NETGEAR GS724Tv3 - ProSafe Gigabit Managed Switch User manual

202-10484-01
July 2009
NETGEAR, Inc.
350 E. Plumeria Drive
San Jose CA 95134 USA
GS716Tv2 and GS724Tv3
Software Administration
Manual

ii
v1.0, July 2009
© 2007, 2008, 2009 by NETGEAR, Inc. All rights reserved. FullManual.
Technical Support
Please refer to the support information card that shipped with your product. By registering your product at
http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of
product and software upgrades.
NETGEAR, INC. Support Information
Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support information card.
E-mail: [email protected]
North American NETGEAR website: http://www.netgear.com
Trademarks
NETGEAR, the NETGEAR logo, and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc.
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.Other brand and product
names are registered trademarks or trademarks of their respective holders. Portions of this document are copyright
Intoto, Inc.
July 2009
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Certificate of the Manufacturer/Importer
It is hereby certified that the Gigabit Smart Switch has been suppressed in accordance with the conditions set out in the
BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in
accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating
instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and
has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß dasGigabit Smart Switch gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/1992
aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch
gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing

v1.0, July 2009
iii
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.
Product and Publication Details
Model Number: GS716T and GS724T
Publication Date: July 2009
Product Family: GS716T/GS724T Series Smart Switch
Product Name: Gigabit Smart Switch
Home or Business Product: Business
Language: English
Publication Part Number: 202-10484-01
Publication Version Number: 1.0

v1.0, July 2009
iv

v
v1.0, July 2009
Contents
GS716Tv2 and GS724Tv3 Software Administration Manual
About This Manual
Audience ........................................................................................................................... xi
Organization ..................................................................................................................... xi
Conventions, Formats and Scope ................................................................................... xii
How to Use This Manual ................................................................................................ xiv
How to Print this Manual ................................................................................................. xiv
Revision History ...............................................................................................................xv
Chapter 1
Getting Started
Connecting the Switch to the Network ............................................................................1-1
Switch Management Interface ........................................................................................1-2
SmartWizard Discovery in a Network with a DHCP Server ............................................1-3
SmartWizard Discovery in a Network without a DHCP Server .......................................1-4
Manually Assigning Network Parameters ................................................................1-5
Configuring the Network Settings on the Administrative System .............................1-6
SmartWizard Discovery Utilities .....................................................................................1-6
Password Change ....................................................................................................1-7
Firmware Upgrade ...................................................................................................1-7
Exit ...........................................................................................................................1-8
Understanding the User Interfaces .................................................................................1-9
Using the Web Interface ...........................................................................................1-9
Using SNMP ...........................................................................................................1-14
Common Parameter Values .........................................................................................1-15
Interface Naming Convention .......................................................................................1-16

GS716Tv2 and GS724Tv3 Software Administration Manual
vi
v1.0, July 2009
Chapter 2
Configuring System Information
System Information .........................................................................................................2-1
Defining System Information ....................................................................................2-3
Network Connectivity ......................................................................................................2-3
Time ................................................................................................................................2-5
Time Configuration ...................................................................................................2-6
SNTP Global Status .................................................................................................2-8
SNTP Server Configuration ....................................................................................2-10
SNTP Server Status ...............................................................................................2-11
Denial of Service ..........................................................................................................2-13
Green Ethernet Configuration .......................................................................................2-15
SNMP V1/V2 ................................................................................................................2-16
Community Configuration .......................................................................................2-17
Trap Configuration .................................................................................................2-19
Trap Flags ..............................................................................................................2-20
SNMP v3 User Configuration .......................................................................................2-21
LLDP .............................................................................................................................2-23
LLDP Configuration ................................................................................................2-23
LLDP Port Settings .................................................................................................2-24
Local Information ....................................................................................................2-27
Neighbors Information ............................................................................................2-30
Chapter 3
Configuring Switching Information
Configuring and Viewing Device Port Information ..........................................................3-1
Port Configuration ....................................................................................................3-1
Flow Control .............................................................................................................3-4
Creating LAGs ................................................................................................................3-5
LAG Configuration ....................................................................................................3-5
LAG Membership .....................................................................................................3-7
LACP Configuration .................................................................................................3-8
LACP Port Configuration ..........................................................................................3-9
Managing VLANs ..........................................................................................................3-10
VLAN Configuration ...............................................................................................3-10
VLAN Membership Configuration ...........................................................................3-12

GS716Tv2 and GS724Tv3 Software Administration Manual
vii
v1.0, July 2009
Port VLAN ID Configuration ...................................................................................3-14
Configuring Spanning Tree Protocol ............................................................................3-16
STP Switch Configuration/Status ...........................................................................3-17
CST Configuration ..................................................................................................3-19
CST Port Configuration ..........................................................................................3-21
CST Port Status .....................................................................................................3-23
Rapid STP Configuration .......................................................................................3-24
MST Configuration .................................................................................................3-26
MST Port Configuration ..........................................................................................3-27
STP Statistics .........................................................................................................3-31
Configuring IGMP Snooping .........................................................................................3-32
Global Configuration ..............................................................................................3-32
IGMP Snooping Interface Configuration ................................................................3-34
Viewing Multicast Forwarding Database Information ...................................................3-35
IGMP Snooping Table ............................................................................................3-36
MFDB Table ...........................................................................................................3-37
MFDB Statistics ......................................................................................................3-39
IGMP Snooping VLAN Configuration .....................................................................3-40
Configuring IGMP Snooping Queriers ..........................................................................3-42
IGMP Snooping Querier Configuration ..................................................................3-43
IGMP Snooping Querier VLAN Configuration ........................................................3-44
IGMP Snooping Querier VLAN Status ...................................................................3-45
Searching and Configuring the Forwarding Database ..................................................3-47
Searching the MAC Address Table ........................................................................3-47
Dynamic Address Configuration .............................................................................3-49
MAC Address Table ...............................................................................................3-50
Static MAC Address ...............................................................................................3-52
Chapter 4
Configuring Quality of Service
Configuring Class of Service ..........................................................................................4-1
Basic CoS Configuration ..........................................................................................4-2
CoS Interface Configuration .....................................................................................4-3
Interface Queue Configuration .................................................................................4-5
802.1p to Queue Mapping ........................................................................................4-6
DSCP to Queue Mapping .........................................................................................4-7

GS716Tv2 and GS724Tv3 Software Administration Manual
viii
v1.0, July 2009
Chapter 5
Managing Device Security
Management Security Settings .......................................................................................5-1
Change Password ....................................................................................................5-2
RADIUS Configuration .............................................................................................5-3
Configuring TACACS+ ...........................................................................................5-10
Authentication List Configuration ...........................................................................5-13
Configuring Management Access .................................................................................5-15
HTTP Configuration ...............................................................................................5-15
Secure HTTP Configuration ...................................................................................5-16
Certificate Download ..............................................................................................5-18
Access Profile Configuration ..................................................................................5-19
Access Rule Configuration .....................................................................................5-21
Port Authentication .......................................................................................................5-22
802.1X Configuration .............................................................................................5-23
Port Authentication .................................................................................................5-24
Port Summary ........................................................................................................5-28
Traffic Control ...............................................................................................................5-30
MAC Filter Configuration ........................................................................................5-30
MAC Filter Summary ..............................................................................................5-32
Storm Control .........................................................................................................5-33
Port Security Configuration ....................................................................................5-34
Port Security Interface Configuration .....................................................................5-35
Security MAC Address ...........................................................................................5-37
Protected Ports Membership ..................................................................................5-38
Configuring Access Control Lists ..................................................................................5-39
MAC ACL ...............................................................................................................5-40
MAC Rules .............................................................................................................5-42
MAC Binding Configuration ....................................................................................5-44
MAC Binding Table ................................................................................................5-45
IP ACL ....................................................................................................................5-47
IP Rules ..................................................................................................................5-48
IP Extended Rule ...................................................................................................5-50
IP Binding Configuration ........................................................................................5-54
IP Binding Table .....................................................................................................5-56

GS716Tv2 and GS724Tv3 Software Administration Manual
ix
v1.0, July 2009
Chapter 6
Monitoring the System
Switch Statistics ..............................................................................................................6-1
Viewing Port Statistics ....................................................................................................6-4
Port Statistics ...........................................................................................................6-4
Port Detailed Statistics .............................................................................................6-5
EAP Statistics .........................................................................................................6-12
Managing Logs .............................................................................................................6-14
Memory Logs .........................................................................................................6-14
FLASH Log Configuration ......................................................................................6-16
Server Log Configuration .......................................................................................6-19
Trap Logs ...............................................................................................................6-21
Event Logs .............................................................................................................6-22
Configuring Port Mirroring ............................................................................................6-23
Multiple Port Mirroring ............................................................................................6-23
Chapter 7
Maintenance
Reset ..............................................................................................................................7-1
Rebooting the Switch ...............................................................................................7-1
Reset Configuration to Defaults ...............................................................................7-2
Upload File From Switch ................................................................................................7-3
Uploading Files ........................................................................................................7-5
Download File To Switch ................................................................................................7-5
TFTP File Download ................................................................................................7-6
HTTP File Download ................................................................................................7-8
File Management ..........................................................................................................7-10
Dual Image Configuration ......................................................................................7-10
Viewing the Dual Image Status ..............................................................................7-12
Troubleshooting ............................................................................................................7-13
Ping ........................................................................................................................7-13
TraceRoute ............................................................................................................7-14
Appendix A
Hardware Specifications and Default Values
GS7xxT Gigabit Smart Switch Specifications ................................................................A-1
GS7xxTR Gigabit Smart Switch Features and Defaults ................................................ A-2

GS716Tv2 and GS724Tv3 Software Administration Manual
x
v1.0, July 2009
Appendix B
Configuration Examples
Virtual Local Area Networks (VLANs) ............................................................................ B-1
VLAN Example Configuration ................................................................................. B-2
Access Control Lists (ACLs) .......................................................................................... B-4
MAC ACL Example Configuration ........................................................................... B-5
Standard IP ACL Example Configuration ................................................................ B-6
802.1X ........................................................................................................................... B-8
802.1X Example Configuration ............................................................................. B-10
MSTP ........................................................................................................................... B-11
MSTP Example Configuration ............................................................................... B-13
Index

xi
v1.0, July 2009
About This Manual
The NETGEAR®GS716Tv2 and GS724Tv3 Software Administration Manual describes how to
configure and operate the Gigabit Smart Switch using its included software features by using the
Web-based graphical user interface (GUI). The book describes the software configuration
procedures and explains the options available within those procedures.
Audience
The information in this guide is intended for any of the following individuals:
• System administrators who are responsible for configuring and operating a network using
GS716T/GS724T Smart Switch software
• Level 1 and/or Level 2 Support providers
To obtain the greatest benefit from this guide, you should have basic knowledge of Ethernet and
networking concepts. When the basic configuration of the switch is performed, it will function in a
network using its remaining factory default parameters. However, a greater level of configuration
—anywhere from the basic up to the maximum possible—will give your network the full benefit
of the switch’s features. The Web interface simplifies this configuration at all levels.
Organization
The GS716Tv2 and GS724Tv3 Software Administration Manual contains the following chapters:
•Chapter 1, “Getting Started”on page 1-1 contains information about performing the initial
system configuration and accessing the user interface.
•Chapter 2, “Configuring System Information” on page 2-1 describes how to configure
administrative features such as SNMP, DHCP, and port information.
•Chapter 3, “Configuring Switching Information” on page 3-1 describes how to manage and
monitor the layer 2 switching features.
•Chapter 4, “Configuring Quality of Service” on page 4-1 describes how to manage the
GS716T/GS724T software ACLs, and how to configure the Differentiated Services and Class
of Service features.

GS716Tv2 and GS724Tv3 Software Administration Manual
xii
v1.0, July 2009
•Chapter 5, “Managing Device Security” on page 5-1 contains information about configuring
switch security information such as port access control, TACACS+, and RADIUS server
settings.
•Chapter 6, “Monitoring the System” on page 6-1 describes how to view a variety of
information about the switch and its port, and to configure how the switch monitors events.
•Chapter 7, “Maintenance” on page 7-1 describes features to help you manage the switch.
•Appendix A, “Hardware Specifications and Default Values” on page B-1 contains hardware
specifications and default values on the GS716T/GS724T switch.
•Appendix B, “Configuration Examples” on page B-1 contains examples of how to configure
various features on the GS716T/GS724T switch, such as VLAN and Access Control List
(ACL) configuration examples.
Note: Refer to the GS716T/GS724T Series Smart Switch for information about
issues and workarounds.
Conventions, Formats and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:
•Typographical Conventions. This manual uses the following typographical conventions:
Italic Emphasis, books, CDs, file and server names, extensions
Bold User input, IP addresses, GUI screen text
Fixed Command prompt, CLI text, code
italic URL links
•Formats. This manual uses the following formats to highlight special messages:
Note: A note provides more information about a feature or technology.

Tip: This format is used to highlight a procedure that will save time or resources.
Warning: A caution provides information about critical aspects of the configuration,
combination of settings, events, or procedures that can adversely affect
network connectivity, security, and so on.
Danger: This is a safety warning. Failure to take heed of this notice may result in
personal injury or death.
GS716Tv2 and GS724Tv3 Software Administration Manual
xiii
v1.0, July 2009
•Scope. This manual is written for the Smart Switch according to these specifications:
Product Version GS716T and GS724T Gigabit Smart Switch
Manual Publication Date July 2009
Note: Product updates for the GS716T are available on the NETGEAR, Inc. website at
http://kb.netgear.com/app/products/list/p3/322.
Product updates for the GS724T are available on the NETGEAR, Inc. website at
http://kb.netgear.com/app/products/list/p3/322.

GS716Tv2 and GS724Tv3 Software Administration Manual
xiv
v1.0, July 2009
How to Use This Manual
The HTML version of this manual includes the following:
• Buttons, and , for browsing forwards or backwards through the manual one page
at a time
•A button that displays the table of contents and an button. Double-click on a
link in the table of contents or index to navigate directly to where the topic is described in the
manual.
•A button to access the full NETGEAR, Inc. online knowledge base for the product
model.
• Links to PDF versions of the full manual and individual chapters.
How to Print this Manual
To print this manual, you can choose one of the following options, according to your needs.
•Printing a Page from HTML. Each page in the HTML version of the manual is dedicated to
a major topic. Select File Print from the browser menu to print the page contents.
•Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in
order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at
http://www.adobe.com.
– Printing a PDF Chapter. Use the PDF of This Chapter link at the top left of any page.
• Click the PDF of This Chapter link at the top left of any page in the chapter you want
to print. The PDF version of the chapter you were viewing opens in a browser
window.
• Click the print icon in the upper left of your browser window.
–Printing a PDF version of the Complete Manual. Use the Complete PDF Manual link
at the top left of any page.
• Click the Complete PDF Manual link at the top left of any page in the manual. The
PDF version of the complete manual opens in a browser window.

GS716Tv2 and GS724Tv3 Software Administration Manual
xv
v1.0, July 2009
• Click the print icon in the upper left of your browser window.
Revision History
Tip: If your printer supports printing two pages on a single sheet of paper, you can
save paper and printer ink by selecting this feature.
Part Number Version
Number Date Description
202-10484-01 1.0 July 2009 Product Created

GS716Tv2 and GS724Tv3 Software Administration Manual
xvi
v1.0, July 2009

1-1
v1.0, July 2009
Chapter 1
Getting Started
This chapter provides an overview of starting your NETGEAR GS716T/GS724T Gigabit Smart
Switch and accessing the user interface. It also leads you through the steps to use the SmartWizard
Discovery utility. This chapter contains the following sections:
•“Connecting the Switch to the Network” on page 1-1
•“Switch Management Interface” on page 1-2
•“SmartWizard Discovery in a Network with a DHCP Server” on page 1-3
•“SmartWizard Discovery in a Network without a DHCP Server” on page 1-4
•“SmartWizard Discovery Utilities” on page 1-6
•“Understanding the User Interfaces” on page 1-9
Connecting the Switch to the Network
To enable remote management of the switch through a Web browser or SNMP, you must connect
the switch to the network. The switch comes up with a default IP address of 192.168.0.239, and
DHCP is enabled by default.
To access the switch over a network, you must first configure it with network information (an IP
address, subnet mask, and default gateway). You can assign the IP information automatically by
using a BOOTP or DHCP server.
After you configure network information, such as the IP address and subnet mask, and the switch
is physically and logically connected to the network, you can manage and monitor the switch
remotely through a Web browser or an SNMP-based network management system.
After you perform the physical hardware installation, you need to make a connection to the switch
so that you can do one of the following:
• Manually configure network information for the management interface, or
• Enable the management interface as a DHCP or BOOTP client on your network (if not already
enabled) and then view the network information after it is assigned by the DHCP server.

GS716Tv2 and GS724Tv3 Software Administration Manual
1-2 Getting Started
v1.0, July 2009
Follow these steps:
1. Power on the switch.
2. Configure network information.
3. The switch comes up with a default IP address of 192.168.0.239.
After the switch is connected to the network, you can use the default IP address for remote access
to the switch by using a Web browser and logging in to the Web interface. You should then be able
to select the IP Configuration, under the System Management IP Configuration menu, for
either Static, BOOTP, or DHCP IP assignment.
Switch Management Interface
NETGEAR provides the SmartWizard Discovery utility with this product. This program runs
under Microsoft®Windows®XP, Windows 2000, or Windows Vista®and provides a front end that
discovers the switches on your network segment. When you power up your switch for the first
time, the SmartWizard Discovery utility enables you to configure its basic network parameters
without prior knowledge of the IP address or subnet mask. Following such configuration, this
program leads you into the Web user interface.
Table 1-1 shows some features of the SmartWizard Discovery utility.
For more details about the SmartWizard Discovery utility, see “SmartWizard Discovery in a
Network with a DHCP Server” on page 1-3 or “SmartWizard Discovery in a Network without a
DHCP Server” on page 1-4.
Table 1-1. SmartWizard Discovery Utility
Management Method
SmartWizard Discovery utility • No IP address or subnet mask setup needed
• Discover all switches on the network
• User-friendly interface under Microsoft Windows
• Firmware upgrade capability
• Password change feature (available at the
application level, that is, when the switch is not at
the boot level)
• Provides entry to Web configuration of switch

GS716Tv2 and GS724Tv3 Software Administration Manual
Getting Started 1-3
v1.0, July 2009
SmartWizard Discovery in a Network with a DHCP Server
To install the switch in a network with a DHCP server, use the following steps:
1. Connect the Gigabit Smart Switch to a DHCP network.
2. Power on the switch by connecting its AC-DC power adapter.
3. Install the SmartWizard Discovery utility on your computer.
4. Start the SmartWizard Discovery utility.
5. Click Discover for the SmartWizard Discovery utility to find your GS716T or GS724T
switch. You should see a screen similar to the one shown in Figure 1-1.
6. Make a note of the displayed IP address assigned by the DHCP server. You will need this
value to access the switch directly from a Web browser (without using the SmartWizard
Discovery utility).
7. Select your switch by clicking the line that shows it. Then click the Web Access button. The
SmartWizard Discovery utility displays a login window similar to Figure 1-2 on page 1-4.
Figure 1-1

GS716Tv2 and GS724Tv3 Software Administration Manual
1-4 Getting Started
v1.0, July 2009
Use your Web browser to manage your switch. The default password is password. Then use
this page to proceed to management of the switch covered in “Using the Web Interface” on
page 1-9.
SmartWizard Discovery in a Network without a DHCP Server
This section describes how to set up your switch in a network without a DHCP server, and is
divided into the following tasks:
•“Manually Assigning Network Parameters” on page 1-5
•“Configuring the Network Settings on the Administrative System” on page 1-6
Figure 1-2