NETGEAR 7000 Series Instruction Manual

202-10238-02
May 2008
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
NETGEAR 7000 Series
Managed Switch
Administration Guide
Version 7.2

ii
v1.0, May 2008
© 2008 by NETGEAR, Inc. All rights reserved.
Trademarks
NETGEAR and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc..
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this
document are copyright Intoto, Inc.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Netgear's 7000 Series Managed Switch is compliant with the following EU Council Directives: 89/336/EEC and LVD
73/23/EEC. Compliance is verified by testing to the following standards: EN55022 Class A, EN55024 and EN60950-1.
Certificate of the Manufacturer/Importer
It is hereby certified that the 7000 Series Managed Switch has been suppressed in accordance with the conditions set out
in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters)
in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the
operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das7000 Series Managed Switch gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/
1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann
jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class A category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.
FCC Information to User
Declaration Of Conformity
We NETGEAR, Inc., 4500 Great America Parkway, Santa Clara, CA 95054, declare under our sole responsibility that
the model 7000 Series Managed Switch complies with Part 15 of FCC Rules. Operation is subject to the following two
conditions:

v1.0, May 2008
iii
• This device may not cause harmful interference, and
• This device must accept any interference received, including interference that may cause undesired operation.
FCC Requirements for Operation in the United States
Radio Frequency Interference Warnings & Instructions
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of
the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential
installation. This equipment uses and can radiate radio frequency energy and, if not installed and used in accordance
with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to
correct the interference by one or more of the following methods:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and the receiver
• Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected
• Consult the dealer or an experienced radio/TV technician for help.
Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate
the equipment.
Canadian Department of Communications Radio Interference Regulations
This digital apparatus (7000 Series Managed Switch) does not exceed the Class A limits for radio-noise emissions from
digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
FOR HOME OR OFFICE USE
Tested to Comply
with FCC Standards
7000 Series Managed Switch

v1.0, May 2008
iv
Product and Publication Details
Model Number: 7xxx
Publication Date: May 2008
Product Family: Managed Switch
Product Name: 7000 Series Managed Switch
Home or Business Product: Business
Language: English
Publication Part Number: 202-10238-02
Publication Version Number: 1.0

v
v1.0, May 2008
Contents
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.2
About This Manual
Conventions, Formats and Scope ................................................................................... xv
How to Use This Manual .................................................................................................xvi
How to Print this Manual ..................................................................................................xvi
Revision History ..............................................................................................................xvii
Chapter 1
Introduction
Document Organization ..................................................................................................1-1
Audience .........................................................................................................................1-2
CLI Documentation .........................................................................................................1-3
Related Documentation ..................................................................................................1-3
Chapter 2
Getting Started
In-band and Out-of-band Connectivity ............................................................................2-5
Configuring for In-band Connectivity ........................................................................2-5
Using BootP or DHCP .......................................................................................2-5
Using the EIA-232 Port ......................................................................................2-6
Configuring for Out-Of-Band Connectivity ................................................................2-7
Starting the Switch ..........................................................................................................2-8
Initial Configuration .........................................................................................................2-8
Initial Configuration Procedure .................................................................................2-9
Software Installation .....................................................................................................2-10
Quick Starting the Networking Device ....................................................................2-10
System Information and System Setup ..................................................................2-10
Chapter 3
Using Ezconfig for Switch Setup
Changing the Password .................................................................................................3-2

vi
v1.0, May 2008
Setting Up the Switch IP Address ...................................................................................3-2
Assigning Switch Name and Location Information .........................................................3-3
Saving the Configuration ................................................................................................3-3
Chapter 4
Using the Web Interface
Configuring for Web Access ...........................................................................................4-1
Starting the Web Interface ..............................................................................................4-2
Web Interface Layout ...............................................................................................4-2
Configuring an SNMP V3 User Profile .....................................................................4-6
Chapter 5
Virtual LANs
VLAN Configuration Example .........................................................................................5-2
CLI Examples .................................................................................................................5-2
Example #1: Create Two VLANs ..............................................................................5-2
Example #2: Assign Ports to VLAN2 ........................................................................5-3
Example #3: Assign Ports to VLAN3 ........................................................................5-3
Example #4: Assign VLAN3 as the Default VLAN ...................................................5-3
Graphical User Interface .................................................................................................5-4
Chapter 6 Link Aggregation
CLI Example ...................................................................................................................6-1
Example #1: Create two LAGS ................................................................................6-2
Example #2: Add the ports to the LAGs ...................................................................6-3
Example #3: Enable both LAGs ...............................................................................6-3
Chapter 7
IP Routing Services
Port Routing ....................................................................................................................7-1
Port Routing Configuration .......................................................................................7-2
CLI Examples ...........................................................................................................7-3
Example #1: Enabling routing for the Switch .....................................................7-3
Example #2: Enabling Routing for Ports on the Switch .....................................7-4
VLAN Routing .................................................................................................................7-4
VLAN Routing Configuration ....................................................................................7-5
CLI Examples ...........................................................................................................7-5
Example #1: Create Two VLANs .......................................................................7-6
Example #2: Set Up VLAN Routing for the VLANs and the Switch. ..................7-6

vii
v1.0, May 2008
VLAN Routing RIP Configuration .............................................................................7-7
CLI Example ......................................................................................................7-8
VLAN Routing OSPF Configuration .......................................................................7-10
CLI Example ....................................................................................................7-10
Routing Information Protocol ........................................................................................7-12
RIP Configuration ...................................................................................................7-12
CLI Examples .........................................................................................................7-13
Example #1: Enable Routing for the Switch ....................................................7-13
Example #2: Enable Routing for Ports .............................................................7-14
Example #3: Enable RIP for the Switch ...........................................................7-14
Example #4: Enable RIP for ports 1/0/2 and 1/0/3 ..........................................7-15
OSPF ............................................................................................................................7-15
CLI Examples .........................................................................................................7-16
Example #1: Configuring an Inter-Area Router ...............................................7-17
Example #2: Configuring OSPF on a Border Router .......................................7-19
Proxy Address Resolution Protocol (ARP) ...................................................................7-21
Overview ................................................................................................................7-21
CLI Examples .........................................................................................................7-22
Example #1: show ip interface .........................................................................7-22
Example #2: ip proxy-arp .................................................................................7-22
Chapter 8
Virtual Router Redundancy Protocol
CLI Examples .................................................................................................................8-2
Example #1: Configure VRRP on a Master Router ..................................................8-3
Example #2: Configure VRRP on a Backup Router .................................................8-4
Chapter 9
Access Control Lists (ACLs)
Overview .........................................................................................................................9-1
Limitations ................................................................................................................9-1
MAC ACLs ......................................................................................................................9-1
Configuring IP ACLs .......................................................................................................9-2
Process ...........................................................................................................................9-3
IP ACL Examples ...........................................................................................................9-3
Example #1: Set up an IP ACL with Two Rules .......................................................9-3

viii
v1.0, May 2008
Example #2: Configure a One-Way Access Using a TCP Flag in an ACL ...............9-4
CLI Commands ..................................................................................................9-5
Web Interface Procedure ...................................................................................9-8
Example #3: Configure Isolated VLANs on a Layer 3 switch by Using ACLs ........9-23
CLI Commands ................................................................................................9-24
Web Interface Procedure .................................................................................9-26
MAC ACL CLI Examples ..............................................................................................9-38
Example #1: mac access list ..................................................................................9-38
Example #2: permit any .........................................................................................9-39
Example #3 Configure mac access-group .............................................................9-40
Example #4 permit .................................................................................................9-41
Example #5: show mac access-lists ......................................................................9-42
Chapter 10
Class of Service (CoS) Queuing
Overview .......................................................................................................................10-1
CoS Queue Mapping ....................................................................................................10-1
Trusted Ports ..........................................................................................................10-1
Untrusted Ports ......................................................................................................10-2
CoS Queue Configuration ............................................................................................10-2
Port Egress Queue Configuration ..........................................................................10-2
Drop Precedence Configuration (per Queue) ........................................................10-3
Per-Interface Basis .................................................................................................10-3
CLI Examples ...............................................................................................................10-3
Example #1: show classofservice trust ..................................................................10-4
Example #2: set classofservice trust mode ............................................................10-4
Example #3: show classofservice ip-precedence mapping ....................................10-5
Example #4: Config Cos-queue Min-bandwidth and Strict Priority Scheduler Mode 10-5
Example #5: Set CoS Trust Mode of an Interface ..................................................10-6
Traffic Shaping ..............................................................................................................10-6
CLI Example ...........................................................................................................10-6
Example #1 traffic-shape .................................................................................10-7
Chapter 11
Differentiated Services
CLI Example .................................................................................................................11-2
DiffServ for VoIP Configuration Example ......................................................................11-4

ix
v1.0, May 2008
Chapter 12
IGMP Snooping
Overview .......................................................................................................................12-1
CLI Examples ...............................................................................................................12-1
Example #1: Enable IGMP Snooping .....................................................................12-1
Example #2: show igmpsnooping ..........................................................................12-2
Example #3: show mac-address-table igmpsnooping ............................................12-2
Chapter 13
Port Security
Overview .......................................................................................................................13-1
Operation ......................................................................................................................13-2
CLI Examples ...............................................................................................................13-3
Example #1: show port security .............................................................................13-3
Example #2: show port security on a specific interface .........................................13-3
Example #3: (Config) port security .........................................................................13-3
Chapter 14
Traceroute
CLI Example .................................................................................................................14-2
Chapter 15
Configuration Scripting
Overview .......................................................................................................................15-1
Considerations ..............................................................................................................15-1
CLI Examples ...............................................................................................................15-1
Example #1: script .................................................................................................15-2
Example #2: script list and script delete .................................................................15-2
Example #3: script apply running-config.scr ..........................................................15-2
Example #4: Creating a Configuration Script .........................................................15-3
Example #5: Upload a Configuration Script ...........................................................15-3
Chapter 16
Outbound Telnet
Overview .......................................................................................................................16-1
CLI Examples ...............................................................................................................16-1
Example #1: show network ....................................................................................16-2
Example #2: show telnet ........................................................................................16-2
Example #3: transport output telnet .......................................................................16-3

x
v1.0, May 2008
Example #4: session-limit and session-timeout .....................................................16-3
Chapter 17 Port Mirroring
Overview .......................................................................................................................17-1
CLI Examples ...............................................................................................................17-1
Example #1: show monitor session .......................................................................17-2
Example #2: show port all ......................................................................................17-2
Example #3: show port interface ............................................................................17-2
Example #4: (Config) monitor session 1 mode ......................................................17-3
Example #5: (Config) monitor session 1 source interface ......................................17-4
Example #6: (Interface) port security .....................................................................17-4
Chapter 18
Simple Network Time Protocol (SNTP)
Overview .......................................................................................................................18-1
CLI Examples ...............................................................................................................18-1
Example #1: show sntp ..........................................................................................18-1
Example #2: show sntp client .................................................................................18-2
Example #3: show sntp server ...............................................................................18-2
Example #4: Configure SNTP ................................................................................18-2
Example #5: Setting Time Zone .............................................................................18-4
Example #6: Setting Named SNTP Server ............................................................18-4
Chapter 19
Syslog
Overview .......................................................................................................................19-1
Persistent Log Files ................................................................................................19-1
Interpreting Log Files .............................................................................................19-2
CLI Examples ...............................................................................................................19-2
Example #1: show logging .....................................................................................19-3
Example #2: show logging buffered .......................................................................19-3
Example #3: show logging traplogs .......................................................................19-4
Example #4: show logging hosts ............................................................................19-4
Example #5: logging port configuration ..................................................................19-5
Chapter 20
Managing Switch Stacks
Understanding Switch Stacks .......................................................................................20-2
Switch Stack Membership ......................................................................................20-3

xi
v1.0, May 2008
Switch Stack Cabling (FSM73xxS) .........................................................................20-4
Stack Master Election and Re-Election ..................................................................20-5
Stack Member Numbers .........................................................................................20-5
Stack Member Priority Values ................................................................................20-6
Switch Stack Offline Configuration .........................................................................20-6
Effects of Adding a Preconfigured Switch to a Switched Stack .......................20-6
Effects of Replacing a Preconfigured Switch in a Switch Stack .............................20-7
Effects of Removing a Preconfigured Switch from a Switch Stack ........................20-7
Switch Stack Software Compatibility Recommendations ..............................................20-8
Incompatible Software and Stack Member Image Upgrades ........................................20-8
Switch Stack Configuration Files ..................................................................................20-8
Switch Stack Management Connectivity .......................................................................20-9
Connectivity to the Switch Stack Through Console Ports ......................................20-9
Connectivity to the Switch Stack Through Telnet ...................................................20-9
Switch Stack Configuration Scenarios ..........................................................................20-9
Stacking Recommendations .......................................................................................20-11
General Practices .................................................................................................20-11
Initial installation and Power-up of a Stack ...........................................................20-12
Removing a Unit from the Stack ...........................................................................20-12
Adding a Unit to an Operating Stack ....................................................................20-13
Replacing a Stack Member with a New Unit ........................................................20-13
Renumbering Stack Members ..............................................................................20-14
Moving a Master to a Different Unit in the Stack ..................................................20-14
Removing a Master Unit from an Operating Stack ...............................................20-14
Merging Two Operational Stacks .........................................................................20-15
Preconfiguration ...................................................................................................20-15
Upgrading Firmware .............................................................................................20-15
Migration of Configuration With a Firmware Upgrade ..........................................20-16
Code Mismatch ....................................................................................................20-17
Chapter 21
Pre-Login Banner
Overview .......................................................................................................................21-1
CLI Example .................................................................................................................21-1
Example 1#: Create a Pre-Login Banner ...............................................................21-1

xii
v1.0, May 2008
Chapter 22
IGMP Querier
CLI Examples ...............................................................................................................22-2
Example #1: Enable IGMP Querier ........................................................................22-2
Example #2: Show IGMP Querier Status ...............................................................22-2
Chapter 23
DNS
Overview .......................................................................................................................23-1
Examples ......................................................................................................................23-1
Example 1#: Specify Two DNS Servers .................................................................23-1
CLI Commands ................................................................................................23-2
Web Interface Procedure .................................................................................23-2
Example 2#: Manually Add a Host Name and an IP Address ................................23-3
CLI Commands ................................................................................................23-3
Web Interface Procedure .................................................................................23-3
Chapter 24
DHCP Server
Overview .......................................................................................................................24-1
Examples ......................................................................................................................24-1
Example 1#: Configure DHCP Server in Dynamic Mode .......................................24-1
CLI Commands ................................................................................................24-1
Web Interface Procedure .................................................................................24-2
Example #2: Configure a DHCP Server in Manual Mode ......................................24-4
CLI Commands ................................................................................................24-4
Web Interface Procedure .................................................................................24-5
Chapter 25
Protected Ports
Overview .......................................................................................................................25-1
Example ........................................................................................................................25-1
Example #1: Configure a Protected Port to Isolate Ports on the Switch ................25-1
CLI Commands ................................................................................................25-2
Web Interface Procedure .................................................................................25-3
Chapter 26
802.1x Port Security
Overview .......................................................................................................................26-1

xiii
v1.0, May 2008
Example ........................................................................................................................26-1
Example 1#: Enable 802.1x Authentication on One Port in a VLAN ......................26-1
CLI Commands ................................................................................................26-2
Web Interface Procedure .................................................................................26-3
Chapter 27
Double VLANs
Overview .......................................................................................................................27-1
Example ........................................................................................................................27-1
Example 1#: Enable a Double VLAN on a VLAN ...................................................27-1
CLI Commands ................................................................................................27-2
Web Interface Procedure .................................................................................27-3
Index

xiv
v1.0, May 2008

xv
v1.0, May 2008
About This Manual
The NETGEAR 7000 Series Managed Switch Administration Guide Version 7.2 describes how to
install, configure and troubleshoot the 7000 Series Managed Switch. The information in this
manual is intended for readers with intermediate computer and Internet skills.
Conventions, Formats and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:
•Typographical Conventions. This manual uses the following typographical conventions:
•Formats. This manual uses the following formats to highlight special messages:
Italics Emphasis, books, CDs, URL names
Bold User input
Fixed Screen text, file and server names, extensions, commands, IP addresses
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.
Danger: This is a safety warning. Failure to take heed of this notice may result in
personal injury or death.

NETGEAR 7000 Series Managed Switch Administration Guide Version 7.2
xvi
v1.0, May 2008
•Scope. This manual is written for the 7000 Series Managed Switch according to these
specifications:
.
How to Use This Manual
The HTML version of this manual, if provided, includes the following:
• Buttons, and , for browsing forwards or backwards through the manual one page
at a time
•A button that displays the table of contents and an button. Double-click on a
link in the table of contents or index to navigate directly to where the topic is described in the
manual.
•A button to access the full NETGEAR, Inc. online knowledge base for the product
model.
• Links to PDF versions of the full manual and individual chapters.
How to Print this Manual
To print this manual, you can choose one of the following options, according to your needs.
•Printing a Page from HTML. Each page in the HTML version of the manual is dedicated to
a major topic. Select File > Print from the browser menu to print the page contents.
•Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in
order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at
http://www.adobe.com.
– Printing a PDF Chapter. Use the PDF of This Chapter link at the top left of any page.
Product Version 7000 Series Managed Switch
Manual Publication Date May 2008
Note: Product updates are available on the NETGEAR, Inc. website at
http://kbserver.netgear.com/products/7xxx.asp.

NETGEAR 7000 Series Managed Switch Administration Guide Version 7.2
xvii
v1.0, May 2008
• Click the PDF of This Chapter link at the top left of any page in the chapter you want
to print. The PDF version of the chapter you were viewing opens in a browser
window.
• Click the print icon in the upper left of your browser window.
–Printing a PDF version of the Complete Manual. Use the Complete PDF Manual link
at the top left of any page.
• Click the Complete PDF Manual link at the top left of any page in the manual. The
PDF version of the complete manual opens in a browser window.
• Click the print icon in the upper left of your browser window.
Revision History
Tip: If your printer supports printing two pages on a single sheet of paper, you can
save paper and printer ink by selecting this feature.
Part Number Version
Number Description
202-10238-01 1.0 Product update: New firmware and new user Interface
202-10238-02 1.0 The following changes were made:
• The Web Interface Layout section in Chapter 4, Using the Web Interface, was
changed to introduce the Prosafe Control Center.
• New CLI and Web interface examples were added to the IP ACL Examples
section in Chapter 9, Access Control Lists (ACLs).
• Chapter 23, DNS, was added.
• Chapter 24, DHCP Server, was added.
• Chapter 25, Protected Ports, was added.
• Chapter 26, 802.1x Port Security, was added.
• Chapter 27, Double VLANs, was added.

NETGEAR 7000 Series Managed Switch Administration Guide Version 7.2
xviii
v1.0, May 2008

1-1
v1.0, May 2008
Chapter 1
Introduction
This document provides an understanding of the CLI and Web configuration options for software
Release 7.2 features.
Document Organization
This document provides examples of the use of the switch software in a typical network. It
describes the use and advantages of specific functions provided by the 7000 Series Managed
Switch, and includes information on configuring those functions using the Command Line
Interface and Web Interface.
The switch software can operate as a Layer 2 switch, a Layer 3 router, or a combination switch/
router. The switch also includes support for network management and Quality of Service functions
such as Access Control Lists and Differentiated Services. Which functions you choose to activate
will depend on the size and complexity of your network: this document describes configuration for
some of the most-used functions.
This document contains configuration information about the following:
• Layer 2
– VLANs
• Layer 3
– Port routing
– VLAN Routing
– Virtual Router Redundancy Protocol (VRRP)
–RIP
– OSPF
–ProxyARP
• Quality of Service (QoS)
– Access Control Lists (ACLs)

NETGEAR 7000 Series Managed Switch Administration Guide Version 7.2
1-2 Introduction
v1.0, May 2008
– Class of Service (CoS)
– Differentiated Services
• Multicast
– IGMP Snooping
• Security
– Denial of Service
– Port Security
• Operating System
– Dual Configuration
•Tools
–AlarmManager
– Traceroute
– Configuration Scripting
– Advance Keying
– Prelogin Banner
– Port Mirroring
–SNTP
–Syslog
– Data Migration
Audience
Use this guide if you are a(n):
• Experienced system administrator who is responsible for configuring and operating a network
using switch software
• Level 1 and Level 2 Support provider
To obtain the greatest benefit from this guide, you should have an understanding of the switch
software base and should have read the specification for your networking device platform. You
should also have a basic knowledge of Ethernet and networking concepts.