Benutzeranleitung / Produktwartung GS728TP100NAS des Produzenten NETGEAR
Zur Seite of 530
350 East Plumeria Drive San Jose, CA 95134 USA August 2012 202-10976-01 v1.0 ProSafe M5300 Switch Web Management User Guide.
2 ProSafe M5300 Switch © NETGEAR, Inc. All rights reserved No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of NETGEAR, Inc.
3 Contents Chapter 1 Getting Started Switch Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Understanding the User Interfaces .
4 ProSafe M5300 Switch NSF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Checkpoint Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Stack Template Summary .
5 ProSafe M5300 Switch LAG Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184 LAG Membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186 Chapter 4 Routing Routing Table .
6 ProSafe M5300 Switch Chapter 5 Configuring Quality of Service Class of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331 Basic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7 ProSafe M5300 Switch Chapter 7 Monitoring the System Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457 Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8 ProSafe M5300 Switch Chapter 9 Help Online Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 501 Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9 1 1. Getting Started This chapter provides an overview of starting your NETGEAR ProSafe M5300 Switch and accessing the user interface. This chapter contains the following sections: • Switch Manage.
Getting Started 10 ProSafe M5300 Switch Accessing the switch directly from your Web browser displays the login screen shown below. Understanding the User Interfaces ProSafe M5300 software includes a s.
Getting Started 11 ProSafe M5300 Switch Use the following procedures to log on to the Web interface: 1. Open a Web browser and enter the IP address of the switch in the Web browser address field. 2. The default user name is admin , default password is none (no password).
Page Link Configuration Pages Getting Started 12 ProSafe M5300 Switch Configuration and Monitoring Options The area directly under the feature links and to the right of the page menu displays the configuration information or status for the page you select.
Getting Started 13 ProSafe M5300 Switch Device View The Device View is a Java ® applet that displays the ports on the switch. This graphic provides an alternate way to navigate to configuration and monitoring options.
Getting Started 14 ProSafe M5300 Switch Device View System LEDs In addition to the port LEDs, the device view provides a representation of the system LEDs on the left side of the front switch panel. Power/Status LED The power LED is a bicolor LED that serves as an indicator of power and diagnostic status.
Getting Started 15 ProSafe M5300 Switch Device View Navigation Click the port you want to view or configure to see a menu that displays statistics and configuration options. Click the menu option to access the page that contains the configuration or monitoring options.
Getting Started 16 ProSafe M5300 Switch Help Page Access Every page contains a link to the online help , which contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Addressing page is open, the help topic for that page displays if you click Help.
Getting Started 17 ProSafe M5300 Switch Interface Naming Convention The ProSafe support physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are gigabit interfaces and are numbered on the front panel.
Getting Started 18 ProSafe M5300 Switch.
19 2 2. Configuring System Information Use the features in the System tab to define the switch’s relationship to its environment. The System tab contains links to the following features: • Managem.
Configuring System Information 20 ProSafe M5300 Switch System Information After a successful login, the System Information page displays. Use this page to configure and view general device information. To display the System Information page, click System Management System Information .
Configuring System Information 21 ProSafe M5300 Switch The System Information provides various statuses: Switch Status To define system information: 1. In the System Name field, enter the name you want to use to identify this switch. You may use up to 255 alphanumeric characters.
Configuring System Information 22 ProSafe M5300 Switch FAN Status The screen shows the status of the fans in all units. These fans remove the heat generated by the power, CPU, and other chipsets, allowing the chipsets to work normally. Fan status has three possible values: OK, Failure, Not Applicable (NA).
Configuring System Information 23 ProSafe M5300 Switch Device Status The screen shows the various inventory information for each device. The following table describes the Device Status information. Field Description Firmware Version The release.version.
Configuring System Information 24 ProSafe M5300 Switch Switch Statistics Use this page to display the switch statistics. To display the Switch Statistics page, click System > Management > Switch Statistics . A screen similar to the following displays.
Configuring System Information 25 ProSafe M5300 Switch Click CLEAR to clear all the counters, resetting all switch summary and detailed statistics to default values. The discarded packets count cannot be cleared. Broadcast Packets Received The total number of packets received that were directed to the broadcast address.
Configuring System Information 26 ProSafe M5300 Switch System CPU Status Use this page to display system CPU status and utilization information. To display the System Resource page, click System > Management > System CPU Status . A screen similar to the following displays.
Configuring System Information 27 ProSafe M5300 Switch Slot Information Use this page to view information about the cards installed in the switch’s slots. This page also provides information about the cards and switches that are compatible with the device.
Configuring System Information 28 ProSafe M5300 Switch Supported Card The following table describes information in the Supported Card table. Field Description Card Model The model ID of the supported card. Card Index The index assigned to the card type.
Configuring System Information 29 ProSafe M5300 Switch Loopback Interface Use this page to create, configure, and remove Loopback interfaces. A loopback interface is a logical interface that is considered to be always up. To display the Loopback Interface page, click System > Management > Loopback Interface .
Configuring System Information 30 ProSafe M5300 Switch Network Interface From the Network Interface link, you can access the following pages: • IPv4 Network Configuration on page 30 • IPv6 Network.
Configuring System Information 31 ProSafe M5300 Switch Once you have established in-band connectivity, you can change the IP information using any of the following: • Terminal interface via the EIA-232 port • Terminal interface via telnet • SNMP-based management • Web-based management To configure an IPv4 network interface: 1.
Configuring System Information 32 ProSafe M5300 Switch 8. Use DHCP Vendor Class Identifier String to specify the text string to add to DHCP requests as option 60, the VCI option. 9. Use Management VLAN ID to specify the management VLAN ID of the switch.
Configuring System Information 33 ProSafe M5300 Switch To configure an IPv6 network interface: 1. Use Admin Mode to enable or disable the IPv6 network interface on the switch.
Configuring System Information 34 ProSafe M5300 Switch Time ProSafe software supports the Simple Network Time Protocol (SNTP). SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server.
Configuring System Information 35 ProSafe M5300 Switch The device can poll Unicast server types for the server time. Polling for Unicast information is used for polling a server for which the IP address is known. SNTP servers that have been configured on the device are the only ones that are polled for synchronization information.
Configuring System Information 36 ProSafe M5300 Switch SNTP Global Configuration SNTP stands for Simple Network Time Protocol. As its name suggests, it is a less complicated version of Network Time Protocol, which is a system for synchronizing the clocks of networked computer systems, primarily when data transfer is handled via the Internet.
Configuring System Information 37 ProSafe M5300 Switch SNTP Global Status The following table displays SNTP Global Status information. Field Description Version Specifies the SNTP Version the client supports. Supported Mode Specifies the SNTP modes the client supports.
Configuring System Information 38 ProSafe M5300 Switch SNTP Server Configuration Use the SNTP Server Configuration page to view and modify information for adding and modifying Simple Network Time Protocol SNTP servers. To display the SNTP Server Configuration page, click System Management Time SNTP Server Configuration .
Configuring System Information 39 ProSafe M5300 Switch 2. Click ADD . 3. Repeat the previous steps to add additional SNTP servers. You can configure up to three SNTP servers. 4. To removing an SNTP server, select the check box next to the configured server to remove, and then click DELETE .
Configuring System Information 40 ProSafe M5300 Switch DNS You can use these pages to configure information about DNS servers the network uses and how the switch operates as a DNS client. DNS Configuration Use this page to configure global DNS settings and DNS server information.
Configuring System Information 41 ProSafe M5300 Switch 7. Click CANCEL to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 8. Click APPLY to send the updated configuration to the switch. Configuration changes take effect immediately.
Configuring System Information 42 ProSafe M5300 Switch The Dynamic Host Mapping table shows host name-to-IP address entries that the switch has learned. The following table describes the dynamic host fields. Field Description Host Lists the host name you assign to the specified IP address.
Configuring System Information 43 ProSafe M5300 Switch The following table displays Summary information, which describes the maximum resources each template supports for various features.
Configuring System Information 44 ProSafe M5300 Switch The following table describes the non-configurable fields on the License Key page. Field Description License Date The date the license is purchased. License Copy The number of licenses that exist on the switch.
Configuring System Information 45 ProSafe M5300 Switch Services From the Services link, you can access the following pages: • DHCP Server on page 45 • DHCP Relay on page 53 • DHCP L2 Relay on pa.
Configuring System Information 46 ProSafe M5300 Switch To enable or disable DHCP service: 1. Use Admin Mode to specify whether the DHCP Service is to be Enabled or Disabled. Default value is Disable. 2. Use Ping Packet Count to specify the number of packets a server sends to a Pool address to check for duplication as part of a ping operation.
Configuring System Information 47 ProSafe M5300 Switch DHCP Pool Configuration To display the DHCP Pool Configuration page, click System > Services > DHCP Server > DHCP Pool Configuration . A screen similar to the following displays. To configure a DHCP pool: 1.
Configuring System Information 48 ProSafe M5300 Switch Type of Binding Specifies the type of binding for the pool. • Unallocated • Dynamic • Manual Network Address Specifies the subnet address for a DHCP address of a dynamic pool. Network Mask Specifies the subnet number for a DHCP address of a dynamic pool.
Configuring System Information 49 ProSafe M5300 Switch 2. Use ADD to create the Pool Configuration. 3. Use APPLY to change the Pool Configuration. Sends the updated configuration to the switch. Configuration changes take effect immediately. 4. Use DELETE to delete the Pool.
Configuring System Information 50 ProSafe M5300 Switch 3. Use Option Type to specify the Option Type against the Option Code configured for the selected pool: • ASCII • Hex • IP Address 4. Option Value specifies the Value against the Option Code configured for the selected pool.
Configuring System Information 51 ProSafe M5300 Switch DHCP Bindings Information To display the DHCP Bindings Information page, click System > Services > DHCP Server > DHCP Bindings Information . A screen similar to the following displays. 1.
Configuring System Information 52 ProSafe M5300 Switch DHCP Conflicts Information To display the DHCP Conflicts Information page, click System > Services > DHCP Server > DHCP Conflicts Information . A screen similar to the following displays.
Configuring System Information 53 ProSafe M5300 Switch DHCP Relay If the switch is functioning as a Layer 3 device, the Layer 3 DHCP Relay Agent can relay DHCP messages between DHCP clients and DHCP servers that are located in different IP subnets. To display the DHCP Relay page, click System > Services > DHCP Relay .
Configuring System Information 54 ProSafe M5300 Switch DHCP Relay Status The following table describes the DHCP Relay Status fields. Field Description Requests Received The total number of DHCP requests received from all clients since the last time the switch was reset.
Configuring System Information 55 ProSafe M5300 Switch To configure the DHCP L2 Relay VLAN information: 1. VLAN ID shows the VLAN ID configured on the switch. 2. Use Admin Mode to enable or disable the DHCP L2 Relay on the selected VLAN. 3. Use Circuit ID Mode to enable or disable the Circuit ID suboption of DHCP Option-82.
Configuring System Information 56 ProSafe M5300 Switch DHCP L2 Relay Interface Statistics To display the DHCP L2 Relay Interface Statistics page, click System > Services > DHCP L2 Relay > DHCP L2 Relay Interface Statistics . A screen similar to the following displays.
Configuring System Information 57 ProSafe M5300 Switch UDP Relay The UDP Relay feature provides the ability for a router to forward configured UDP broadcast packets to a particular IP address. This allows applications to reach servers on non-local subnets.
Configuring System Information 58 ProSafe M5300 Switch • rip - Relay RIP (UDP port 520) packets • tacacs - Relay TACACS (UDP port 49) packet • tftp - Relay TFTP (UDP port 69) packets • time - Relay time service (UDP port 37) packets • Other - If this option is selected, the UDP Port Other Value is enabled.
Configuring System Information 59 ProSafe M5300 Switch • ntp - Relay network time protocol (UDP port 123) packets. • pim-auto-rp - Relay PIM auto RP (UDP port 496) packets.
Configuring System Information 60 ProSafe M5300 Switch DHCPv6 Server Configuration To display the DHCP Server Configuration page, click System > Services > DHCPv6 Server > DHCP Server Configuration . A screen similar to the following displays.
Configuring System Information 61 ProSafe M5300 Switch.
Configuring System Information 62 ProSafe M5300 Switch To configure a DHCPv6 Pool: 1. From the Pool Name field, select Create and enter name for the Pool to be created. To modify information for an existing DHCPv6 pool, select the name of the pool to configure.
Configuring System Information 63 ProSafe M5300 Switch 5. In the Valid Lifetime field, specify the valid lifetime, in seconds, for the delegated prefix. The values allowed are between 0 to 4294967295. 6. In the Prefer Lifetime field, specify the preferred lifetime, in seconds, for the delegated prefix.
Configuring System Information 64 ProSafe M5300 Switch 5. In the Preferences field, specify the preference value used by clients to determine preference between multiple DHCPv6 servers. The values allowed are between 0 to 4294967295. The default value is 0.
Configuring System Information 65 ProSafe M5300 Switch DHCPv6 Server Statistics To display the DHCP Server Statistics page, click System > Services > DHCPv6 Server > DHCPv6 Server Statistics . A screen similar to the following displays. The following table describes the DHCPv6 Server Statistics fields.
Configuring System Information 66 ProSafe M5300 Switch DHCPv6 Relay The DHCPv6 Relay Agent allows for various sub-options to be attached to messages that are being relayed by the local switch to a DHCPv6 server.
Configuring System Information 67 ProSafe M5300 Switch To configure the DHCPv6 Relay information for one or more interfaces: 1. Select the check box associated with each interface to configure, or select the check box in the heading row to apply the same configuration to all interfaces.
Configuring System Information 68 ProSafe M5300 Switch Stacking A stackable switch is a switch that is fully functional operating as a stand-alone unit but can also be set-up to operate together with up to seven other switches.
Configuring System Information 69 ProSafe M5300 Switch • Single IP address management through a web browser, the CLI, or SNMP. • Master-slave configuration. • The master retains configuration for entire stack. • Automatic detection of new members, with synchronization of firmware (upgrade or downgrade as needed).
Configuring System Information 70 ProSafe M5300 Switch Stack Master Election All stack members are eligible stack masters. If the stack master becomes unavailable, the remaining stack members participate in electing a new stack master from among themselves.
Configuring System Information 71 ProSafe M5300 Switch Nonstop Forwarding Nonstop forwarding (NSF) allows the forwarding plane of stack units to continue to forward packets while the control and management planes restart as a result of a power failure, hardware failure, or software fault on the management unit.
Configuring System Information 72 ProSafe M5300 Switch Stack Configuration From this page, you can preconfigure stack members before adding them to the stack, change the unit number assigned to a stack member, and to select a new stack master or give management preference to one or more units.
Configuring System Information 73 ProSafe M5300 Switch To change the settings for an existing stack member: 1. Select the check box next to the stack member to configure. 2. If desired, specify a new unit ID for the stack member in the Change to Switch ID field.
Configuring System Information 74 ProSafe M5300 Switch The following table describes the Basic Stack Status fields. Field Description Unit ID The unit ID of the specific switch. Switch Description The description for the unit can be configured by the user.
Configuring System Information 75 ProSafe M5300 Switch To configure the mode of the stack ports: 1. Select the check box associated with the unit and port to configure: 2. From the Configured Stack Mode field, select the operating mode: • Stack . The port connects to the stack port on another stack member.
Configuring System Information 76 ProSafe M5300 Switch Stack Port Diagnostics This page displays the diagnostics for all the stackable interfaces in the given stack. To display the Stack Port Diagnostics page, click System Stacking Advanced Stack Port Diagnostics .
Configuring System Information 77 ProSafe M5300 Switch Stack Firmware Synchronization To display the stack firmware synchronization configurations from the Stack Firmware Synchronization page, click System Stacking Advanced Stack Firmware Synchronization .
Configuring System Information 78 ProSafe M5300 Switch NSF Use the NSF Summary page to enable nonstop forwarding feature on the stack, view operational status information, and to initiate a warm restart of the management unit.
Configuring System Information 79 ProSafe M5300 Switch 4. Click CANCEL to abandon the changes. 5. Click RESET to redisplay the page with the latest status values from the switch. Field Description Operation Status Indicates whether NSF is operational on the stack, which may differ from the Admin Status setting.
Configuring System Information 80 ProSafe M5300 Switch Checkpoint Statistics Use the Checkpoint Statistics page to display information about the protocol and routing data that the management unit shares with the backup unit. To display the Checkpoint Statistics page, click System Stacking Advanced NSF > Checkpoint Statistics .
Configuring System Information 81 ProSafe M5300 Switch The following table describes the fields on the Checkpoint Statistics page: Field Description Messages Checkpointed The number of messages sent from master unit to backup unit. Bytes Checkpointed How much data has been sent from master unit to the backup unit.
Configuring System Information 82 ProSafe M5300 Switch PoE (M5300-28G-POE+ and M5300-52G-POE+ Only) Copper Ethernet ports 1–24 on the M5300-28G-POE+ and copper Ethernet ports 1–48 on the M5300-52G-POE+ are PoE+ (IEEE 802.
Configuring System Information 83 ProSafe M5300 Switch Basic PoE Configuration Use the PoE Configuration page to view global PoE power information and to configure PoE settings. To display the Basic PoE Configuration page, click System > Services > PoE > Basic > PoE Configuration .
Configuring System Information 84 ProSafe M5300 Switch The PoE Configuration page also provides the following information: Field Description Firmware Version Version of the PoE controller's FW image. Power Status Indicates whether the PoE capability is on or off.
Configuring System Information 85 ProSafe M5300 Switch To configure PoE Port settings: 1. Select the check box next to the port to configure. Select multiple check boxes to apply the same settings to each selected port. Select the check box in the heading row to apply the same settings to all ports.
Configuring System Information 86 ProSafe M5300 Switch • Class . View the class of the PD connected to the port. The class defines the range of power a PD is drawing from the system. The class is defined as: • 0 : 0.44–12.95W • 1 : 0.44–3.83W • 2 : 3.
Configuring System Information 87 ProSafe M5300 Switch SNMP From SNMP link under the System tab, you can configure SNMP settings for SNMP V1/V2 and SNMPv3.
Configuring System Information 88 ProSafe M5300 Switch To configure SNMPv1/v2 communities: 1. Use Community Name to reconfigure an existing community, or to create a new one. Use this pull-down menu to select one of the existing community names, or select 'Create' to add a new one.
Configuring System Information 89 ProSafe M5300 Switch Trap Configuration This page displays an entry for every active Trap Receiver. To access this page, click System SNMP SNMP V1/V2 Trap Configuration .
Configuring System Information 90 ProSafe M5300 Switch Trap Flags Use the Trap Flags page to enable or disable traps. When the condition identified by an active trap is encountered by the switch, a trap message is sent to any enabled SNMP Trap Receivers, and a message is written to the trap log.
Configuring System Information 91 ProSafe M5300 Switch 5. Use ACL to enable or disable activation of ACL traps by selecting the corresponding radio button. The factory default is disabled. 6. Use PoE to enable or disable activation of PoE traps by selecting the corresponding radio button.
Configuring System Information 92 ProSafe M5300 Switch SNMP V3 User Configuration To access this page, click System SNMP SNMP V3 User Configuration . A screen similar to the following displays. To configure SNMPv3 settings for the user account: 1.
Configuring System Information 93 ProSafe M5300 Switch LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN.
Configuring System Information 94 ProSafe M5300 Switch LLDP Global Configuration Use the LLDP Global Configuration page to specify LLDP parameters that are applied to the switch. To display this page, click System LLDP Global Configuration . A screen similar to the following displays.
Configuring System Information 95 ProSafe M5300 Switch LLDP Interface Configuration To display this page, click System LLDP Interface Configuration . A screen similar to the following displays. 1. Use Port to specify the list of ports on which LLDP - 802.
Configuring System Information 96 ProSafe M5300 Switch LLDP Statistics To display this page, click System LLDP Statistics . A screen similar to the following displays.
Configuring System Information 97 ProSafe M5300 Switch LLDP Local Device Information To display this page, click System LLDP Local Device Information . A screen similar to the following displays. Receive Total Specifies the number of valid LLDP frames received by this LLDP agent on the corresponding port, while the LLDP agent is enabled.
Configuring System Information 98 ProSafe M5300 Switch To view LLDP information transmitted by an interface, select the desired interface from the Interface menu. The following table describes the LLDP Local Device Information fields. Field Description Chassis ID Subtype Specifies the string that describes the source of the chassis identifier.
Configuring System Information 99 ProSafe M5300 Switch LLDP Remote Device Information This page displays information on remote devices connected to the port. To display this page, click System LLDP Remote Device Information . A screen similar to the following displays.
Configuring System Information 100 ProSafe M5300 Switch LLDP Remote Device Inventory To display this page, click System LLDP LLDP Remote Device Inventory . A screen similar to the following displays. The following table describes the LLDP Remote Device Inventory fields.
Configuring System Information 101 ProSafe M5300 Switch LLDP-MED Global Configuration Use the LLDP-MED Global Configuration page to specify LLDP-MED parameters that are applied to the switch. To display this page, click System LLDP LLDP-MED Global Configuration .
Configuring System Information 102 ProSafe M5300 Switch LLDP-MED Interface Configuration To display this page, click System LLDP LLDP-MED Interface Configuration . A screen similar to the following displays. To configure LLDP-MED interface settings: 1.
Configuring System Information 103 ProSafe M5300 Switch LLDP-MED Local Device Information To display this page, click System LLDP LLDP-MED Local Device Information .
Field Description Network Policy Information: Specifies if network policy TLV is present in the LLDP frames. Media Application Type Specifies the application type. Types of application types are unknown, voicesignaling, guestvoice, guestvoicesignalling, softphonevoice, videoconferencing, streammingvideo, vidoesignalling.
Configuring System Information 105 ProSafe M5300 Switch LLDP-MED Remote Device Information To display this page, click System LLDP LLDP-MED Remote Device Information . A screen similar to the following displays. To view LLDP-MED information received by an interface, select the desired interface from the Interface menu.
Configuring System Information 106 ProSafe M5300 Switch The following table describes the LLDP-MED Remote Device Information fields. Field Description Remote ID Specifies the remote client identifier assigned to the remote system. Capability Information: Specifies the supported and enabled capabilities that was received in MED TLV on this port.
Configuring System Information 107 ProSafe M5300 Switch Inventory Information: Specifies if inventory TLV is received in LLDP frames on this port. Hardware Revision Specifies hardware version of the remote device. Firmware Revision Specifies Firmware version of the remote device.
Configuring System Information 108 ProSafe M5300 Switch LLDP-MED Remote Device Inventory To display this page, click System LLDP LLDP-MED Remote Device Inventory . A screen similar to the following displays. The following table describes the LLDP-MED Remote Device Inventory fields.
Configuring System Information 109 ProSafe M5300 Switch ISDP The Industry Standard Discovery Protocol (ISDP) is a proprietary Layer 2 network protocol which inter-operates with Cisco® devices running the Cisco Discovery Protocol (CDP). ISDP is used to share information between neighboring devices.
Field Description Neighbors table last time changed The amount of time that has passed since the ISDP neighbor table was updated. Device ID The Device ID advertised by this device. The format of this Device ID is characterized by the value of Device ID Format object.
Configuring System Information 111 ProSafe M5300 Switch ISDP Interface Configuration To display this page, click System ISDP Advanced Interface Configuration . A screen similar to the following displays. To configure per-interface ISDP settings: 1.
Field Description Device ID The device ID of the ISDP neighbor. Interface The interface on which the neighbor is discovered. Address Displays the address of the neighbor.
Configuring System Information 113 ProSafe M5300 Switch ISDP Statistics Use the ISDP Statistics page to view information about the ISDP packets sent and received by the switch. To display this page, click System ISDP Advanced Statistics . A screen similar to the following displays.
Configuring System Information 114 ProSafe M5300 Switch Timer Schedule The Timer Schedule feature allows you to configure time ranges to use in time-based access control list (ACL) rules. For switches that support PoE+, timers can also control when power can and cannot be delivered to the port.
Configuring System Information 115 ProSafe M5300 Switch 3. Click ADD to add the new timer schedule with a specified name. The configuration changes take effect immediately. 4. To remove a configured timer, select the entry to remove and click DELETE .
Periodic Timer Absolute Timer Configuring System Information 116 ProSafe M5300 Switch To configure a timer schedule: 1. Select the name of the schedule created on the Timer Global Configuration page. 2. Specify the type of timer to configure: • Absolute .
Configuring System Information 117 ProSafe M5300 Switch 6. Use the Recurrence Pattern to show with what period the event will repeat. These fields are available only if the scheduler type is periodic. If recurrence is not needed (a timer schedule should be triggered just once), then set 'Date Stop' as equal to 'Date Start'.
Configuring System Information 118 ProSafe M5300 Switch.
119 3 3. Configuring Switching Information Use the features in the Switching tab to define Layer 2 features. The Switching tab contains links to the following features: • VLANs on page 119 • Auto-.
Configuring Switching Information 120 ProSafe M5300 Switch Basic From the Basic link, you can access the following pages: • VLAN Configuration on page 120 VLAN Configuration Use the VLAN Configuration page to define VLAN groups stored in the VLAN membership table.
Configuring Switching Information 121 ProSafe M5300 Switch • All ports are configured with Ingress Filtering disabled. • All ports are configured to transmit only untagged frames. • GVRP is disabled on all ports and all dynamic entries are cleared.
Configuring Switching Information 122 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • VLAN Configuration on page 120 • VLAN Membership on page 122 • V.
Configuring Switching Information 123 ProSafe M5300 Switch To configure VLAN membership: 1. Use VLAN ID to select the VLAN ID for which you want to display or configure data. 2. Use Group Operation to select all the ports and configure them: • Untag All - Select all the ports on which all frames transmitted for this VLAN will be untagged.
Configuring Switching Information 124 ProSafe M5300 Switch VLAN Status Use this page to display the status of all currently configured VLANs. To display the VLAN Status page, click Switching VLAN Advanced VLAN Status . Field Definition VLAN ID The VLAN Identifier (VID) of the VLAN.
Configuring Switching Information 125 ProSafe M5300 Switch Port PVID Configuration The Port PVID Configuration screen lets you assign a port VLAN ID (PVID) to an interface. There are certain requirements for a PVID: • All ports must have a defined PVID.
Configuring Switching Information 126 ProSafe M5300 Switch 6. Ingress Filtering : • When enabled, the frame is discarded if this port is not a member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is identified by the VLAN ID in the tag.
Configuring Switching Information 127 ProSafe M5300 Switch Protocol Based VLAN Group Configuration You can use a protocol based VLAN to define filtering criteria for untagged packets. By default, if you do not configure any port- (IEEE 802.1Q) or protocol based VLANs, untagged packets will be assigned to VLAN 1.
Configuring Switching Information 128 ProSafe M5300 Switch 4. Use VLAN ID to select the VLAN ID. It can be any number in the range of 1 to 4093. All the ports in the group will assign this VLAN ID to untagged packets received for the protocols you included in this group.
Configuring Switching Information 129 ProSafe M5300 Switch IP Subnet Based VLAN IP Subnet to VLAN mapping is defined by configuring an entry in the IP Subnet to VLAN table. An entry is specified via a source IP address, network mask, and the desired VLAN ID.
Configuring Switching Information 130 ProSafe M5300 Switch Port DVLAN Configuration Use this page to view and configure the double VLAN (DVLAN) tag settings for each interface. Double VLAN tagging allows service providers to create Virtual Metropolitan Area Networks (VMANs).
Configuring Switching Information 131 ProSafe M5300 Switch Voice VLAN Configuration Use this menu to configure the parameters for Voice VLAN Configuration.
Configuring Switching Information 132 ProSafe M5300 Switch 6. Click APPLY to update the switch with the changes. 7. Click CANCEL to abandon the changes. Field Description Operational State This is the operational status of the voice vlan on the given interface.
Configuring Switching Information 133 ProSafe M5300 Switch GARP Port Configuration Note: It can take up to 10 seconds for GARP configuration changes to take effect. To display the GARP Port Configuration page, click Switching VLAN Advanced GARP Port Configuration .
Configuring Switching Information 134 ProSafe M5300 Switch 6. Use Leave All Time (centiseconds) to control how frequently LeaveAll PDUs are generated. A LeaveAll PDU indicates that all registrations will shortly be deregistered. Participants will need to rejoin in order to maintain registration.
Configuring Switching Information 135 ProSafe M5300 Switch To configure protocol-based Auto-VoIP settings: 1. From the Prioritization Type menu, select the method used to prioritize VoIP traffic when a call-control protocol is detected, which is one of the following: • Remark – Remark the voice traffic with the specified 802.
Configuring Switching Information 136 ProSafe M5300 Switch OUI-Based The OUI-based Auto VoIP feature helps provide a classification mechanism for voice packets that include OUI bits so that they can be prioritized above data packets in order to provide better Quality of Service (QoS).
Configuring Switching Information 137 ProSafe M5300 Switch OUI Port Settings Use this page to configure the OUI-based Auto VoIP administrative mode on the interfaces. To display the OUI Port Settings page, click Switching Auto-VoIP > OUI-based > OUI Port Settings .
Configuring Switching Information 138 ProSafe M5300 Switch OUI Table Use this page to add and remove Organizationally Unique Identifiers (OUIs) from the OUI database the device maintains. Device hardware manufacturers can include an OUI in a network adapter to help identify the device.
Configuring Switching Information 139 ProSafe M5300 Switch iSCSI The Internet Small Computer System Interface (iSCSI) feature helps network administrators track iSCSI traffic between iSCSI initiators and target systems.
Configuring Switching Information 140 ProSafe M5300 Switch To configure global iSCSI settings: 1. In the iSCSI Status field, either Enable or Disable iSCSI optimization on the switch. The default is Disable. 2. In the QoS Profile field, select the quality of service profile that will be applied to iSCSI flows.
Configuring Switching Information 141 ProSafe M5300 Switch Sessions Use this page to view active iSCSI session information. To access the iSCSI Global Configuration page, click Switching > iSCSI > Basic > Sessions . Field Description Target Name Shows the name assigned to the iSCSI target.
Configuring Switching Information 142 ProSafe M5300 Switch To configure iSCSI target settings: 1. In the TCP Port field, specify the TCP port number for the target that will monitor for iSCSI traffic. The well-known iSCSI ports 3260 and 860 are configured as the default ports.
Configuring Switching Information 143 ProSafe M5300 Switch Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops.
Configuring Switching Information 144 ProSafe M5300 Switch To configure the global STP settings: 1. Use Spanning Tree Admin Mode to specify whether spanning tree operation is enabled on the switch. Value is enabled or disabled. 2. Use Force Protocol Version to specify the Force Protocol Version parameter for the switch.
Field Description Configuration digest key Identifier used to identify the configuration currently being used. MST ID Table consisting of the MST instances (including the CST) and the corresponding VLAN IDs associated with each of them. VID ID Table consisting of the VLAN IDs and the corresponding FID associated with each of them.
Configuring Switching Information 146 ProSafe M5300 Switch CST Configuration Use the Spanning Tree CST Configuration page to configure Common Spanning Tree (CST) and Internal Spanning Tree on the switch. To display the Spanning Tree CST Configuration page, click Switching > STP > Advanced CST Configuration .
Configuring Switching Information 147 ProSafe M5300 Switch the value must be less than or equal to (2 * Bridge Forward Delay) – 1 and greater than or equal to 2 * (Bridge Hello Time +1).
Configuring Switching Information 148 ProSafe M5300 Switch CST Port Configuration Use the Spanning Tree CST Port Configuration page to configure Common Spanning Tree (CST) and Internal Spanning Tree on a specific port on the switch.
Configuring Switching Information 149 ProSafe M5300 Switch 4. Use Port Path Cost to set the Path Cost to a new value for the specified port in the common and internal spanning tree.
Configuring Switching Information 150 ProSafe M5300 Switch CST Port Status Use the Spanning Tree CST Port Status page to display Common Spanning Tree (CST) and Internal Spanning Tree on a specific port on the switch. To display the Spanning Tree CST Port Status page, click Switching > STP > Advanced CST Port Status .
Configuring Switching Information 151 ProSafe M5300 Switch MST Configuration Use the Spanning Tree MST Configuration page to configure Multiple Spanning Tree (MST) on the switch. To display the Spanning Tree MST Configuration page, click Switching > STP > Advanced MST Configuration .
Configuring Switching Information 152 ProSafe M5300 Switch To configure an MST instance: 1. To add an MST instance, configure the MST values and click ADD : • MST ID - Specify the ID of the MST to create. Valid values for this are between 1 and 4094.
Configuring Switching Information 153 ProSafe M5300 Switch MST Port Status Use the Spanning Tree MST Port Status page to configure and display Multiple Spanning Tree (MST) settings on a specific port on the switch. To display the Spanning Tree MST Port Status page, click Switching STP Advanced MST Port Status .
Configuring Switching Information 154 ProSafe M5300 Switch To configure MST port settings: 1. Use MST ID to select one MST instance from existing MST instances. 2. Use Interface to select one of the physical or port channel interfaces associated with VLANs associated with the selected MST instance.
Configuring Switching Information 155 ProSafe M5300 Switch STP Statistics Use the Spanning Tree Statistics page to view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To display the Spanning Tree Statistics page, click Switching STP Advanced STP Statistics .
Configuring Switching Information 156 ProSafe M5300 Switch Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.
Configuring Switching Information 157 ProSafe M5300 Switch MFDB Statistics Use this page to view statistical information about the multicast forwarding database (MFDB). To display the MFDB Statistics page, click Switching > Multicast > MFDB MFDB Statistics .
Configuring Switching Information 158 ProSafe M5300 Switch IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch. Multicast IP traffic is traffic that is destined to a host group.
Configuring Switching Information 159 ProSafe M5300 Switch IGMP Snooping Configuration Use the IGMP Snooping Configuration page to configure the parameters for IGMP snooping, which is used to build forwarding lists for multicast traffic. Note that only a user with Read/Write access privileges may change the data on this screen.
Configuring Switching Information 160 ProSafe M5300 Switch IGMP Snooping Interface Configuration Use the IGMP Snooping Interface Configuration page to configure IGMP snooping settings on specific interfaces. To access the IGMP Snooping Interface Configuration page, click Switching Multicast IGMP Snooping Interface Configuration .
Configuring Switching Information 161 ProSafe M5300 Switch IGMP VLAN Configuration Use the IGMP Snooping VLAN Configuration page to configure IGMP snooping settings for VLANs on the system. To access the IGMP Snooping VLAN Configuration page, click Switching Multicast IGMP Snooping IGMP VLAN Configuration .
Configuring Switching Information 162 ProSafe M5300 Switch Multicast Router Configuration This page configures the interface as the one the multicast router is attached to. All IGMP packets snooped by the switch will be forwarded to the multicast router reachable from this interface.
Configuring Switching Information 163 ProSafe M5300 Switch Multicast Router VLAN Configuration This page configures the interface to only forward the snooped IGMP packets that come from VLAN ID (<vlanId>) to the multicast router attached to this interface.
Configuring Switching Information 164 ProSafe M5300 Switch IGMP Snooping Querier Configuration Use this menu to configure the parameters for IGMP Snooping Querier. Note that only a user with Read/Write access privileges may change the data on this screen.
Configuring Switching Information 165 ProSafe M5300 Switch IGMP Snooping Querier VLAN Configuration Use this page to configure IGMP queriers for use with VLANs on the network. To access this page, click Switching Multicast IGMP Snooping Querier VLAN Configuration .
Field Description Operational State Displays the operational state of the IGMP Snooping Querier on a VLAN. It can be in any of the following states: • Querier: Snooping switch is the Querier in the VLAN. The Snooping switch will send out periodic queries with a time interval equal to the configured querier query interval.
Configuring Switching Information 167 ProSafe M5300 Switch MLD Snooping From the MLD Snooping link, you can access the following pages: • MLD Snooping Configuration on page 167 • MLD Snooping Inte.
Configuring Switching Information 168 ProSafe M5300 Switch MLD Snooping Interface Configuration To access the MLD Snooping Interface Configuration page, click Switching Multicast MLD Snooping Interface Configuration . 1. Select the check box associated with each interface you want to configure.
Configuring Switching Information 169 ProSafe M5300 Switch MLD VLAN Configuration To access the MLD VLAN Configuration page, click Switching Multicast MLD Snooping MLD VLAN Configuration . 1. Use VLAN ID to set the VLAN IDs for which MLD Snooping is enabled.
Configuring Switching Information 170 ProSafe M5300 Switch Multicast Router Configuration To access the Multicast Router Configuration page, click Switching Multicast MLD Snooping Multicast Router Configuration . 1. Select the check box associated with each interface you want to configure.
Configuring Switching Information 171 ProSafe M5300 Switch MLD Snooping Querier Configuration Use this menu to configure the parameters for MLD Snooping Querier. Note that only a user with Read/Write access privileges may change the data on this screen.
Configuring Switching Information 172 ProSafe M5300 Switch MLD Snooping Querier VLAN Configuration To access the MLD Snooping Querier VLAN Configuration page, click Switching Multicast MLD Snooping Querier VLAN Configuration .
Configuring Switching Information 173 ProSafe M5300 Switch MVR Configuration IGMP snooping helps limit multicast traffic when member ports are in the same VLAN; however, when ports belong to different VLANs, a copy of the multicast stream is sent to each VLAN that has member ports in the multicast group.
Field Definition MVR Max Multicast Groups Displays the maximum number of multicast groups that MVR supports. MVR Current Multicast Groups Displays current number of the MVR groups allocated. Configuring Switching Information 174 ProSafe M5300 Switch 3.
Configuring Switching Information 175 ProSafe M5300 Switch MVR Interface Configuration To display the MVR Interface Configuration page, click Switching > MVR > Advanced > MVR Interface Configuration . A screen similar to the following displays.
Configuring Switching Information 176 ProSafe M5300 Switch MVR Group Membership To display the MVR Configuration page, click Switching > MVR > Advanced > MVR Group Membership .
Configuring Switching Information 177 ProSafe M5300 Switch Address Table From the Address Table link, you can access the following pages: • Basic on page 177 • Advanced on page 179 Basic From the .
Configuring Switching Information 178 ProSafe M5300 Switch 1. Use Search By to search for MAC Addresses by MAC Address, VLAN ID, and port: • Searched by MAC Address - Select MAC Address from pull-down menu, enter the 6 byte hexadecimal MAC Address in two-digit groups separated by colons, for example 01:23:45:67:89:AB.
Configuring Switching Information 179 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • Dynamic Addresses on page 179 • Address Table on page 177 • Static MAC Address on page 180 Dynamic Addresses This page allows the user to set the Address Aging Interval for the specified forwarding database.
Configuring Switching Information 180 ProSafe M5300 Switch Static MAC Address Use this page to configure static MAC addresses in the MAC address table. Each static MAC address can be associated with one or more interfaces and VLANs. Unlike dynamic MAC addresses in the MAC address table, static MAC addresses do not age out.
Configuring Switching Information 181 ProSafe M5300 Switch Ports The pages on the Ports tab allow you to view and monitor the physical port information for the ports available on the switch.
Configuring Switching Information 182 ProSafe M5300 Switch To configure port settings: 1. Select the check box associated with each Port to configure, or select the check box in the header row to apply the same settings to all ports. 2. Use STP Mode to select the Spanning Tree Protocol Administrative Mode for the port or LAG.
Configuring Switching Information 183 ProSafe M5300 Switch To access the Port Description page, click Switching Ports Port Description . 1. Select the check box associated with each Port to configure, or select the check box in the header row to apply the same settings to all ports.
Configuring Switching Information 184 ProSafe M5300 Switch Link Aggregation Groups Link aggregation groups (LAGs), which are also known as port-channels, allow you to combine multiple full-duplex Ethernet links into a single logical link.
Configuring Switching Information 185 ProSafe M5300 Switch To configure LAG settings: 1. Use LAG Name to enter the name you want assigned to the LAG. You may enter any string of up to 15 alphanumeric characters. A valid name has to be specified in order to create the LAG.
Field Description LAG Description A description string attached to a LAG.. LAG ID Identification of the LAG. LAG State Indicates whether the Link is up or down. Configured Ports Indicate the ports that are members of this port-channel Active Ports Indicates the ports that are actively participating in the port-channel.
Configuring Switching Information 187 ProSafe M5300 Switch 5. Use Link Trap to specify whether you want to have a trap sent when link status changes. The factory default is enable, which will cause the trap to be sent. 6. Use STP Mode to enable or disable the Spanning Tree Protocol Administrative Mode associated with the LAG.
Configuring Switching Information 188 ProSafe M5300 Switch.
189 4 4. Routing The Routing tab contains links to the following features: • Routing Table on page 189 • IP on page 193 • IPv6 on page 201 • IPv6 on page 201 (Licensed Feature) • ARP on page.
Routing 190 ProSafe M5300 Switch Basic From the Basic link, you can access the following pages: • Route Configuration on page 190 Route Configuration To display the Route Configuration page, click Routing Routing Table Basic Route Configuration .
Routing 191 ProSafe M5300 Switch Learned Routes Field Description Route Type This field can be either default or static. If creating a default route, all that needs to be specified is the next hop IP address, otherwise each field needs to be specified.
Routing 192 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • Route Configuration on page 190 • Route Preferences on page 192 Route Preferences Use this panel to configure the default preference for each protocol, e.
Routing 193 ProSafe M5300 Switch IP The IP folder contains links to the following web pages that configure and display IP routing data: • Basic on page 193 • Advanced on page 197 Basic From the Ba.
Routing 194 ProSafe M5300 Switch 5. Use ICMP Rate Limit Burst Size to control the ICMP error packets by specifying the number of ICMP error packets that are allowed per burst interval. By default, burst size is 100 packets. When burst interval is 0 then configuring this field is not a valid operation.
Routing 195 ProSafe M5300 Switch Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error.
Routing 196 ProSafe M5300 Switch IpReasmFails The number of failures detected by the IP re-assembly algorithm (for whatever reason: timed out, errors, etc). Note that this is not necessarily a count of discarded IP fragments since some algorithms can lose track of the number of fragments by combining them as they are received.
Routing 197 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • IP Configuration on page 193 • Statistics on page 194 • IP Interface Configuration on page.
Routing 198 ProSafe M5300 Switch To configure IP routing on an interface: 1. Use Go To Interface to enter the Interface in unit/slot/port format and click Go . The entry corresponding to the specified interface is selected. 2. Use Port to select the interface for which data is to be displayed or configured.
Routing 199 ProSafe M5300 Switch 4. Use IP Address Configuration Method to enter the method by which an IP address is configured on the interface. There are three methods: None, Manual, and DHCP. By default the method is None. Method 'None' should be used to reset the DHCP method.
Field Description VLAN ID Displays the VLAN ID for the interface. Link State The state of the specified interface is either Active or Inactive. An interface is considered active if it the link is up and it is in forwarding state. OSPF Admin Mode Displays OSPF admin mode of the interface.
Routing 201 ProSafe M5300 Switch IPv6 IPv6 is the next generation of the Internet Protocol. With 128-bit addresses, versus 32-bit addresses for IPv4, IPv6 solves the address depletion issues seen with.
Routing 202 ProSafe M5300 Switch IPv6 Global Configuration Use the Global Configuration page to enable IPv6 forwarding on the router and to enable the forwarding of IPv6 unicast datagrams. To display the IPv6 Global Configuration page, click Routing IPv6 Basic Global Configuration .
Routing 203 ProSafe M5300 Switch IPv6 Route Table Use the IPv6 Route Table page to display all active IPv6 routes and their settings. To display the IPv6 Route Table page, click Routing IPv6 Basic Route Table . To view the IPv6 route table: 1.
Routing 204 ProSafe M5300 Switch Advanced From the Basic link, you can access the following pages: • IPv6 Global Configuration on page 202 • IPv6 Interface Configuration on page 204 • IPv6 Prefi.
Routing 205 ProSafe M5300 Switch To configure IPv6 interface information: 1. Use Interface to select the interface to be configured or displayed. All physical interfaces are valid. 2. Use IPv6 Mode to enable/disable IPv6 mode. When IPv6 mode is enabled, interface is capable of IPv6 operation without a global address.
Routing 206 ProSafe M5300 Switch IPv6 Prefix Configuration Use this page to manually configure an IPv6 address for an interface. To display the IPv6 Prefix Configuration page, click Routing IPv6 Advanced Prefix Configuration . To configure IPv6 address information for an interface: 1.
Routing 207 ProSafe M5300 Switch IPv6 Statistics Use the IPv6 Statistics page to display IPv6 traffic statistics for one or all interfaces. To display the IPv6 Statistics page, click Routing IPv6 Advanced Statistics . The following image shows some, but not all, of the statistics the page displays.
Routing 208 ProSafe M5300 Switch To view statistics for an IPv6 interface, select the interface with the information to view from the Interface menu. When the selection is changed, a screen refresh will occur causing all fields to be updated for the newly selected port.
Routing 209 ProSafe M5300 Switch Datagrams Successfully Reassembled The number of IPv6 datagrams successfully reassembled. Note that this counter is incremented at the interface to which these datagrams were addressed which might not be necessarily the input interface for some of the fragments.
Routing 210 ProSafe M5300 Switch ICMPv6 Statistics Field Description Total ICMPv6 Messages Received The total number of ICMP messages received by the interface which includes all those counted by ipv6IfIcmpInErrors.
Routing 211 ProSafe M5300 Switch Total ICMPv6 Messages Transmitted The total number of ICMP messages which this interface attempted to send. Note that this counter includes all those counted by icmpOutErrors.
Routing 212 ProSafe M5300 Switch IPv6 Neighbor Table Use the IPv6 Neighbor Table page to display IPv6 neighbor details for a specified interface. To display the IPv6 Neighbor Table page, click Routing IPv6 Advanced Neighbor Table .
Routing 213 ProSafe M5300 Switch Neighbor State Specifies the state of the neighbor cache entry. Following are the states for dynamic entries in the IPv6 neighbor discovery cache: • Incmp - Address resolution is being performed on the entry.
Routing 214 ProSafe M5300 Switch IPv6 Route Configuration Use this page to configure static IPv6 routes. To display the IPv6 Route Configuration page, click Routing IPv6 Advanced Static Route Configuration . To configure a static IPv6 route: 1.
Routing 215 ProSafe M5300 Switch IPv6 Route Preferences Use this panel to configure the default preference for each protocol. These values are arbitrary values in the range of 1 to 255 and are independent of route metrics.
Routing 216 ProSafe M5300 Switch Tunnel Configuration ProSafe software provides for the creation, deletion, and management of tunnel interfaces. These are dynamic interfaces that are created and deleted via user-configuration. ProSafe support configured IPv6 over IPv4 tunnels to facilitate the transition of IPv4 networks to IPv6 networks.
Routing 217 ProSafe M5300 Switch 9. Use Destination Address to specify the destination address for this tunnel in dotted decimal notation. 10. Click ADD to allow the user to configure a new tunnel. 11. Click DELETE to delete the corresponding tunnel. 12.
Routing 218 ProSafe M5300 Switch VLAN You can configure ProSafe M5300 Switch software with some ports supporting VLANs and some supporting routing. You can also configure the software to allow traffic on a VLAN to be treated as if the VLAN were a router port.
Routing 219 ProSafe M5300 Switch To configure a VLAN routing interface by using the VLAN Routing Wizard: 1. Use VLAN ID to specify the VLAN Identifier (VID) associated with this VLAN. The range of the VLAN ID is 1 to 4093. 2. Use Ports to display selectable physical ports and LAGs (if any).
Routing 220 ProSafe M5300 Switch 3. Use Subnet Mask to enter the Subnet Mask to be configured for the VLAN Routing Interface. 4. Click ADD to add the VLAN Routing Interface specified in the VLAN ID field to the switch configuration. 5. Click DELETE to remove the VLAN Routing Interface specified in the VLAN ID field from the switch configuration.
Routing 221 ProSafe M5300 Switch Basic From the Basic link, you can access the following pages: • ARP Cache on page 221 ARP Cache Use this screen to show ARP entries in the ARP Cache. To display the ARP Cache page, click Routing ARP Basic ARP Cache .
Routing 222 ProSafe M5300 Switch Static ARP Cache To display the Static ARP Cache page, click Routing ARP Advanced ARP Create . ARP Static Configuration Use this screen to add an entry to the Address Resolution Protocol table. 1. Use IP Address to enter the IP address you want to add.
Routing 223 ProSafe M5300 Switch ARP Table Configuration You can use this screen to change the configuration parameters for the Address Resolution Protocol Table. You can also use this screen to display the contents of the table. To display the ARP Table Configuration page, click Routing ARP Advanced ARP Table Configuration .
Routing 224 ProSafe M5300 Switch • Specific Static Entry - Selecting this allows the user to specify the required IP Address. • None - Selected if the user does not want to delete any entry from the ARP Table. 7. Use Remove IP Address to enter the IP Address against the entry that is to be removed from the ARP Table.
Routing 225 ProSafe M5300 Switch RIP Note: RIP is a licensed feature and is available only on switches that have an active license installed. RIP is an Interior Gateway Protocol (IGP) based on the Bellman-Ford algorithm and targeted at smaller networks (network diameter no greater than 15 hops).
Routing 226 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • RIP Configuration (Advanced) on page 226 • Interface Configuration on page 227 • Route Red.
Routing 227 ProSafe M5300 Switch 6. Use Default Metric to set a default for the metric of redistributed routes. This field displays the default metric if one has already been set or blank if not configured earlier. The valid values are 1 to 15. Field Description Global Route Changes The number of route changes made to the IP Route Database by RIP.
Routing 228 ProSafe M5300 Switch 3. Use Receive Version to select what RIP control packets the interface will accept from the pull-down menu. The value is one of the following: • RIP-1 - Accept only RIP version 1 formatted packets. • RIP-2 - Accept only RIP version 2 formatted packets.
Routing 229 ProSafe M5300 Switch Send Version Displays the version of RIP control packets the interface should send from the pull-down menu. The value is one of the following: • RIP-1 - send RIP version 1 formatted packets via broadcast. • RIP-1c - RIP version 1 compatibility mode.
Routing 230 ProSafe M5300 Switch Route Redistribution Use the RIP Route Redistribution page to configure which routes are redistributed to other routers using RIP. The allowable values for each fields are displayed next to the field. If any invalid values are entered, an alert message is displayed with the list of all the valid values.
Routing 231 ProSafe M5300 Switch The source IP address is compared to the destination IP address of the route. The source IP netmask in the access list rule is treated as a wildcard mask, indicating which bits in the source IP address must match the destination address of the route.
Routing 232 ProSafe M5300 Switch OSPF Note: OSPF is a licensed feature and is available only on switches that have an active license installed. From the OSPF link, you can access the following pages: .
Routing 233 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • OSPF Configuration (Advanced) on page 234 • Common Area Configuration on page 237 • Stub A.
Routing 234 ProSafe M5300 Switch OSPF Configuration (Advanced) Use the OSPF Configuration page to enable OSPF on a router and to configure the related OSPF settings. To display the OSPF Configuration page, click Routing OSPF Advanced OSPF Configuration .
Routing 235 ProSafe M5300 Switch 3. Use Metric to specify the metric of the default route. The range of valid values is 0 to 16777214. 4. Use Metric Type to set the OSPF metric type of the default route. Two types are supported: • External Type 1 • External Type 2 - Default is External Type 2.
Routing 236 ProSafe M5300 Switch 9. Use Default Metric to set a default for the metric of redistributed routes. This field is blank if a default metric has not been configured. The range of valid values is 1 to 16777214. 10. Use Maximum Paths to set the number of paths that OSPF can report for a given destination.
Routing 237 ProSafe M5300 Switch Common Area Configuration The OSPF Common Area Configuration page lets you create a Common Area Configuration once you have enabled OSPF on an interface. At least one router must have OSPF enabled for this web page to display.
Routing 238 ProSafe M5300 Switch Stub Area Configuration To display the Stub Area Configuration page, click Routing OSPF Advanced Stub Area Configuration .
Routing 239 ProSafe M5300 Switch NSSA Area Configuration To display the NSSA Area Configuration page, click Routing OSPF Advanced NSSA Area Configuration .
Field Description SPF Runs The number of times that the intra-area route table has been calculated using this area's link-state database. This is typically done using Dijkstra's algorithm. Area Border Router Count The total number of area border routers reachable within this area.
Routing 241 ProSafe M5300 Switch Area Range Configuration Use the OSPF Area Range Configuration page to configure and display an area range for a specified NSSA. To display the Area Range Configuration page, click Routing OSPF Advanced Area Range Configuration .
Routing 242 ProSafe M5300 Switch Interface Configuration Use the OSPF Interface Configuration page to configure an OSPF interface. To display the Interface Configuration page, click Routing OSPF Advanced Interface Configuration . To configure an interface for OSPF: 1.
Routing 243 ProSafe M5300 Switch 3. Use Admin Mode * to select enable or disable. The default value is 'disable.' You can configure OSPF parameters without enabling OSPF Admin Mode, but they will have no effect until you enable Admin Mode.
Routing 244 ProSafe M5300 Switch 12. Use Authentication Type to select an authentication type other than none. You can select the authentication type from the pull-down menu. The choices are: • None: This is the initial interface state. If you select this option from the pull-down menu, no authentication protocols will be run.
Routing 245 ProSafe M5300 Switch State The current state of the selected router interface. One of: • Down: This is the initial interface state. In this state, the lower-level protocols have indicated that the interface is unusable. In this state, interface parameters will be set to their initial values.
Routing 246 ProSafe M5300 Switch OSPF Interface Statistics This screen displays statistics for the selected interface. The information will be displayed only if OSPF is enabled. To display the OSPF Interface Statistics page, click Routing OSPF Advanced OSPF Interface Statistics .
Routing 247 ProSafe M5300 Switch Interface Events The number of times the specified OSPF interface has changed its state, or an error has occurred. Virtual Events The number of state changes or errors that have occurred on this virtual link. Neighbor Events The number of times this neighbor relationship has changed state, or an error has occurred.
Routing 248 ProSafe M5300 Switch Click REFRESH to refresh the data on the screen to show the latest interface statistics. Click CLEAR to clear all the statistics of the OSPF interface. Hellos Sent The number of Hello packets sent on this interface by this router.
Routing 249 ProSafe M5300 Switch OSPF Neighbor Table This screen displays the OSPF neighbor table list. When a particular neighbor ID is specified, detailed information about a neighbor is given. The information below will only be displayed if OSPF is enabled.
Routing 250 ProSafe M5300 Switch Click REFRESH to show the latest DHCP bindings information. Click CLEAR to clear all the neighbors in the table. State The state of a neighbor can be the following: • Down - This is the initial state of a neighbor conversation.
Routing 251 ProSafe M5300 Switch Link State Database Use the OSPF Link State Database page to display OSPF link state information. To display the Link State Database page, click Routing OSPF Advanced Link State Database .
Routing 252 ProSafe M5300 Switch Click REFRESH to show the latest OSPF Link State information. Virtual Link Configuration Use the OSPF Virtual Link Configuration page to create or configure virtual interface information for a specific area and neighbor.
Routing 253 ProSafe M5300 Switch 3. Use Hello Interval to enter the OSPF hello interval for the specified interface in seconds. This parameter must be the same for all routers attached to a network. Valid values range from 1 to 65,535. The default is 10 seconds.
Field Description Neighbor State The OSPF interface state, it can be these values: • Down: This is the initial interface state. In this state, the lower-level protocols have indicated that the interface is unusable. In this state, interface parameters will be set to their initial values.
Routing 255 ProSafe M5300 Switch Route Redistribution This screen can be used to configure the OSPF Route Redistribution parameters. The allowable values for each fields are displayed next to the field. If any invalid values are entered, an alert message will be displayed with the list of all the valid values.
Routing 256 ProSafe M5300 Switch NSF OSPF Summary Use the NSF OSPF Configuration page to configure the non-stop forwarding (NSF) support mode and to view NSF summary information for the OSPF feature. NSF is a feature used in switch stacks to maintain switching and routing functions in the event of a stack unit failure.
Routing 257 ProSafe M5300 Switch OSPFv3 OSPFv3 is the Open Shortest Path First routing protocol for IPv6. It is similar to OSPFv2 in its concept of a link state database, intra/inter area, and AS external routes and virtual links.
Routing 258 ProSafe M5300 Switch Note: *Once OSPFv3 is initialized on the router, it will remain initialized until the router is reset. 3. Click APPLY to update the switch with the changes.
Routing 259 ProSafe M5300 Switch OSPFv3 Configuration Use the OSPFv3 Configuration page to activate and configure OSPFv3 for a switch. To display the OSPFv3 Configuration page, click Routing OSPFv3 Advanced OSPFv3 Configuration . Default Route Advertise 1.
Routing 260 ProSafe M5300 Switch OSPFv3 Configuration 1. Use Router ID to specify the 32-bit integer in dotted decimal format that uniquely identifies the router within the autonomous system (AS). If you want to change the Router ID you must first disable OSPFv3.
Field Description ASBR Mode Reflects whether the ASBR mode is enabled or disabled. Enable implies that the router is an autonomous system border router. Router automatically becomes an ASBR when it is configured to redistribute routes learnt from other protocol.
Routing 262 ProSafe M5300 Switch Common Area Configuration Use the Common Area Configuration page to create and configure an OSPFv3 area. To display the Common Area Configuration page, click Routing OSPFv3 Advanced Common Area Configuration .
Routing 263 ProSafe M5300 Switch Stub Area Configuration To display the Stub Area Configuration page, click Routing OSPFv3 Advanced Stub Area Configuration .
Routing 264 ProSafe M5300 Switch NSSA Area Configuration To display the NSSA Area Configuration page, click Routing OSPFv3 Advanced NSSA Area Configuration . 1. Use Area ID to enter the OSPF area ID. An Area ID is a 32-bit integer in dotted decimal format that uniquely identifies the area to which a router interface connects.
Routing 265 ProSafe M5300 Switch Area Range Configuration Use the Area Range Configuration page to configure OSPFv3 area ranges. To display the Area Range Configuration page, click Routing OSPFv3 Advanced Area Range Configuration . 1. Use Area ID to specify the area for which data is to be configured.
Routing 266 ProSafe M5300 Switch Interface Configuration Use the OSPFv3 Interface Configuration page to create and configure OSPFv3 interfaces. To display the Interface Configuration page, click Routing OSPFv3 Advanced Interface Configuration .
Routing 267 ProSafe M5300 Switch 4. Use Router Priority to enter the OSPFv3 priority for the selected interface. The priority of an interface is specified as an integer from 0 to 255.
Routing 268 ProSafe M5300 Switch Field Description IPv6 Address The IPv6 address of the interface. LSA Ack Interval The number of seconds between LSA Acknowledgment packet transmissions, which must be less than the Retransmit Interval. State The current state of the selected router interface.
Routing 269 ProSafe M5300 Switch Interface Statistics This screen displays statistics for the selected interface. The information will be displayed only if OSPFv3 is enabled. To display the Interface Statistics page, click Routing OSPFv3 Advanced Interface Statistics .
Routing 270 ProSafe M5300 Switch Use Interface to select the interface for which data is to be displayed. Field Description OSPFv3 Area ID The OSPFv3 area to which the selected router interface belongs. An OSPFv3 Area ID is a 32 bit integer in dotted decimal format that uniquely identifies the area to which the interface connects.
Routing 271 ProSafe M5300 Switch Invalid OSPF Packet Type The number of OSPFv3 packets discarded because the packet type field in the OSPFv3 header is not a known type.
Routing 272 ProSafe M5300 Switch Neighbor Table This screen shows the OSPFv3 Neighbor Table. This information is displayed only if OSPFv3 is enabled and there exists at least on OSPFv3 enabled interface having a valid neighbor. To display the Neighbor Table page, click Routing OSPFv3 Advanced Neighbor Table .
Routing 273 ProSafe M5300 Switch Link State Database Use the OSPFv3 Link State Database page to display the link state database. To display the Link State Database page, click Routing OSPFv3 Advanced Link State Database .
Routing 274 ProSafe M5300 Switch Click REFRESH to show the latest OSPFv3 Link State information. Age The time since the link state advertisement was first originated, in seconds. Sequence The sequence number field is a signed 32-bit integer. It is used to detect old and duplicate link state advertisements.
Routing 275 ProSafe M5300 Switch Virtual Link Configuration Use the Virtual Link Configuration page to define a new or configure an existing virtual link. To display this page, a valid OSPFv3 area must be defined via the OSPFv3 Area Configuration page.
Field Description Neighbor State The state of the Virtual Neighbor Relationship. State The state of the interface: • Down: This is the initial interface state. In this state, the lower-level protocols have indicated that the interface is unusable. In this state, interface parameters will be set to their initial values.
Routing 277 ProSafe M5300 Switch Route Redistribution This screen can be used to configure the OSPFv3 Route Redistribution parameters. The allowable range for each field is displayed next to it. If an invalid value is entered in one or multiple fields, an alert message will be displayed with the list of all the valid values.
Routing 278 ProSafe M5300 Switch NSF OSPFv3 Summary Use the NSF OSPFv3 Summary page to configure the non-stop forwarding (NSF) support mode and to view NSF summary information for the OSPF feature. NSF is a feature used in switch stacks to maintain switching and routing functions in the event of a stack unit failure.
Routing 279 ProSafe M5300 Switch Router Discovery The Router Discovery protocol is used by hosts to identify operational routers on the subnet. Router Discovery messages are of two types: Router Advertisements and Router Solicitations . The protocol mandates that every router periodically advertise the IP Addresses it is associated with.
Routing 280 ProSafe M5300 Switch VRRP The Virtual Router Redundancy protocol is designed to handle default router failures by providing a scheme to dynamically elect a backup router.
Routing 281 ProSafe M5300 Switch 3. Use Pre-empt Mode to select enable or disable. If you select enable, a backup router will preempt the master router if it has a priority greater than the master virtual router's priority provided the master is not the owner of the virtual router IP address.
Routing 282 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • VRRP Configuration on page 280 • VRRP Secondary IP on page 282 • Tracking Configuration on.
Routing 283 ProSafe M5300 Switch Tracking Configuration Use Tracking Configuration to track specific route IP states within the router that can alter the priority level of a virtual router for a VRRP group. To display the Tracking Configuration page, click Routing VRRP Advanced Tracking Configuration .
Routing 284 ProSafe M5300 Switch Virtual Router Statistics Use the Virtual Router Statistics page to display statistics for a specified virtual router. To display the Virtual Router Statistics page, click Routing VRRP Advanced Statistics .
Routing 285 ProSafe M5300 Switch Click REFRESH to show the latest VRRP information. Address List Errors The total number of packets received for which the address list does not match the locally configured list for the virtual router. Invalid Authentication Type The total number of packets received with an unknown authentication type.
Routing 286 ProSafe M5300 Switch Multicast IP Multicasting enables a network host (or multiple hosts) to send an IP datagram to multiple destinations simultaneously.
Routing 287 ProSafe M5300 Switch Mroute Table This screen displays contents of the Mroute Table in tabular form. To display the Mroute Table page, click Routing Multicast Mroute Table .
Routing 288 ProSafe M5300 Switch Multicast Global Configuration To display the Multicast Global Configuration page, click Routing Multicast Global Configuration . Use Admin Mode to set the administrative status of Multicast Forwarding in the router.
Routing 289 ProSafe M5300 Switch Multicast Interface Configuration To display the Multicast Interface Configuration page, click Routing Multicast Interface Configuration . To configure the TTL threshold for one or more interfaces: 1. Select the check box associated with each interface you want to configure.
Routing 290 ProSafe M5300 Switch DVMRP DVMRP is an interior gateway protocol that is suitable for routing multicast traffic within an autonomous system (AS). DVMRP should not be used between different autonomous systems due to limitations with hop count and scalability.
Routing 291 ProSafe M5300 Switch DVMRP Global Configuration To display the Global Configuration page, click Routing Multicast DVMRP Global Configuration . To configure global DVMRP settings: 1. Use Admin Mode to set the administrative status of DVMRP to active or inactive.
Routing 292 ProSafe M5300 Switch To configure per-interface DVMRP settings: 1. Use Interface to select the interface for which data is to be configured. 2. Use Interface Mode to set the administrative mode of the selected DVMRP routing interface. 3. Use Interface Metric to enter the DVMRP metric for the selected interface.
Routing 293 ProSafe M5300 Switch DVMRP Neighbor To display the DVMRP Neighbor page, click Routing Multicast DVMRP DVMRP Neighbor . To search for an entry in the DVMRP neighbor table, select the search criteria from the Search menu: • Interface .
Routing 294 ProSafe M5300 Switch DVMRP Next Hop To display the DVMRP Next Hop page, click Routing Multicast DVMRP DVMRP Next Hop . Field Description Source IP The IP address used with the source mask to identify the source network for this table entry.
Routing 295 ProSafe M5300 Switch DVMRP Route To display the DVMRP Route page, click Routing Multicast DVMRP DVMRP Route . Field Description Source Address The network address that is combined with the source mask to identify the sources for this entry.
Routing 296 ProSafe M5300 Switch IGMP The Internet Group Management Protocol (IGMP) is used by IPv4 systems (hosts, L3 switches, and routers) to report their IP multicast group memberships to any neighboring multicast routers.
Routing 297 ProSafe M5300 Switch IGMP Routing Interface Configuration To display the IGMP Routing Interface Configuration page, click Routing Multicast IGMP Routing Interface Configuration . To configure an interface for IGMP: 1. Use the check boxes associated with the Interface field to select each interface to configure.
Routing 298 ProSafe M5300 Switch 10. Use Last Member Query Count to enter the number of queries to be sent on receiving a leave group report. Valid values are from 1 to 20. The default value is 2. 11. Click APPLY to update the switch with the changes.
Routing 299 ProSafe M5300 Switch Click REFRESH to refresh the data on the screen with the latest IGMP interface statistics. IGMP Groups To display the IGMP Groups page, click Routing Multicast IGMP IGMP Groups .
Routing 300 ProSafe M5300 Switch Click REFRESH to refresh the data on the screen with latest IGMP groups information. IGMP Membership To display the IGMP Membership page, click Routing Multicast IGMP IGMP Membership . Field Description Group IP The IP multicast group address for which data is to be displayed.
Routing 301 ProSafe M5300 Switch IGMP Proxy Interface Configuration To display the IGMP Proxy Interface Configuration page, click Routing Multicast IGMP Proxy Interface Configuration . To configure an interface as an IGMP proxy: 1. Use Interface to select the port for which data is to be configured.
Routing 302 ProSafe M5300 Switch IGMP Proxy Interface Statistics To display the IGMP Proxy Interface Statistics page, click Routing Multicast IGMP Proxy Interface Statistics . Field Description Interface Displays the interface on which IGMP packets received.
Routing 303 ProSafe M5300 Switch IGMP Proxy Membership To display the IGMP Proxy Membership page, click Routing Multicast IGMP Proxy Membership . Field Description Group IP Displays the IP multicast group address. Proxy Interface Displays the interface on which IGMP proxy is enabled.
Routing 304 ProSafe M5300 Switch PIM The Protocol Independent Multicast protocol is a simple, protocol-independent multicast routing protocol. PIM uses an existing unicast routing table and a Join/Prune/Graft mechanism to build a tree. PIM The ProSafe managed switch supports two types of PIM: sparse mode (PIM-SM) and dense mode (PIM-DM).
Routing 305 ProSafe M5300 Switch SSM Configuration The settings on this page are valid for PIM-SM and do not apply if the PIM mode is PIM-DM. While PIM-SM employs a specially-configured RP router that.
Routing 306 ProSafe M5300 Switch PIM Interface Configuration To display the PIM Interface Configuration page, click Routing Multicast PIM Interface Configuration . To configure per-interface PIM settings: 1. Select the check box associated with each interface you want to configure.
Routing 307 ProSafe M5300 Switch PIM Neighbor To display the PI Neighbor page, click Routing Multicast PIM PIM Neighbor . Field Description Interface The interface on which neighbor is displayed. Neighbor IP The IP address of the PIM neighbor for this entry.
Routing 308 ProSafe M5300 Switch Candidate RP Configuration The settings on this page are valid for PIM-SM and do not apply if the PIM mode is PIM-DM. To display the PIM Candidate RP Configuration page, click Routing Multicast PIM-SM Candidate RP Configuration .
Routing 309 ProSafe M5300 Switch BSR Candidate Configuration The settings on this page are valid for PIM-SM and do not apply if the PIM mode is PIM-DM. To display the PIM BSR Candidate Configuration page, click Routing Multicast PIM-SM BSR Candidate Configuration .
Routing 310 ProSafe M5300 Switch Static RP Configuration This page is used to statically configure the RP address for one or more multicast groups. To display the PIM-SM Static RP Configuration page, click Routing Multicast PIM-SM Static RP Configuration .
Routing 311 ProSafe M5300 Switch Static Routes Configuration To display the Static Routes Configuration page, click Routing Multicast Static Routes Configuration . To configure a static multicast route: 1. Use Source IP to enter the IP Address that identifies the multicast packet source for the entry you are creating.
Routing 312 ProSafe M5300 Switch Admin Boundary Configuration The definition of an administratively scoped boundary is a mechanism to stop the ingress and egress of multicast traffic for a given range of multicast addresses on a given routing interface.
Routing 313 ProSafe M5300 Switch IPv6 Multicast The in the ProSafe M5300 switches support IPv6 multicast routing. From the IPv6 Multicast link, you can access the following pages: • Mroute Table on .
Routing 314 ProSafe M5300 Switch IPv6 PIM From the IPv6 PIM-DM link, you can access the following pages: • PIM Global Configuration on page 314 • PIM SSM Configuration on page 315 • PIM Interfac.
Routing 315 ProSafe M5300 Switch PIM SSM Configuration While PIM-SM employs a specially-configured RP router that serves as a meeting junction for multicast senders and listeners, Protocol-Independent Multicast Source Specific Multicast (PIM-SSM) does not use an RP.
Routing 316 ProSafe M5300 Switch PIM Interface Configuration To display the IPv6 PIM Interface Configuration page, click Routing IPv6 Multicast PIM Interface Configuration . To configure IPv6 PIM interface settings: 1. Select the check box associated with each interface you want to configure.
Routing 317 ProSafe M5300 Switch PIM Neighbor To display the IPv6 PIM Neighbor page, click Routing IPv6 Multicast PIM PIM-DM Neighbor . Field Description Interface The physical interface on which PIM-DM is enabled. Neighbor IP The IP address of the PIM neighbor for which this entry contains information.
Routing 318 ProSafe M5300 Switch PIM Candidate RP Configuration To display the IPv6 PIM Candidate RP Configuration page, click Routing IPv6 Multicast PIM Candidate RP Configuration . To configure candidate RP settings for IPv6 PIM-SM: 1.
Routing 319 ProSafe M5300 Switch PIM BSR Candidate Configuration To display the IPv6 PIM-SM BSR Candidate Configuration page, click Routing IPv6 Multicast PIM-SM BSR Candidate Configuration . To configure BSR candidate settings for IPv6 PIM-SM: 1.
Routing 320 ProSafe M5300 Switch PIM Static RP Configuration This page is used to statically configure the RP address for one or more multicast groups. To display the IPv6 PIM Static RP Configuration page, click Routing IPv6 Multicast PIM Static RP Configuration .
Routing 321 ProSafe M5300 Switch MLD MLD is used by IPv6 systems (listeners and routers) to report their IP multicast addresses memberships to any neighboring multicast routers.
Routing 322 ProSafe M5300 Switch MLD Routing Interface Configuration To display the MLD Routing Interface Configuration page, click Routing IPv6 Multicast MLD Routing Interface Configuration . To configure per-interface MLD settings: 1.
Routing 323 ProSafe M5300 Switch 8. Use Startup Query Count to specify the value that indicates the configured number of Queries sent out on startup, separated by the Startup Query Interval. 9. Use Last Member Query Interval to enter the last member query interval in milliseconds.
Routing 324 ProSafe M5300 Switch MLD Groups To display the MLD Groups page, click Routing IPv6 Multicast MLD MLD Groups . Field Description Interface Indicates the interface on which data is displayed. Group IP Indicates the address of the MLD members.
Routing 325 ProSafe M5300 Switch MLD Traffic To display the MLD Traffic page, click Routing IPv6 Multicast MLD MLD Traffic . Field Description Valid MLD Packets Received The number of valid MLD packets received by the router. Valid MLD Packets Sent The number of valid MLD packets sent by the router.
Routing 326 ProSafe M5300 Switch MLD Proxy Interface Configuration To display the MLD Proxy Interface Configuration page, click Routing IPv6 Multicast MLD Proxy Interface Configuration . To configure MLD proxy interface settings: 1. Use Interface to select the interface to be configured.
Routing 327 ProSafe M5300 Switch MLD Proxy Interface Statistics To display the MLD Proxy Interface Statistics page, click Routing IPv6 Multicast MLD Proxy Interface Statistics . Field Description Proxy Interface Displays the interface on which MLD Proxy packets received.
Routing 328 ProSafe M5300 Switch MLD Proxy Membership To display the MLD Proxy Membership page, click Routing IPv6 Multicast MLD Proxy Membership . Field Description Group IP The IPv6 multicast group address. Source Hosts This parameter shows source addresses which are members of this multicast address.
Routing 329 ProSafe M5300 Switch Static Routes Configuration To display the Static Routes Configuration page, click Routing IPv6 Multicast Static Routes Configuration . To configure static IPv6 multicast routes: 1. Use Source IP to enter the IP Address that identifies the multicast packet source for the entry you are creating.
Routing 330 ProSafe M5300 Switch.
331 5 5. Configuring Quality of Service Use the features in the QoS tab to configure Quality of Service (QoS) settings on the switch. The QoS tab contains links to the following features: • Class of.
Configuring Quality of Service 332 ProSafe M5300 Switch From the Class of Service link under the QoS tab, you can access the following pages: • Basic on page 332 • Advanced on page 333 Basic From .
Configuring Quality of Service 333 ProSafe M5300 Switch 3. Use Global Trust Mode to specify whether to trust a particular packet marking at ingress. Global Trust Mode can only be one of the following. Default value is trust dot1p. • untrusted • trust dot1p • trust ip-dscp 4.
Configuring Quality of Service 334 ProSafe M5300 Switch To map 802.1p priorities to queues: 1. Use Interface to specify CoS configuration settings based per-interface or specify all CoS configurable interfaces. 2. Specify which internal traffic class to map the corresponding 802.
Configuring Quality of Service 335 ProSafe M5300 Switch To map DSCP values to queues: 1. Use Interface to specify CoS configuration settings based per-interface or specify all CoS configurable interfaces. 2. The IP DSCP field displays an IP DSCP value from 0 to 63.
Configuring Quality of Service 336 ProSafe M5300 Switch 3. Use Interface Shaping Rate to specify the maximum bandwidth allowed, typically used to shape the outbound transmission rate. This value is controlled independently of any per-queue maximum bandwidth configuration.
Configuring Quality of Service 337 ProSafe M5300 Switch • Use Minimum Bandwidth to specify the minimum guaranteed bandwidth allotted to this queue. Setting this value higher than its corresponding Maximum Bandwidth automatically increases the maximum to the same value.
Configuring Quality of Service 338 ProSafe M5300 Switch To configure CoS Queue Drop Precedence Configuration settings: 1. From the Interface menu, select the interface to configure. 2. In the Queue ID field, select a queue to associate with the selected interface.
Configuring Quality of Service 339 ProSafe M5300 Switch Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors.
Configuring Quality of Service 340 ProSafe M5300 Switch DiffServ Wizard The DiffServ Wizard enables DiffServ on the switch by creating a traffic class, adding the traffic class to a policy, and then adding the policy to the ports selected on DiffServ Wizard page.
Configuring Quality of Service 341 ProSafe M5300 Switch To configure the switch using the DiffServ Wizard: 1. Use Traffic Type to define the DiffServ Class . Traffic type options: VOIP , HTTP , FTP , Telnet , and Every . 2. Ports displays the ports which can be configured to support a DiffServ policy .
Field Description DiffServ Admin Mode The options mode for DiffServ. The default value is 'enable'. While disabled, the DiffServ configuration is retained when saved and can be changed, but it is not activated. When enabled, Diffserv services are activated.
Configuring Quality of Service 343 ProSafe M5300 Switch Advanced • DiffServ Configuration on page 341 • Class Configuration on page 343 • IPv6 Class Configuration on page 346 • Policy Configur.
Configuring Quality of Service 344 ProSafe M5300 Switch To configure the class match criteria: 1. Click the class name for an existing class. The class name is a hyperlink. The following figure shows the configuration fields for the class. 2. Class Name - Displays the name for the configured DiffServ class.
Configuring Quality of Service 345 ProSafe M5300 Switch • Class of Service - This lists all the values for the class of service match criterion in the range 0 to 7 from which one can be selected. • VLAN - This is a value in the range of 0-4095. • Ethernet Type - This lists the keywords for the Ethertype from which one can be selected.
Configuring Quality of Service 346 ProSafe M5300 Switch IPv6 Class Configuration Use the IPv6 Class Configuration page to add a new IPv6 DiffServ class name, or to rename or delete an existing class. The page also allows you to define the criteria to associate with a DiffServ class.
Configuring Quality of Service 347 ProSafe M5300 Switch To configure the class match criteria: 1. Click the class name for an existing class. The class name is a hyperlink. The following figure shows the configuration fields for the class. 2. Class Name - Displays the name for the configured DiffServ class.
Configuring Quality of Service 348 ProSafe M5300 Switch • Source L4 Port - This lists the keywords for the known source layer 4 ports from which one can be selected. The list includes 'other' as an option for the unnamed ports. • Destination Prefix/Length - This is a valid Destination IPv6 Prefix to compare against an IPv6 Packet.
Configuring Quality of Service 349 ProSafe M5300 Switch 5. Click DELETE to delete the currently selected policy from the switch. To configure the policy attributes: 1. Click the name of the policy. The policy name is a hyperlink. The following figure shows the configuration fields for the policy.
Configuring Quality of Service 350 ProSafe M5300 Switch • Mark IP DSCP - This lists the keywords for the known DSCP values from which one can be selected. The list includes 'other' as an option for the remaining values. • Simple Policy - Use this attribute to establish the traffic policing style for the specified class.
Field Description Policy Name Displays name of the DiffServ policy. Policy Type Displays type of the policy as In Member Class Name Displays name of each class instance within the policy.
Configuring Quality of Service 352 ProSafe M5300 Switch Service Statistics This screen displays class-oriented statistical information for the policy, which is specified by the interface and direction.
Configuring Quality of Service 353 ProSafe M5300 Switch Discarded Packets/Octets A count of the total number of packets/octets discarded for all class instances in this service policy for any reason due to DiffServ treatment. This is the overall count per-interface, per-direction.
Configuring Quality of Service 354 ProSafe M5300 Switch.
355 6 6. Managing Device Security Use the features available from the Security tab to configure management security settings for port, user, and server security.
Managing Device Security 356 ProSafe M5300 Switch Local User From the Local User link, you can access the following pages: • User Management on page 356 • User Password Configuration on page 357 U.
Managing Device Security 357 ProSafe M5300 Switch 5. Access Mode indicates the user's access mode. The admin account always has 'Read/Write' access, and all other accounts have 'Read Only' access. 6. Click ADD to add a user account with 'Read Only' access.
Managing Device Security 358 ProSafe M5300 Switch Enable Password Configuration Use this page to configure a local password to control CLI access to privileged levels. Passwords are a maximum of 64 alphanumeric characters. The password is case sensitive.
Managing Device Security 359 ProSafe M5300 Switch To configure the line password: 1. Use Console Password to enter the Console password. Passwords are a maximum of 64 alphanumeric characters. 2. Use Confirm Console Password to enter the password again, to confirm that you entered it correctly.
Managing Device Security 360 ProSafe M5300 Switch Radius Configuration Use the Radius Configuration page to add information about one or more RADIUS servers on the network. To access the Radius Configuration page, click Security Management Security RADIUS Radius Configuration.
Managing Device Security 361 ProSafe M5300 Switch all configured servers. If the RADIUS request was generated by a user login attempt, all user interfaces will be blocked until the RADIUS application returns a response. 3. From the Accounting Mode menu, select whether the RADIUS accounting mode is enabled or disabled on the current server.
Managing Device Security 362 ProSafe M5300 Switch 2. Click ADD to add a new server to the switch. This button is only available to READWRITE users. These changes will not be retained across a power cycle unless a save is performed. 3. Click DELETE to remove the selected server from the configuration.
Managing Device Security 363 ProSafe M5300 Switch Accounting Server Configuration Use the RADIUS Accounting Server Configuration page to view and configure various settings for one or more RADIUS accounting servers on the network.
Field Description Accounting Server Address Identifies the accounting server associated with the statistics. Round Trip Time(secs) Displays the time interval, in hundredths of a second, between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.
Managing Device Security 365 ProSafe M5300 Switch The TACACS+ folder contains links to the following features: • Configuring TACACS+ on page 364 • TACACS+ Server Configuration on page 365 TACACS+ .
Managing Device Security 366 ProSafe M5300 Switch To configure TACACS+ server settings: 1. Use TACACS+ Server to enter the configured TACACS+ server IP address. 2. Use Priority to specify the order in which the TACACS+ servers are used. It should be within the range 0-65535.
Managing Device Security 367 ProSafe M5300 Switch To configure the authentication lists for access to the switch management interface: 1. List Name - If you are creating a new login list, enter the name you want to assign. It can be up to 15 alphanumeric characters long and is not case sensitive.
Managing Device Security 368 ProSafe M5300 Switch To configure authentication list methods for enable access: 1. List Name - If you are creating a new enable list, enter the name you want to assign. It can be up to 15 alphanumeric characters long and is not case sensitive.
Managing Device Security 369 ProSafe M5300 Switch Dot1x Authentication List You use this page to configure IEEE 802.1X (Dot1x) lists. Dot1x controls port-based access to the network through a switch port that is controlled by IEEE 802.
Managing Device Security 370 ProSafe M5300 Switch To configure authentication list methods for HTTP access: 1. List Name - Select the HTTP list name for which you want to configure data. 2. Use the drop-down menu to select the method that should appear first in the selected authentication login list.
Managing Device Security 371 ProSafe M5300 Switch • Tacacs - The user's ID and password will be authenticated using the TACACS+ server. • None - The user will not be authenticated. 3. Use the drop-down menu to select the method, if any, that should appear second in the selected authentication login list.
Managing Device Security 372 ProSafe M5300 Switch Configuring Management Access From the Access page, you can configure HTTP and Secure HTTP access to the ProSafe M5300 management interface.
Managing Device Security 373 ProSafe M5300 Switch To configure the HTTP server settings: 1. Use HTTP Access to specify whether the switch may be accessed from a web browser. If you choose to enable web mode you will be able to manage the switch from a web browser.
Managing Device Security 374 ProSafe M5300 Switch To configure HTTPS settings: 1. Use HTTPS Admin Mode to Enable or Disable the Administrative Mode of Secure HTTP. The currently configured value is shown when the web page is displayed. The default value is Disable.
Managing Device Security 375 ProSafe M5300 Switch Certificate Management Use this menu to generate or delete certificates. To display the Certificate Management page, click Security Access > HTTPS HTTPS Certificate Management . To manage certificates: 1.
Managing Device Security 376 ProSafe M5300 Switch To configure the certificate download settings for HTTPS sessions: 1. Use File Type to specify the type of file you want to transfer: • SSL Trusted .
Managing Device Security 377 ProSafe M5300 Switch SSH From the SSH link, you can access the following pages: • SSH Configuration on page 377 • Host Keys Management on page 378 • Host Keys Download on page 379 SSH Configuration To display the SSH Configuration page, click Security Access > SSH SSH Configura tion .
Field Description Current Number of SSH Sessions Displays the number of SSH connections currently in use in the system. Keys Present Displays which keys, RSA, DSA or both, are present (if any). Managing Device Security 378 ProSafe M5300 Switch Host Keys Management Use this menu to generate or delete RSA and DSA keys.
Field Description Keys Present Displays which keys, RSA, DSA or both, are present (if any). Key Generation In Progress Displays which key is being generated (if any), RSA, DSA or None. Managing Device Security 379 ProSafe M5300 Switch Host Keys Download Use this page to transfer a host key file to the switch from a remote host.
Managing Device Security 380 ProSafe M5300 Switch Telnet To display the Telnet page, click Security Access > Telnet . Telnet Authentication List This page allows you to select the login and enable authentication list available.
Managing Device Security 381 ProSafe M5300 Switch Outbound Telnet Client Configuration This page regulates new outbound telnet connections. If Allow New Telnet Sessions are enabled, new outbound telnet sessions can be established until there are no more sessions available.
Field Description Character Size (bits) The number of bits in a character. This is always 8. Flow Control Whether hardware flow control is enabled or disabled. It is always disabled. Stop Bits The number of stop bits per character. Its is always 1. Parity The parity method used on the serial port.
Managing Device Security 383 ProSafe M5300 Switch 3. Use Denial of Service Max ICMP Packet Size to specify the Max ICMPv4 Packet Size allowed (This includes the ICMP header size of 8 bytes).
Managing Device Security 384 ProSafe M5300 Switch Access Control The Access Control feature allows you to configure settings that control management access to the switch.. Access Control configure requires three steps: 1. Use the Access Profile Configuration page to create an access profile.
Managing Device Security 385 ProSafe M5300 Switch 4. To remove an access profile, select the Remove Profile check box. The access profile should be deactivated before removing the access profile. 5. Click CANCEL to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Managing Device Security 386 ProSafe M5300 Switch 1. To add an access profile rule, configure the following settings and click Add . • Rule Type : Specify whether the rule permits or denies access to the ProSafe M5300 management interface.
Managing Device Security 387 ProSafe M5300 Switch • Supplicants - Specifies the host connected to the authenticated port requesting access to the system services.
Managing Device Security 388 ProSafe M5300 Switch Note: If 802.1X is enabled, authentication is performed by a RADIUS server. This means the primary authentication method must be RADIUS. To set the method, go to Security > Management Security > Authentication List and select RADIUS as method 1 for defaultList.
Managing Device Security 389 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • 802.1X Configuration on page 389 • Port Authentication on page 390 • Port Summary on page 393 • Client Summary on page 396 802.
Managing Device Security 390 ProSafe M5300 Switch Port Authentication Use the Port Authentication page to enable and configure port access control on one or more ports. To access the Port Authentication page, click Security Port Authentication > Advanced Port Authentication .
Managing Device Security 391 ProSafe M5300 Switch • auto - The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant, authenticator, and the authentication server.
Managing Device Security 392 ProSafe M5300 Switch • Maximum Requests - This input field allows the user to enter the maximum requests for the selected port. The maximum requests value is the maximum number of times the authenticator state machine on this port will retransmit an EAPOL EAP Request/Identity before timing out the supplicant.
Managing Device Security 393 ProSafe M5300 Switch Port Summary Use the Port Summary page to view information about the port access control settings on a specific port. To access the Port Summary page, click Security Port Authentication Advanced Port Summary .
Managing Device Security 394 ProSafe M5300 Switch Operating Control Mode This field indicates the control mode under which the port is actually operating. Possible values are: • ForceUnauthorized • ForceAuthorized • Auto • N/A: If the port is in detached state it cannot participate in port access control.
Managing Device Security 395 ProSafe M5300 Switch Vlan Assigned This field displays the vlan id assigned to the selected interface by the Authenticator. This field is displayed only when the port control mode of the selected interface is not mac-based.
Managing Device Security 396 ProSafe M5300 Switch Client Summary To access the Client Summary page, click Security Port Authentication Advanced Client Summary . Field Description Port The port to be displayed. User Name This field displays the User Name representing the identity of the supplicant device.
Managing Device Security 397 ProSafe M5300 Switch Traffic Control From the Traffic Control link, you can configure MAC Filters, Storm Control, Port Security, and Protected Port settings. To display the page, click the Security Traffic Control tab.
Managing Device Security 398 ProSafe M5300 Switch To configure MAC filter settings: 1. Select Create Filter from the MAC Filter menu. a. This is the list of MAC address and VLAN ID pairings for all configured filters. To change the port mask(s) for an existing filter, select the entry you want to change.
Managing Device Security 399 ProSafe M5300 Switch MAC Filter Summary Use the MAC Filter Summary page to view the MAC filters that are configured on the system. To display the MAC Filter Summary page, click Security Traffic Control> MAC Filter MAC Filter Summary.
Managing Device Security 400 ProSafe M5300 Switch To configure the global port security mode: 1. In the Port Security Mode field, select the appropriate radio button to enable or disable port security on the switch. 2. Click APPLY to update the switch with the change.
Managing Device Security 401 ProSafe M5300 Switch To configure port security settings: 1. Port - Selects the interface to be configured. 2. Select the check box next to the port or LAG to configure. Select multiple check boxes to apply the same setting to all selected interfaces.
Managing Device Security 402 ProSafe M5300 Switch Dynamic MAC Address Use the Dynamic MAC Address page to convert a dynamically learned MAC address to a statically locked address. To display the Dynamic MAC Address page, click Security Traffic Control> Port Security Dynamic MAC Address.
Managing Device Security 403 ProSafe M5300 Switch Static MAC Address Use this page to add and remove the MAC addresses of hosts that are allowed to send traffic to specific interfaces on the device. The number of MAC addresses you can associate with each interface is determined by the maximum static MAC addresses allowed on a given interface.
Managing Device Security 404 ProSafe M5300 Switch Private Group The Private Group feature provides Layer 2 isolation between ports that share the same broadcast domain.
Managing Device Security 405 ProSafe M5300 Switch Private Group Membership Use this page to configure the ports that belong to the existing private groups. To display the Private Group Membership page, click Security Traffic Control> Private Group Private Group Membership.
Managing Device Security 406 ProSafe M5300 Switch Protected Ports Configuration If a port is configured as protected, it does not forward traffic to any other protected port on the switch, but it will forward traffic to unprotected ports. Use the Protected Ports Configuration page to configure the ports as protected or unprotected.
Managing Device Security 407 ProSafe M5300 Switch Private VLAN The Private VLANs feature provides Layer 2 isolation between ports that share the same broadcast domain. In other words, it allows a VLAN broadcast domain to be partitioned into smaller point-to-multipoint subdomains.
Managing Device Security 408 ProSafe M5300 Switch To configure the private VLAN type: 1. Select the check box associated with each VLAN to configure. To apply the same settings to all VLANs, select the check box in the header row. 2. Use the Private VLAN Type menu to identify a group of protected ports that can be combined into a logical group.
Managing Device Security 409 ProSafe M5300 Switch 2. In the Secondary VLAN field, specify the VLAN ID of the VLAN to associate with the selected primary VLAN. 3. Click APPLY to send the updated configuration to the switch. Configuration changes take effect immediately.
Managing Device Security 410 ProSafe M5300 Switch 4. Click CANCEL to cancel the configuration on the screen. Private VLAN Host Interface Configuration Use this page to map host ports to primary and secondary private VLANs.
Managing Device Security 411 ProSafe M5300 Switch Private VLAN Promiscuous Interface Configuration Use this page to associate a port with a promiscuous primary VLAN. An endpoint connected to a promiscuous port is allowed to communicate with any endpoint within the private VLAN.
Managing Device Security 412 ProSafe M5300 Switch Storm Control A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses can overload network resources and/or cause the network to time out.
Managing Device Security 413 ProSafe M5300 Switch Storm Control Interface Configuration To display the Storm Control Interface Configuration page, click Security Traffic Control> Storm Control Storm Control Interface Configuration.
Managing Device Security 414 ProSafe M5300 Switch Control To display the page, click the Security Control tab. The Control folder contains links to the following features: • DHCP Snooping on pag.
Managing Device Security 415 ProSafe M5300 Switch DHCP Snooping Global Configuration Use this page to configure the administrative mode of DHCP snooping on the switch and to enable DHCP snooping on VLANS. When enabled on a VLAN, DHCP snooping forwards valid DHCP client messages it receives in the VLAN.
Managing Device Security 416 ProSafe M5300 Switch DHCP Snooping Interface Configuration To display the DHCP Snooping Interface Configuration page, click Security Control> DHCP Snooping Interface Configuration. To configure interfaces for DHCP snooping: 1.
Managing Device Security 417 ProSafe M5300 Switch DHCP Snooping Binding Configuration To display the DHCP Snooping Binding Configuration page, click Security Control> DHCP Snooping Binding Configuration. To configure static DHCP snooping bindings: 1.
Managing Device Security 418 ProSafe M5300 Switch DHCP Snooping Persistent Configuration To display the DHCP Snooping Persistent Configuration page, click Security Control> DHCP Snooping Persistent Configuration. 1. Use Store to select the local store or remote store.
Field Description Interface The untrusted and snooping enabled interface for which statistics to be displayed. MAC Verify Failures Number of packets that were dropped by DHCP Snooping as there is no matching DHCP Snooping binding entry found.
Managing Device Security 420 ProSafe M5300 Switch IP Source Guard Interface Configuration To display the IP Source Guard Interface Configuration page, click Security Control> IP Source Guard Interface Configuration. To configure interfaces for IPSG: 1.
Managing Device Security 421 ProSafe M5300 Switch Static Binding Configuration 1. Interface - Selects the interface to add a binding into the IPSG database. 2. Use MAC Address to specify the MAC address for the binding. 3. Use VLAN ID to select the VLAN from the list for the binding rule.
Managing Device Security 422 ProSafe M5300 Switch DAI Configuration To display the DAI Configuration page, click Security Control> Dynamic ARP Inspection DAI Configuration. To configure global DAI settings: 1. Use Validate Source MAC to choose the DAI Source MAC Validation Mode for the switch by selecting Enable or Disable radio button.
Managing Device Security 423 ProSafe M5300 Switch 3. Use Logging Invalid Packets to indicate whether the Dynamic ARP Inspection logging is enabled on this VLAN. If this object is set to 'Enable' it will log the Invalid ARP Packets information.
Managing Device Security 424 ProSafe M5300 Switch DAI ACL Configuration Use this page to add DAI access control lists (ACL) and to view DAI ACLs that have been configured. To display the DAI ACL Configuration page, click Security Control> Dynamic ARP Inspection DAI ACL Configuration.
Managing Device Security 425 ProSafe M5300 Switch DAI Statistics This screen shows the Statistics per VLAN. To display the DAI Statistics page, click Security Control> Dynamic ARP Inspection DAI Statistics. Field Description VLAN The enabled VLAN ID for which statistics to be displayed.
Managing Device Security 426 ProSafe M5300 Switch Captive Portal The Captive Portal (CP) feature allows you to block wired and wireless clients from accessing the network until user verification has been established. You can configure CP verification to allow access for both guest and authenticated users.
Managing Device Security 427 ProSafe M5300 Switch 1. Use Admin Mode to enable or disable Captive Portal feature. By default, the Captive Portal feature is disabled. 2. Use Additional HTTP Port to configure an additional port for HTTP traffic (HTTP traffic uses port 80), but you can configure an additional port for HTTP traffic.
Managing Device Security 428 ProSafe M5300 Switch Captive Portal Configuration By default, the switch has one captive portal. You can change the settings for that captive portal, and you can also create and configure up to nine additional portals.
Managing Device Security 429 ProSafe M5300 Switch 6. Use Block to control the blocked status. If the CP is blocked, users cannot gain access to the network through the CP. Use this function to temporarily protect the network during unexpected events, such as denial of service attacks.
Managing Device Security 430 ProSafe M5300 Switch Captive Portal Binding Configuration You can associate a configured captive portal with a specific network (SSID). The CP feature only runs on the interfaces you specify. A CP can have multiple interfaces associated with it, but an interface can be associated to only one CP at a time.
Field Description Interface The interface for which you want to view information. CP ID The ID of captive portal instance. Operational Status Shows whether the portal is active on the specified interface. Block Status Indicates whether the captive portal is temporarily blocked for authentications.
Managing Device Security 432 ProSafe M5300 Switch Captive Portal User Configuration When you click Add from the CP User Configuration page, the screen refreshes, and you can add a new user to the Local User database. To display the Captive Portal User Configuration page, click Security Control> Captive Portal CP User Configuration.
Managing Device Security 433 ProSafe M5300 Switch 10. Use Max Bandwidth Up to specify the maximum rate (Rate in bits per seconds) at which a client can send data into the network. 0 indicates to use the global limit (Range: 0 – 536870911 bps.) 11. Use Max Output to specify the number of octets the user is allowed to transmit.
Managing Device Security 434 ProSafe M5300 Switch Captive Portal Client To display the Captive Portal Client page, click Security Control> Captive Portal CP Client.
Managing Device Security 435 ProSafe M5300 Switch Configuring Access Control Lists Access Control Lists (ACLs) ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources.
Managing Device Security 436 ProSafe M5300 Switch Note: There is an implicit “deny all” rule at the end of an ACL list. This means that if an ACL is applied to a packet and if none of the explicit rules match, then the final implicit “deny all” rule applies and the packet is dropped.
Managing Device Security 437 ProSafe M5300 Switch 7. Click DELETE to remove the currently selected Rule from the ACL based on destination MAC. 8. Click CANCEL to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Managing Device Security 438 ProSafe M5300 Switch The MAC ACL table displays the number of ACLs currently configured in the switch and the maximum number of ACLs that can be configured. The current size is equal to the number of configured IPv4 ACLs plus the number of configured MAC ACLs.
Managing Device Security 439 ProSafe M5300 Switch • Assign Queue Id - Specifies the hardware egress queue identifier used to handle all packets matching this ACL rule. Valid range of Queue Ids is (0 to 6). • CoS - Specifies the 802.1p user priority to compare against an Ethernet frame.
Managing Device Security 440 ProSafe M5300 Switch MAC Binding Configuration When an ACL is bound to an interface, all the rules that have been defined are applied to the selected interface. Use the MAC Binding Configuration page to assign MAC ACL lists to ACL Priorities and Interfaces.
Managing Device Security 441 ProSafe M5300 Switch 5. Click APPLY to save any changes to the running configuration. MAC Binding Table Use the MAC Binding Table page to view or delete the MAC ACL bindings. To display the MAC Binding Table, click Security ACL> Basic Binding Table .
Managing Device Security 442 ProSafe M5300 Switch IP ACL An IP ACL consists of a set of rules which are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken and the additional rules are not checked for a match.
Managing Device Security 443 ProSafe M5300 Switch IP Rules Use these screens to configure the rules for the IP Access Control Lists created using the IP Access Control List Configuration screen. What is shown on this screen varies depending on the current step in the rule configuration process.
Managing Device Security 444 ProSafe M5300 Switch • Action - Selects the ACL forwarding action, which is one of the following: • Permit - Forwards packets which meet the ACL criteria.
Managing Device Security 445 ProSafe M5300 Switch 4. To update an IP ACL rule, select the check box associated with the rule, update the desired fields, and then click APPLY .
Managing Device Security 446 ProSafe M5300 Switch 2. Configure the desired criteria for the new rule. • Rule ID - Specify a number from 1–12 to identify the IP ACL rule.
Managing Device Security 447 ProSafe M5300 Switch remove the rule and re-create it, or re-configure 'Match Every' to 'False' for the other match criteria to be visible. • Protocol Keyword - Specify that a packet's IP protocol is a match condition for the selected IP ACL rule.
Managing Device Security 448 ProSafe M5300 Switch • IP Precedence - The IP Precedence field in a packet is defined as the high-order three bits of the Service Type octet in the IP header. This is an optional configuration. Enter an integer from 0 to 7.
Managing Device Security 449 ProSafe M5300 Switch IPv6 ACL An IP ACL consists of a set of rules which are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken and the additional rules are not checked for a match.
Managing Device Security 450 ProSafe M5300 Switch IPv6 Rules Use these screens to configure the rules for the IPv6 Access Control Lists, which is created using the IPv6 Access Control List Configuration screen. By default, no specific value is in effect for any of the IPv6 ACL rules.
Managing Device Security 451 ProSafe M5300 Switch 2. Use Rule ID to enter a whole number in the range of 1 to 12 that will be used to identify the rule. An IP ACL may have up to 12 rules. 3. Configure the desired rule attributes: • Use Action to specify what action should be taken if a packet matches the rule's criteria.
Managing Device Security 452 ProSafe M5300 Switch • Use Source L4 Port to specify a packet's source layer 4 port as a match condition for the selected IPv6 ACL rule.
Managing Device Security 453 ProSafe M5300 Switch IP Binding Configuration When an ACL is bound to an interface, all the rules that have been defined are applied to the selected interface. Use the IP Binding Configuration page to assign ACL lists to ACL Priorities and Interfaces.
Field Description Interface Displays selected interface. Direction Displays selected packet filtering direction for ACL. ACL Type Displays the type of ACL assigned to selected interface and direction.
Managing Device Security 455 ProSafe M5300 Switch VLAN Binding Table Use this page to bind ACLs to VLANs on the switch rather than to ports. At the bottom of the page, the table displays any currently-configured ACLs for the selected VLAN.
Managing Device Security 456 ProSafe M5300 Switch.
457 7 7. Monitoring the System Use the features available from the Monitoring tab to view a variety of information about the switch and its ports and to configure how the switch monitors events.
Monitoring the System 458 ProSafe M5300 Switch Port Statistics The Port Statistics page displays a summary of per-port traffic statistics on the switch. To access the Port Statistics page, click Monitoring Ports> Port Statistics . The following table describes the per-port statistics displayed on the screen.
Monitoring the System 459 ProSafe M5300 Switch Port Detailed Statistics The Port Detailed Statistics page displays a variety of per-port traffic statistics. To access the Port Detailed page, click Monitoring Ports> Port Detailed Statistics . (Following figure show some, but not all, of the fields on the Port Detailed Statistics page.
Monitoring the System 460 ProSafe M5300 Switch The following table describes the detailed port information displayed on the screen. To view information about a different port, select the port number from the Interface menu. Use the buttons at the bottom of the page to perform the following actions: • Click CLEAR to clear all the counters.
Monitoring the System 461 ProSafe M5300 Switch Physical Mode Indicates The port speed and duplex mode. In auto-negotiation mode the duplex mode and speed are set from the auto-negotiation process. Physical Status Indicates the port speed and duplex mode.
Monitoring the System 462 ProSafe M5300 Switch Packets Received 128-255 Octets The total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).
Monitoring the System 463 ProSafe M5300 Switch Rx FCS Errors The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, in.
Monitoring the System 464 ProSafe M5300 Switch Packets Transmitted 128-255 Octets The total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).
Monitoring the System 465 ProSafe M5300 Switch Multiple Collision Frames A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by more than one collision. Excessive Collision Frames A count of frames for which transmission on a particular interface fails due to excessive collisions.
Monitoring the System 466 ProSafe M5300 Switch EAP Statistics Use the EAP Statistics page to display information about EAP packets received on a specific port. To display the EAP Statistics page, click Monitoring Ports > EAP Statistics . The following table describes the EAP statistics displayed on the screen.
Monitoring the System 467 ProSafe M5300 Switch Cable Test To display the Cable Test page, click Monitoring Ports > Cable Test . EAPOL Last Frame Version This displays the protocol version number carried in the most recently received EAPOL frame.
Monitoring the System 468 ProSafe M5300 Switch 1. Interface - Indicates the interface to which the cable to be tested is connected. 2. Click APPLY to perform a cable test on the selected interface.
Monitoring the System 469 ProSafe M5300 Switch Buffered Logs To access the Buffered Logs page, click Monitoring Logs > Buffered Logs . Buffered Log Configuration This log stores messages in memory based upon the settings for message component and severity.
Monitoring the System 470 ProSafe M5300 Switch Format of the messages Messages logged to a collector or relay via syslog have an identical format of either type: If system is not stacked • <15>Aug 24 05:34:05 STK0 MSTP[2110]: mspt_api.c(318) 237 %% Interface 12 transitioned to root state on message age timer expiry.
Monitoring the System 471 ProSafe M5300 Switch Console Log Configuration This allows logging to any serial device attached to the host. To access the Console Log Configuration page, click Monitoring Logs > Console Log Configuration . 1. A log that is “Disabled” shall not log messages.
Monitoring the System 472 ProSafe M5300 Switch 1. Use Admin Status to enable/disable logging to configured syslog hosts. Setting this to disable stops logging to all syslog hosts.
Monitoring the System 473 ProSafe M5300 Switch The following table describes the Trap Log information displayed on the screen. The page also displays information about the traps that were sent. Click Clear Counters to clear all the counters. This resets all statistics for the trap logs to the default values.
Field Description Number of Traps Since Last Reset The number of traps that have occurred since the switch last reboot. Trap Log Capacity The maximum number of traps stored in the log. If the number of traps exceeds the capacity, the entries will overwrite the oldest entries.
Monitoring the System 475 ProSafe M5300 Switch The following table describes the Event Log information displayed on the screen. Use the buttons at the bottom of the page to perform the following actions: • Click CLEAR to clear the messages out of the Event Log.
Field Description Entry The sequence number of the event. Type The type of the event. File Name The file in which the event originated. Line The line number of the event. Task Id The task ID of the event. Code The event code. Time The time this event occurred.
Monitoring the System 477 ProSafe M5300 Switch • Error (3) - error conditions • Warning (4) - warning conditions • Notice(5) - normal but significant conditions • Informational(6) - informational messages • Debug(7) - debug-level messages 3.
Monitoring the System 478 ProSafe M5300 Switch Use the Multiple Port Mirroring page to define port mirroring sessions. To access the Multiple Port Mirroring page, click Monitoring Mirroring > Port Mirroring . To configure Port Mirroring: 1. Select the check box next to each port to configure as a source port.
Monitoring the System 479 ProSafe M5300 Switch sFlow sFlow ® is a standard for monitoring high-speed switched and routed networks. sFlow technology is built into network equipment and gives complete visibility into network activity, enabling effective management and control of network resources.
Monitoring the System 480 ProSafe M5300 Switch To display the sFlow Agent page, click Monitoring sFlow Basic sFlow Agent . Field Description Agent Version Uniquely identifies the version and implementation of this MIB.
Monitoring the System 481 ProSafe M5300 Switch sFlow Receiver Configuration Use the sFlow Receiver Configuration page to configure the sFlow Receiver. To display the sFlow Receiver Configuration page, click Monitoring sFlow Advanced sFlow Receiver Configuration .
Monitoring the System 482 ProSafe M5300 Switch sFlow Interface Configuration sFlow agent collects statistical packet-based sampling of switched flows and sends them to the configured receivers. A data source configured to collect flow samples is called a sampler.
483 8 8. Maintenance Use the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains links to the following features: • Save Configuration on page 483.
Maintenance 484 ProSafe M5300 Switch Auto Install Configuration The AutoInstall feature enables the configuration of a switch automatically when the device is turned on and, during the boot process, no configuration file is found in device storage.
Maintenance 485 ProSafe M5300 Switch To configure the auto install settings: 1. Use Auto Install to enable/disable start/stop auto install mode on the switch. 2. Select the Auto Save check box and click the APPLY button to have configuration changes you have made saved across a system reboot.
Maintenance 486 ProSafe M5300 Switch Factory Default Use the Factory Default page to reset the system configuration to the factory default values. Note: If you reset the switch to the default configuration, the IP address is reset to 192.168.1.1, and the DHCP client is enabled.
Maintenance 487 ProSafe M5300 Switch Upload File From Switch Use the File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to the TFTP server.
Maintenance 488 ProSafe M5300 Switch • Tech Support - Specify Tech Support to retrieve the switch information needed for trouble-shooting. The factory default is Archive.
Maintenance 489 ProSafe M5300 Switch • Error Log - Specify error log to retrieve the system error (persistent) log, sometimes referred to as the event log. • Trap Log - Specify trap log to retrieve the system trap records. • Buffered Log - Specify buffered log to retrieve the system buffered (in-memory) log.
Maintenance 490 ProSafe M5300 Switch Download File To Switch The switch supports system file downloads from a remote system to the switch by using either TFTP or HTTP.
Maintenance 491 ProSafe M5300 Switch • Use SSL Trusted Root Certificate PEM File to specify SSL Trusted Root Certificate File (PEM Encoded). • Use SSL Server Certificate PEM File to specify SSL Server Certificate File (PEM Encoded).
Maintenance 492 ProSafe M5300 Switch HTTP File Download Use the HTTP File Download page to download files of various types to the switch using an HTTP session (for example, via your Web browser). To display this page, click Maintenance Download HTTP File Download .
Maintenance 493 ProSafe M5300 Switch 2. If you are downloading a GSM7352Sv1 or GSM7352Sv2 image (Archive), select the image on the switch to overwrite. This field is only visible when Archive is selected as the File Type. Note: It is recommended that you not overwrite the active image.
Maintenance 494 ProSafe M5300 Switch USB File Download Use this menu to download a file from the switch to USB device. To display the HTTP File Upload page, click Maintenance Download USB File Upload .
Maintenance 495 ProSafe M5300 Switch File Management The system maintains two versions of the ProSafe software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded during subsequent switch restarts.
Maintenance 496 ProSafe M5300 Switch Dual Image Configuration The Dual Image feature allows switch to retain two images in permanent storage. The user designates one of these images as the active image to be loaded during subsequent switch restarts. This feature reduces switch down time when upgrading / downgrading the image.
Maintenance 497 ProSafe M5300 Switch Troubleshooting The Troubleshooting menu contains links to the following options: • Ping IPv4 on page 497 • Ping IPv6 on page 498 • Traceroute IPv4 on page 499 • Traceroute IPv6 on page 500 Ping IPv4 Use this screen to tell the switch to send a Ping request to a specified IP address.
Maintenance 498 ProSafe M5300 Switch • Count - Enter the number of echo requests you want to send. The initial value is default value. The Count you enter is not retained across a power cycle. • Interval (secs) - Enter the Interval between ping packets in seconds.
Maintenance 499 ProSafe M5300 Switch Traceroute IPv4 Use this screen to tell the switch to send a TraceRoute request to a specified IP address or Hostname.
Maintenance 500 ProSafe M5300 Switch • InitTTL - Enter the initial TTL to be used. The initial value is default value. The InitTTL you enter is not retained across a power cycle. • MaxFail - Enter the maximum Failures allowed in the session. The initial value is default value.
501 9 9. Help Use the features available from the Help tab to connect to online resources for assistance. The Help tab contains a links to the following: • Online Help on page 501 • Registration o.
Help 502 ProSafe M5300 Switch User Guide Use the User Guide page to access the Web Management User Guide (the guide you are now reading) that is available on the NETGEAR Website. To access the User Guide page, click Help Online Help > User Guide .
Help 503 ProSafe M5300 Switch Registration Use the Registration page to register your ProSafe M5300 switch. Completing the registration confirms your e-mail address, lowers technical support resolution time, and ensures your shipping address accuracy.
Help 504 ProSafe M5300 Switch If you have not registered the product or have not disabled the registration reminders, the following pop-up window appears each time a user successfully logs on to the switch: The registration pop-up window includes the following buttons: • TURN OFF .
505 A A. Default Settings This appendix describes the default settings for many of the ProSafe M5300 Managed Switch software features. Table 3. Default Settings Feature Default IP address 192.
Default Settings 506 ProSafe M5300 Switch ISDP Enabled (Versions 1 and 2) RMON Enabled TACACS+ Not configured RADIUS Not configured SSH/SSL Disabled Telnet Enabled Denial of Service Protection Disabled Captive Portal Disabled Dot1x Authentication (IEEE 802.
Default Settings 507 ProSafe M5300 Switch Default VLAN ID 1 Default VLAN Name Default GVRP Disabled GARP Timers Leave: 60 centiseconds Leave All: 1000 centiseconds Join: 20 centiseconds Voice VLAN Disabled Guest VLAN Disabled RADIUS-assigned VLANs Disabled Double VLANs Disabled Spanning Tree Protocol (STP) Enabled STP Operation Mode IEEE 802.
Default Settings 508 ProSafe M5300 Switch.
509 B B. Configuration Examples This appendix contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) on page 509 • Access Control Lists (ACLs) on page 511 • Differentiated Services (DiffServ) on page 514 • 802.
Configuration Examples 510 ProSafe M5300 Switch • They are easy to manage. The addition of nodes, as well as moves and other changes, can be dealt with quickly and conveniently from a management interface rather than from the wiring closet. • They provide increased performance.
Configuration Examples 511 ProSafe M5300 Switch • For the VLAN with VLAN ID 10, specify the following members: port 1 (U), port 2 (U), and port 3 (T). • For the VLAN with VLAN ID 20, specify the following members: port 4 (U), port 5 (T), and port 6 (U).
Configuration Examples 512 ProSafe M5300 Switch criteria to a particular queue or redirect the traffic to a particular port. A default deny all rule is the last rule of every list. 2. APPLY the access list to an interface in the inbound direction. ProSafe allow ACLs to be bound to physical ports and LAGs.
Configuration Examples 513 ProSafe M5300 Switch ports, you must add a new permit rule with the desired match criteria and bind the rule to interfaces 6, 7, and 8.
Configuration Examples 514 ProSafe M5300 Switch Differentiated Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network deliver the data in a timely fashion, although there is no guarantee that it will.
Configuration Examples 515 ProSafe M5300 Switch • IP Service Type octet (also known as: ToS bits, Precedence value, DSCP value) • Layer 4 protocol (TCP, UDP etc.
Configuration Examples 516 ProSafe M5300 Switch Traffic Conditioning Policy Traffic conditioning pertains to actions performed on incoming traffic. There are several distinct QoS actions associated with traffic conditioning: • Dropping - Drop a packet upon arrival.
Configuration Examples 517 ProSafe M5300 Switch DiffServ Example Configuration To create a DiffServ Class/Policy and attach it to a switch interface, follow these steps: 1.
Configuration Examples 518 ProSafe M5300 Switch All UDP packet flows destined to the 192.12.2.0 network with an IP source address from the 192.12.1.0 network that have a Layer 4 Source port of 4567 and Destination port of 4568 from this switch on ports 7 and 8 are assigned to hardware queue 3.
Configuration Examples 519 ProSafe M5300 Switch operation of a switch’s ports to be controlled in order to ensure that access to its services is only permitted by systems that are authorized to do so. Port access control provides a means of preventing unauthorized access by supplicants to the services offered by a system.
Configuration Examples 520 ProSafe M5300 Switch 802.1X Example Configuration This example shows how to configure the switch so that 802.1X-based authentication is required on the ports in a corporate conference room (1/0/5 - 1/0/8). These ports are available to visitors and need to be authenticated before granting access to the network.
Configuration Examples 521 ProSafe M5300 Switch MSTP Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic.
Configuration Examples 522 ProSafe M5300 Switch An MST Region comprises of one or more MSTP Bridges with the same MST Configuration Identifier, using the same MSTIs, and which have no Bridges attached that cannot receive and transmit MSTP BPDUs. The MST Configuration Identifier has the following components: 1.
Configuration Examples 523 ProSafe M5300 Switch MSTP Example Configuration This example shows how to create an MSTP instance from the GSM7352Sv1 or GSM7352Sv2 switch. The example network has three different ProSafe that serve different locations in the network.
Configuration Examples 524 ProSafe M5300 Switch If you do not specify a root bridge and all switches have the same Bridge Priority value, the switch with the lowest MAC address is elected as the root bridge (see CST Configuration on page 146).
525 C C. Notification of Compliance NETGEAR Wired Products Regulatory Compliance Information This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices.
ProSafe M5300 Switch Notification of Compliance 526 • This device must accept any interference received, including interference that may cause undesired operation.
ProSafe M5300 Switch Notification of Compliance 527 GPL License Agreement GPL may be included in this product; to view the GPL license agreement go to ftp://downloads.netgear.com/files/GPLnotice.pdf For GNU General Public License (GPL) related information, visit http://support.
528 Index Numerics 802.1X 359 , 387 , 389 example configuration 518 A access control ACL example configuration 511 ACLs 435 authentication 802.1X 386 , 518 enable 16 port-based 386 RADIUS 359 SNMP 16 TACACS+ 364 Auto-VoIP Configuration 134 C certificate 375 compliance 525 Configuration 802.
529 ProSafe M5300 Switch I IEEE 802.11x 518 IEEE 802.1AB 93 IEEE 802.1D 143 IEEE 802.1Q 119 , 143 IEEE 802.1s 143 IEEE 802.1w 143 IEEE 802.1X 359 IGMP 158 interface LAG 184 logical 17 naming conventio.
530 ProSafe M5300 Switch U Unicast 35 upload configuration 487 V VLAN 119 example configuration 509 guest 518 ID 119 managing 119 Port VLAN ID 125 PVID 125 VoIP 134.
Ein wichtiger Punkt beim Kauf des Geräts NETGEAR GS728TP100NAS (oder sogar vor seinem Kauf) ist das durchlesen seiner Bedienungsanleitung. Dies sollten wir wegen ein paar einfacher Gründe machen:
Wenn Sie NETGEAR GS728TP100NAS noch nicht gekauft haben, ist jetzt ein guter Moment, um sich mit den grundliegenden Daten des Produkts bekannt zu machen. Schauen Sie zuerst die ersten Seiten der Anleitung durch, die Sie oben finden. Dort finden Sie die wichtigsten technischen Daten für NETGEAR GS728TP100NAS - auf diese Weise prüfen Sie, ob das Gerät Ihren Wünschen entspricht. Wenn Sie tiefer in die Benutzeranleitung von NETGEAR GS728TP100NAS reinschauen, lernen Sie alle zugänglichen Produktfunktionen kennen, sowie erhalten Informationen über die Nutzung. Die Informationen, die Sie über NETGEAR GS728TP100NAS erhalten, werden Ihnen bestimmt bei der Kaufentscheidung helfen.
Wenn Sie aber schon NETGEAR GS728TP100NAS besitzen, und noch keine Gelegenheit dazu hatten, die Bedienungsanleitung zu lesen, sollten Sie es aufgrund der oben beschriebenen Gründe machen. Sie erfahren dann, ob Sie die zugänglichen Funktionen richtig genutzt haben, aber auch, ob Sie keine Fehler begangen haben, die den Nutzungszeitraum von NETGEAR GS728TP100NAS verkürzen könnten.
Jedoch ist die eine der wichtigsten Rollen, die eine Bedienungsanleitung für den Nutzer spielt, die Hilfe bei der Lösung von Problemen mit NETGEAR GS728TP100NAS. Sie finden dort fast immer Troubleshooting, also die am häufigsten auftauchenden Störungen und Mängel bei NETGEAR GS728TP100NAS gemeinsam mit Hinweisen bezüglich der Arten ihrer Lösung. Sogar wenn es Ihnen nicht gelingen sollte das Problem alleine zu bewältigen, die Anleitung zeigt Ihnen die weitere Vorgehensweise – den Kontakt zur Kundenberatung oder dem naheliegenden Service.
