NETGEAR XS728T ProSAFE Instruction Manual

350 East Plumeria Drive
San Jose, CA 95134
USA
July 2015
202-11492-01
XS728T ProSAFE
28-Port 10-Gigabit L2+ Smart Switch
Software Administration Manual

2
XS728T ProSAFE
Support
Thank you for selecting NETGEAR products.
After installing your device, locate the serial number on the label of your product and use it to register your product at
https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR
recommends registering your product through the NETGEAR website. For product updates and web support, visit
http://support.netgear.com.
Phone (US & Canada only): 1-888-NETGEAR.
Phone (Other Countries): Check the list of phone numbers at http://support.netgear.com/general/contact/default.aspx.
Contact your Internet service provider for technical support.
Compliance
For regulatory compliance information, visit http://www.netgear.com/about/regulatory.
See the regulatory compliance document before connecting the power supply.
Trademarks
© NETGEAR, Inc. NETGEAR and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are
used for reference purposes only.

1
Contents
Chapter 1 Getting Started
Switch Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Connect the Switch to the Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Discover a Switch in a Network with a DHCP Server . . . . . . . . . . . . . . . . . . . . . . 5
Switch Discovery in a Network Without a DHCP Server. . . . . . . . . . . . . . . . . . . . 5
Configure the Network Settings on the Administrative System . . . . . . . . . . . . . 6
Access the Management Interface from the Web . . . . . . . . . . . . . . . . . . . . . . . . . 8
Interface Naming Convention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Chapter 2 System
Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Device View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Services—DHCP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Chapter 3 Switching
Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
LAG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Voice VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Auto-VoIP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Multicast. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Address Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Chapter 4 Routing
IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Routing Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
ARP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Chapter 5 Quality of Service
CoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
Differentiated Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

2
XS728T ProSAFE 28-Port 10-Gigabit L2+ Smart Switch
Chapter 6 Security
Management Security Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Port Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
Traffic Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Chapter 7 Monitoring
Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157
Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
System Resources Utilization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
Chapter 8 Maintenance
Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Upload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167
File Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Chapter 9 Help
Online Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178
Registration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178
Appendix A Hardware Specifications and Default Values
Switch Features and Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182
Appendix B Configuration Examples
Virtual Local Area Networks (VLANs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
Access Control Lists (ACLs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
Differentiated Services (DiffServ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190
802.1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
MSTP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197
Configure VLAN Routing with Static Route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201

3
1
1. Getting Started
This manual describes how to configure and operate the XS728T ProSAFE 28-Port 10-Gigabit
L2+ Smart Switch by using the web-based graphical user interface (GUI). This manual describes
the software configuration procedures and explains the options available within those
procedures. These switches are referred to as the NETGEAR switch throughout this document.
This chapter provides an overview of starting your NETGEAR switch and accessing the user
interface. It also describes some actions that can be performed in the Smart Control Center
(SCC) application, which can be downloaded to your computer.
This guide does not document the SCC application. Full documentation for SCC is found at
http://docs.netgear.com/scc/enu/202-10685-01/index.htm.
This chapter contains the following sections:
•Switch Management Interface
•Connect the Switch to the Network
•Discover a Switch in a Network with a DHCP Server
•Switch Discovery in a Network Without a DHCP Server
•Configure the Network Settings on the Administrative System
•Access the Management Interface from the Web
•Interface Naming Convention

Getting Started
4
XS728T ProSAFE 28-Port 10-Gigabit L2+ Smart Switch
Switch Management Interface
The NETGEAR switch contains an embedded web server and management software for
managing and monitoring switch functions. The switch functions as a simple switch without
the management software. However, you can use the management software to configure
more advanced features that can improve switch efficiency and overall network performance.
Web-based management lets you monitor, configure, and control your switch remotely using
a standard web browser instead of using expensive and complicated SNMP software
products. From your web browser, you can monitor the performance of your switch and
optimize its configuration for your network. You can configure all switch features, such as
VLANs, QoS, and ACLs, by using the web-based management interface.
NETGEAR provides the Smart Control Center utility with this product. This program runs
under Windows XP, Windows 2003, Windows 2008 or Windows 7 (32
bit and 64 bit) and
provides a front end that discovers the switches on your network segment (L2 broadcast
domain). When you power up your switch for the first time, use the Smart Control Center to
discover the switch and view the network information that was automatically assigned to the
switch by a DHCP server; or, if no DHCP server is present on the network, use the Smart
Control Center to discover the switch and assign static network information.
Connect the Switch to the Network
To enable remote management of the switch through a web browser or SNMP, you must
connect the switch to the network and configure it with network information (an IP address,
subnet mask, and default gateway). The switch has a default IP address of 192.168.0.239
and a default subnet mask of 255.255.255.0. By default, the switch is also assigned a default
gateway of 192.168.0.254.
To change the switch’s default network, use one of the following three methods:
•Dynamic assignment through DHCP. DHCP is enabled by default on the switch. If you
connect the switch to a network with a DHCP server, the switch obtains its network
information automatically. You can use the Smart Control Center to discover the
automatically assigned network information. For more information, see Discover a Switch
in a Network with a DHCP Server on page 5.
•Static assignment through the Smart Control Center. If you connect the switch to a
network that does not have a DHCP server, you can use the Smart Control Center to
assign a static IP address, subnet mask, and default gateway. For more information, see
Switch Discovery in a Network Without a DHCP Server on page 5.
•Static assignment by connecting from a local host. If you do not want to use the
Smart Control Center to assign a static address, you can connect to the switch from a
host (administrative system) in the 192.168.0.0/24 network and change the settings by
using the web-based management interface on the switch. For information about how to
set the IP address on the administrative system so it is in the same subnet as the default
IP address of the switch, see Configure the Network Settings on the Administrative
System on page 6.

Getting Started
5
XS728T ProSAFE 28-Port 10-Gigabit L2+ Smart Switch
Discover a Switch in a Network with a DHCP Server
This section describes how to set up your switch in a network that has a DHCP server. The
DHCP client on the switch is enabled by default. When you connect it to your network, the
DHCP server automatically assigns an IP address to your switch. To discover the IP address
automatically assigned to the switch, use the Smart Control Center.
To install the switch in a network with a DHCP server, use the following steps:
1. Connect the switch to a network with a DHCP server.
2. Power on the switch by connecting its power cord.
3. Install the Smart Control Center on your computer.
4. Start the Smart Control Center.
5. Click Discover for the Smart Control Center to find your switch.
6. Make a note of the displayed IP address assigned by the DHCP server.
You need this value to access the switch directly from a web browser (without using the
Smart Control Center).
7. Select your switch by clicking the line that displays the switch, then click the
Web
Browser Access button.
The Smart Control Center displays a login window.
The default password is password. Use this screen to manage your switch. For more
information, see Access the Management Interface from the Web on page 8.
Switch Discovery in a Network Without a DHCP Server
This section describes how to use the Smart Control Center to set up your switch in a
network without a DHCP server. If your network has no DHCP service, you must assign a
static IP address to your switch. You can assign it a static IP address, even if your network
has DHCP service.
To assign a static IP address:
1. Connect the switch to your existing network.
2. Power on the switch by connecting its power cord.
3. Install the Smart Control Center on your computer.
4. Start the Smart Control Center.
5. Click Discover for the Smart Control Center to find your NETGEAR switch.
The utility broadcasts Layer 2 discovery packets within the broadcast domain to discover
the switch.
6. Select the switch, then click Configure Device.

Getting Started
6
XS728T ProSAFE 28-Port 10-Gigabit L2+ Smart Switch
The screen expands to display more fields at the bottom of the screen.
7. Select the Disabled radio button to disable DHCP.
8. Enter the static switch IP address, gateway IP address, and subnet mask for the switch and
type your password.
Tip: You must enter the current password every time you use the Smart
Control Center to update the switch setting. The default password is
password.
9. Click Apply to configure the switch with the network settings.
Ensure that your computer and the switch are in the same subnet. Make a note of these
settings for later use.
Configure the Network Settings on the Administrative
System
If you do not use the Smart Control Center to configure the switch network information, you
can connect directly to the switch from an administrative system, such as a computer or
laptop. The IP address of the administrative system must be in the same subnet as the
default IP address on the switch. For most networks, this means you must change the IP
address of the administrative system to be on the same subnet as the default IP address of
the switch (192.168.0.239).
To change the IP address on an administrative system running a Windows operating system,
open the Internet Protocol (TCP/IP) Properties screen that you access from each local area
connection, as shown in the following screen. You need Windows Administrator privileges to
change these settings.

Getting Started
7
XS728T ProSAFE 28-Port 10-Gigabit L2+ Smart Switch
WARNING:
When you change the IP address of your administrative system,
connection to the rest of the network is lost. Be sure to write down
your current network address settings before you change them.
To modify the network settings on your administrative system:
1. On your computer, access the Windows operating system TCP/IP Properties screen.
2. Set the IP address of the administrative system to an address in the 192.168.0.0 network,
such as 192.168.0.200.
The IP address must be different from the switch’s address but within the same subnet.
3. Click OK.
To configure a static address on the switch:
1. Use a straight-through Ethernet cable to connect the Ethernet port on the administrative
system directly to any port on the NETGEAR switch.
2. Open a web browser on your computer and connect to the management interface.
For more information, see Access the Management Interface from the Web on page 8.
3. Change the network settings on the switch to match the settings on your network.
For more information, see IP Configuration on page 20.
4. Return the network configuration on your administrative system to the original settings.

Getting Started
8
XS728T ProSAFE 28-Port 10-Gigabit L2+ Smart Switch
Access the Management Interface from the Web
To access the switch management interface, use one of the following methods:
•From the Smart Control Center, select the switch and click Web Browser Access. For
more information, see the documentation for this application at
http://docs.netgear.com/scc/enu/202-10685-01/index.htm.
•Open a web browser and enter the IP address of the switch in the address field.
You must be able to ping the IP address of the NETGEAR switch management interface from
your administrative system for web access to be available. If you used the Smart Control
Center to set up the IP address and subnet mask, either with or without a DHCP server, use
that IP address in the address field of your web browser. If you did not change the IP address
of the switch from the default value, enter 192.168.0.239 into the address field.
Clicking Web Browser Access on the Smart Control Center or accessing the switch directly
from your web browser displays the Login screen.
Understand the User Interface
To access the switch by using a web browser, the browser must meet the following software
requirements:
•Internet Explorer versions 9 to 11
•Firefox version 31-33
•Chrome versions 38-40
•Safari
•On Windows OS: 5.1.7
•On MAC OS: 8.0.2 (MAC OS version 10.10)
To log on to the web interface:
1. Open a web browser and enter the IP address of the switch in the web browser address
field.
2. The factory default password is password. Type the password in the field on the Login
screen and click Login. Passwords are case-sensitive.
3. After the system authenticates you, the System Information screen displays.