FS728TP Smart Switch Software Administration Manual NETGEAR, Inc.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual © 2007 by NETGEAR, Inc. All Rights reserved Trademarks NETGEAR and the NETGEAR logo are registered trademarks of NETGEAR, Inc. in the United States and/or other countries. Microsoft, Windows, and Windows NT are registered trademarks and Vista is a trademark of Microsoft Corporation. Other brand and product names are trademarks or registered trademarks of their respective holders.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: • • • • Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual FCC Requirements for Operation in the United States FCC Information to User: This product does not contain any user-serviceable components and is to be used with approved antennas only. Any product changes or modifications will invalidate all applicable regulatory certifications and approvals FCC Guidelines for Human Exposure: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
v v1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Contents FS728TP Smart Switch Software Administration Manual i Who Should Use this Book................................................................................................ x How to Use This Book ....................................................................................................... x Conventions, Formats, and Scope ...................................................................................
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Using Screen and Table Options ..............................................................................2-5 Chapter 3 Managing System Settings Using the System Settings Utility ....................................................................................3-1 Management ...................................................................................................................3-1 System Information ....................
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Chapter 5 Configuring QoS Configuring the Basic and Advanced QoS Settings .......................................................5-1 CoS .................................................................................................................................5-1 Basic ........................................................................................................................5-2 Advanced ..............................
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Flash Log .................................................................................................................7-6 Server Log ................................................................................................................7-7 RMON .............................................................................................................................7-9 Basic .............................................
About This Manual The NETGEAR® FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual describes how to install, configure, operate, and troubleshoot the FS728TP 10/100 PoE Smart Switch with Gigabit Ports using its included software. This book describes the software configuration procedures and explains the options available within those procedures. Who Should Use this Book The information in this manual is intended for readers with intermediate to advanced system management skills.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Chapter 6, “Managing Security” describes how to configure security. • Chapter 7, “Monitoring the Switch” describes how to configure switch monitoring. • Chapter 8, “Maintenance” describes the firmware upgrade procedure and reset functions. • Chapter 9, “Online Help” describes how to obtain online help and support. • Appendix A, “Default Settings” gives FS728TP Smart Switch specifications and lists default feature values.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Danger: This is a safety warning. Failure to take heed of this notice may result in personal injury or death. • Scope. This manual is written for the FS728TP Smart Switch according to these specifications: Product Version FS728TP 10/100 PoE Smart Switch with Gigabit Ports Manual Publication Date December 2007 . Note: Product updates are available on the NETGEAR, Inc. website at http://www.netgear.com/support.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual How to Print this Manual To print this manual, select one of the following options: • Printing a Page from HTML. Each page in the HTML version of the manual is dedicated to a major topic. Select File > Print from the browser menu to print the page contents. • Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files.
Chapter 1 Getting Started with Switch Management This section provides an overview of switch management, including the methods you can choose to start managing your NETGEAR FS728TP 10/100 PoE Smart Switch with Gigabit Ports. It also leads you through the steps necessary to get started, using the SmartWizard Discovery utility.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Note: For complete hardware installation instructions, refer to the FS728TP Smart Switch Hardware Installation Manual included on your Resource CD, or go to http://www.netgear.com/support. Switch Management Interface Your NETGEAR FS728TP 10/100 PoE Smart Switch with Gigabit Ports contains an embedded web server and management software for managing and monitoring switch functions.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Table 1-1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual . Figure 1-1 6. Note the displayed IP address assigned by the DHCP server. You will need this value to access the switch directly from a web browser (without using the SmartWizard Discovery utility). 7. Select your switch by highlighting the name of the switch. Then click Web Access. The discovery utility displays a login window similar to the following: Figure 1-2 1-4 Getting Started with Switch Management v1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 8. Use your web browser to manage your switch. The default password is password. Then use this screen to proceed to management of the switch covered in Chapter 2, “Introduction to the Web Browser Interface”.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual . Figure 1-3 7. Select Disable to disable DHCP. 8. The default IP address is 192.168.0.239 and the default subnet mask is 255.255.255.0. If you want different values, enter the switch IP address, gateway IP address and subnet mask. 9. Type your password and click Set. Please ensure that your PC and the FS728TP 10/100 PoE Smart Switch with Gigabit Ports are in the same subnet. Note the settings for later use.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Figure 1-4 You need Windows Administrator privileges to change these settings. 1. On your PC, access the MS Windows operating system TCP/IP Properties. 2. Set IP address and subnet mask appropriately. The subnet mask value is identical to that set in the switch. The PC IP address must be different from that of the switch but lie in the same subnet. 3.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual You must work from the same network segment that contains the switch (i.e., the subnet mask values of switch and PC host must be the same) and you must point your browser using the switch IP address. If you used the SmartWizard Discovery utility to set up IP address and subnet mask, either with or without DHCP server, use that IP address in your browser window.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Firmware Upgrade The FS728TP Smart Switch software is upgradeable, and enables your switch to take advantage of improvements and additional features as they become available. The upgrade procedure assumes that you have downloaded or otherwise obtained the firmware upgrade and that you have it available as a binary file on your computer. This procedure uses the TFTP protocol to implement the transfer from computer to switch. .
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 2. Click Apply to apply the settings to the Upgrade Configuration. 3. Click Start Upgrade to begin loading the upgrade. The system software is automatically loaded. The Upgrade State field shows upgrading in progress.When the process is complete, the switch automatically reboots. Exit Click Exit from the SmartWizard Discovery screen to close the SmartWizard Discovery utility. 1-10 Getting Started with Switch Management v1.
Chapter 2 Introduction to the Web Browser Interface This section introduces the web browser interface that enables you to configure and manage your NETGEAR FS728TP 10/100 PoE Smart Switch with Gigabit Ports. Your FS728TP Smart Switch provides a built-in browser interface that enables you to configure and manage it remotely using a standard Web browser such as Microsoft Internet Explorer or Netscape Navigator. Online Help is also provided for many of the basic functions and features of the switch.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 2. Enter the password (the factory default is password) and click Login. The home screen of the FS728TP Smart Switch browser interface displays. The Navigation Menu As shown below, logging in brings you to the view of the web browser interface.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Work Area – Located on the right side of the NETGEAR FS728TP web browser interface and marked as 3 in Figure 2-2. The Work Area contains device tables, general device information, and configurable device parameters. For further description of the functions, refer to the appropriate section of this manual: • Chapter 3, “Managing System Settings” describes how to configure the System functions.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Table 2-1. Device Management Buttons (continued) Button Name Description CLEAR ALL Refreshes device information. CLEAR ALL COUNTERS Resets statistics counters. CLEAR LOGS Clears logs. CURRENT MEMBERS Displays current members of a LAG. Delete Deletes information from tables or information windows. GO Selects the specified interface. REFRESH Refreshes the screen with current data.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To access the help file for a screen: 1. Click the encircled red Question Mark icon, shown in the example below. Figure 2-3 A help window for the screen opens. Figure 2-4 Using Screen and Table Options The NETGEAR FS728TP web browser interface contains screens and tables for configuring devices. This section describes the table options: • “Selecting an Entry” Introduction to the Web Browser Interface v1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • “Adding an Entry” • “Modifying an Entry” • “Deleting an Entry” • “Special Table Options” Selecting an Entry To select an entry: 1. Check the entry’s Select box. The selected entry is highlighted and the information appears in the first row, which contains the editable fields. Figure 2-5 To select all entries: 1. Check the Select box in the first row to select all entries in the table.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To add an entry by creating a new entry in the table: 1. Enter the fields for the new entry in the provided fields in the first row. Figure 2-7 2. Click Add to update the device. The new entry is displayed. Figure 2-8 Modifying an Entry An entry may be modified by editing its values in the first row. To modify an entry: 1. Select the entry to be modified. Its contents are displayed in the first row. Figure 2-9 2.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 2. Click Delete to update the device. Special Table Options The NETGEAR web browser interface tables have a unique GUI design which includes the following options: • Gold Buttons • Quick Boxes • Interface View and Selection Gold Buttons. Gold Buttons provide flexibility in viewing and configuring VLANs/LAGs on a port level. The following example displays gold button basic usage options.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To mark or unmark all ports: 1. Click on the quick box that appears to the left of the ports gold button. A T appears in the quick box. This sets all ports as Tagged. Figure 2-11 2. Click on the ports gold button to display the ports, which are now all Tagged. Figure 2-12 3. Click again on the quick box, and a U appears in the quick box and in all the port boxes, marking the ports as untagged.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Figure 2-13 4. Click again on the quick box, and the quick box and all the port boxes appear blank, marking the ports as neither tagged nor untagged. 5. You may click on individual port boxes to toggle their tagged/untagged status Interface View and Selection. A port or LAG interface may be selected from a table by using the interface selection row, located above the row of column headers.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Figure 2-14 To display all ports: 1. Click PORTS in the interface selection row. The screen displays a table of all ports. To display all interfaces: 1. Click All in the interface selection row. A confirmation window opens. Figure 2-15 2. Click OK. The screen displays a table of all interfaces. Introduction to the Web Browser Interface v1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To display the LAG table: 1. Click LAGS in the interface selection row. The screen displays a table of all LAGs. Figure 2-16 To select an interface: 1. Enter the number of the interface in the GO TO INTERFACE box. 2. Click GO to select the interface, as in the following example. 2-12 Introduction to the Web Browser Interface v1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Figure 2-17 Introduction to the Web Browser Interface v1.
Chapter 3 Managing System Settings Using the System Settings Utility The navigation pane at the top of the web browser interface contains a System tab that enables you to manage your FS728TP Smart Switch with features under the following main menu options: • “Management” • “Device View” • “PoE” • “SNMP” The description that follows in this chapter describes configuring and managing system settings in the FS728TP Smart Switch.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure system parameters: 1. Click System > Management > System Information. The System Information screen displays: Figure 3-1 The System Information screen contains the following fields: • System Name – Enter the user-defined device name. The field may contain 0-160 characters. • System Location – Enter the location where the system is currently running. The field may contain 0-160 characters.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • System Up Time – Displays the amount of time since the most recent device reset. The system time is displayed in the following format: days, hours, minutes, seconds. For example, 41 days, 2 hours, 22 minutes, 15 seconds. • Idle Timeout – Enter the amount of time (minutes) that elapses before an idle station is timed out. Idle stations that are timed out must login to the system. The field range is 5 30 minutes.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To define an IP interface: 1. Click System > Management > IP Configuration. The IP Configuration screen displays: Figure 3-2 The IP Configuration screen contains the following fields: • Dynamic IP Address (DHCP) – Enable the IP address to be configured automatically by the DHCP server. Selecting this field disables the IP Address, Subnet Mask, Gateway and Delete fields.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • “SNTP Server Configuration” Time Configuration The Time Configuration screen contains information for defining both the local hardware clock and the external SNTP clock. If the system time is managed via an external SNTP clock, and the external SNTP clock fails, the system time reverts to the local hardware clock. To configure the local system time: 1. Click System > Management > Time > Time Configuration.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Time Zone Offset – Select the difference between Greenwich Mean Time (GMT) and local time. For example, the Time Zone Offset for Paris is GMT +1, while the Time Zone Offset for New York is GMT –5. 2. Select the Clock Source by selecting either Local or SNTP. 3. If you selected Local, then enter the local Date and Time in the provided fields. 4. Select the Time Zone Offset from the list. 5.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • SNTP Server 2 – Enter the secondary SNTP server IP address. The Secondary SNTP server retrieves the system time if the Primary SNTP server times out. The following option is available: – Delete – Remove the currently configured SNTP Server 2. 2. Enter the SNTP Server 1 and SNTP Server 2 in the provided fields. 3. Click Apply to update the system settings. To remove SNTP servers: 1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Power over Ethernet can be used in the following applications: • IP Phones • Wireless Access Points • IP Gateways • Audio and video remote monitoring Powered Devices are devices that receive power from the device power supply, for example IP phones.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual The Basic PoE Configuration screen contains the following fields: • Power Status – Displays the online power source status. The possible field values are: – On – The power supply unit is functioning. – Off – The power supply unit is not functioning. – Faulty – The power supply unit is functioning, but an error has occurred. For example, a power overload or a short circuit.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure PoE on the device: 1. Click System > PoE > Advanced > PoE Configuration. The Advanced PoE Configuration screen displays: Figure 3-7 The PoE Configuration screen contains the following fields: • Power Status – Displays the online power source status. The possible field values are: – On – The power supply unit is functioning. – Off – The power supply unit is not functioning.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual PoE Port Configuration The PoE Interface Configuration screen contains system PoE information for enabling PoE on the device, monitoring the current power usage, and enabling PoE traps. To enable PoE on the device: 1. Click System > PoE > Advanced > PoE Port Configuration.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • • Priority Level – Select the port priority if the power supply is low. The field default is low. For example, if the power supply is running at 99% usage, and port 1 is prioritized as high, but port 3 is prioritized as low, port 1 is prioritized to receive power and port 3 may be denied power. The possible field values are: – Low – Set the PoE priority level as low. This is the default level.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 3. Select the Admin Mode and Priority Level from the lists in the provided fields in the first row. 4. Click Apply to update the device SNMP Simple Network Management Protocol (SNMP) provides a method for managing network devices. The device supports the following SNMP versions: • SNMP v1 and v2c • SNMP version 3 The SNMP agents maintain a list of variables that are used to manage the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual SNMPv1/v2 The SNMPv1/v2 menu contains the following options: • “Community Configuration” • “Trap Configuration” Community Configuration Access rights are managed by defining communities in the Community Configuration screen. When community names are changed, access rights are also modified. To configure SNMP communities: 1. Click System > SNMP > SNMPv1/v2 > Community Configuration.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – SNMP Admin – User has access to all device configuration options, as well as permissions to modify the community. 2. Select the community entry. 3. Enter the Management Station and Community String in the provided fields in the first row. 4. Select the Access Mode from the list in the provided field in the first row. 5. Click Apply to update the device. To add a new SNMP community: 1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure SNMPv1/v2 trap station management: 1. Click System > SNMP > SNMPv1/v2 > Trap Configuration. The SNMPv1/v2 Trap Configuration screen displays: Figure 3-10 The SNMPv1/v2 Trap Configuration screen contains the following fields: • Recipients IP – Enter the IP address to which the traps are sent. • Notification Type – (Configurable only if the Notification Version is SNMPv2.) Select the type of notification sent.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To add a new SNMP trap: 1. Click System > SNMP > SNMPv1/v2 > Trap Configuration. The SNMPv1/v2 Trap Configuration screen displays. 2. Enter the fields in the first row. 3. Click Add to update the device. To remove an SNMP trap: 1. Click System > SNMP > SNMPv1/v2 > Trap Configuration. The SNMPv1/v2 Trap Configuration screen displays. 2. Select the entry to be removed. 3. Click Delete to remove the entry.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Engine ID The SNMPv3 Engine ID screen allows network managers to define the SNMP Engine ID and to assign the default parameters to SNMP. To define the Local Engine ID: 1. Click System > SNMP > SNMPv3 > Engine ID. The SNMPv3 Engine ID screen displays: Figure 3-11 The SNMPv3 Engine ID screen contains the following fields: • Local Engine ID (10-64 Characters) – Enter the local device Engine ID. The field value is a hexadecimal string.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual View Name The SNMPv3 View Name screen allows the network managers to define SNMPv3 View Names. SNMPv3 views provide or block access to device features or portions of features. To define SNMPv3 view names: 1. Click System > SNMP > SNMPv3 > View Name. The SNMPv3 View Name screen displays: Figure 3-12 The SNMPv3 View Name screen contains the following field: • View Name – Enter the user-defined view name.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 3. Click Delete to remove the entry. View Content SNMP views provide or block access to device features or portions of features. For example, a view can be defined to provide a view that SNMP group A has Read Only (R/O) access to Multicast groups, while SNMP group B has Read-Write (R/W) access to Multicast groups. Feature access is granted via the MIB name or MIB Object ID. To define the SNMP View Content: 1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 3. Enter the Object ID Subtree in the provided field in the first row. 4. Select either Included or Excluded from the View Type provided field in the first row. 5. Click Apply to update the device. To add a new SNMP OID entry: 1. Click System > SNMP > SNMPv3 > View Content. The SNMPv3 View Content screen displays. 2. Select the View Name from the list in the provided field in the Views table. 3.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To define SNMPv3 communities: 1. Click System > SNMP > SNMPv3 > Community Configuration. The SNMPv3 Community Configuration screen displays: Figure 3-14 The SNMPv3 Community Configuration screen contains the following fields: • Management Station – Enter the management station IP address for which the basic SNMP community is defined.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To remove an SNMPv3 community: 1. Click System > SNMP > SNMPv3 > Community Configuration. The SNMPv3 Community Configuration screen displays. 2. Select the community entry. 3. Click Delete to remove the entry. Group Configuration The SNMPv3 Groups screen provides information for creating SNMP groups and assigning SNMP access control privileges to SNMP groups.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • • Security Level – Select the security level attached to the group. Security levels apply to SNMPv3 only. The possible field values are: – No Authentication – Neither the Authentication nor the Privacy security levels are assigned to the group. – Authentication – Authenticates SNMP messages and ensures that the SNMP message’s origin is authenticated. – Privacy – Encrypts SNMP messages.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 3. Click Delete to remove the entry. User Configuration The SNMPv3 User Configuration screen provides information for creating SNMP groups and assigning SNMP access control privileges to SNMP groups. Groups allow network managers to assign access rights to specific device features or feature aspects. To define SNMP users: 1. Click System > SNMP > SNMPv3 > User Configuration.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – SHA Password – Users are authenticated using the HMAC-SHA-96 authentication level. The user must enter a password. – None – No user authentication is used. • Password (1-32 Characters) – Enter the password for the group member. • Authentication Key – Enter the HMAC-MD5-96 or HMAC-SHA-96 authentication level. The authentication and privacy keys are entered to define the authentication key.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To remove an SNMPv3 user: 1. Click System > SNMP > SNMPv3 > Users Configuration. The SNMPv3 User Configuration screen displays. 2. Select the user entry. 3. Click Delete to remove the entry. Global Trap Configuration The SNMPv3 Global Trap Settings screen contains parameters for defining SNMP notification parameters. To configure SNMP notification global parameters: 1. Click System > SNMP > SNMPv3 > Global Trap Configuration.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – Disable – Disable the device from sending authentication failure notifications. 2. Select either Enable or Disable in the SNMP Notifications provided field. 3. Select either Enable or Disable in the Authentication Notifications provided field. 4. Click Apply to update the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – Traps – Traps are sent. – Informs – Informs are sent. • User Name – Enter the user name. The field range is up to 30 alphanumeric characters. • Security Level – Select the security level attached to the group. Security levels apply to SNMPv3 only. The possible field values are: – No Authentication – Neither the Authentication nor the Privacy security levels are assigned to the group.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 5. Select the Security Level from the list in the provided field in the first row. 6. Enter the UDP Port in the provided field in the first row. 7. Select the Filter Name from the list in the provided field in the first row. 8. Enter the Timeout and Retries in the provided fields in the first row. 9. Click Add to update the device. To remove a trap: 1. Click System > SNMP > SNMPv3 > Trap Configuration.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 2. Select the trap filter entry. 3. Enter the trap Filter Name in the provided field in the first row. 4. Click Apply to update the device. To add a new trap filter name: 1. Click System > SNMP > SNMPv3 > Trap Filter Name. The SNMPv3 Trap Filter Name screen displays. 2. Enter the trap Filter Name in the provided field in the first row. 3. Click Add to update the device. To remove a trap filter name: 1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual The SNMPv3 Trap Filter Content screen contains the following fields: Trap Filter Settings • Filter Name – Contains a list of user-defined notification filters. Trap Filter Settings • Object ID Subtree – Enter the OID for which notifications are sent or blocked. If a filter is attached to an OID, traps or informs are generated and sent to the trap recipients. OIDs are selected from either the Select field or the Object ID field.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 3-33 Managing System Settings v1.
Chapter 4 Configuring Switching Settings Configuring Switching Settings The navigation pane at the top of the web browser interface contains a Switching tab that enables you to manage your FS728TP Smart Switch with features under the following main headings: • “Ports” • “LAG” • “VLAN” • “STP” • “Multicast” • “Address Table” The description that follows in this chapter describes configuring and managing switching settings in the FS728TP Smart Switch.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure port parameters: 1. Click Switching > Ports > Port Configuration. The Port Configuration screen displays: Figure 4-1 The Port Configuration screen contains the following fields: • Port – Displays the port number. • Port Description – Enter a user-defined port description. • Status – Select the port’s operational status. The possible field values are: • – Up – The port is operational.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • • • • • Port Speed – Select the data transmission rate for the port. The port type determines which speed setting options are available. Port speeds can only be configured when auto negotiation is disabled. The possible field values are: – 10M – The port is currently operating at 10 Mbps. – 100M – The port is currently operating at 100 Mbps. – 1000M – The port is currently operating at 1000 Mbps.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • • MDI/MDIX – Select the MDI/MDIX status of the port. Hubs and switches are deliberately wired opposite the way end stations are wired, so that when a hub or switch is connected to an end station, a straight through Ethernet cable can be used and the pairs will match up properly.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • LACP LAGs support up to 16 ports, with eight ports active at any given time. The LAG menu contains the following options: • “Basic” • “Advanced” Basic The LAG Basic menu contains the following options: • “LAG Configuration” • “LAG Membership” LAG Configuration The Basic LAG Configuration screen contains fields for configuring LAG parameters. The system supports 8 LAGs, and each LAG can contain up to 8 ports.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • • • • – Up – The LAG is currently linked and forwarding traffic. – Down – The LAG is currently not linked. Reactivate Suspended – Select the action to apply to a suspended LAG. The possible field values are: – Enable – Reactivate the suspended LAG. – Disable – Do not reactivate the suspended LAG. Type – Displays the LAG type. The possible field values are: – Static – The LAG is configured manually.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual LAG Membership The Basic LAG Membership screen allows network managers to assign ports to LAGs. To assign ports to LAGs: 1. Click Switching > LAG > Basic > LAG Membership. The Basic LAG Membership screen displays: Figure 4-3 The Basic LAG Membership screen contains the following fields: • LAG ID – Select the LAG ID. • LAG Name – Displays the user-defined LAG name. • LAG Type – Select the LAG type.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 6. Click CURRENT MEMBERS. The Current Members window opens and displays the member ports included in the LAG: Figure 4-4 Advanced The LAG Advanced menu contains the following options: • “LAG Configuration” • “LAG Membership” • “LACP” • “LACP Port Priority” LAG Configuration The Advanced LAG Configuration screen contains fields for configuring LAG parameters. The system supports 8 LAGs, and each LAG can contain up to 8 ports.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To define LAG parameters: 1. Click Switching > LAG > Advanced > LAG Configuration. The Advanced LAG Configuration screen displays: Figure 4-5 The Advanced LAG Configuration screen contains the following fields: • Interface – Displays the LAG number. • Description – Enter a user-defined LAG description. • Status – Select the current link operation.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • – 10M – The LAG is currently operating at 10 Mbps. – 100M – The LAG is currently operating at 100 Mbps. – 1000M – The LAG is currently operating at 1000 Mbps. Duplex Mode – Displays the duplex mode of the LAG. The possible field value is: – • • Full – The interface supports transmission between the device and its link partner in both directions simultaneously.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual LAG Membership The Advanced LAG Membership screen allows network managers to assign ports to LAGs. To assign ports to LAGs: 1. Click Switching > LAG > Advanced > LAG Membership. The LAG Membership screen displays: Figure 4-6 The Advanced LAG Membership screen contains the following fields: • LAG ID – Select the LAG ID. • LAG Name – Displays the user-defined LAG name. • LAG Type – Select the LAG type.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 6. Click CURRENT MEMBERS. The Current Members window opens and displays the member ports included in the LAG: Figure 4-7 LACP Aggregated links can be set up manually or automatically established by enabling LACP on the relevant links. Aggregated ports can be linked into link-aggregation port-groups. Each group is comprised of ports with the same speed. The LACP screen contains fields for configuring LACP. To configure LACP: 1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual LACP Port Priority To configure LACP port priority: 1. Click Switching > LAG > Advanced > LACP Port Configuration. The LACP Port Priority screen displays Figure 4-9 The LACP Port Priority screen contains the following fields: • Interface – Displays the interface number to which timeout and priority values are assigned. • LACP Priority – Enter the port priority value. The field range is 1-65535.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual VLAN VLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single unit, regardless of the physical LAN segment to which they are attached. VLANs allow network traffic to flow more efficiently within subgroups. VLANs use software to reduce the amount of time it takes for network changes, additions, and moves to be implemented.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To define VLAN properties: 1. Click Switching > VLAN > Basic > VLAN Configuration. The Basic VLAN Configuration screen displays: Figure 4-10 The Basic VLAN Configuration screen contains the following fields: • VLAN ID – Enter the VLAN ID. The field range is 1-4093. • VLAN Name – Enter the user-defined VLAN name. • Type – Displays the VLAN type. The possible field values are: – Static – The VLAN is user-defined.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 2. Select the VLAN entry. 3. Click Delete to remove the entry. Advanced The VLAN Advanced menu contains the following options: • “VLAN Configuration” • “VLAN Membership” • “Port PVID Configuration” VLAN Configuration The Advanced VLAN Configuration screen provides information and global parameters for configuring and working with VLANs. To define VLAN properties: 1. Click Switching > VLAN > Advanced > VLAN Configuration.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – Default – The VLAN is the default VLAN. The default VLAN is enabled by default. 2. Select the VLAN entry. 3. Enter the VLAN ID and VLAN Name in the provided fields in the first row. 4. Click Apply to update the device. To add a new VLAN: 1. Click Switching > VLAN > Advanced > VLAN Configuration. The Advanced VLAN Configuration screen displays. 2. Enter the VLAN ID and VLAN Name in the provided fields in the first row. 3.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To define VLAN group membership: 1. Click Switching > VLAN > Advanced > VLAN Membership. The VLAN Membership screen displays: Figure 4-12 The VLAN Membership screen contains the following fields: • VLAN ID – Select the VLAN ID to be displayed and configured. VLAN ID = 1 cannot be modified. • VLAN Name – Displays the name of the VLAN. • VLAN Type – Displays the VLAN type.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 3. Select the Group Operation from the list in the provided field. 4. Click Apply to update the device. To tag or untag selected ports or LAGs: 1. Click Switching > VLAN > Advanced > VLAN Membership. The VLAN Membership screen displays. 2. Click a gold button to display the ports or LAGs. 3. Click the boxes below the selected ports or LAGs to mark them as tagged (T) or untagged (U). 4. Click Apply to update the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To view VLAN untagged port members: 1. Click Switching > VLAN > Advanced > VLAN Membership. The VLAN Membership screen displays. 2. Click UNTAGGED PORT MEMBERS. The VLAN Untagged Ports screen opens: Figure 4-14 Port PVID Configuration The Port PVID Configuration screen contains parameters for assigning Port VLAN ID (PVID) values to interfaces. All ports must have a defined PVID.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure Port PVID parameters: 1. Click Switching > VLAN > Advanced > Port PVID Configuration. The Port PVID Configuration screen displays: Figure 4-15 The Port PVID Configuration screen contains the following fields: • Interface – Displays the interface id (port number or LAG number) to which the PVID tag is assigned. • PVID – Enter the PVID value. The possible field range is 1-4093. 2. Select an interface. 3.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual STP Spanning Tree Protocol (STP) provides tree topography for any arrangement of bridges. STP also provides a single path between end stations on a network, eliminating loops. Loops occur when alternate routes exist between hosts. Loops in an extended network can cause bridges to forward traffic indefinitely, resulting in increased traffic and reducing network efficiency.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Global Settings • Spanning Tree State – Select the STP state on the device. The possible field values are: – Enable – Enable STP on the device. – Disable – Disable STP on the device. Status • Bridge Identifier – Displays the Bridge priority and MAC address. • Time Since Topology Change – Displays the amount of time that has elapsed since the bridge was initialized or reset or the last topology change that occurred.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual STP Configuration The Advanced STP Configuration screen contains parameters for enabling STP on the device. To configure STP on the device: 1. Click Switching > STP > Advanced > STP Configuration. The Advanced STP Configuration screen displays: Figure 4-17 The Advanced STP Configuration screen contains the following fields: Global Settings • Spanning Tree State – Select the STP state on the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Root Port – Indicates the port number that offers the lowest cost path from this bridge to the Root Bridge. This field is significant when the bridge is not the Root Bridge. The default is zero. • Max Age (Sec) – Displays the device Maximum Age Time. The Maximum Age Time is the amount of time in seconds a bridge waits before sending configuration messages. The default Maximum Age Time is 20 seconds.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual The CST Configuration screen contains the following fields: CST Configuration • Bridge Priority – Enter the bridge priority value. When switches or bridges are running STP, each is assigned a priority. After exchanging BPDUs, the device with the lowest priority value becomes the Root Bridge. The default value is 32768. The bridge priority value is provided in increments of 4096. • Hello Time – Enter the device Hello Time.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual CST Port Configuration To configure CST ports on the device: 1. Click Switching > STP > Advanced > CST Port Configuration. The CST Port Configuration screen displays: Figure 4-19 The CST Port Configuration screen contains the following fields: • Interface – Displays the port or LAG for which the STP information is displayed. • STP Status – Select the STP status on the interface.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Port State – Displays the current STP state of a port. If enabled, the port state determines what forwarding action is taken on traffic. Possible port states are: – Forwarding – STP is enabled on the port, and the port is forwarding packets based on the STP topology. – Disabled – STP is currently disabled on the port. The port forwards traffic while learning MAC addresses.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Unregistered Multicast traffic – If traffic addressed to an unregistered Multicast group is seen it is handled by a special entry in the Multicast Filtering Database. The default setting of this is to flood all such traffic (traffic in unregistered Multicast groups). Layer 2 switching forwards Multicast packets to all relevant VLAN ports by default, treating the packet as a Multicast transmission.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure Basic IGMP Snooping: 1. Click Switching > Multicast > Basic > IGMP Snooping Configuration. The Basic IGMP Snooping Configuration screen displays: Figure 4-20 The Basic IGMP Snooping Configuration screen contains the following fields: IGMP Snooping Configuration • IGMP Snooping Status – Select the IGMP Snooping status on the device. The possible field values are: – Enable – Enable IGMP Snooping on the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 2. Select the VLAN ID entry in the Interface Settings table. 3. Select the Status from the list in the provided field in the first row. 4. Click Apply to update the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • – Enable – Enable IGMP Snooping on the device. – Disable – Disable IGMP Snooping on the device. Bridge Multicast Filtering Status – Select the bridge Multicast filtering status on the device. The possible field values are: – Enable – Enable Multicast filtering on the device. – Disable – Disable Multicast filtering on the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure IGMP Snooping on a VLAN: 1. Click Switching > Multicast > Advanced > IGMP Snooping Configuration. The Advanced IGMP Snooping Configuration screen displays. 2. Select the VLAN ID entry in the Interface Settings table. 3. Select the Status and Auto Learn status from the lists in the provided fields in the first row. 4. Enter the Host, MRouter and Leave Timeouts in the provided fields in the first row. 5.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Type – Indicates the VLAN ID status in relation to the Multicast group. – Static – Attaches the VLAN ID to the Multicast group as static member. – Dynamic – Dynamically joins the VLAN ID to the Multicast group. 2. Select the group entry. 3. Enter the Multicast Address in the provided field in the first row. 4. Click Apply to update the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Multicast Group Membership • VLAN ID – Enter the VLAN ID. • VLAN Name – Displays the user defined VLAN name. • Multicast Address – Enter the Multicast group MAC address. Multicast Group • Interface – Displays the ports and LAGs for which the Multicast settings are displayed. • Interface Status – Select the interface status. The possible field values are: – Static – The interface is joined to the Multicast group statically.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To define Multicast forward all settings: 1. Click Switching > Multicast > Advanced > Multicast Forward All. The Multicast Forward All screen displays: Figure 4-24 The Multicast Forward All screen contains the following information: Multicast Forward All • VLAN ID – Enter the VLAN ID. • VLAN Name – Displays the user defined VLAN name.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 3. Select the port or LAG interface entry in the Multicast Group table. 4. Select the Interface Status from the list in the provided field in the first row. 5. Click Apply to update the device. Address Table Packets addressed to destinations stored in either the Static or Dynamic databases are immediately forwarded to the port. The Dynamic MAC Address Table can be sorted by interface, VLAN, or MAC Address.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To query the Basic Address Table: 1. Click Switching > Address Table > Basic > Address Table. The Basic Address Table screen displays: Figure 4-25 The Basic Address Table screen contains the following fields: • Search By – Display the MAC Address list according to selected category and query field. The possible field values are: – VLAN ID – Display the MAC Address table entries that relate to the specific VLAN ID.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 3. Enter the value to be searched for in the provided box. 4. Click GO to execute the query. Advanced The Address Table Advanced menu contains the following options: • “Static Addresses” • “Dynamic Addresses” • “Address Table” Static Addresses The Static Addresses screen contains a list of static MAC addresses. Static Addresses are added and removed from the Static Addresses screen.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Status – Select the MAC Address duration period within the table. The possible field values are: – Permanent – The MAC address is permanent. – Delete on Reset – The MAC address is deleted when the device is reset. – Delete on Timeout – The MAC address is deleted when the Address Aging Interval expires. – Secure – The MAC Address is defined for locked interfaces. 2. Select the address table entry. 3.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Address Aging – Enter the amount of time the MAC address remains in the Dynamic MAC Address table before it is timed out if no traffic from the source is detected. The range is 10 – 630 seconds. The default value is 300 seconds. 2. Enter the Address Aging in the provided field in the first row. 3. Click Apply to update the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – VLAN ID – Display the MAC Address table entries that relate to the specific VLAN ID. – MAC Address – Display the MAC Address table entries that relate to MAC Address. – Interface – Display the MAC Address table entries that relate to the specific interface. • VLAN ID – Displays the VLAN ID number to which the entry refers. • MAC Address – Displays the MAC address to which the entry refers.
Chapter 5 Configuring QoS Configuring the Basic and Advanced QoS Settings The navigation pane at the top of the web browser interface contains a QoS tab that enables you to manage your FS728TP Smart Switch with features under the following main heading: • “CoS” The description that follows in this chapter describes configuring and managing QoS settings in the FS728TP Smart Switch. CoS Quality of Service (QoS) provides the ability to implement QoS and priority queuing within a network.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Weighted Round Robin – Ensures that a single application does not dominate the device forwarding capacity. Weighted Round Robin (WRR) forwards entire queues in a round robin order. All queues can participate in WRR, except SP queues. If the traffic flow is minimal, and SP queues do not occupy the whole bandwidth allocated to a port, the WRR queues can share the bandwidth with the SP queues.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual The CoS Global Configuration screen contains the following: • • QoS Mode – Select whether QoS is enabled or disabled on the device. The possible values are: – Enable – Enable QoS globally. – Disable – Disable QoS globally. Trust Mode – Select which packet fields to use for classifying packets entering the device. The possible Trust Mode field values are: – CoS – Classify traffic based on the CoS (VPT) tag value.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure CoS interface parameters: 1. Click QoS > CoS > Basic > CoS Interface Configuration. The CoS Interface Configuration screen displays: Figure 5-2 The CoS Interface Configuration screen contains the following: • Interface – Displays the interface for which the global QoS parameters are defined. • Default CoS – Select the default CoS value for incoming packets for which a VLAN priority (VPT) is not defined.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 5. Click Apply to update the device. Queue The Queue screen contains fields for defining the QoS queue forwarding types. To set the queue settings: 1. Click QoS > CoS > Basic > Queue. The Queue screen displays: Figure 5-3 The Queue screen contains the following fields: • Strict Priority – Select to specify traffic scheduling based strictly on the queue priority. • WRR – Select to assign WRR weights to queues.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To define bandwidth settings: 1. Click QoS > CoS > Basic > Bandwidth. The Bandwidth screen displays: Figure 5-4 The Bandwidth screen contains the following fields: • Interface – Displays the ports for which the bandwidth settings are displayed. • Ingress Rate Limit Status – Select whether rate limiting is defined on the interface. The possible field values are: – Enable – Enable ingress rate limiting on the interface.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – • Disable – Disable egress shaping rate on the interface. This is the default value. Egress Shaping Rates CIR – Enter the Egress Shaping Committed Information Rate (CIR) in kilobits per second. The possible field range is 0 to 62500 for FE ports and 64 to 1000000 for GE ports. 2. Select the interface. 3. Choose either Enable or Disable in the Ingress Rate Limit Status provided field in the first row. 4.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To map CoS values to queues: 1. Click QoS > CoS> Advanced > CoS to Queue Mapping. The CoS to Queue Mapping screen displays: Figure 5-5 The CoS to Queue Mapping screen contains the following fields: CoS to Queue Mapping • CoS – Displays the CoS priority tag values, where 0 is the lowest and 7 is the highest. • Queue – Select the traffic forwarding queue to which the CoS priority is mapped.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual DSCP to Queue Mapping The DSCP To Queue Mapping screen contains fields for mapping DSCP values to traffic queues. For example, a packet with a DSCP tag value of 1 can be assigned to queue 2. To map DSCP values to queues: 1. Click QoS > CoS> Advanced > DSCP To Queue Mapping.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Restore Defaults– Restore the DSCP Mapping device factory default values. The possible field values are: – Checked – Restore the factory default settings for DSCP mapping values. – Unchecked – Maintain the current DSCP mapping settings. 2. Select the Queue values for each DSCP In value in the provided fields. 3. Check or uncheck the Restore Defaults box in the provided field. 4. Click Apply to update the device.
Chapter 6 Managing Security Setting Security Configuration Options The navigation pane at the top of the web browser interface contains a Security tab that enables you to manage your FS728TP Smart Switch with features under the following main menu options: • “Management Security” • “Port Authentication” • “Traffic Control” • “ACL” The description that follows in this chapter describes configuring and managing security settings in the FS728TP Smart Switch.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Change Password The Change Password screen contains parameters for configuring device passwords. Authentication on this device uses only a password, not a username. To change the device password: 1. Click Security > Management Security > User Configuration > Change Password. The Change Password screen displays: Figure 6-1 The Change Password screen contains the following fields: • User Name – Displays the User Name.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure RADIUS servers: 1. Click Security > Management Security > RADIUS. The RADIUS screen displays: Figure 6-2 The RADIUS screen contains the following fields: • Host IP Address – Enter the RADIUS Server IP address. • Authentication Port – Enter the authentication port. The authentication port is used to verify the RADIUS server authentication. The authenticated port default is 1812.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Active – Select the priority in which the system performs authentication with a Radius Server. The system performs authentication initially with the Radius Primary Server, and if it fails, it performs authentication with the Radius Backup Server. The possible values are: – Primary – Defines the RADIUS Primary Server. – Backup – Defines the RADIUS Backup Server. 2. Select the RADIUS server entry. 3.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual If default values are not defined, the system defaults are applied to the new TACACS+ new servers. To configure TACACS+ Settings: 1. Click Security > Management Security > TACACS+. The TACACS+ screen displays: Figure 6-3 The TACACS+ screen contains the following fields: • Host IP Address – Enter the TACACS+ Server IP address.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – Backup – Define the TACACS+ Backup Server. 2. Select the TACACS+ server entry. 3. Enter the Host IP Address, Key String, Authentication Port and Timeout for Reply in the provided fields in the first row. 4. Select the Single Connection status and Active server from the lists in the provided fields in the first row. 5. Click Apply to update the device. To add a new TACACS+ server entry: 1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure the Authentication List method: 1. Click Security > Management Security > Authentication List. The Authentication List screen displays: Figure 6-4 The Authentication List screen contains the following fields: • 1,2,3 – Select the order in which authentication is applied. The possible field values are: – TACACS+ – Authenticate the user at the TACACS+ server. For more information, see “TACACS+”.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Basic The Port Authentication Basic menu contains the following option: • “802.1X Configuration” 802.1X Configuration The Basic 802.1X Configuration screen allows network managers to configure network authentication parameters. In addition, Guest VLANs are enabled from the Basic 802.1X Configuration screen. To define the 802.1X configuration: 1. Click Security > Port Authentication > Basic > 802.1X Configuration. The Basic 802.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – • • None – No authentication method is used to authenticate the port. Guest VLAN – Select whether the Guest VLAN is enabled or disabled on the device. The default VLAN cannot be defined as a Guest VLAN. The possible field values are: – Disable – Disable the Guest VLAN on the device. This is the default value. – Enable – Enable using a Guest VLAN for unauthorized ports.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To define the 802.1X configuration: 1. Click Security > Port Authentication > Advanced > 802.1X configuration. The Advanced 802.1X Configuration screen displays: Figure 6-6 The Advanced 802.1X Configuration screen contains the following fields: • • • Port Based Authentication State – Enable port-based authentication on the device. The possible field values are: – Disable – Disable port-based authentication on the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Guest VLAN ID – Select the guest VLAN ID from the list of the currently defined VLANs. 2. Select Disable or Enable for the Port Based Authentication State in the provided field. 3. If you selected Enable for the Port Based Authentication State, then select the Authentication Method from the list in the provided field. 4. Select Disable or Enable for the Guest VLAN status in the provided field. 5.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • • • Port Control – Select the port authorization state. – Auto – The port control is Auto and a single client has been authenticated via the port. – Authorized – The port control is Forced Authorized, and clients have full port access. – Unauthorized – Either the port control is force Unauthorized, or the port control is Auto but a client has not been authenticated via the port.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Server Timeout – Enter the amount of time (in seconds) that lapses before the device resends a request to the authentication server. The field default is 30 seconds. • Termination Cause – Displays the reason port authentication was terminated. 2. Select the interface. 3. Select the Port Control state, Guest VLAN mode and Periodic Reauthentication status in the provided fields in the first row. 4.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure storm control: 1. Click Security > Traffic Control > Storm Control. The Storm Control screen displays: Figure 6-8 The Storm Control screen contains the following fields: • Interface – Displays the port number for which the storm control information is displayed. • Broadcast Control – Select whether storm control is enabled or disabled on the interface according to Broadcast mode.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Broadcast Rate Threshold – Enter the maximum rate (kilobits per second) at which broadcast packets are forwarded. The range is 70-285000 kbps. The default value is 200 kbps. 2. Select the interface. 3. Select Enable or Disable Broadcast Control in the provided field in the first row. 4. If you selected Enable Broadcast Control, select the Broadcast Mode from the list in the provided field in the first row. 5.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To define port security: 1. Click Security > Traffic Control > Port Security. The Port Security screen displays: Figure 6-9 The Port Security screen contains the following fields: • Interface – Displays the port or LAG name. • Status – Select the port security status. The possible field values are: • – Locked – The port is currently locked. – Unlocked – The port is currently unlocked. This is the default value.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Max Entries – Enter the maximum number of MAC addresses that can be learned on the port. The Max Entries field is enabled only if the Limited Dynamic Lock mode is selected. The range is 1-128 entries. The default value is 1. • Action – Select the action to be applied to packets arriving on a locked port. The possible field values are: • • – Forward – Forwards packets from an unknown source without learning the MAC address.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • “IP Rules” • “IP Binding Configuration” • “Binding Table” MAC ACL The MAC ACL screen allows a MAC Based ACL to be defined. To view or rename MAC Based ACLs: 1. Click Security > ACL > MAC ACL. The MAC Configuration screen displays: Figure 6-10 The MAC Configuration screen contains the following fields: MAC Configuration • Current number of ACL – Displays the current number of user-defined ACLs.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To add a new MAC-based ACL entry: 1. Click Security > ACL > MAC ACL. The MAC Configuration screen displays. 2. Enter the ACL Name in the provided field in the first row. 3. Click Add to update the device. To remove a MAC-based ACL entry: 1. Click Security > ACL > MAC ACL. The MAC Configuration screen displays. 2. Select the ACL entry. 3. Click Delete to remove the entry.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Priority – Defines the rule priority. When the packet is matched to a rule, user groups are either granted permission or denied device management access. The rule number is essential to matching packets to rules, as packets are matched on a first-fit basis. • Source MAC Address – Enter the source MAC Address. • Source Mask – Enter the mask of the new source MAC address.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual MAC Binding Configuration To bind interfaces to an ACL: 1. Click Security > ACL > MAC Binding Configuration. The MAC Binding Configuration screen displays: Figure 6-12 The MAC Binding Configuration screen contains the following fields: MAC Binding Configuration • ACL Name – Select the ACL Name for viewing and modifying ACL bound interfaces. Port Selection Table 2. Select the interfaces for which the ACLs are bound. 3.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual IP ACL The IP ACL screen allows an IP Based ACL to be defined. To view or rename IP Based ACLs: 1. Click Security > ACL > IP ACL. The IP ACL screen displays: Figure 6-13 The IP ACL screen contains the following fields: IP ACL • Current number of ACL – Displays the current number of user-defined ACLs. IP ACL Table • Name – Enter the user-defined IP based ACL name.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 5. Click Apply to update the device. To remove an IP-based ACL entry: 1. Click Security > ACL > IP ACL. The IP ACL screen displays. 2. Select the ACL entry. 3. Click Delete to remove the entry. IP Rules The IP Rules screen allows an IP Rule to be defined within a configured ACL. Rules can be added only if the ACL is not bound to an interface. To define IP Rules: 1. Click Security > ACL > IP Rules.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Source IP Address – Enter the source IP Address. • Source Mask – Enter the mask of the new source IP address. • Destination IP Address – Enter the destination IP address. • Destination Mask – Enter the mask of the new destination IP address. • Source Port – Enter the source port that is matched to packets. • Destination Port – Enter the destination port that is matched to packets.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual IP Binding Configuration To bind interfaces to an ACL: 1. Click Security > ACL > IP Binding Configuration. The IP Binding Configuration screen displays: Figure 6-15 The IP Binding Configuration screen contains the following fields: IP Binding Configuration • ACL Name – Select the ACL Name for viewing and modifying ACL bound interfaces. Port Selection Table • Select the interfaces for which the ACLs are bound. 2.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Binding Table To view the ACL Binding Table: 1. Click Security > ACL > Binding Table. The Binding Table screen displays: Figure 6-16 The Binding Table screen contains the following fields: Interface Binding Table • Interface – Displays the interfaces for which the ACLs are bound. • ACL Name – Displays the ACL Name. • ACL Type – Displays the ACL Type. The possible field values are: – IP – The ACL is IP address based.
Chapter 7 Monitoring the Switch Setting Monitoring Options The navigation pane at the top of the web browser interface contains a Monitoring tab that enables you to manage your FS728TP Smart Switch with features under the following main menu options: • “Logs” • “RMON” • “Port Mirroring” The description that follows in this chapter describes configuring and managing monitoring settings in the FS728TP Smart Switch.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual This section provides information for managing logs. The logs enable viewing device events in real time, and recording the events for later usage. Logs record and manage events and report errors and informational messages.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Log Filter To configure log filters: 1. Click Monitoring > Logs > Log Filter. The Log Filter screen displays: Figure 7-2 The Log Filter screen contains the following fields: • • RAM Logs – Select the minimum message severity level to appear in the RAM Log. The following are the available message severity levels: – Emergency – The highest warning level.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – Emergency – The highest warning level. If the device is down or not functioning properly, an emergency log message is saved to the specified logging location. – Alert – The second highest warning level. An alert log is saved, if there is a serious device malfunction; for example, all device features are down. – Critical – The third highest warning level.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To view the Memory Log screen: 1. Click Monitoring > Logs > Memory Log. The Memory Log screen displays: Figure 7-3 The Memory Log screen contains the following fields: • Log Index – Displays the log number. • Log Time – Displays the time at which the log was generated. • Severity – Displays the log severity and urgency level. The following are the available log severity levels: – Emergency – The highest warning level.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Description – Displays the log message text. 2. Click REFRESH or CLEAR LOGS to refresh or reset the Memory Logs screen. Flash Log The Flash Log screen contains information about log entries saved to the log file in Flash, including the time the log was generated, the log severity, and a description of the log message. The message log is available after reboot. To view the message logs in Flash: 1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • – Emergency – The highest warning level. If the device is down or not functioning properly, an emergency log message is saved to the specified logging location. – Alert – The second highest warning level. An alert log is saved, if there is a serious device malfunction; for example, all device features are down. – Critical – The third highest warning level.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual The Server Log screen contains the following fields: • Server IP – Enter the server’s IP address to which logs can be sent. • UDP Port – Enter the UDP port to which the server logs are sent. The possible range is 1 – 65535. The default value is 514. • Facility – Select an application from which system logs are sent to the remote server. Only one facility can be assigned to a single server.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 7. Select the Minimum Severity level message sent to the server from the list in the provided field in the first row. 8. Click Apply to update the device. To add a remote log server: 1. Click Monitoring > Logs > Server Log. The Server Log screen displays. 2. Enter the Server IP address in the provided field in the first row. 3. Enter the UDP Port number in the provided field in the first row. 4.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Statistics The RMON Basic Statistics screen contains fields for viewing information about device utilization and errors that occurred on the device. To view RMON Basic Statistics: 1. Click Monitoring > RMON > Basic > Statistics. The RMON Basic Statistics screen displays: Figure 7-6 The RMON Basic Statistics screen contains the following fields: • Interface – Displays the port or LAG for which statistics are displayed.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Broadcast Packets Received – Displays the number of good broadcast packets received on the interface since the device was last refreshed. This number does not include Multicast packets. • Multicast Packets Received – Displays the number of good Multicast packets received on the interface since the device was last refreshed.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To view RMON Advanced Statistics: 1. Click Monitoring >RMON > Advanced > Statistics. The RMON Advanced Statistics screen displays: Figure 7-7 The RMON Advanced Statistics screen contains the following fields: RMON Interface Statistics • Interface – Select the device for which statistics are displayed. The possible field values are: – Port – Select the specific port for which RMON statistics are displayed.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Multicast Packets Received – Displays the number of good Multicast packets received on the interface since the device was last refreshed. • CRC & Align Errors – Displays the number of CRC and Align errors that have occurred on the interface since the device was last refreshed. • Undersize Packets – Displays the number of undersized packets (less than 64 octets) received on the interface since the device was last refreshed.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Drop Events – Displays the number of dropped events that have occurred on the interface since the device was last refreshed. • Received Bytes – Displays the number of octets received on the interface since the device was last refreshed. This number includes bad packets and FCS octets, but excludes framing bits.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To configure RMON history information: 1. Click Monitoring >RMON > Advanced > History Control. The RMON History Control screen displays: Figure 7-8 The RMON History Control screen contains the following fields: • History Entry No. – Displays the entry number for the History Control Table screen. • Source Interface – Enter the interface from which the history samples were taken.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 2. Enter the Source Interface, Sampling Interval, Samples Requested and Owner in the provided field in the first row. 3. Click Add to update the device. To remove a history control entry: 1. Click Monitoring >RMON > Advanced > History Control. The RMON History Control screen displays. 2. Select the history control entry. 3. Click Delete to remove the history control entry.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual History Table • Sample No. – Displays the sample number from which the statistics were taken. • Drop Events – Displays the number of dropped events that have occurred on the interface since the device was last refreshed. • Received Bytes – Displays the number of octets received on the interface since the device was last refreshed. This number includes bad packets and FCS octets, but excludes framing bits.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Events Control The RMON Events Control screen contains fields for defining RMON events. To configure RMON events control: 1. Click Monitoring > RMON > Advanced > Events Control. The RMON Events Control screen displays: Figure 7-10 The RMON Events Control screen contains the following fields: • Event Entry Interface – Displays the event. • Community – Enter the community to which the event belongs.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 4. Select the event Type from the list in the provided field in the first row. 5. Click Apply to update the device. To add an events control entry: 1. Click Monitoring > RMON > Advanced > Events Control. The RMON Events Control screen displays. 2. Enter the Community, Description and Owner in the provided field in the first row. 3. Select the event Type from the list in the provided field in the first row. 4.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Event – Displays the RMON Events. • Log Number– Displays the log number. • Log Time – Displays the time when the log entry was entered. • Description – Displays the log entry description. 2. To refresh the RMON Events Log screen, click REFRESH. Alarms The RMON Alarms screen contains fields for setting network alarms. Network alarms occur when a network problem or event, is detected.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – Delta – Subtracts the last sampled value from the current value. The difference in the values is compared to the threshold. • Rising Threshold – Enter the rising counter value that triggers the rising threshold alarm. The rising threshold is presented on top of the graph bars. Each monitored variable is designated a color. • Rising Event – Enter the event number by which rising alarms are reported.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 10. Click Apply to update the device. To add an alarm entry: 1. Click Monitoring > RMON > Advanced > Alarms. The RMON Alarms screen displays. 2. Select the Counter Name from the list of MIB variable values in the provided field in the first row. 3. Enter the Interface in the provided field in the first row. 4. Select the Sample Type from the list in the provided field in the first row. 5.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual Port Mirroring To define port mirroring: 1. Click Monitoring > Port Mirroring > Port Mirroring. The Port Mirroring screen displays: Figure 7-13 The Port Mirroring screen contains the following fields: Destination Port • Destination Port – Enter the port to which port traffic is copied. Source Port Table • Source Port – Enter the port from which the packets are mirrored.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 2. Enter the Source Port in the provided field in the first row. 3. Select the port mirroring Type from the list in the provided field in the first row. 4. Click Add to update the device. To remove a source port entry: 1. Click Monitoring > Port Mirroring > Port Mirroring. The Port Mirroring screen displays. 2. Select the source port entry. 3. Click Delete to remove the source port entry. 7-24 Monitoring the Switch v1.
Chapter 8 Maintenance Using the Maintenance Options The navigation pane at the top of the web browser interface contains a Maintenance tab that enables you to manage your FS728TP Smart Switch with features under the following main menu options: • “Reset” • “Upload” • “Download” • “File Management” • “Troubleshooting” The description that follows in this chapter describes configuring and managing maintenance options in the FS728TP Smart Switch.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To reset the device: 1. Click Maintenance > Reset > Device Reboot. The Device Reboot screen displays: Figure 8-1 The Device Reboot screen contains the following field: 2. Check this box and click Apply below to reboot – Confirm the rebooting operation. 3. Check the confirmation box. 4. Click Apply to reset the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Note: all configuration settings will return to their default values after reset – Check to confirm that the original factory default values will be restored after reset. 2. Check the confirmation box. 3. Click Apply to reset the device to the factory defaults. Upload The Upload menu contains the following option: • “Upload” Upload System Files can be backed up using the Upload screen. To back up files: 1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual 3. Enter the TFTP Server IP address in the provided field. 4. Enter the upload Remote Filename in the provided field. 5. Click Apply to upload the file. Download The Download menu contains the following option: • “Download” Download System files can be downloaded using the Download screen. To download system files: 1. Click Maintenance > Download.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Remote Filename – Enter the destination file name to be downloaded. 2. Select Firmware, Boot File or Configuration as the download File Type from the provided field. 3. Enter the TFTP Server IP address in the provided field. 4. Enter the download Remote Filename in the provided field. 5. Click Apply to download the file.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual – Image 1 – Activate Image file 1 after the device is reset. – Image 2 – Activate Image file 2 after the device is reset. 2. Select the image file to be active in the After Reset provided field in the first row. 3. Click Apply to update the device. You must reset the device for the active image setting to take effect. See “Reset” for detailed instructions on resetting the device.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual To test cables: 1. Click Maintenance > Troubleshooting > Diagnostics > Cable Test. The Cable Test screen displays: Figure 8-6 The Cable Test screen contains the following fields: • Interface – Enter the port to which the cable is connected. • Test Result – Displays the cable test results. Possible values are: – No Cable – A cable is not connected to the port. – Open Cable – A cable is connected on only one side.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual • Cable Length – Displays the approximate cable length. This test can only be performed when the port is up and operating at 100Mbps or 1 Gbps. 2. On the row containing the interface to be tested, click TEST to test the cable connected to the interface. 8-8 Maintenance v1.
Chapter 9 Online Help Online Help The navigation pane at the top of the web browser interface contains a Help tab that provides access to informational services including support and an online user guide in PDF format. The Help menu contains the following options: • “Support” • “User Guide” The description that follows in this chapter covers these features. c Support The Support screen provides access to the NETGEAR online support site at http://www.netgear.com. To access the Support screen: 1.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual User Guide The User Guide screen provides access to the PDF format of the User Guide. To view the User Guide screen: 1. Click Help > Online Help > User Guide. The User Guide screen displays: Figure 9-2 2. Click Apply to open a window and display the User Guide in PDF format. 9-2 Online Help v1.
Appendix A Default Settings This appendix provides default settings for the NETGEAR Model FS728TP Smart Switch. You can always configure the switch to default settings by using the Factory Reset function from a Web browser. Table A-1. Default Settings Feature FS728TPDefault Setting Port Speed Auto-negotiation Port Duplex Auto-negotiation Flow Control (half duplex) Disabled Flow Control (full duplex) Disabled IP Configuration DHCP enabled Password password VLAN 802.
FS728TP Smart Switch FS728TP Smart Switch Software Administration Manual A-2 Default Settings v1.
Index A Firmware Upload 3 ACL 17 Flash Logs 6 B G Bandwidth Settings 5 getting started 1 Boot File Download 4 C changing the password 8 configuration monitoring 1 network parameters 5 QoS 1 security 1 switch 1 system settings 1 Configuration Download 4 Configuration Upload 3 CoS 3 CPU 29 H History Table Page 16 I IGMP Snooping 29 installing 3, 5 interfaces switch management 2 Web browser 1 IP address default 8 L L2 28 D LACP 12 LAG 4 defaults IP address 8 subnet mask 8 Link Aggregated Group
FS728TP Smart Switch Software Administration Manual Memory Logs 4 STP 22 menus 2 subnet mask 8 Multicast Forward All Page 35 switch device 7 Multicast Groups 33, 34 switch configuration 1 N navigation menu 2 network alarms 20 network parameters 5 NIC settings 6 P password changing 8 PoE 7 Port mirroring 22 Port VLAN ID (PVID) 20 PVID 20 Q switch monitoring 1 system configuration 7 System Logs 1 system requirements 1 T TACACS+ 4 TDR 6 Terminal Access Controller Access Control System (TACACS+) 4 t