NETGEAR M4100 Series ProSAFE User guide

350 East Plumeria Drive
San Jose, CA 95134
USA
March 2015
208-10793-02
M4100 Series Switches
Software Setup Manual
Software Version 10.0.2

2
M4100 Series Switches
Support
Thank you for selecting NETGEAR products.
After installing your device, locate the serial number on the label of your product and use it to register your product at
https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR
recommends registering your product through the NETGEAR website.
For product updates and web support, visit http://support.netgear.com.
Phone (US & Canada only): 1-888-NETGEAR.
Phone (Other Countries): Check the list of phone numbers at http://support.netgear.com/general/contact/default.aspx.
Contact your Internet service provider for technical support.
Compliance
For regulatory compliance information, visit http://www.netgear.com/about/regulatory.
See the regulatory compliance document before connecting the power supply.
Trademarks
© NETGEAR, Inc., NETGEAR and the NETGEAR logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are
used for reference purposes only.
Revision History
Publication Part Number Publish Date Comments
208-10793-01 November 2011 First publication
208-10793-02 March 2015 v 10.0.02 software

3
Contents
Chapter 1 Get Started
Available Publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Overview of the Access and Initial Configuration Options . . . . . . . . . . . . . . . . . . 5
Prepare a Terminal and Access the Switch Through the
Console Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Prepare a Terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Access the Switch Through the Console Port . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Start the Switch and Observe the Power-On Self-Test . . . . . . . . . . . . . . . . . . . . 7
Use the Management VLAN Interface or Console Port for Initial Configuration 7
Perform Initial Configuration of the Switch Through a DHCP Server. . . . . . . 8
Perform Initial Configuration of the Switch Through the Console Port . . . . . 8
Use ezconfig for Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Use the Web Management Interface for Initial Configuration . . . . . . . . . . . . . . 12
Overview of the Web Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . 12
Use the Web Management Interface to Configure the Management
VLAN Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Access the Web Management Interface When the Switch Is
Already Connected to the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Configure an SNMPv3 User Profile Using the Web Management Interface 15
Chapter 2 Use the Auto Install Configuration
Auto Install Configuration Concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Switch IP Address Assignment Concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
TFTP IP Address and Configuration File Name Concepts. . . . . . . . . . . . . . . . . . . 18
About Conflicting TFTP Server Configurations . . . . . . . . . . . . . . . . . . . . . . . . . . 19
About DNS Server Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
About Obtaining a Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Host-Specific Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Default Network Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Configure Auto Install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Configure Auto Install Through the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Configure Auto Install Through the Web Management Interface . . . . . . . . . 22
Monitor and Complete the Auto Install Process . . . . . . . . . . . . . . . . . . . . . . . . 23
Event Logging for the Auto Install Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Chapter 3 Manage Switch Registration
Register Your Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

4
1
1. Get Started
This manual describes software configuration tasks that are most commonly used when you
install a new M4100 series switch. To configure the switch software, connect a terminal to the
switch.
This chapter includes the following sections:
•Available Publications
•Overview of the Access and Initial Configuration Options
•Prepare a Terminal and Access the Switch Through the Console Port
•Start the Switch and Observe the Power-On Self-Test
•Use the Management VLAN Interface or Console Port for Initial Configuration
•Use the Web Management Interface for Initial Configuration
Note: For more information about the topics covered in this manual, visit the
support website at support.netgear.com.
Note: Firmware updates with new features and bug fixes are made
available from time to time at downloadcenter.netgear.com. Some
products can regularly check the site and download new firmware, or
you can check for and download new firmware manually. If the
features or behavior of your product does not match what is
described in this guide, you might need to update your firmware.

Get Started
5
M4100 Series Switches
Available Publications
A number of other publications are available for your switch at downloadcenter.netgear.com,
including the following publications:
•M4100 Chassis Hardware Installation Guide
•M4100 Switch Module Installation Guide
•M4100 Command Line Interface Manual
Refer to the M4100 Command Line Interface Manual for information about the command
structure. This provides information about the CLI commands used to configure the
switch. It provides CLI descriptions, syntax, and default values.
•M4100 Software Administration Manual
•M4100 Web User Guide
Overview of the Access and Initial Configuration Options
To configure the switch, you can access it through the console port, management VLAN
interface, or web management interface. For information about these options, see the
following sections and information:
•Use the Management VLAN Interface or Console Port for Initial Configuration on page 7
If a DHCP server exists on your network, you can perform the initial configuration through
the management VLAN interface or service port. If no DHCP server exists on your
network, you can perform the initial configuration using the CLI through the console port.
•Use the Web Management Interface for Initial Configuration on page 13
Access the web management interface through an Ethernet connection to perform the
initial configuration.
Tip: Use the web management interface for configuration instead of the CLI.
Web configuration is quicker and easier than entering the multiple
required CLI commands.
Prepare a Terminal and Access the Switch Through the
Console Port
To access the console port on the switch, you need a VT100-compatible terminal or a
computer that provides either a serial port or a USB port and that runs VT100 terminal
emulation software.

Get Started
6
M4100 Series Switches
You can access the console port of the switch either through a mini-USB port or through the
serial port:
•Mini-USB port. The switch comes with a mini-USB to USB cable, which you can use to
connect the mini-USB console port on the switch to a USB port on a VT100-compatible
terminal or a Windows computer that runs VT100 terminal emulation software.
Note: To use the mini-USB port, you must install the USB driver on the
computer. (The Windows USB driver is on the resource CD.)
•Serial port. The serial port is configured for 115200 baud, eight data bits, one stop bit,
and no parity. It is a DB9 male connector. You must connect an RS-232 crossover cable
(which might not come in the switch package) from the serial port to the DB9 port on a
VT100-compatible terminal or computer that runs VT100 terminal emulation software.
Prepare a Terminal
To configure the terminal emulation software:
1. Select one of the serial ports to connect to the console.
2. Set the data rate to 115200 baud.
The speed is set to 115200 baud at the factory. The setting is also printed on the front
panel under the console port.
3. Set the data format to eight data bits, one stop bit, and no parity.
4. Set the flow control to none.
5. Under Properties, select the correct mode.
6. Select terminal keys.
Access the Switch Through the Console Port
You can use a locally or remotely attached terminal to access the switch through the console
port.
To access the switch through the console port:
1. Set up a VT100-compatible terminal on the computer and open the appropriate COM
port.
When the terminal interface initializes, the login user prompt displays.
2. Enter your user name and password.
The default for the user name is admin and the password is blank (that is, do not enter a
password).
You can now access the switch with its default configuration.
For information about how to perform the initial configuration of the switch through the
CLI, see Perform Initial Configuration of the Switch Through the Console Port on page 8.

Get Started
7
M4100 Series Switches
For detailed information about how to use the CLI to configure the switch with all its
options, see the M4100 Command Line Interface Manual that is available at
downloadcenter.netgear.com.
Start the Switch and Observe the Power-On Self-Test
When you supply power to the switch, the switch goes through a power-on self-test (POST).
The POST runs every time that the switch initializes and checks the switch hardware before
booting the switch. If the POST detects a critical problem, the startup procedure stops. The
boot process runs for approximately 60 seconds.
If POST passes successfully, a valid executable image loads into RAM. If you connect a local
terminal to the switch, POST messages display on the terminal and indicate test success or
failure.
To start the switch:
1. Locate an AC power receptacle.
2. Connect the switch to the AC receptacle.
The switch does not provide an on/off button.
Use the Management VLAN Interface or Console Port for
Initial Configuration
The management VLAN interface and service port let you access the switch from a remote
workstation over an Ethernet network. You must configure the IP address, subnet mask, and
default gateway on the switch.
The management VLAN interface, which you can access through any regular port in the
management VLAN, is an in-band connection.
Perform the initial configuration of the switch by using one of the following methods:
•DHCP server. Use a DHCP server through the management VLAN interface or service
port (see Perform Initial Configuration of the Switch Through a DHCP Server on page 8).
•CLI. Use the CLI through the console port (see Perform Initial Configuration of the Switch
Through the Console Port on page 8).
•ezconfig. Use the ezconfig application through the management VLAN interface or
console port (see Use ezconfig for Initial Configuration on page 9).

Get Started
8
M4100 Series Switches
Perform Initial Configuration of the Switch Through a DHCP
Server
You can assign IP information initially through a DHCP server through the management
VLAN interface. The network must provide a DHCP server. By default, DHCP mode is
enabled on the switch.
Configure the DHCP server with IP address and MAC information for the switch. Obtain this
information through the serial port connection using the show in interface vlan 1
command. Set up the server with the following values:
•IP address. The unique IP address for the switch. Each IP parameter is made up of four
decimal numbers, ranging from 0 to 255. If no DHCP server is available to assign an IP
address to the switch through DHCP, the default IP address for the management VLAN
interface is 169.254.100.100.
•Subnet mask. The subnet mask for the LAN, for example, 255.255.255.0.
•Gateway IP address. The IP address of the default router, if the switch is a node outside
the IP range of the LAN.
•MAC address. The MAC address of the switch.
When you connect the switch to the network for the first time after configuring the DHCP
server, the switch is configured with the IP address, subnet, and other information you
supplied. The switch is ready for access through the management VLAN interface or service
port.
If your network does not use a DHCP server, access the switch through the console port to
configure the network information (see Perform Initial Configuration of the Switch Through
the Console Port on page 8) or use ezconfig (see Use ezconfig for Initial Configuration on
page 9).
Perform Initial Configuration of the Switch Through the
Console Port
If your network does not use a DHCP server (see Perform Initial Configuration of the Switch
Through a DHCP Server on page 8), you can configure the IP address of the switch through
the console port.
To configure the IP address of the switch through the console port:
1. Set up a VT100-compatible terminal on the computer and open the appropriate COM
port.
When the terminal interface initializes, the user login prompt displays.
2. Enter your user name and password.
The default admin user name is admin and the default admin password is blank, that is,
do not enter a password.

Get Started
9
M4100 Series Switches
3. Disable the default DHCP client mode to assign an IP address manually by entering one of
the following commands:
For the management VLAN interface:
(Management Switch) #config
(Management Switch) (Config)#interface VLAN 1
(Management Switch) (Interface vlan 1)
4. Set the IP address, subnet mask, and gateway address:
For the management interface:
a. Set the IP address:
(Management Switch) #
(Management Switch) #config
(Management Switch) (Config)#interface VLAN 1
(Management Switch) (Interface vlan 1)#ip address ipaddress
subnetmask
Note: By default, VLAN 1 is the management VLAN.
b. Set the gateway:
(Management Switch) (Config)#ip default-gateway <gateway-addr>
Use the following information to configure the parameters:
•ip address. The unique IP address for the switch. Each IP parameter is made up of
four decimal numbers, ranging from 0 to 255.
•subnetmask. The subnet mask for the LAN.
•gateway. The gateway address for the subnet. No default subnet exists.
5. To enable these changes to be retained during a reset of the switch, type save at the main
menu prompt, and type yto confirm the changes.
6. To view the changes and verify the IP address information, enter the show ip interface
vlan <management vlan ID> command.
The switch is now ready for Telnet and SSH access as well as for web-based
management.
Use ezconfig for Initial Configuration
You can perform the initial configuration by using the Easy Setup Wizard (ezconfig) through
the management VLAN interface or console port.

Get Started
10
M4100 Series Switches
ezconfig Overview
ezconfig is an interactive utility that provides a simplified procedure for setting up the
following basic switch settings:
•Switch management IP address
•Switch admin user password
•Switch name and location
Start ezconfig and Configure the Switch
You can enter ezconfig either in Global Config mode (#) or in Display mode (>).
At any point in the setup, you can type Qto abort the program. ezconfig checks for any
changes and prompts you to save the changes.
To start ezconfig and configure the switch:
1. Enter the ezconfig command.
The utility displays the following text:
(Switch) >ezconfig
NETGEAR EZ Configuration Utility
--------------------------------
Hello and Welcome!
This utility will walk you through assigning the IP address for
the switch management CPU. It will allow you to save the changes
at the end. After the session, simply use the newly assigned IP
address to access the Web GUI using any public domain Web browser.
Admin password not defined. Do you want to assign the admin
password (password length should vary in a range of 8 - 64
characters)? (Y/N/Q)
You are prompted to change the admin password.
2. For security reasons, change the default password by typing Y, typing a new password, and
confirming the password.
If you already set the password and do not want to change it again, type N.
Enter new password:********
Confirm new password:********
Password Changed!
The 'enable' password required for switch configuration through
the command line interface is currently not configured. Do you
wish to change it (Y/N/Q)? y
Enter new password:********