN Identifier (
Configuring System Information22ProSafe M5300 Switch FAN StatusThe screen shows the status of the fans in all units. These fans remove the heat genera
Routing220ProSafe M5300 Switch 3. Use Subnet Mask to enter the Subnet Mask to be configured for the VLAN Routing Interface.4. Click ADD to add the VL
Routing221 ProSafe M5300 SwitchBasicFrom the Basic link, you can access the following pages:• ARP Cache on page 221ARP CacheUse this screen to show
Routing222ProSafe M5300 Switch Static ARP CacheTo display the Static ARP Cache page, click Routing ARP Advanced ARP Create.ARP Static Configurat
Routing223 ProSafe M5300 SwitchARP Table ConfigurationYou can use this screen to change the configuration parameters for the Address Resolution Proto
Routing224ProSafe M5300 Switch • Specific Static Entry - Selecting this allows the user to specify the required IP Address.• None - Selected if the u
Routing225 ProSafe M5300 SwitchRIPNote: RIP is a licensed feature and is available only on switches that have an active license installed.RIP is an I
Routing226ProSafe M5300 Switch AdvancedFrom the Advanced link, you can access the following pages:• RIP Configuration (Advanced) on page 226•
Routing227 ProSafe M5300 Switch6. Use Default Metric to set a default for the metric of redistributed routes. This field displays the default metric
Routing228ProSafe M5300 Switch 3. Use Receive Version to select what RIP control packets the interface will accept from the pull-down menu. The valu
Routing229 ProSafe M5300 SwitchSend Version Displays the version of RIP control packets the interface should send from the pull-down menu. The value
Configuring System Information23 ProSafe M5300 SwitchDevice StatusThe screen shows the various inventory information for each device.The following tab
Routing230ProSafe M5300 Switch Route RedistributionUse the RIP Route Redistribution page to configure which routes are redistributed to other routers
Routing231 ProSafe M5300 SwitchThe source IP address is compared to the destination IP address of the route. The source IP netmask in the access list
Routing232ProSafe M5300 Switch OSPFNote: OSPF is a licensed feature and is available only on switches that have an active license installed.From the
Routing233 ProSafe M5300 SwitchAdvancedFrom the Advanced link, you can access the following pages:• OSPF Configuration (Advanced) on page 234•
Routing234ProSafe M5300 Switch OSPF Configuration (Advanced)Use the OSPF Configuration page to enable OSPF on a router and to configure the related O
Routing235 ProSafe M5300 Switch3. Use Metric to specify the metric of the default route. The range of valid values is 0 to 16777214.4. Use Metric T
Routing236ProSafe M5300 Switch 9. Use Default Metric to set a default for the metric of redistributed routes. This field is blank if a default metri
Routing237 ProSafe M5300 SwitchCommon Area ConfigurationThe OSPF Common Area Configuration page lets you create a Common Area Configuration once you
Routing238ProSafe M5300 Switch Stub Area ConfigurationTo display the Stub Area Configuration page, click Routing OSPF Advanced Stub Area Configu
Routing239 ProSafe M5300 SwitchNSSA Area ConfigurationTo display the NSSA Area Configuration page, click Routing OSPF Advanced NSSA Area Configu
Configuring System Information24ProSafe M5300 Switch Switch StatisticsUse this page to display the switch statistics.To display the Switch Statistics
Field DescriptionSPF Runs The number of times that the intra-area route table has been calculated using this area's link-state database. This is
Routing241 ProSafe M5300 SwitchArea Range ConfigurationUse the OSPF Area Range Configuration page to configure and display an area range for a specif
Routing242ProSafe M5300 Switch Interface ConfigurationUse the OSPF Interface Configuration page to configure an OSPF interface.To display the Interfa
Routing243 ProSafe M5300 Switch3. Use Admin Mode* to select enable or disable. The default value is 'disable.' You can configure OSPF para
Routing244ProSafe M5300 Switch 12. Use Authentication Type to select an authentication type other than none. You can select the authentication type f
Routing245 ProSafe M5300 SwitchState The current state of the selected router interface. One of:• Down: This is the initial interface state. In this
Routing246ProSafe M5300 Switch OSPF Interface StatisticsThis screen displays statistics for the selected interface. The information will be displayed
Routing247 ProSafe M5300 SwitchInterface Events The number of times the specified OSPF interface has changed its state, or an error has occurred.Virt
Routing248ProSafe M5300 Switch Click REFRESH to refresh the data on the screen to show the latest interface statistics.Click CLEAR to clear all the s
Routing249 ProSafe M5300 SwitchOSPF Neighbor TableThis screen displays the OSPF neighbor table list. When a particular neighbor ID is specified, deta
Configuring System Information25 ProSafe M5300 SwitchClick CLEAR to clear all the counters, resetting all switch summary and detailed statistics to de
Routing250ProSafe M5300 Switch Click REFRESH to show the latest DHCP bindings information.Click CLEAR to clear all the neighbors in the table.State T
Routing251 ProSafe M5300 SwitchLink State DatabaseUse the OSPF Link State Database page to display OSPF link state information. To display the Link S
Routing252ProSafe M5300 Switch Click REFRESH to show the latest OSPF Link State information.Virtual Link ConfigurationUse the OSPF Virtual Link Confi
Routing253 ProSafe M5300 Switch3. Use Hello Interval to enter the OSPF hello interval for the specified interface in seconds. This parameter must be
Field DescriptionNeighbor State The OSPF interface state, it can be these values:• Down: This is the initial interface state. In this state, the lowe
Routing255 ProSafe M5300 SwitchRoute RedistributionThis screen can be used to configure the OSPF Route Redistribution parameters. The allowable value
Routing256ProSafe M5300 Switch NSF OSPF SummaryUse the NSF OSPF Configuration page to configure the non-stop forwarding (NSF) support mode and to vie
Routing257 ProSafe M5300 SwitchOSPFv3OSPFv3 is the Open Shortest Path First routing protocol for IPv6. It is similar to OSPFv2 in its concept of a li
Routing258ProSafe M5300 Switch Note: *Once OSPFv3 is initialized on the router, it will remain initialized until the router is reset.3. Click APPLY
Routing259 ProSafe M5300 SwitchOSPFv3 ConfigurationUse the OSPFv3 Configuration page to activate and configure OSPFv3 for a switch.To display the OSP
Configuring System Information26ProSafe M5300 Switch System CPU StatusUse this page to display system CPU status and utilization information.To displa
Routing260ProSafe M5300 Switch OSPFv3 Configuration1. Use Router ID to specify the 32-bit integer in dotted decimal format that uniquely identifies
Field DescriptionASBR Mode Reflects whether the ASBR mode is enabled or disabled. Enable implies that the router is an autonomous system border router
Routing262ProSafe M5300 Switch Common Area ConfigurationUse the Common Area Configuration page to create and configure an OSPFv3 area. To display the
Routing263 ProSafe M5300 SwitchStub Area ConfigurationTo display the Stub Area Configuration page, click Routing OSPFv3 Advanced Stub Area Confi
Routing264ProSafe M5300 Switch NSSA Area ConfigurationTo display the NSSA Area Configuration page, click Routing OSPFv3 Advanced NSSA Area Confi
Routing265 ProSafe M5300 SwitchArea Range ConfigurationUse the Area Range Configuration page to configure OSPFv3 area ranges. To display the Area Ran
Routing266ProSafe M5300 Switch Interface ConfigurationUse the OSPFv3 Interface Configuration page to create and configure OSPFv3 interfaces. To displ
Routing267 ProSafe M5300 Switch4. Use Router Priority to enter the OSPFv3 priority for the selected interface. The priority of an interface is speci
Routing268ProSafe M5300 Switch Field DescriptionIPv6 Address The IPv6 address of the interface.LSA Ack Interval The number of seconds between LSA Ack
Routing269 ProSafe M5300 SwitchInterface StatisticsThis screen displays statistics for the selected interface. The information will be displayed only
Configuring System Information27 ProSafe M5300 SwitchSlot InformationUse this page to view information about the cards installed in the switch’s slots
Routing270ProSafe M5300 Switch Use Interface to select the interface for which data is to be displayed.Field DescriptionOSPFv3 Area ID The OSPFv3 are
Routing271 ProSafe M5300 SwitchInvalid OSPF Packet Type The number of OSPFv3 packets discarded because the packet type field in the OSPFv3 header is
Routing272ProSafe M5300 Switch Neighbor TableThis screen shows the OSPFv3 Neighbor Table. This information is displayed only if OSPFv3 is enabled and
Routing273 ProSafe M5300 SwitchLink State DatabaseUse the OSPFv3 Link State Database page to display the link state database.To display the Link Stat
Routing274ProSafe M5300 Switch Click REFRESH to show the latest OSPFv3 Link State information.Age The time since the link state advertisement was fir
Routing275 ProSafe M5300 SwitchVirtual Link ConfigurationUse the Virtual Link Configuration page to define a new or configure an existing virtual lin
Field DescriptionNeighbor State The state of the Virtual Neighbor Relationship.State The state of the interface:• Down: This is the initial interface
Routing277 ProSafe M5300 SwitchRoute RedistributionThis screen can be used to configure the OSPFv3 Route Redistribution parameters. The allowable ran
Routing278ProSafe M5300 Switch NSF OSPFv3 SummaryUse the NSF OSPFv3 Summary page to configure the non-stop forwarding (NSF) support mode and to view
Routing279 ProSafe M5300 SwitchRouter DiscoveryThe Router Discovery protocol is used by hosts to identify operational routers on the subnet. Router D
Configuring System Information28ProSafe M5300 Switch Supported CardThe following table describes information in the Supported Card table.Field Descrip
Routing280ProSafe M5300 Switch VRRPThe Virtual Router Redundancy protocol is designed to handle default router failures by providing a scheme to dyna
Routing281 ProSafe M5300 Switch3. Use Pre-empt Mode to select enable or disable. If you select enable, a backup router will preempt the master route
Routing282ProSafe M5300 Switch AdvancedFrom the Advanced link, you can access the following pages:• VRRP Configuration on page 280• VRRP Sec
Routing283 ProSafe M5300 SwitchTracking ConfigurationUse Tracking Configuration to track specific route IP states within the router that can alter th
Routing284ProSafe M5300 Switch Virtual Router StatisticsUse the Virtual Router Statistics page to display statistics for a specified virtual router.T
Routing285 ProSafe M5300 SwitchClick REFRESH to show the latest VRRP information.Address List Errors The total number of packets received for which t
Routing286ProSafe M5300 Switch MulticastIP Multicasting enables a network host (or multiple hosts) to send an IP datagram to multiple destinations si
Routing287 ProSafe M5300 SwitchMroute TableThis screen displays contents of the Mroute Table in tabular form.To display the Mroute Table page, click
Routing288ProSafe M5300 Switch Multicast Global ConfigurationTo display the Multicast Global Configuration page, click Routing Multicast Global Co
Routing289 ProSafe M5300 SwitchMulticast Interface ConfigurationTo display the Multicast Interface Configuration page, click Routing Multicast Int
Configuring System Information29 ProSafe M5300 SwitchLoopback InterfaceUse this page to create, configure, and remove Loopback interfaces. A loopback
Routing290ProSafe M5300 Switch DVMRPDVMRP is an interior gateway protocol that is suitable for routing multicast traffic within an autonomous system
Routing291 ProSafe M5300 SwitchDVMRP Global ConfigurationTo display the Global Configuration page, click Routing Multicast DVMRP Global Configur
Routing292ProSafe M5300 Switch To configure per-interface DVMRP settings:1. Use Interface to select the interface for which data is to be configured
Routing293 ProSafe M5300 SwitchDVMRP NeighborTo display the DVMRP Neighbor page, click Routing Multicast DVMRP DVMRP Neighbor.To search for an e
Routing294ProSafe M5300 Switch DVMRP Next HopTo display the DVMRP Next Hop page, click Routing Multicast DVMRP DVMRP Next Hop.Field DescriptionS
Routing295 ProSafe M5300 SwitchDVMRP RouteTo display the DVMRP Route page, click Routing Multicast DVMRP DVMRP Route.Field DescriptionSource Add
Routing296ProSafe M5300 Switch IGMPThe Internet Group Management Protocol (IGMP) is used by IPv4 systems (hosts, L3 switches, and routers) to report
Routing297 ProSafe M5300 SwitchIGMP Routing Interface ConfigurationTo display the IGMP Routing Interface Configuration page, click Routing Multicas
Routing298ProSafe M5300 Switch 10. Use Last Member Query Count to enter the number of queries to be sent on receiving a leave group report. Valid val
Routing299 ProSafe M5300 SwitchClick REFRESH to refresh the data on the screen with the latest IGMP interface statistics.IGMP GroupsTo display the IG
3ContentsChapter 1 Getting StartedSwitch Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Web Access . .
Configuring System Information30ProSafe M5300 Switch Network InterfaceFrom the Network Interface link, you can access the following pages:• IPv4 Netwo
Routing300ProSafe M5300 Switch Click REFRESH to refresh the data on the screen with latest IGMP groups information.IGMP MembershipTo display the IGMP
Routing301 ProSafe M5300 SwitchIGMP Proxy Interface ConfigurationTo display the IGMP Proxy Interface Configuration page, click Routing Multicast I
Routing302ProSafe M5300 Switch IGMP Proxy Interface StatisticsTo display the IGMP Proxy Interface Statistics page, click Routing Multicast IGMP
Routing303 ProSafe M5300 SwitchIGMP Proxy MembershipTo display the IGMP Proxy Membership page, click Routing Multicast IGMP Proxy Membership.Fie
Routing304ProSafe M5300 Switch PIMThe Protocol Independent Multicast protocol is a simple, protocol-independent multicast routing protocol. PIM uses
Routing305 ProSafe M5300 SwitchSSM ConfigurationThe settings on this page are valid for PIM-SM and do not apply if the PIM mode is PIM-DM. While PIM-
Routing306ProSafe M5300 Switch PIM Interface ConfigurationTo display the PIM Interface Configuration page, click Routing Multicast PIM Interface
Routing307 ProSafe M5300 SwitchPIM NeighborTo display the PI Neighbor page, click Routing Multicast PIM PIM Neighbor.Field DescriptionInterface
Routing308ProSafe M5300 Switch Candidate RP ConfigurationThe settings on this page are valid for PIM-SM and do not apply if the PIM mode is PIM-DM. T
Routing309 ProSafe M5300 SwitchBSR Candidate ConfigurationThe settings on this page are valid for PIM-SM and do not apply if the PIM mode is PIM-DM.
Configuring System Information31 ProSafe M5300 SwitchOnce you have established in-band connectivity, you can change the IP information using any of th
Routing310ProSafe M5300 Switch Static RP ConfigurationThis page is used to statically configure the RP address for one or more multicast groups. To d
Routing311 ProSafe M5300 SwitchStatic Routes ConfigurationTo display the Static Routes Configuration page, click Routing Multicast Static Routes C
Routing312ProSafe M5300 Switch Admin Boundary ConfigurationThe definition of an administratively scoped boundary is a mechanism to stop the ingress a
Routing313 ProSafe M5300 SwitchIPv6 MulticastThe in the ProSafe M5300 switches support IPv6 multicast routing.From the IPv6 Multicast link, you can a
Routing314ProSafe M5300 Switch IPv6 PIMFrom the IPv6 PIM-DM link, you can access the following pages:• PIM Global Configuration on page 314• PIM SSM
Routing315 ProSafe M5300 SwitchPIM SSM ConfigurationWhile PIM-SM employs a specially-configured RP router that serves as a meeting junction for multi
Routing316ProSafe M5300 Switch PIM Interface ConfigurationTo display the IPv6 PIM Interface Configuration page, click Routing IPv6 Multicast PIM
Routing317 ProSafe M5300 SwitchPIM NeighborTo display the IPv6 PIM Neighbor page, click Routing IPv6 Multicast PIM PIM-DM Neighbor.Field Descrip
Routing318ProSafe M5300 Switch PIM Candidate RP ConfigurationTo display the IPv6 PIM Candidate RP Configuration page, click Routing IPv6 Multicast
Routing319 ProSafe M5300 SwitchPIM BSR Candidate ConfigurationTo display the IPv6 PIM-SM BSR Candidate Configuration page, click Routing IPv6 Multi
Configuring System Information32ProSafe M5300 Switch 8. Use DHCP Vendor Class Identifier String to specify the text string to add to DHCP requests as
Routing320ProSafe M5300 Switch PIM Static RP ConfigurationThis page is used to statically configure the RP address for one or more multicast groups.
Routing321 ProSafe M5300 SwitchMLDMLD is used by IPv6 systems (listeners and routers) to report their IP multicast addresses memberships to any neigh
Routing322ProSafe M5300 Switch MLD Routing Interface ConfigurationTo display the MLD Routing Interface Configuration page, click Routing IPv6 Multi
Routing323 ProSafe M5300 Switch8. Use Startup Query Count to specify the value that indicates the configured number of Queries sent out on startup,
Routing324ProSafe M5300 Switch MLD GroupsTo display the MLD Groups page, click Routing IPv6 Multicast MLD MLD Groups.Field DescriptionInterface
Routing325 ProSafe M5300 SwitchMLD TrafficTo display the MLD Traffic page, click Routing IPv6 Multicast MLD MLD Traffic.Field DescriptionValid M
Routing326ProSafe M5300 Switch MLD Proxy Interface ConfigurationTo display the MLD Proxy Interface Configuration page, click Routing IPv6 Multicast
Routing327 ProSafe M5300 SwitchMLD Proxy Interface StatisticsTo display the MLD Proxy Interface Statistics page, click Routing IPv6 Multicast MLD
Routing328ProSafe M5300 Switch MLD Proxy MembershipTo display the MLD Proxy Membership page, click Routing IPv6 Multicast MLD Proxy Membership.F
Routing329 ProSafe M5300 SwitchStatic Routes ConfigurationTo display the Static Routes Configuration page, click Routing IPv6 Multicast Static Rou
Configuring System Information33 ProSafe M5300 SwitchTo configure an IPv6 network interface:1. Use Admin Mode to enable or disable the IPv6 network in
Routing330ProSafe M5300 Switch
33155. Configuring Quality of ServiceUse the features in the QoS tab to configure Quality of Service (QoS) settings on the switch. The QoS tab conta
Configuring Quality of Service332ProSafe M5300 Switch From the Class of Service link under the QoS tab, you can access the following pages:• Basic on
Configuring Quality of Service333 ProSafe M5300 Switch3. Use Global Trust Mode to specify whether to trust a particular packet marking at ingress. G
Configuring Quality of Service334ProSafe M5300 Switch To map 802.1p priorities to queues:1. Use Interface to specify CoS configuration settings based
Configuring Quality of Service335 ProSafe M5300 SwitchTo map DSCP values to queues:1. Use Interface to specify CoS configuration settings based per-in
Configuring Quality of Service336ProSafe M5300 Switch 3. Use Interface Shaping Rate to specify the maximum bandwidth allowed, typically used to shape
Configuring Quality of Service337 ProSafe M5300 Switch• Use Minimum Bandwidth to specify the minimum guaranteed bandwidth allotted to this queue. Sett
Configuring Quality of Service338ProSafe M5300 Switch To configure CoS Queue Drop Precedence Configuration settings:1. From the Interface menu, select
Configuring Quality of Service339 ProSafe M5300 SwitchDifferentiated ServicesThe QoS feature contains Differentiated Services (DiffServ) support that
Configuring System Information34ProSafe M5300 Switch TimeProSafe software supports the Simple Network Time Protocol (SNTP).SNTP assures accurate netwo
Configuring Quality of Service340ProSafe M5300 Switch DiffServ WizardThe DiffServ Wizard enables DiffServ on the switch by creating a traffic class, a
Configuring Quality of Service341 ProSafe M5300 SwitchTo configure the switch using the DiffServ Wizard:1. Use Traffic Type to define the DiffServ Cla
Field DescriptionDiffServ Admin Mode The options mode for DiffServ. The default value is 'enable'. While disabled, the DiffServ configuratio
Configuring Quality of Service343 ProSafe M5300 SwitchAdvanced• DiffServ Configuration on page 341 • Class Configuration on page 343• IPv6 Class Con
Configuring Quality of Service344ProSafe M5300 Switch To configure the class match criteria: 1. Click the class name for an existing class.The class n
Configuring Quality of Service345 ProSafe M5300 Switch• Class of Service - This lists all the values for the class of service match criterion in the r
Configuring Quality of Service346ProSafe M5300 Switch IPv6 Class ConfigurationUse the IPv6 Class Configuration page to add a new IPv6 DiffServ class n
Configuring Quality of Service347 ProSafe M5300 SwitchTo configure the class match criteria: 1. Click the class name for an existing class.The class n
Configuring Quality of Service348ProSafe M5300 Switch • Source L4 Port - This lists the keywords for the known source layer 4 ports from which one can
Configuring Quality of Service349 ProSafe M5300 Switch5. Click DELETE to delete the currently selected policy from the switch.To configure the policy
Configuring System Information35 ProSafe M5300 SwitchThe device can poll Unicast server types for the server time.Polling for Unicast information is u
Configuring Quality of Service350ProSafe M5300 Switch • Mark IP DSCP - This lists the keywords for the known DSCP values from which one can be selecte
Field DescriptionPolicy Name Displays name of the DiffServ policy.Policy Type Displays type of the policy as InMember Class Name Displays name of each
Configuring Quality of Service352ProSafe M5300 Switch Service StatisticsThis screen displays class-oriented statistical information for the policy, wh
Configuring Quality of Service353 ProSafe M5300 SwitchDiscarded Packets/Octets A count of the total number of packets/octets discarded for all class i
Configuring Quality of Service354ProSafe M5300 Switch
35566. Managing Device SecurityUse the features available from the Security tab to configure management security settings for port, user, and server
Managing Device Security356ProSafe M5300 Switch Local UserFrom the Local User link, you can access the following pages:• User Management on page 356•
Managing Device Security357 ProSafe M5300 Switch5. Access Mode indicates the user's access mode. The admin account always has 'Read/Write&ap
Managing Device Security358ProSafe M5300 Switch Enable Password ConfigurationUse this page to configure a local password to control CLI access to priv
Managing Device Security359 ProSafe M5300 SwitchTo configure the line password:1. Use Console Password to enter the Console password. Passwords are a
Configuring System Information36ProSafe M5300 Switch SNTP Global ConfigurationSNTP stands for Simple Network Time Protocol. As its name suggests, it i
Managing Device Security360ProSafe M5300 Switch Radius ConfigurationUse the Radius Configuration page to add information about one or more RADIUS serv
Managing Device Security361 ProSafe M5300 Switchall configured servers. If the RADIUS request was generated by a user login attempt, all user interfac
Managing Device Security362ProSafe M5300 Switch 2. Click ADD to add a new server to the switch. This button is only available to READWRITE users. Thes
Managing Device Security363 ProSafe M5300 SwitchAccounting Server ConfigurationUse the RADIUS Accounting Server Configuration page to view and configu
Field DescriptionAccounting Server Address Identifies the accounting server associated with the statistics.Round Trip Time(secs) Displays the time int
Managing Device Security365 ProSafe M5300 SwitchThe TACACS+ folder contains links to the following features:• Configuring TACACS+ on page 364• TACACS
Managing Device Security366ProSafe M5300 Switch To configure TACACS+ server settings:1. Use TACACS+ Server to enter the configured TACACS+ server IP a
Managing Device Security367 ProSafe M5300 SwitchTo configure the authentication lists for access to the switch management interface:1. List Name - If
Managing Device Security368ProSafe M5300 Switch To configure authentication list methods for enable access:1. List Name - If you are creating a new en
Managing Device Security369 ProSafe M5300 SwitchDot1x Authentication ListYou use this page to configure IEEE 802.1X (Dot1x) lists. Dot1x controls port
Configuring System Information37 ProSafe M5300 SwitchSNTP Global StatusThe following table displays SNTP Global Status information.Field DescriptionVe
Managing Device Security370ProSafe M5300 Switch To configure authentication list methods for HTTP access:1. List Name - Select the HTTP list name for
Managing Device Security371 ProSafe M5300 Switch• Tacacs - The user's ID and password will be authenticated using the TACACS+ server.• None - The
Managing Device Security372ProSafe M5300 Switch Configuring Management AccessFrom the Access page, you can configure HTTP and Secure HTTP access to th
Managing Device Security373 ProSafe M5300 SwitchTo configure the HTTP server settings:1. Use HTTP Access to specify whether the switch may be accessed
Managing Device Security374ProSafe M5300 Switch To configure HTTPS settings:1. Use HTTPS Admin Mode to Enable or Disable the Administrative Mode of Se
Managing Device Security375 ProSafe M5300 SwitchCertificate ManagementUse this menu to generate or delete certificates. To display the Certificate Man
Managing Device Security376ProSafe M5300 Switch To configure the certificate download settings for HTTPS sessions:1. Use File Type to specify the type
Managing Device Security377 ProSafe M5300 SwitchSSHFrom the SSH link, you can access the following pages:• SSH Configuration on page 377• Host Keys M
Field DescriptionCurrent Number of SSH Sessions Displays the number of SSH connections currently in use in the system.Keys Present Displays which keys
Field DescriptionKeys Present Displays which keys, RSA, DSA or both, are present (if any).Key Generation In Progress Displays which key is being gener
Configuring System Information38ProSafe M5300 Switch SNTP Server ConfigurationUse the SNTP Server Configuration page to view and modify information fo
Managing Device Security380ProSafe M5300 Switch TelnetTo display the Telnet page, click Security Access > Telnet.Telnet Authentication ListThis p
Managing Device Security381 ProSafe M5300 SwitchOutbound Telnet Client ConfigurationThis page regulates new outbound telnet connections. If Allow New
Field DescriptionCharacter Size (bits) The number of bits in a character. This is always 8.Flow Control Whether hardware flow control is enabled or di
Managing Device Security383 ProSafe M5300 Switch3. Use Denial of Service Max ICMP Packet Size to specify the Max ICMPv4 Packet Size allowed (This incl
Managing Device Security384ProSafe M5300 Switch Access ControlThe Access Control feature allows you to configure settings that control management acce
Managing Device Security385 ProSafe M5300 Switch4. To remove an access profile, select the Remove Profile check box. The access profile should be deac
Managing Device Security386ProSafe M5300 Switch 1. To add an access profile rule, configure the following settings and click Add.• Rule Type: Specify
Managing Device Security387 ProSafe M5300 Switch• Supplicants - Specifies the host connected to the authenticated port requesting access to the system
Managing Device Security388ProSafe M5300 Switch Note: If 802.1X is enabled, authentication is performed by a RADIUS server. This means the primary aut
Managing Device Security389 ProSafe M5300 SwitchAdvancedFrom the Advanced link, you can access the following pages:• 802.1X Configuration on page 389
Configuring System Information39 ProSafe M5300 Switch2. Click ADD.3. Repeat the previous steps to add additional SNTP servers. You can configure up to
Managing Device Security390ProSafe M5300 Switch Port AuthenticationUse the Port Authentication page to enable and configure port access control on one
Managing Device Security391 ProSafe M5300 Switch• auto - The authenticator PAE sets the controlled port mode to reflect the outcome of the authenticat
Managing Device Security392ProSafe M5300 Switch • Maximum Requests - This input field allows the user to enter the maximum requests for the selected p
Managing Device Security393 ProSafe M5300 SwitchPort SummaryUse the Port Summary page to view information about the port access control settings on a
Managing Device Security394ProSafe M5300 Switch Operating Control Mode This field indicates the control mode under which the port is actually operatin
Managing Device Security395 ProSafe M5300 SwitchVlan Assigned This field displays the vlan id assigned to the selected interface by the Authenticator.
Managing Device Security396ProSafe M5300 Switch Client SummaryTo access the Client Summary page, click Security Port Authentication Advanced Cli
Managing Device Security397 ProSafe M5300 SwitchTraffic ControlFrom the Traffic Control link, you can configure MAC Filters, Storm Control, Port Secur
Managing Device Security398ProSafe M5300 Switch To configure MAC filter settings:1. Select Create Filter from the MAC Filter menu. a. This is the list
Managing Device Security399 ProSafe M5300 SwitchMAC Filter SummaryUse the MAC Filter Summary page to view the MAC filters that are configured on the s
4ProSafe M5300 SwitchNSF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78Checkpoint Statist
Configuring System Information40ProSafe M5300 Switch DNSYou can use these pages to configure information about DNS servers the network uses and how th
Managing Device Security400ProSafe M5300 Switch To configure the global port security mode: 1. In the Port Security Mode field, select the appropriate
Managing Device Security401 ProSafe M5300 SwitchTo configure port security settings:1. Port - Selects the interface to be configured.2. Select the che
Managing Device Security402ProSafe M5300 Switch Dynamic MAC AddressUse the Dynamic MAC Address page to convert a dynamically learned MAC address to a
Managing Device Security403 ProSafe M5300 SwitchStatic MAC AddressUse this page to add and remove the MAC addresses of hosts that are allowed to send
Managing Device Security404ProSafe M5300 Switch Private GroupThe Private Group feature provides Layer 2 isolation between ports that share the same br
Managing Device Security405 ProSafe M5300 SwitchPrivate Group MembershipUse this page to configure the ports that belong to the existing private group
Managing Device Security406ProSafe M5300 Switch Protected Ports ConfigurationIf a port is configured as protected, it does not forward traffic to any
Managing Device Security407 ProSafe M5300 SwitchPrivate VLANThe Private VLANs feature provides Layer 2 isolation between ports that share the same bro
Managing Device Security408ProSafe M5300 Switch To configure the private VLAN type:1. Select the check box associated with each VLAN to configure. To
Managing Device Security409 ProSafe M5300 Switch2. In the Secondary VLAN field, specify the VLAN ID of the VLAN to associate with the selected primary
Configuring System Information41 ProSafe M5300 Switch7. Click CANCEL to cancel the configuration on the screen and reset the data on the screen to the
Managing Device Security410ProSafe M5300 Switch 4. Click CANCEL to cancel the configuration on the screen.Private VLAN Host Interface ConfigurationUse
Managing Device Security411 ProSafe M5300 SwitchPrivate VLAN Promiscuous Interface ConfigurationUse this page to associate a port with a promiscuous p
Managing Device Security412ProSafe M5300 Switch Storm ControlA broadcast storm is the result of an excessive number of broadcast messages simultaneous
Managing Device Security413 ProSafe M5300 SwitchStorm Control Interface ConfigurationTo display the Storm Control Interface Configuration page, click
Managing Device Security414ProSafe M5300 Switch ControlTo display the page, click the Security Control tab. The Control folder contains links to the
Managing Device Security415 ProSafe M5300 SwitchDHCP Snooping Global ConfigurationUse this page to configure the administrative mode of DHCP snooping
Managing Device Security416ProSafe M5300 Switch DHCP Snooping Interface ConfigurationTo display the DHCP Snooping Interface Configuration page, click
Managing Device Security417 ProSafe M5300 SwitchDHCP Snooping Binding ConfigurationTo display the DHCP Snooping Binding Configuration page, click Secu
Managing Device Security418ProSafe M5300 Switch DHCP Snooping Persistent ConfigurationTo display the DHCP Snooping Persistent Configuration page, clic
Field DescriptionInterface The untrusted and snooping enabled interface for which statistics to be displayed.MAC Verify Failures Number of packets tha
Configuring System Information42ProSafe M5300 Switch The Dynamic Host Mapping table shows host name-to-IP address entries that the switch has learned.
Managing Device Security420ProSafe M5300 Switch IP Source Guard Interface ConfigurationTo display the IP Source Guard Interface Configuration page, cl
Managing Device Security421 ProSafe M5300 SwitchStatic Binding Configuration1. Interface - Selects the interface to add a binding into the IPSG databa
Managing Device Security422ProSafe M5300 Switch DAI ConfigurationTo display the DAI Configuration page, click Security Control> Dynamic ARP Inspe
Managing Device Security423 ProSafe M5300 Switch3. Use Logging Invalid Packets to indicate whether the Dynamic ARP Inspection logging is enabled on th
Managing Device Security424ProSafe M5300 Switch DAI ACL ConfigurationUse this page to add DAI access control lists (ACL) and to view DAI ACLs that hav
Managing Device Security425 ProSafe M5300 SwitchDAI StatisticsThis screen shows the Statistics per VLAN. To display the DAI Statistics page, click Sec
Managing Device Security426ProSafe M5300 Switch Captive PortalThe Captive Portal (CP) feature allows you to block wired and wireless clients from acce
Managing Device Security427 ProSafe M5300 Switch1. Use Admin Mode to enable or disable Captive Portal feature. By default, the Captive Portal feature
Managing Device Security428ProSafe M5300 Switch Captive Portal ConfigurationBy default, the switch has one captive portal. You can change the settings
Managing Device Security429 ProSafe M5300 Switch6. Use Block to control the blocked status. If the CP is blocked, users cannot gain access to the net
Configuring System Information43 ProSafe M5300 SwitchThe following table displays Summary information, which describes the maximum resources each temp
Managing Device Security430ProSafe M5300 Switch Captive Portal Binding ConfigurationYou can associate a configured captive portal with a specific netw
Field DescriptionInterface The interface for which you want to view information.CP ID The ID of captive portal instance.Operational Status Shows wheth
Managing Device Security432ProSafe M5300 Switch Captive Portal User ConfigurationWhen you click Add from the CP User Configuration page, the screen re
Managing Device Security433 ProSafe M5300 Switch10. Use Max Bandwidth Up to specify the maximum rate (Rate in bits per seconds) at which a client can
Managing Device Security434ProSafe M5300 Switch Captive Portal ClientTo display the Captive Portal Client page, click Security Control> Captive P
Managing Device Security435 ProSafe M5300 SwitchConfiguring Access Control ListsAccess Control Lists (ACLs) ensure that only authorized users have acc
Managing Device Security436ProSafe M5300 Switch Note: There is an implicit “deny all” rule at the end of an ACL list. This means that if an ACL is app
Managing Device Security437 ProSafe M5300 Switch7. Click DELETE to remove the currently selected Rule from the ACL based on destination MAC.8. Click C
Managing Device Security438ProSafe M5300 Switch The MAC ACL table displays the number of ACLs currently configured in the switch and the maximum numbe
Managing Device Security439 ProSafe M5300 Switch• Assign Queue Id - Specifies the hardware egress queue identifier used to handle all packets matching
Configuring System Information44ProSafe M5300 Switch The following table describes the non-configurable fields on the License Key page.Field Descripti
Managing Device Security440ProSafe M5300 Switch MAC Binding ConfigurationWhen an ACL is bound to an interface, all the rules that have been defined ar
Managing Device Security441 ProSafe M5300 Switch5. Click APPLY to save any changes to the running configuration.MAC Binding TableUse the MAC Binding T
Managing Device Security442ProSafe M5300 Switch IP ACLAn IP ACL consists of a set of rules which are matched sequentially against a packet. When a pac
Managing Device Security443 ProSafe M5300 SwitchIP RulesUse these screens to configure the rules for the IP Access Control Lists created using the IP
Managing Device Security444ProSafe M5300 Switch • Action - Selects the ACL forwarding action, which is one of the following: • Permit - Forwards packe
Managing Device Security445 ProSafe M5300 Switch4. To update an IP ACL rule, select the check box associated with the rule, update the desired fields,
Managing Device Security446ProSafe M5300 Switch 2. Configure the desired criteria for the new rule.• Rule ID - Specify a number from 1–12 to identify
Managing Device Security447 ProSafe M5300 Switchremove the rule and re-create it, or re-configure 'Match Every' to 'False' for the
Managing Device Security448ProSafe M5300 Switch • IP Precedence - The IP Precedence field in a packet is defined as the high-order three bits of the S
Managing Device Security449 ProSafe M5300 SwitchIPv6 ACLAn IP ACL consists of a set of rules which are matched sequentially against a packet. When a p
Configuring System Information45 ProSafe M5300 SwitchServicesFrom the Services link, you can access the following pages:• DHCP Server on page 45• DHC
Managing Device Security450ProSafe M5300 Switch IPv6 RulesUse these screens to configure the rules for the IPv6 Access Control Lists, which is created
Managing Device Security451 ProSafe M5300 Switch2. Use Rule ID to enter a whole number in the range of 1 to 12 that will be used to identify the rule.
Managing Device Security452ProSafe M5300 Switch • Use Source L4 Port to specify a packet's source layer 4 port as a match condition for the selec
Managing Device Security453 ProSafe M5300 SwitchIP Binding ConfigurationWhen an ACL is bound to an interface, all the rules that have been defined are
Field DescriptionInterface Displays selected interface.Direction Displays selected packet filtering direction for ACL.ACL Type Displays the type of AC
Managing Device Security455 ProSafe M5300 SwitchVLAN Binding TableUse this page to bind ACLs to VLANs on the switch rather than to ports. At the botto
Managing Device Security456ProSafe M5300 Switch
45777. Monitoring the SystemUse the features available from the Monitoring tab to view a variety of information about the switch and its ports and t
Monitoring the System458ProSafe M5300 Switch Port StatisticsThe Port Statistics page displays a summary of per-port traffic statistics on the switch.T
Monitoring the System459 ProSafe M5300 SwitchPort Detailed StatisticsThe Port Detailed Statistics page displays a variety of per-port traffic statisti
Configuring System Information46ProSafe M5300 Switch To enable or disable DHCP service:1. Use Admin Mode to specify whether the DHCP Service is to be
Monitoring the System460ProSafe M5300 Switch The following table describes the detailed port information displayed on the screen. To view information
Monitoring the System461 ProSafe M5300 SwitchPhysical Mode Indicates The port speed and duplex mode. In auto-negotiation mode the duplex mode and spee
Monitoring the System462ProSafe M5300 Switch Packets Received 128-255 OctetsThe total number of packets (including bad packets) received that were bet
Monitoring the System463 ProSafe M5300 SwitchRx FCS Errors The total number of packets received that had a length (excluding framing bits, but includi
Monitoring the System464ProSafe M5300 Switch Packets Transmitted 128-255 OctetsThe total number of packets (including bad packets) received that were
Monitoring the System465 ProSafe M5300 SwitchMultiple Collision Frames A count of the number of successfully transmitted frames on a particular interf
Monitoring the System466ProSafe M5300 Switch EAP StatisticsUse the EAP Statistics page to display information about EAP packets received on a specific
Monitoring the System467 ProSafe M5300 SwitchCable TestTo display the Cable Test page, click Monitoring Ports> Cable Test.EAPOL Last Frame Versio
Monitoring the System468ProSafe M5300 Switch 1. Interface - Indicates the interface to which the cable to be tested is connected.2. Click APPLY to per
Monitoring the System469 ProSafe M5300 SwitchBuffered LogsTo access the Buffered Logs page, click Monitoring Logs > Buffered Logs.Buffered Log Co
Configuring System Information47 ProSafe M5300 SwitchDHCP Pool ConfigurationTo display the DHCP Pool Configuration page, click System > Services &g
Monitoring the System470ProSafe M5300 Switch Format of the messagesMessages logged to a collector or relay via syslog have an identical format of eith
Monitoring the System471 ProSafe M5300 SwitchConsole Log ConfigurationThis allows logging to any serial device attached to the host. To access the Con
Monitoring the System472ProSafe M5300 Switch 1. Use Admin Status to enable/disable logging to configured syslog hosts. Setting this to disable stops l
Monitoring the System473 ProSafe M5300 SwitchThe following table describes the Trap Log information displayed on the screen. The page also displays in
Field DescriptionNumber of Traps Since Last ResetThe number of traps that have occurred since the switch last reboot.Trap Log Capacity The maximum num
Monitoring the System475 ProSafe M5300 SwitchThe following table describes the Event Log information displayed on the screen.Use the buttons at the bo
Field DescriptionEntry The sequence number of the event.Type The type of the event.File Name The file in which the event originated.Line The line numb
Monitoring the System477 ProSafe M5300 Switch• Error (3) - error conditions• Warning (4) - warning conditions• Notice(5) - normal but significant cond
Monitoring the System478ProSafe M5300 Switch Use the Multiple Port Mirroring page to define port mirroring sessions.To access the Multiple Port Mirror
Monitoring the System479 ProSafe M5300 SwitchsFlowsFlow® is a standard for monitoring high-speed switched and routed networks. sFlow technology is bui
Configuring System Information48ProSafe M5300 Switch Type of Binding Specifies the type of binding for the pool.• Unallocated• Dynamic• ManualNetwork
Monitoring the System480ProSafe M5300 Switch To display the sFlow Agent page, click Monitoring sFlow Basic sFlow Agent.Field DescriptionAgent Ve
Monitoring the System481 ProSafe M5300 SwitchsFlow Receiver ConfigurationUse the sFlow Receiver Configuration page to configure the sFlow Receiver.To
Monitoring the System482ProSafe M5300 Switch sFlow Interface ConfigurationsFlow agent collects statistical packet-based sampling of switched flows and
48388. MaintenanceUse the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains links to the follo
Maintenance484ProSafe M5300 Switch Auto Install ConfigurationThe AutoInstall feature enables the configuration of a switch automatically when the devi
Maintenance485 ProSafe M5300 SwitchTo configure the auto install settings:1. Use Auto Install to enable/disable start/stop auto install mode on the sw
Maintenance486ProSafe M5300 Switch Factory DefaultUse the Factory Default page to reset the system configuration to the factory default values.Note: I
Maintenance487 ProSafe M5300 SwitchUpload File From SwitchUse the File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) fi
Maintenance488ProSafe M5300 Switch • Tech Support - Specify Tech Support to retrieve the switch information needed for trouble-shooting.The factory de
Maintenance489 ProSafe M5300 Switch• Error Log - Specify error log to retrieve the system error (persistent) log, sometimes referred to as the event l
Configuring System Information49 ProSafe M5300 Switch2. Use ADD to create the Pool Configuration.3. Use APPLY to change the Pool Configuration. Sends
Maintenance490ProSafe M5300 Switch Download File To SwitchThe switch supports system file downloads from a remote system to the switch by using either
Maintenance491 ProSafe M5300 Switch• Use SSL Trusted Root Certificate PEM File to specify SSL Trusted Root Certificate File (PEM Encoded).• Use SSL Se
Maintenance492ProSafe M5300 Switch HTTP File DownloadUse the HTTP File Download page to download files of various types to the switch using an HTTP se
Maintenance493 ProSafe M5300 Switch2. If you are downloading a GSM7352Sv1 or GSM7352Sv2 image (Archive), select the image on the switch to overwrite.
Maintenance494ProSafe M5300 Switch USB File DownloadUse this menu to download a file from the switch to USB device. To display the HTTP File Upload pa
Maintenance495 ProSafe M5300 SwitchFile ManagementThe system maintains two versions of the ProSafe software in permanent storage. One image is the act
Maintenance496ProSafe M5300 Switch Dual Image ConfigurationThe Dual Image feature allows switch to retain two images in permanent storage. The user de
Maintenance497 ProSafe M5300 SwitchTroubleshootingThe Troubleshooting menu contains links to the following options:• Ping IPv4 on page 497• Ping IPv6
Maintenance498ProSafe M5300 Switch • Count - Enter the number of echo requests you want to send. The initial value is default value. The Count you ent
Maintenance499 ProSafe M5300 SwitchTraceroute IPv4Use this screen to tell the switch to send a TraceRoute request to a specified IP address or Hostnam
5ProSafe M5300 SwitchLAG Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .184LAG Membership . . . . . . .
Configuring System Information50ProSafe M5300 Switch 3. Use Option Type to specify the Option Type against the Option Code configured for the selected
Maintenance500ProSafe M5300 Switch • InitTTL - Enter the initial TTL to be used. The initial value is default value. The InitTTL you enter is not reta
50199. HelpUse the features available from the Help tab to connect to online resources for assistance. The Help tab contains a links to the followin
Help502ProSafe M5300 Switch User GuideUse the User Guide page to access the Web Management User Guide (the guide you are now reading) that is availabl
Help503 ProSafe M5300 SwitchRegistrationUse the Registration page to register your ProSafe M5300 switch. Completing the registration confirms your e-m
Help504ProSafe M5300 Switch If you have not registered the product or have not disabled the registration reminders, the following pop-up window appear
505AA. Default SettingsThis appendix describes the default settings for many of the ProSafe M5300 Managed Switch software features.Table 3. Default
Default Settings506ProSafe M5300 SwitchISDP Enabled (Versions 1 and 2)RMON EnabledTACACS+ Not configuredRADIUS Not configuredSSH/SSL DisabledTelnet En
Default Settings507ProSafe M5300 SwitchDefault VLAN ID 1Default VLAN Name DefaultGVRP DisabledGARP Timers Leave: 60 centiseconds Leave All: 1000 centi
Default Settings508ProSafe M5300 Switch
509BB. Configuration ExamplesThis appendix contains information about how to configure the following features:• Virtual Local Area Networks (VLANs)
Configuring System Information51 ProSafe M5300 SwitchDHCP Bindings InformationTo display the DHCP Bindings Information page, click System > Service
Configuration Examples510ProSafe M5300 Switch• They are easy to manage. The addition of nodes, as well as moves and other changes, can be dealt with q
Configuration Examples511ProSafe M5300 Switch• For the VLAN with VLAN ID 10, specify the following members: port 1 (U), port 2 (U), and port 3 (T).• F
Configuration Examples512ProSafe M5300 Switchcriteria to a particular queue or redirect the traffic to a particular port. A default deny all rule is t
Configuration Examples513ProSafe M5300 Switchports, you must add a new permit rule with the desired match criteria and bind the rule to interfaces 6,
Configuration Examples514ProSafe M5300 SwitchDifferentiated Services (DiffServ)Standard IP-based networks are designed to provide best effort data del
Configuration Examples515ProSafe M5300 Switch• IP Service Type octet (also known as: ToS bits, Precedence value, DSCP value)• Layer 4 protocol (TCP, U
Configuration Examples516ProSafe M5300 SwitchTraffic Conditioning PolicyTraffic conditioning pertains to actions performed on incoming traffic. There
Configuration Examples517ProSafe M5300 SwitchDiffServ Example ConfigurationTo create a DiffServ Class/Policy and attach it to a switch interface, foll
Configuration Examples518ProSafe M5300 SwitchAll UDP packet flows destined to the 192.12.2.0 network with an IP source address from the 192.12.1.0 net
Configuration Examples519ProSafe M5300 Switchoperation of a switch’s ports to be controlled in order to ensure that access to its services is only per
Configuring System Information52ProSafe M5300 Switch DHCP Conflicts InformationTo display the DHCP Conflicts Information page, click System > Servi
Configuration Examples520ProSafe M5300 Switch802.1X Example ConfigurationThis example shows how to configure the switch so that 802.1X-based authentic
Configuration Examples521ProSafe M5300 SwitchMSTPSpanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occur
Configuration Examples522ProSafe M5300 SwitchAn MST Region comprises of one or more MSTP Bridges with the same MST Configuration Identifier, using the
Configuration Examples523ProSafe M5300 SwitchMSTP Example ConfigurationThis example shows how to create an MSTP instance from the GSM7352Sv1 or GSM735
Configuration Examples524ProSafe M5300 SwitchIf you do not specify a root bridge and all switches have the same Bridge Priority value, the switch with
525CC. Notification of ComplianceNETGEAR Wired ProductsRegulatory Compliance InformationThis section includes user requirements for operating this p
ProSafe M5300 SwitchNotification of Compliance526• This device must accept any interference received, including interference that may cause undesired
ProSafe M5300 SwitchNotification of Compliance527GPL License AgreementGPL may be included in this product; to view the GPL license agreement go toftp
528IndexNumerics802.1X 359, 387, 389example configuration 518Aaccess controlACL example configuration 511ACLs 435authentication802.1X 386, 518enable 1
529ProSafe M5300 SwitchIIEEE 802.11x 518IEEE 802.1AB 93IEEE 802.1D 143IEEE 802.1Q 119, 143IEEE 802.1s 143IEEE 802.1w 143IEEE 802.1X 359IGMP 158interfa
Configuring System Information53 ProSafe M5300 SwitchDHCP RelayIf the switch is functioning as a Layer 3 device, the Layer 3 DHCP Relay Agent can rela
530ProSafe M5300 SwitchUUnicast 35upload configuration 487VVLAN 119example configuration 509guest 518ID 119managing 119Port VLAN ID 125PVID 125VoIP 13
Configuring System Information54ProSafe M5300 Switch DHCP Relay StatusThe following table describes the DHCP Relay Status fields.Field DescriptionRequ
Configuring System Information55 ProSafe M5300 SwitchTo configure the DHCP L2 Relay VLAN information:1. VLAN ID shows the VLAN ID configured on the sw
Configuring System Information56ProSafe M5300 Switch DHCP L2 Relay Interface StatisticsTo display the DHCP L2 Relay Interface Statistics page, click S
Configuring System Information57 ProSafe M5300 SwitchUDP RelayThe UDP Relay feature provides the ability for a router to forward configured UDP broadc
Configuring System Information58ProSafe M5300 Switch • rip - Relay RIP (UDP port 520) packets• tacacs - Relay TACACS (UDP port 49) packet• tftp - Rela
Configuring System Information59 ProSafe M5300 Switch• ntp - Relay network time protocol (UDP port 123) packets.• pim-auto-rp - Relay PIM auto RP (UDP
6ProSafe M5300 SwitchChapter 5 Configuring Quality of ServiceClass of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Configuring System Information60ProSafe M5300 Switch DHCPv6 Server ConfigurationTo display the DHCP Server Configuration page, click System > Servi
Configuring System Information61 ProSafe M5300 Switch
Configuring System Information62ProSafe M5300 Switch To configure a DHCPv6 Pool:1. From the Pool Name field, select Create and enter name for the Pool
Configuring System Information63 ProSafe M5300 Switch5. In the Valid Lifetime field, specify the valid lifetime, in seconds, for the delegated prefix.
Configuring System Information64ProSafe M5300 Switch 5. In the Preferences field, specify the preference value used by clients to determine preference
Configuring System Information65 ProSafe M5300 SwitchDHCPv6 Server StatisticsTo display the DHCP Server Statistics page, click System > Services &g
Configuring System Information66ProSafe M5300 Switch DHCPv6 RelayThe DHCPv6 Relay Agent allows for various sub-options to be attached to messages that
Configuring System Information67 ProSafe M5300 SwitchTo configure the DHCPv6 Relay information for one or more interfaces:1. Select the check box asso
Configuring System Information68ProSafe M5300 Switch StackingA stackable switch is a switch that is fully functional operating as a stand-alone unit b
Configuring System Information69 ProSafe M5300 Switch• Single IP address management through a web browser, the CLI, or SNMP.• Master-slave configurati
7ProSafe M5300 SwitchChapter 7 Monitoring the SystemPorts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Configuring System Information70ProSafe M5300 Switch Stack Master Election All stack members are eligible stack masters. If the stack master becomes u
Configuring System Information71 ProSafe M5300 SwitchNonstop ForwardingNonstop forwarding (NSF) allows the forwarding plane of stack units to continue
Configuring System Information72ProSafe M5300 Switch Stack ConfigurationFrom this page, you can preconfigure stack members before adding them to the s
Configuring System Information73 ProSafe M5300 SwitchTo change the settings for an existing stack member:1. Select the check box next to the stack me
Configuring System Information74ProSafe M5300 Switch The following table describes the Basic Stack Status fields.Field DescriptionUnit ID The unit ID
Configuring System Information75 ProSafe M5300 SwitchTo configure the mode of the stack ports:1. Select the check box associated with the unit and po
Configuring System Information76ProSafe M5300 Switch Stack Port DiagnosticsThis page displays the diagnostics for all the stackable interfaces in the
Configuring System Information77 ProSafe M5300 SwitchStack Firmware SynchronizationTo display the stack firmware synchronization configurations from t
Configuring System Information78ProSafe M5300 Switch NSFUse the NSF Summary page to enable nonstop forwarding feature on the stack, view operational s
Configuring System Information79 ProSafe M5300 Switch4. Click CANCEL to abandon the changes.5. Click RESET to redisplay the page with the latest statu
8ProSafe M5300 SwitchChapter 9 HelpOnline Help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 501Supp
Configuring System Information80ProSafe M5300 Switch Checkpoint StatisticsUse the Checkpoint Statistics page to display information about the protocol
Configuring System Information81 ProSafe M5300 SwitchThe following table describes the fields on the Checkpoint Statistics page: Field DescriptionMess
Configuring System Information82ProSafe M5300 Switch PoE (M5300-28G-POE+ and M5300-52G-POE+ Only)Copper Ethernet ports 1–24 on the M5300-28G-POE+ and
Configuring System Information83 ProSafe M5300 SwitchBasic PoE ConfigurationUse the PoE Configuration page to view global PoE power information and to
Configuring System Information84ProSafe M5300 Switch The PoE Configuration page also provides the following information:Field DescriptionFirmware Vers
Configuring System Information85 ProSafe M5300 SwitchTo configure PoE Port settings:1. Select the check box next to the port to configure. Select mul
Configuring System Information86ProSafe M5300 Switch • Class. View the class of the PD connected to the port. The class defines the range of power a P
Configuring System Information87 ProSafe M5300 SwitchSNMPFrom SNMP link under the System tab, you can configure SNMP settings for SNMP V1/V2 and SNMPv
Configuring System Information88ProSafe M5300 Switch To configure SNMPv1/v2 communities:1. Use Community Name to reconfigure an existing community, or
Configuring System Information89 ProSafe M5300 SwitchTrap ConfigurationThis page displays an entry for every active Trap Receiver. To access this page
911. Getting StartedThis chapter provides an overview of starting your NETGEAR ProSafe M5300 Switch and accessing the user interface. This chapter c
Configuring System Information90ProSafe M5300 Switch Trap FlagsUse the Trap Flags page to enable or disable traps. When the condition identified by an
Configuring System Information91 ProSafe M5300 Switch5. Use ACL to enable or disable activation of ACL traps by selecting the corresponding radio butt
Configuring System Information92ProSafe M5300 Switch SNMP V3 User ConfigurationTo access this page, click System SNMP SNMP V3 User Configuration
Configuring System Information93 ProSafe M5300 SwitchLLDPThe IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on a
Configuring System Information94ProSafe M5300 Switch LLDP Global ConfigurationUse the LLDP Global Configuration page to specify LLDP parameters that a
Configuring System Information95 ProSafe M5300 SwitchLLDP Interface ConfigurationTo display this page, click System LLDP Interface Configuration.
Configuring System Information96ProSafe M5300 Switch LLDP StatisticsTo display this page, click System LLDP Statistics. A screen similar to the fo
Configuring System Information97 ProSafe M5300 SwitchLLDP Local Device InformationTo display this page, click System LLDP Local Device Information
Configuring System Information98ProSafe M5300 Switch To view LLDP information transmitted by an interface, select the desired interface from the Inter
Configuring System Information99 ProSafe M5300 SwitchLLDP Remote Device InformationThis page displays information on remote devices connected to the p
Comments to this Manuals