NETGEAR 7000 Series Instruction Manual

202-10238-02
May 2008
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
NETGEAR 7000 Series
Managed Switch
Administration Guide
Version 7.2

ii
v1.0, May 2008
© 2008 by NETGEAR, Inc. All rights reserved.
Trademarks
NETGEAR and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc..
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this
document are copyright Intoto, Inc.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Netgear's 7000 Series Managed Switch is compliant with the following EU Council Directives: 89/336/EEC and LVD
73/23/EEC. Compliance is verified by testing to the following standards: EN55022 Class A, EN55024 and EN60950-1.
Certificate of the Manufacturer/Importer
It is hereby certified that the 7000 Series Managed Switch has been suppressed in accordance with the conditions set out
in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters)
in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the
operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das7000 Series Managed Switch gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/
1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann
jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class A category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.
FCC Information to User
Declaration Of Conformity
We NETGEAR, Inc., 4500 Great America Parkway, Santa Clara, CA 95054, declare under our sole responsibility that
the model 7000 Series Managed Switch complies with Part 15 of FCC Rules. Operation is subject to the following two
conditions:

v1.0, May 2008
iii
• This device may not cause harmful interference, and
• This device must accept any interference received, including interference that may cause undesired operation.
FCC Requirements for Operation in the United States
Radio Frequency Interference Warnings & Instructions
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of
the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential
installation. This equipment uses and can radiate radio frequency energy and, if not installed and used in accordance
with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to
correct the interference by one or more of the following methods:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and the receiver
• Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected
• Consult the dealer or an experienced radio/TV technician for help.
Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate
the equipment.
Canadian Department of Communications Radio Interference Regulations
This digital apparatus (7000 Series Managed Switch) does not exceed the Class A limits for radio-noise emissions from
digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
FOR HOME OR OFFICE USE
Tested to Comply
with FCC Standards
7000 Series Managed Switch

v1.0, May 2008
iv
Product and Publication Details
Model Number: 7xxx
Publication Date: May 2008
Product Family: Managed Switch
Product Name: 7000 Series Managed Switch
Home or Business Product: Business
Language: English
Publication Part Number: 202-10238-02
Publication Version Number: 1.0

v
v1.0, May 2008
Contents
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.2
About This Manual
Conventions, Formats and Scope ................................................................................... xv
How to Use This Manual .................................................................................................xvi
How to Print this Manual ..................................................................................................xvi
Revision History ..............................................................................................................xvii
Chapter 1
Introduction
Document Organization ..................................................................................................1-1
Audience .........................................................................................................................1-2
CLI Documentation .........................................................................................................1-3
Related Documentation ..................................................................................................1-3
Chapter 2
Getting Started
In-band and Out-of-band Connectivity ............................................................................2-5
Configuring for In-band Connectivity ........................................................................2-5
Using BootP or DHCP .......................................................................................2-5
Using the EIA-232 Port ......................................................................................2-6
Configuring for Out-Of-Band Connectivity ................................................................2-7
Starting the Switch ..........................................................................................................2-8
Initial Configuration .........................................................................................................2-8
Initial Configuration Procedure .................................................................................2-9
Software Installation .....................................................................................................2-10
Quick Starting the Networking Device ....................................................................2-10
System Information and System Setup ..................................................................2-10
Chapter 3
Using Ezconfig for Switch Setup
Changing the Password .................................................................................................3-2

vi
v1.0, May 2008
Setting Up the Switch IP Address ...................................................................................3-2
Assigning Switch Name and Location Information .........................................................3-3
Saving the Configuration ................................................................................................3-3
Chapter 4
Using the Web Interface
Configuring for Web Access ...........................................................................................4-1
Starting the Web Interface ..............................................................................................4-2
Web Interface Layout ...............................................................................................4-2
Configuring an SNMP V3 User Profile .....................................................................4-6
Chapter 5
Virtual LANs
VLAN Configuration Example .........................................................................................5-2
CLI Examples .................................................................................................................5-2
Example #1: Create Two VLANs ..............................................................................5-2
Example #2: Assign Ports to VLAN2 ........................................................................5-3
Example #3: Assign Ports to VLAN3 ........................................................................5-3
Example #4: Assign VLAN3 as the Default VLAN ...................................................5-3
Graphical User Interface .................................................................................................5-4
Chapter 6 Link Aggregation
CLI Example ...................................................................................................................6-1
Example #1: Create two LAGS ................................................................................6-2
Example #2: Add the ports to the LAGs ...................................................................6-3
Example #3: Enable both LAGs ...............................................................................6-3
Chapter 7
IP Routing Services
Port Routing ....................................................................................................................7-1
Port Routing Configuration .......................................................................................7-2
CLI Examples ...........................................................................................................7-3
Example #1: Enabling routing for the Switch .....................................................7-3
Example #2: Enabling Routing for Ports on the Switch .....................................7-4
VLAN Routing .................................................................................................................7-4
VLAN Routing Configuration ....................................................................................7-5
CLI Examples ...........................................................................................................7-5
Example #1: Create Two VLANs .......................................................................7-6
Example #2: Set Up VLAN Routing for the VLANs and the Switch. ..................7-6

vii
v1.0, May 2008
VLAN Routing RIP Configuration .............................................................................7-7
CLI Example ......................................................................................................7-8
VLAN Routing OSPF Configuration .......................................................................7-10
CLI Example ....................................................................................................7-10
Routing Information Protocol ........................................................................................7-12
RIP Configuration ...................................................................................................7-12
CLI Examples .........................................................................................................7-13
Example #1: Enable Routing for the Switch ....................................................7-13
Example #2: Enable Routing for Ports .............................................................7-14
Example #3: Enable RIP for the Switch ...........................................................7-14
Example #4: Enable RIP for ports 1/0/2 and 1/0/3 ..........................................7-15
OSPF ............................................................................................................................7-15
CLI Examples .........................................................................................................7-16
Example #1: Configuring an Inter-Area Router ...............................................7-17
Example #2: Configuring OSPF on a Border Router .......................................7-19
Proxy Address Resolution Protocol (ARP) ...................................................................7-21
Overview ................................................................................................................7-21
CLI Examples .........................................................................................................7-22
Example #1: show ip interface .........................................................................7-22
Example #2: ip proxy-arp .................................................................................7-22
Chapter 8
Virtual Router Redundancy Protocol
CLI Examples .................................................................................................................8-2
Example #1: Configure VRRP on a Master Router ..................................................8-3
Example #2: Configure VRRP on a Backup Router .................................................8-4
Chapter 9
Access Control Lists (ACLs)
Overview .........................................................................................................................9-1
Limitations ................................................................................................................9-1
MAC ACLs ......................................................................................................................9-1
Configuring IP ACLs .......................................................................................................9-2
Process ...........................................................................................................................9-3
IP ACL Examples ...........................................................................................................9-3
Example #1: Set up an IP ACL with Two Rules .......................................................9-3

viii
v1.0, May 2008
Example #2: Configure a One-Way Access Using a TCP Flag in an ACL ...............9-4
CLI Commands ..................................................................................................9-5
Web Interface Procedure ...................................................................................9-8
Example #3: Configure Isolated VLANs on a Layer 3 switch by Using ACLs ........9-23
CLI Commands ................................................................................................9-24
Web Interface Procedure .................................................................................9-26
MAC ACL CLI Examples ..............................................................................................9-38
Example #1: mac access list ..................................................................................9-38
Example #2: permit any .........................................................................................9-39
Example #3 Configure mac access-group .............................................................9-40
Example #4 permit .................................................................................................9-41
Example #5: show mac access-lists ......................................................................9-42
Chapter 10
Class of Service (CoS) Queuing
Overview .......................................................................................................................10-1
CoS Queue Mapping ....................................................................................................10-1
Trusted Ports ..........................................................................................................10-1
Untrusted Ports ......................................................................................................10-2
CoS Queue Configuration ............................................................................................10-2
Port Egress Queue Configuration ..........................................................................10-2
Drop Precedence Configuration (per Queue) ........................................................10-3
Per-Interface Basis .................................................................................................10-3
CLI Examples ...............................................................................................................10-3
Example #1: show classofservice trust ..................................................................10-4
Example #2: set classofservice trust mode ............................................................10-4
Example #3: show classofservice ip-precedence mapping ....................................10-5
Example #4: Config Cos-queue Min-bandwidth and Strict Priority Scheduler Mode 10-5
Example #5: Set CoS Trust Mode of an Interface ..................................................10-6
Traffic Shaping ..............................................................................................................10-6
CLI Example ...........................................................................................................10-6
Example #1 traffic-shape .................................................................................10-7
Chapter 11
Differentiated Services
CLI Example .................................................................................................................11-2
DiffServ for VoIP Configuration Example ......................................................................11-4

ix
v1.0, May 2008
Chapter 12
IGMP Snooping
Overview .......................................................................................................................12-1
CLI Examples ...............................................................................................................12-1
Example #1: Enable IGMP Snooping .....................................................................12-1
Example #2: show igmpsnooping ..........................................................................12-2
Example #3: show mac-address-table igmpsnooping ............................................12-2
Chapter 13
Port Security
Overview .......................................................................................................................13-1
Operation ......................................................................................................................13-2
CLI Examples ...............................................................................................................13-3
Example #1: show port security .............................................................................13-3
Example #2: show port security on a specific interface .........................................13-3
Example #3: (Config) port security .........................................................................13-3
Chapter 14
Traceroute
CLI Example .................................................................................................................14-2
Chapter 15
Configuration Scripting
Overview .......................................................................................................................15-1
Considerations ..............................................................................................................15-1
CLI Examples ...............................................................................................................15-1
Example #1: script .................................................................................................15-2
Example #2: script list and script delete .................................................................15-2
Example #3: script apply running-config.scr ..........................................................15-2
Example #4: Creating a Configuration Script .........................................................15-3
Example #5: Upload a Configuration Script ...........................................................15-3
Chapter 16
Outbound Telnet
Overview .......................................................................................................................16-1
CLI Examples ...............................................................................................................16-1
Example #1: show network ....................................................................................16-2
Example #2: show telnet ........................................................................................16-2
Example #3: transport output telnet .......................................................................16-3

x
v1.0, May 2008
Example #4: session-limit and session-timeout .....................................................16-3
Chapter 17 Port Mirroring
Overview .......................................................................................................................17-1
CLI Examples ...............................................................................................................17-1
Example #1: show monitor session .......................................................................17-2
Example #2: show port all ......................................................................................17-2
Example #3: show port interface ............................................................................17-2
Example #4: (Config) monitor session 1 mode ......................................................17-3
Example #5: (Config) monitor session 1 source interface ......................................17-4
Example #6: (Interface) port security .....................................................................17-4
Chapter 18
Simple Network Time Protocol (SNTP)
Overview .......................................................................................................................18-1
CLI Examples ...............................................................................................................18-1
Example #1: show sntp ..........................................................................................18-1
Example #2: show sntp client .................................................................................18-2
Example #3: show sntp server ...............................................................................18-2
Example #4: Configure SNTP ................................................................................18-2
Example #5: Setting Time Zone .............................................................................18-4
Example #6: Setting Named SNTP Server ............................................................18-4
Chapter 19
Syslog
Overview .......................................................................................................................19-1
Persistent Log Files ................................................................................................19-1
Interpreting Log Files .............................................................................................19-2
CLI Examples ...............................................................................................................19-2
Example #1: show logging .....................................................................................19-3
Example #2: show logging buffered .......................................................................19-3
Example #3: show logging traplogs .......................................................................19-4
Example #4: show logging hosts ............................................................................19-4
Example #5: logging port configuration ..................................................................19-5
Chapter 20
Managing Switch Stacks
Understanding Switch Stacks .......................................................................................20-2
Switch Stack Membership ......................................................................................20-3