NETGEAR FSM7328S - ProSafe Switch Instruction Manual

Beta Draft2
March 2006
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
NETGEAR 7000 Series
Managed Switch
Administration Guide

ii
v1.0, March 2006
© 2006 by NETGEAR, Inc. All rights reserved. FullManual.
Trademarks
NETGEAR and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc..
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this
document are copyright Intoto, Inc.
March 2006
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
EN 55 022 Declaration of Conformance
This is to certify that the 7000 Series Managed Switch is shielded against the generation of radio interference in
accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application
of EN 55 022 Class B (CISPR 22).
Certificate of the Manufacturer/Importer
It is hereby certified that the 7000 Series Managed Switch has been suppressed in accordance with the conditions set out
in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters)
in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the
operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das7000 Series Managed Switch gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/
1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann
jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.

Note: Delete this note and the information below for products that are not wireless.
v1.0, March 2006
iii
FCC Information to User
This product does not contain any user serviceable components and is to be used with approved antennas only. Any
product changes or modifications will invalidate all applicable regulatory certifications and approvals
FCC Guidelines for Human Exposure
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment
should be installed and operated with minimum distance of 20 cm between the radiator and your body.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter."
Declaration Of Conformity
We NETGEAR, Inc., 4500 Great America Parkway, Santa Clara, CA 95054, declare under our sole responsibility that
the model 7xxx Cardbus Card Wireless Adapter complies with Part 15 of FCC Rules. Operation is subject to the
following two conditions:
• This device may not cause harmful interference, and
• This device must accept any interference received, including interference that may cause undesired operation.
Regulatory Compliance Information
This section includes user requirements for operating this product in accordance with National laws for usage of radio
spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result
in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
NOTE: This product's firmware limits operation to only the channels allowed in a particular Region or Country.
Therefore, all options described in this user's guide may not be available in your version of the product.
FCC Requirements for Operation in the United States
Radio Frequency Interference Warnings & Instructions
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of
the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential
installation. This equipment uses and can radiate radio frequency energy and, if not installed and used in accordance
with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to
correct the interference by one or more of the following methods:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and the receiver
• Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected

v1.0, March 2006
iv
• Consult the dealer or an experienced radio/TV technician for help.
FOR HOME OR OFFICE USE
Tested to Comply
with FCC Standards
7000 Series Managed Switch
PY3WG111
Modifications made to the product, unless expressly approved byNETGEAR, Inc., could void the user's right to operate
the equipment.
Canadian Department of Communications Radio Interference Regulations
This digital apparatus (7000 Series Managed Switch) does not exceed the Class B limits for radio-noise emissions from
digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
Canada ID: 4054A-WG111
Product and Publication Details
Model Number: 7xxx
Publication Date: March 2006
Product Family: Managed Switch
Product Name: 7000 Series Managed Switch
Home or Business Product: Business
Language: English
Publication Part Number: Beta Draft2
Publication Version Number: 1.0

v
v1.0, March 2006
Contents
NETGEAR 7000 Series Managed Switch Administration Guide
About This Book ....................................................................................................................xi
Chapter 1
Getting Started
In-band and Out-of-band Connectivity ............................................................................1-1
Configuring for In-band Connectivity ........................................................................1-1
Using BootP or DHCP .......................................................................................1-1
Using the EIA-232 Port ......................................................................................1-2
Configuring for Out-Of-Band Connectivity ................................................................1-3
Starting the Switch ..........................................................................................................1-4
Initial Configuration .........................................................................................................1-4
Initial Configuration Procedure .................................................................................1-5
Software Installation .......................................................................................................1-6
Quick Starting the Networking Device ......................................................................1-6
System Information and System Setup ....................................................................1-6
Chapter 2
Using the Web Interface
Configuring for Web Access ...........................................................................................2-1
Starting the Web Interface ..............................................................................................2-2
Web Page Layout .....................................................................................................2-2
Configuring an SNMP V3 User Profile .....................................................................2-2
Command Buttons ...................................................................................................2-3
Chapter 3
Virtual LANs
VLAN Configuration Example .........................................................................................3-2
CLI Examples .................................................................................................................3-2
Example #1: Create Two VLANs ..............................................................................3-2
Example #2: Assign Ports to VLAN2 ........................................................................3-3

vi
v1.0, March 2006
Example #3: Assign Ports to VLAN3 ........................................................................3-3
Example #4: Assign VLAN3 as the Default VLAN ...................................................3-4
Graphical User Interface .................................................................................................3-4
Private Edge VLANs .......................................................................................................3-4
CLI Example .............................................................................................................3-5
Chapter 4 Link Aggregation
CLI Example ...................................................................................................................4-1
Example 1: Create two LAGS: .................................................................................4-3
Example 2: Add the ports to the LAGs: ....................................................................4-4
Example 3: Enable both LAGs. ................................................................................4-4
Chapter 5
IP Routing Services
Port Routing ....................................................................................................................5-1
Port Routing Configuration .......................................................................................5-2
CLI Examples ...........................................................................................................5-3
Example 1. Enabling routing for the Switch .......................................................5-3
Example 2. Enabling Routing for Ports on the Switch .......................................5-4
VLAN Routing .................................................................................................................5-4
VLAN Routing Configuration ....................................................................................5-5
CLI Examples ...........................................................................................................5-5
Example 1: Create Two VLANs .........................................................................5-6
Example 2: Set Up VLAN Routing for the VLANs and the Switch. ....................5-7
VLAN Routing RIP Configuration .............................................................................5-7
CLI Example ......................................................................................................5-9
VLAN Routing OSPF Configuration .......................................................................5-11
CLI Example ....................................................................................................5-12
Routing Information Protocol ........................................................................................5-14
RIP Configuration ...................................................................................................5-15
CLI Example ...........................................................................................................5-16
Example #1: Enable Routing for the Switch: ...................................................5-16
Example #2: Enable Routing for Ports .............................................................5-17
Example #3. Enable RIP for the Switch ...........................................................5-17
Example #4. Enable RIP for ports 1/2/2 and 1/2/3 ..........................................5-18
OSPF ............................................................................................................................5-18
CLI Examples .........................................................................................................5-19

vii
v1.0, March 2006
Example #1 Configuring an Inter-Area Router ................................................5-20
Example #2 - Configuring OSPF on a Border Router ......................................5-22
Proxy Address Resolution Protocol (ARP) ...................................................................5-24
Overview ................................................................................................................5-24
CLI Examples .........................................................................................................5-25
Example #1: show ip interface .........................................................................5-25
Example #2: ip proxy-arp .................................................................................5-25
Chapter 6
Virtual Router Redundancy Protocol
CLI Examples .................................................................................................................6-2
Chapter 7
Access Control Lists (ACLs)
Overview .........................................................................................................................7-1
Limitations ................................................................................................................7-1
MAC ACLs ......................................................................................................................7-1
Configuring IP ACLs .......................................................................................................7-2
Process ...........................................................................................................................7-3
IP ACL CLI Example .......................................................................................................7-3
MAC ACL CLI Examples ................................................................................................7-4
Example #1: mac access list ...................................................................................7-5
Example #2: permit any ..........................................................................................7-6
Example #3 Configure mac access-group ...............................................................7-7
Example #4 permit ...................................................................................................7-8
Example #5: show mac access-lists ........................................................................7-9
Chapter 8
Class of Service (CoS) Queuing
Overview .........................................................................................................................8-1
CoS Queue Mapping ......................................................................................................8-1
Trusted Ports ............................................................................................................8-1
Untrusted Ports ........................................................................................................8-2
CoS Queue Configuration ..............................................................................................8-2
Port Egress Queue Configuration ............................................................................8-2
Drop Precedence Configuration (per Queue) ..........................................................8-3
Per Interface Basis ...................................................................................................8-3

viii
v1.0, March 2006
CLI Examples .................................................................................................................8-3
Example #1: show classofservice trust ....................................................................8-4
Example #2: set classofservice trust mode ..............................................................8-4
Example #3: show classofservice ip-precedence mapping ......................................8-5
Example #4: Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode 8-5
Example #5: Set CoS Trust Mode of an Interface ....................................................8-6
Traffic Shaping ................................................................................................................8-6
CLI Example .............................................................................................................8-6
Example #1 traffic-shape ...................................................................................8-7
Chapter 9
Differentiated Services
CLI Example ...................................................................................................................9-2
DiffServ for VoIP Configuration Example ........................................................................9-4
Chapter 10
IGMP Snooping
Overview .......................................................................................................................10-1
CLI Examples ...............................................................................................................10-1
Example #1: show igmpsnooping ..........................................................................10-1
Example #2: show mac-address-table igmpsnooping ............................................10-2
Chapter 11
Port Security
Overview .......................................................................................................................11-1
Operation ......................................................................................................................11-2
CLI Examples ...............................................................................................................11-3
Example #1: show port security .............................................................................11-3
Example #2: show port security on a specific interface .........................................11-3
Example #3: (Config) port security .........................................................................11-3
Chapter 12
Traceroute
CLI Example .................................................................................................................12-2
Chapter 13
Configuration Scripting
Overview .......................................................................................................................13-1
Considerations ..............................................................................................................13-1
CLI Examples ...............................................................................................................13-1

ix
v1.0, March 2006
Example #1: script .................................................................................................13-2
Example #2: script list and script delete .................................................................13-2
Example #3: script apply running-config.scr ..........................................................13-2
Example #4: Creating a Configuration Script .........................................................13-3
Example #5: Upload a Configuration Script ...........................................................13-3
Chapter 14
Outbound Telnet
Overview .......................................................................................................................14-1
CLI Examples ...............................................................................................................14-1
Example #1: show network ....................................................................................14-2
Example #2: show telnet ........................................................................................14-2
Example #3: transport output telnet .......................................................................14-3
Example #4: session-limit and session-timeout .....................................................14-3
Chapter 15 Port Mirroring
Overview .......................................................................................................................15-1
CLI Examples ...............................................................................................................15-1
Example #1: show monitor session .......................................................................15-2
Example #2: show port all ......................................................................................15-2
Example #3: show port interface ............................................................................15-2
Example #4: (Config) monitor session 1 mode ......................................................15-3
Example #5: (Config) monitor session 1 source interface ......................................15-4
Example #6: (Interface) port security .....................................................................15-4
Chapter 16
Simple Network Time Protocol (SNTP)
Overview .......................................................................................................................16-1
CLI Examples ...............................................................................................................16-1
Example #1: show sntp ..........................................................................................16-1
Example #2: show sntp client .................................................................................16-2
Example #3: show sntp server ...............................................................................16-2
Example #4: Configure SNTP ................................................................................16-2
Chapter 17
Pre-Login Banner
Overview .......................................................................................................................17-1
CLI Example .................................................................................................................17-1

x
v1.0, March 2006
Chapter 18
Syslog
Overview .......................................................................................................................18-1
Persistent Log Files ................................................................................................18-1
Interpreting Log Files .............................................................................................18-2
CLI Examples ...............................................................................................................18-2
Example #1: show logging .....................................................................................18-3
Example #2: show logging buffered .......................................................................18-3
Example #3: show logging traplogs .......................................................................18-4
Example 4: show logging hosts ..............................................................................18-4
Example #5: logging port configuration ..................................................................18-5