User Manual 10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch with 1 SFP and 1 Copper Uplink G S1 1 0 T UP G S7 1 0 T UP May 2021 202-12043-03 NETGEAR, Inc.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads. You can also check out our NETGEAR Community for helpful advice at community.netgear.com. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch We changed Reboot the switch. We changed Reset the switch to its factory default settings and added the following sections: - Reset the switch to factory default settings but maintain the registration status. - Reset the switch to factory default settings and reset the registration status. 202-12043-02 March 2020 • • 202-12043-01 January 2020 We added model GS110TUP. 202-12045-01 December 2019 First publication for model GS710TUP.
Contents Chapter 1 Get Started Available publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Switch management options and default management mode . . . . . . . . .14 Manage the switch by using the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Software requirements for the device UI . . . . . . . . . . . . . . . . . . . . . . . . . .15 Supported web browsers for the device UI . . . . . . . . . . . . . . . . . . . . . . .
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Access the user manual online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48 Chapter 2 Configure System Information View or define switch system information . . . . . . . . . . . . . . . . . . . . . . . . . . .50 View or define system information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50 View the temperature and fan status . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure LLDP global settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111 Configure LLDP port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112 View the LLDP-MED network policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114 Configure the LLDP-MED port settings . . . . . . . . . . . . . . . . . . . . . . . . . 115 View the local information advertised through LLDP . . . . . . . .
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the CST settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179 Configure the CST port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181 View the CST port status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183 View the Rapid STP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185 Manage the MST settings. . . . . . . . . . . .
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the global IPv6 routing settings . . . . . . . . . . . . . . . . . . . . . . 240 View the IPv6 route table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241 Configure the IPv6 VLAN interface settings . . . . . . . . . . . . . . . . . . . . . 242 Configure an IPv6 prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245 View the IPv6 routing statistics . . . . . . . . . . . . .
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure a RADIUS authentication server on the switch. . . . . . . . . . 313 Configure a RADIUS accounting server . . . . . . . . . . . . . . . . . . . . . . . . . 317 Configure the TACACS+ settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .321 Configure the global TACACS+ settings . . . . . . . . . . . . . . . . . . . . . . . . 321 Configure a TACACS+ server on the switch . . . . . . . . . . . . . . . . . . . . .
-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure VLAN ACL bindings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 416 Chapter 7 Monitor the Switch and the Traffic Monitor the switch and the ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419 View or clear switch statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419 View port statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch VLAN configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477 Access control lists (ACLs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478 MAC ACL example configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 478 Basic IPv4 ACL example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . 479 Differentiated Services (DiffServ) . . . . . . . . .
1 1 Get Started This user manual describes how you can use the device user interface (UI) to configure and operate the following switches: • Model GS110TUP. NETGEAR 10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Desktop Switch with 1 SFP and 1 Copper Uplink. This model provides 60W PoE++ (IEEE 802.3bt) to each PoE++ port (1–4) and up to 30W PoE+ (IEEE 802.3at) to each PoE+ port (5–8). The maximum PoE power budget across all active PoE++ and PoE+ ports is 240W.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Configure interface settings • Access the NETGEAR support website • Access the user manual online Note: For more information about the topics covered in this manual, visit the support website at netgear.com/support. Note: Firmware updates with new features and bug fixes are made available from time to time at netgear.com/support/download/.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Switch management options and default management mode If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up a custom configuration. Just connect power, connect to your network and to your other devices, and you’re done. The switch provides administrative management options that let you configure, monitor, and control the network.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Manage the switch by using the device UI This manual describes how to use the device UI to manage and monitor the switch. For information about using the NETGEAR Insight app and Insight Cloud portal to manage the switch, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit netgear.com/support.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Navigation tabs, configuration menus, and page menu The System Information page is the start page in the device UI. The following figure shows the System Information page for model GS710TUP. Navigation tabs Language menu Configuration menus Logout button Buttons Help page Page menus Configuration status and options Figure 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Link Submenu links Figure 2. Switch page menu link and submenu links Configuration and status options The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch User-defined fields User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page. All characters can be used except for the ones stated in the following table (unless specifically noted in a procedure for a feature). Table 2. Invalid characters for user-defined fields Invalid characters for user-defined fields \ | / < > * ? Context-sensitive help When you log in to the switch, every page cont
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Access the switch on-network and connected to the Internet The DHCP client on the switch is enabled by default, allowing a DHCP server or router on the network to assign an IP address to the switch. If the switch is on-network, connected to a DHCP server, and connected to the Internet, you can use a Windows-based computer to access the device UI of the switch and register the switch with NETGEAR.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Use a Windows-based computer to access the switch on-network and connected to the Internet For the following procedure, the network must provide Internet access. To use a Windows-based computer to determine the switch IP address and access the switch on-network and connected to the Internet: 1. Cable the switch to a network with a router or DHCP server that manages IP addresses. 2. Power on the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Device UI login page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials: - Device admin password: Enter the device admin password. The default device admin password is password.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch To use the NETGEAR Insight app to discover the IP address of the switch in your network: 1. On your mobile device, go to the app store, search for NETGEAR Insight, and download the latest version of the app. 2. Connect your mobile device to the WiFi network of the WiFi router or access point to which the switch is connected. 3. Open the NETGEAR Insight mobile app. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. Unzip the NSDT files, and click or double-click the .exe file (for example, NSDT-1.2.102.exe) to install the program on your computer. You might see the tool icon appear on your Mac dock or Windows desktop. 4. Reenable the security services on your computer. 5. Power on the switch. The DHCP server assigns the switch an IP address. 6. Connect your computer to the same network as the switch. You can use a WiFi or wired connection.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Device UI login page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials: - Device admin password: Enter the device admin password. The default device admin password is password.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. Write down the switch IP address assigned by the DHCP server. For information about how to access the device UI of the switch, see Access the switch on-network when you know the switch IP address on page 25. Use other options to discover the switch IP address If the switch is on-network, you can use one of the following options to determine the switch IP address: • Access the DHCP server.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you activated the warranty. 3. Enter your credentials, which depend on the page that displays: • Register to activate your warranty page displays: If the switch is online and you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Access the switch off-network and not connected to the Internet The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. Do one of the following: • Enter a registration key. If you obtained a registration key, do the following: a. Type or paste the key. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 31. b. Click the Submit button. • Do not register at this time and access the device UI: Do the following: a. Click the Skip Registration & Access the UI button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch the switch online on page 30). If you do not have a NETGEAR account, you can create one. Alternatively, you can obtain a registration key and enter the key when the switch is offline so that you are no longer prompted to activate your warranty (see Register the switch with your NETGEAR account and get a registration key for offline access on page 31). • Device admin password: You can access the device UI with your device admin password.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Register the switch You can register the switch online or offline to activate your warranty, after which you are no longer prompted to activate your warranty when you log in: • Online registration for on-network access: If your switch is on-network or connected to the Internet, you can register the switch with your NETGEAR account credentials and activate your warranty. During the registration process, the switch contacts a NETGEAR server.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet create a NETGEAR account, click the Create account link, follow the directions onscreen to create an account, and register the switch with your email address and password. For information about the credentials, see Credentials for the device UI on page 28. 5. If the Change Default Password page displays, specify and confirm a new device admin password, click the Submit button, and log in again with your new password.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The switch is registered with NETGEAR. 6. If the My Products page does not display, select My Products from the menu. The page adjusts. 7. Select the radio button for the newly registered switch, and click the Get Registration Key button. The registration key is displayed, and an email with the registration key is sent to your NETGEAR account email address.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Launch a web browser. 5. Open a web browser, and enter http://192.168.0.239. This is the default IP address of the switch. If you already disabled the DHCP client and assigned a static IP address to the switch, enter the static IP address of the switch. The Enter Registration Key page displays. 6. Enter the registration key. 7. Click the Submit button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Register to activate your warranty page displays. 4. Click the Skip Registration & Access the UI button. The Device UI login page displays. 5. Enter one of the following credentials: • Device admin password: Enter the device admin password.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch configuration saved on the cloud server, including the switch device admin password (that is, the password is reset to the Insight network location password). - • If you use the Insight app or the Insight Cloud portal, you can temporarily change the management mode of the switch back to Directly Connect to Web Browser Interface.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select the NETGEAR Insight Mobile App and Insight Cloud Portal radio button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch A pop-up window displays. d. Navigate to a location on your computer and save the file. The file transfer begins. The page displays information about the file transfer progress. 12. Reset the switch to factory default settings: a. Select Maintenance > Reset > Factory Default. The Default Settings page displays. b. Select the Reset configuration to factory default (EXCEPT registered device status), and clear device logs radio button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The file transfer begins. The page displays information about the progress of the file transfer. The switch applies the configuration automatically. 14. Reboot the switch: a. Select Maintenance > Reset > Device Reboot. The Device Reboot page displays. b. Select the check box. c. Click the Apply button. An Alert pop-up window displays. d. Click the OK button to confirm. The switch reboots. The Device UI login page displays. 15. Log in again.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select System > Device View. The Device View page displays. The following figure shows the Device View page.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch LED Description RJ-45 left LED Link, speed, and activity for Ethernet ports 1 to 8 • • • Solid green. A valid 1 Gbps port link is established. Blinking green. The port is transmitting or receiving packets at 1 Gbps. Solid amber. A valid 10 Mbps or 100 Mbps port link is established. Blinking amber. The port is transmitting or receiving packets at 10 Mbps or 100 Mbps. Black. No port link is established.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you select an option from the menu, the associated page opens. 9. To return to the Device View page, select System > Device View. Configure interface settings The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are Gigabit interfaces and are numbered on the front panel. You configure the logical interfaces by using the software.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Multiple ports and LAGs • All ports and LAGs Many of the pages that allow you to configure or view interface settings include links to display all ports, all LAGs, or all ports and LAGs on the page. Use these links as follows: • To display all ports, click the 1 link. • To display all LAGs, click the LAG link. • To display all ports and LAGs, click the All link.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch To configure a single port: 1. Ensure that the page is displaying all ports, and not only the LAGs. 2. Select the check box next to the port number. The row for the selected interface is highlighted, and the interface number appears in the heading row. 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved. To configure a single LAG: 1. Click the LAG link or the All link to display the LAGs. 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch To configure all ports: 1. Ensure that the page is displaying only ports, and not LAGs. 2. Select the check box in the heading row. The check boxes for all ports are selected and the rows for all ports are highlighted. 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved. To configure all LAGs: 1. Click the LAG link to display only the LAG interfaces. 2. Select the check box in the heading row.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Access the NETGEAR support website From the device UI, you can access the NETGEAR support website at netgear.com/support. To access the support website from the device UI: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Access the user manual online The user manual (the guide you are now reading) is available at the NETGEAR download center at netgear.com/support/download/. To access the user manual online from the device UI: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
2 2 Configure System Information This chapter contains the following sections: • View or define switch system information • Configure the IP network settings for management access • Configure the time settings • Configure denial of service settings • Configure DNS settings • Configure green Ethernet settings • Use the Device View • Configure Power over Ethernet • Configure SNMP • Configure Link Layer Discovery Protocol • Configure DHCP snooping • Set up PoE timer schedules 49
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View or define switch system information You can view or define system information, view temperature information, view fan information (model GS710TUP only), and view software information. View or define system information When you log in, the System Information page displays. You can configure and view general device information. To view or define system information: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The previous figure shows the System Information page for model GS710TUP. 6. Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Location. Enter the location of this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Contact. Enter the contact person for this switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 5. System Information (continued) Field Description Date & Time The current date and time. System Up Time The time in days, hours, and minutes since the last switch reboot. Base Mac Address Universally assigned hardware address of the switch. View the temperature and fan status You can view the temperature and, on model GS710TUP, the fan status. (Model GS110TUP is a fanless switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The previous figure shows the Temperature Sensors and Fans sections for model GS710TUP. 7. To refresh the page, click the Refresh button. The following table describes the nonconfigurable temperature and fan status information. Table 6. Temperature and fan status Field Description Temperature Sensors Sensor The temperature sensor index used to detect the temperature. Description The description of the temperature sensor.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View the software versions You can view the software versions that are running on the switch. To view the software versions: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 7. Versions information Field Description Model Name The model name of the switch. Boot Version The version of the bootloader software of the switch. Software Version The version number of the software that is running on the switch. View the system CPU status You can monitor the CPU, memory resources, and utilization patterns across various intervals to assess the performance, load, and stability settings of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The CPU Utilization section shows the memory information, task-related information, and percentage of CPU utilization per task. The following table describes CPU Memory Status information. Table 8. CPU Memory Status information Field Description Total System Memory The total memory of the switch in KBytes. Available Memory The available memory space for the switch in KBytes.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the IP network settings for management access You can configure network information for the device UI, which is the logical interface used for in-band connectivity with the switch through any of the switch’s front-panel ports. The settings associated with the device UI do not affect the configuration of the front panel ports through which traffic is switched or routed.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select one of the following radio buttons to specify how the network information for the switch must be configured: • Static IP Address. Specifies that the IP address, subnet mask, and default gateway must be manually configured. Enter this information in the fields below this radio button. • Dynamic IP Address (BOOTP). Specifies that the switch must obtain the IP address through a BootP server. • Dynamic IP Address (DHCP).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the IPv6 network settings for the local browser interface You can configure IPv6 network information for the device UI, which is the logical interface used for in-band connectivity with the switch through any of the switch’s front-panel ports. To access the switch over an IPv6 network, you must initially configure the switch with IPv6 information (an IPv6 prefix, prefix length, and default gateway).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. Determine how the switch acquires an IPv6 address: • IPv6 Address Auto Configuration Mode. When this mode is enabled, the network interface can acquire an IPv6 address through IPv6 Neighbor Discovery Protocol (NDP) and through the use of router advertisement messages. When this mode is disabled, the network interface does not use the native IPv6 address auto-configuration features to acquire an IPv6 address.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the time settings The switch supports the Simple Network Time Protocol (SNTP). As its name suggests, it is a less complicated version of Network Time Protocol, which is a system for synchronizing the clocks of networked computer systems, primarily when data transfer is handled through the Internet. You can also set the system time manually. Configure the time settings manually You can view and adjust date and time settings.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select the Clock Source Local radio button. 8. In the Date field, specify the current date by entering the month, day, and year (MM/DD/YYYY). 9. In the Time field, specify the current time by entering in hours, minutes, and seconds (HH:MM:SS). Note: If you do not enter a date and time, the switch calculates the date and time using the CPU’s clock cycle. 10. In the Time Zone Name field, specify the acronym for a time zone.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the time settings with SNTP and configure the global SNTP settings To configure the time by using SNTP and configure the global SNTP settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The local clock can be set to SNTP only if the following two conditions are met: • An SNTP server is configured. • The switch can contact the SNTP server. 8. Next to Client Mode, select the mode of operation of the SNTP client: • Unicast. SNTP operates in a point-to-point fashion.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 12. In the Broadcast Poll Interval field, specify the number of seconds between broadcast poll requests expressed as a power of 2. Broadcasts received prior to the expiry of this interval are discarded. The allowed range is 6 to 10. The default value is 6. 13. In the Unicast Poll Timeout field, specify the number of seconds to wait for an SNTP response to a unicast poll request. The allowed range is 1 to 30. The default value is 5. 14.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View the SNTP global status When you select the SNTP option as the clock source, you can view the SNTP global status. To view the SNTP global status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. Click the Refresh button to update the page with the latest information about the switch. The following table displays the nonconfigurable SNTP Global Status information. Table 10. SNTP Global Status information Field Description Version The SNTP version that the client supports. Supported mode The SNTP modes that the client supports. Multiple modes can be supported by a client.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 10. SNTP Global Status information (continued) Field Description Reference Clock ID The reference clock identifier of the server for the last received valid packet. Server mode The mode of the server for the last received valid packet. Unicast Server Max Entries The maximum number of unicast server entries that can be configured on this client.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch method is selected, SNTP information is accepted only from SNTP servers defined on the device using the SNTP Server Configuration page. The device retrieves synchronization information, either by actively requesting information or at every poll interval. You can view and modify information for adding and modifying Simple Network Time Protocol SNTP servers. Add an SNTP server To add an SNTP server: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 9. If the UDP port on the SNTP server to which SNTP requests are sent is not the standard port (123), specify the port number in the Port field. The range is from 1 to 65535. The default value is 123. 10. In the Priority field, specify the priority order which to query the servers. The SNTP client on the device continues sending SNTP requests to different servers until a successful response is received, or all servers are exhausted.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 11. SNTP Server Status information (continued) Field Description Last Attempt Status The status of the last SNTP request or unsolicited message for both unicast and broadcast modes. If no message was received from a server, a status of Other is displayed. These values are appropriate for all operational modes: • Other. The status of the last request is unknown, or no SNTP responses were received. • Success.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The System Information page displays. 6. Select System > Management > Time > SNTP Server Configuration. The SNTP Server Configuration page displays. 7. Select the check box next to the configured server. 8. Specify new values in the available fields. 9. Click the Apply button. Your settings are saved. Remove an SNTP server To remove an SNTP server: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure daylight saving time settings You can configure settings for summer time, which is also known as daylight saving time. Used in some countries around the world, summer time is the practice of temporarily advancing clocks during the summer months. Typically clocks are adjusted forward one or more hours near the start of spring and are adjusted backward in autumn. To configure the daylight saving time settings: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select a Daylight Saving (DST) radio button: • Disable. Disable daylight saving time. • Recurring. Daylight saving time occurs at the same time every year. The start and end times and dates for the time shift must be manually configured. • Recurring EU. The system clock uses the standard recurring summer time settings used in countries in the European Union.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 12. Daylight saving setting is Recurring, Recurring EU, or Recurring USA • Field Description Ends At These fields are used to configure the end values of date and time. • Week. Configure the end week in the month. • Day. Configure the end day in the week. • Month. Configure the end month. • Hours. Configure the end hour. • Minutes. Configure the end minutes. Offset Configure recurring offset in minutes.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View the daylight saving time status The Daylight Saving (DST) Status section shows information about the summer time settings and whether the time shift for summer time is currently in effect. To view the daylight saving time status: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. To refresh the page, click the Refresh button. The following table displays the nonconfigurable daylight saving status information. Table 14. Daylight Saving (DST) Status information Field Description Daylight Saving (DST) The Daylight Saving value, which is one of the following: • Disable • Recurring • Recurring EU • Recurring USA • Nonrecurring Begins At The start date of daylight saving time.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Denial of Service ICMPv4. Enabling ICMPv4 DoS prevention causes the switch to drop ICMPv4 packets with a type set to ECHO_REQ (ping) and a size greater than the configured ICMPv4 packet size. • Denial of Service ICMPv6. Enabling ICMPv6 DoS prevention causes the switch to drop ICMPv6 packets with a type set to ECHO_REQ (ping) and a size greater than the configured ICMPv6 packet size. • Denial of Service Ping of Death.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. Click the Apply button. Your settings are saved. Configure DNS settings You can configure information about DNS servers that the network uses and how the switch operates as a DNS client. Configure the global DNS settings and add a DNS server You can configure the global DNS settings and DNS server information. To configure the global DNS settings and add a DNS server: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select the Disable or Enable radio button to specify whether to disable or enable the administrative status of the DNS client. • Enable. Allows the switch to send DNS queries to a DNS server to resolve a DNS domain name. The DNS is enabled by default. • Disable. Prevents the switch from sending DNS queries. 8. In the DNS Default Name field, enter the default DNS domain name to include in DNS queries.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Remove a DNS server You can remove a DNS server that you no longer need. To remove a DNS server: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure and view host name-to-IP address information You can manually map host names to IP addresses or view dynamic host mappings. Add a static entry to the dynamic host mapping table To add a static entry to the local dynamic host mapping table: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Its length cannot exceed 255 characters and it is a required field. 8. In the IPv4/IPv6 Address field, enter the IP address to associate with the host name. 9. Click the Add button. Your settings are saved. The entry displays in the Dynamic Host Mapping table. Remove an entry from the dynamic host mapping table To remove an entry from the dynamic host mapping table: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Change the host name or IP address in an entry of the dynamic host mapping table, view all entries, or clear all entries To change the host name or IP address in an entry of the dynamic host mapping table, view all entries, or clear all entries: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The dynamic host mapping table shows host name-to-IP address entries that the switch learned. The following table describes the dynamic host fields. Table 16. Dynamic Host Mapping information Field Description Host Lists the host name that you assign to the specified IP address. Total Time since the dynamic entry was first added to the table. Elapsed Time since the dynamic entry was last updated. Type The type of the dynamic entry.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 5. Click the Go button. The System Information page displays. 6. Select System > Management > Green Ethernet > Green Ethernet Configuration. 7. Select the Auto Power Down Mode Disable or Enable radio button. By default, this mode is disabled. When a port link is down, the underlying physical layer goes down for a short period and then checks for port link pulses again so that auto-negotiation remains possible.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 10. Click the Apply button. Your settings are saved. Use the Device View For information about the device view, see Use the Device View of the device UI on page 40. Configure Power over Ethernet You can configure the global Power over Ethernet (PoE) configuration settings and the PoE settings for each port. Note: For more information about PoE, see the hardware installation guide, which you can download by visiting netgear.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The switch supports a plug-and-play process by which it detects the type of device that is connected to one of its PoE++ ports and whether that device needs power and how much so that the switch can provide the correct power to the device. During the plug-and-play process, the connected device can provide its Class response to the switch in many ways, depending on how the vendor programmed the device.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch An example for model GS710TUP: A Class 4 PD is attached to Port 1, a Class 2 PD to Port 2, and another Class 4 PD to Port 3. However, the PDs consume less power than defined by their classes: The PD attached to Port 1 consumes 7.3W, the PD attached to Port 2 consumes 4.7W, and the PD attached to Port 3 consumes 8.9W.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The previous figure shows the PoE Port Configuration page for model GS710TUP. The delivered power is stated in the Output Power (mW) column. Configure the global PoE settings To configure the global PoE settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Static. Specifies that the power allocated for each port depends on the type of power threshold configured on the port. • Dynamic. Specifies that the power consumption on each port is measured and calculated in real time. The default setting is Dynamic. 9. To active the PoE traps, from the Traps menu, select Enable. Selecting Disable deactivates the PoE traps. The default setting is Enable. 10. Click the Apply button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 9. From the Port Priority menu, select the priority for the port in relation to other ports if the total power that the switch is capable of delivering exceeds the total power budget: • Low. Low priority. This is the default setting. • Medium. Medium priority. • High. High priority. • Critical. Critical priority.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the nonconfigurable fields on the page. Table 19. PoE Port Configuration Field Description High Power All ports supports high power mode. Max Power (mW) The maximum power in milliwatts that can be provided by the port. Class The class defines the range of power that a powered device (PD) is drawing from the switch. The class definitions are as follows: • 0. 0.44–16.2W • 1. 0.44–4.2W • 2. 0.44–7.4W • 3. 0.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure SNMP You can configure SNMP settings for SNMPv1/v2 and SNMPv3. The switch software supports the configuration of SNMP groups and users that can manage traps that the SNMP agent generates. The switch uses both standard public MIBs for standard functionality and private MIBs that support additional switch functionality. All private MIBs begin with a hyphen (-) prefix.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch As an example, the previous figure shows one community configuration. 7. In the Management Station IP field, specify the IP address of the management station. 8. In the Management Station IP Mask field, specify the subnet mask to associate with the management station IP address.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 5. Click the Go button. The System Information page displays. 6. Select System > SNMP > SNMP V1/V2 > Community Configuration. The Community Configuration page displays. 7. Select the check box next to the community to remove. 8. Click the Delete button. The community is removed.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. In the Recipients IP field, enter the IPv4 address at which the SNMP traps from the switch must be received. 8. From the Version menu, select the trap version to be used by the SNMP trap receiver. • SNMPv1. The switch uses SNMPv1 to send traps to the receiver. The default setting is SNMPv1. • SNMPv2. The switch uses SNMPv2 to send traps to the receiver. 9.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. Change the fields as necessary. 9. Click the Apply button. Your settings are saved. Delete an SNMP trap recipient To delete an SNMP trap recipient: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch To configure the trap flags: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View the supported MIBs You can view a list of all MIBs that are supported on the switch. To view the supported MIBs: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the SNMP Supported MIBs Status fields. Table 20. SNMP supported MIBs Field Description Name The RFC number if applicable and the name of the MIB. Description The RFC title or MIB description. Configure SNMPv3 users Any user can connect to the switch using the SNMPv3 protocol, but for authentication and encryption, the switch supports only one user (admin).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. To enable authentication, select an Authentication Protocol radio button. You can select the MD5 radio button or the SHA radio button. With either of these options, the user login password is used as SNMPv3 authentication password. For information about how to configure the login password, see Change the device admin password for the device UI on page 310. 8. To enable encryption: a.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure LLDP global settings You can specify the global LLDP and LLDP-MED settings that are applied to the switch. To configure global LLDP settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Re-initializing Delay. The number of seconds to wait before attempting to re-initialize LLDP on a port after the LLDP operating mode on the port changes. • Transmit Delay. The minimum number of seconds to wait between transmissions of remote data change notifications to one or more SNMP trap receivers configured on the switch. 7. To configure a nondefault value for LLDP-MED, enter a value in the Fast Start Duration field.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface. • To configure all interfaces with the same settings, select the check box in the heading row. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch For information about how to configure the system name, see View or define switch system information on page 50. For information about how to configure the port description, see Configure the port settings and maximum frame size on page 140. 9. Click the Apply button. Your settings are saved.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The page refreshes and displays the data transmitted in the network policy TLVs for the interface. The following table describes the LLDP-MED network policy information that displays on the page. Table 21. LLDP-MED network policy information Field Description Network Policy Number The policy number.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Field Description Port Information Interface The interface associated with the rest of the data in the row. Port ID Subtype The type of information used to identify the interface in the Port ID field. Port ID The port number. Port Description The user-defined description of the port. Advertisement The TLV advertisement status of the port. 7.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Field Description Network Policies Application Type The media application type associated with the policy. VLAN ID The VLAN ID associated with the policy. VLAN Type Specifies whether the VLAN associated with the policy is tagged or untagged. User Priority The priority associated with the policy. DSCP The DSCP associated with a particular policy type.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the information that displays for all LLDP neighbors that were discovered. Field Description MSAP Entry The Media Service Access Point (MSAP) entry number for the remote device. Local Port The interface on the local system that received LLDP information from a remote system. Chassis ID Subtype The type of data displayed in the Chassis ID field on the remote system.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Field Description Managed Addresses Address SubType The type of the management address. Address The advertised management address of the remote system. Interface SubType The port subtype. Interface Number The port number on the remote device that sent the information. MAC/PHY Details Autonegotiation Supported Specifies whether the remote device supports port-speed autonegotiation. The option is True (enabled) or False (disabled).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Field Description Asset ID The asset ID advertised by the remote device. Location Information Civic The physical location, such as the street address, that the remote device advertised in the location TLV, for example, 123 45th St. E. The field value length range is 6–160 characters. Coordinates The location map coordinates that the remote device advertised in the location TLV, including latitude, longitude, and altitude.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the global DHCP snooping settings You can view and configure the global settings for DHCP snooping. To configure the global DHCP snooping settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. To enable the verification of the sender’s MAC address for DHCP snooping, leave the MAC Address Validation Enable radio button selected. The default is Enable. When MAC address validation is enabled, the device checks packets that are received on an untrusted interface to verify that the MAC address and the DHCP client hardware address match. If the addresses do not match, the device drops the packet. 9. Click the Apply button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select the check box for the VLAN. 8. From the DHCP Snooping Mode menu, select Enable. 9. Click the Apply button. Your settings are saved. Configure DHCP snooping interface settings You can view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded. If a port is configured as untrusted, any DHCP (or BootP) responses received on that port are discarded.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 5. Click the Go button. The System Information page displays. 6. Select System> Services > DHCP Snooping > Interface Configuration. 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 11. In the Rate Limit (pps) field, specify the rate limit value for DHCP snooping purposes. If the incoming rate of DHCP packets per second exceeds the configured burst interval per second, the port shuts down. If the rate limit value is None, he burst interval is also nonapplicable, and rate limiting is disabled. 12. In the Burst Interval (secs) field, specify the burst interval value for rate limiting purposes on the interface.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. From the Interface menu, select the interface on which the DHCP client is authorized. 8. In the MAC Address field, specify the MAC address for the binding to be added. This is the key to the binding database. 9. From the VLAN ID menu, select the ID of the VLAN that the client is authorized to use. 10. In the IP Address field, specify the IP address of the client. 11. Click the Add button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View or clear DHCP snooping statistics You can view and clear per-interface statistics about the DHCP messages filtered by the DHCP snooping feature on untrusted interfaces. To view or clear the DHCP snooping statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 23. DHCP Snooping Statistics information (continued) Field Description Client Ifc Mismatch The number of packets that were dropped by DHCP snooping because the interface and VLAN on which the packet was received do not match the client’s interface and VLAN information stored in the binding database.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The System Information page displays. 6. Select System> Timer Schedule > Advanced > Timer Schedule Configuration. The Timer Schedule Configuration page displays. 7. In the Timer Schedule Selection section, make your selections from the following menus: a. Timer Schedule Name. Select the name of the timer schedule that you want to configure. You can select only names of schedules that you created (see Create a PoE timer schedule on page 131).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch window to enter the date in the DD-Mon-YYY format to specify when the timer schedule must stop. e. From the Recurrence Pattern menu, select the pattern: • Daily. The timer schedule works with daily recurrence. The fields adjust. Either select the Every Weekday radio button to let the schedule operate from Monday through Friday or select the Every Day(s) radio button and enter a number from 0 to 255 in the field.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select System > Timer Schedule > Basic > Global Configuration. The Timer Schedule Name page displays. 7.
3 3 Configure Switching This chapter contains the following sections: • Configure the port settings and maximum frame size • Configure link aggregation groups • Configure VLANs • Configure Auto-VoIP • Configure Spanning Tree Protocol • Configure multicast • Manage IGMP snooping • Manage MLD snooping • View, search, and manage the MAC address table • Configure Layer 2 loop protection 139
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the port settings and maximum frame size You can view, configure, and monitor the physical port information for the ports (that is, the physical interfaces) on the switch. To configure the port settings and maximum frame size: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The frame size includes the Ethernet header, CRC, and payload. The range is 1522 to 10000. The default maximum frame size is 1522. 8. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The options are as follows: • Half. Indicates that the interface supports transmission between the devices in only one direction at a time. • Full. Indicates that the interface supports transmission between the devices in both directions simultaneously. • Auto. Indicates that speed is set by the auto-negotiation process. The default is Auto.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the nonconfigurable data that is displayed. Table 24. Port Configuration information Field Description Port Type For normal ports this field is blank. Otherwise, the options are as follows: • Mirrored. The port is a mirrored port on which all the traffic is copied to the probe port. • Probe. Use the port to monitor a mirrored port. • Trunk Member. The port is a member of a link aggregation trunk.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch To configure LAG settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • 2 Src/Dest IP and TCP/UDP Port Fields. This mode uses the source and destination IP addresses and source and destination TCP or UDP port values that are associated with the packet. Note: The switch balances traffic on a port channel (LAG) by selecting one of the links in the channel over which packets must be transmitted.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Set the LACP system priority You can set the LACP system priority that applies to all LAGs on the switch. To set the LACP system priority: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Set the LACP port priority settings You can configure the LACP priority value and administrative LACP time-out value for a port. To configure LACP port priority settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • To configure all interfaces with the same settings, select the check box in the heading row. 8. In the LACP Priority field, specify the LACP priority value for the selected interfaces. This value specifies the interface’s link aggregation priority relative to the devices at the other ends of the links on which link aggregation is enabled. A higher value indicates a lower priority. The range is 1 to 65535. The default value is 128. 9.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure VLAN settings You can configure the various VLAN settings. Add a VLAN To add a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. In the VLAN Name field, specify a name for the VLAN. The VLAN name can be up to 32 alphanumeric characters long, including blanks. You cannot change the names of the default VLANs (that is, the VLANs with ID 1, 4088, and 4089). 9. The VLAN Type field displays the type of the VLAN that you are configuring. You cannot change the type of the default VLANs (that is, the VLANs with ID 1, 4088 and 4089).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Note: You cannot delete VLANs 1, 4088, and 4089, all of which are predefined. 8. Click the Delete button. The VLAN is removed. Reset the VLAN configuration on the switch to the default settings If you reset the VLAN configuration on the switch to the default settings, all VLANs that you added are deleted. (The predefined VLANS are not deleted). The VLAN default values are as follows: • All ports are assigned to the default VLAN of 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. Select Switching> VLAN > Basic > VLAN Configuration. The VLAN Configuration page displays. 7. Select the Reset Configuration check box. 8. Click the Apply button. Your settings are saved. Except for the predefined default VLANs, all VLANs are deleted. Configure VLAN membership To configure VLAN membership: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. In the VLAN ID menu, select the VLAN ID. You can select a VLAN that is predefined or that you added (see Add a VLAN on page 150). 8. In the Group Operation menu, select one of the following options, which applies to all ports in the VLAN: • Untag All. For all ports and LAGs that are members of the VLAN, tags are removed from all egress packets. • Tag All. For all ports and LAGs that are members of the VLAN, all egress packets are tagged.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • U (Untagged). Selects the LAG as an untagged LAG in the VLAN. All frames transmitted on the LAG are untagged for this VLAN. • Blank. The LAG is excluded from the VLAN. By default, the selection is blank and none of the LAGs are a member of the VLAN. (VLAN 1 is an exception. By default, all LAGs are untagged members of VLAN 1.) However, LAGs can be dynamically registered (autodetected) in the VLAN through GVRP. 11. Click the Apply button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch To configure PVID settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • To configure all interfaces with the same settings, select the check box in the heading row. 9. In the PVID field, specify the VLAN ID to assign to untagged or priority-tagged frames received on the port. The default is 1. 10. In the VLAN Member field, specify the VLAN ID or list of VLANs of a member port. VLAN IDs range from 1 to 4093. The default is 1. Use a hyphen (-) to specify a range or a comma (,) to separate VLAN IDs in a list.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the nonconfigurable fields. Table 28. Nonconfigurable fields on the PVID Configuration page Field Description Current Ingress Filtering Indicates whether ingress filtering is enabled for the interface. Untagged VLANs The number of untagged VLANs for the interface. Tagged VLANs The number of tagged VLANs for the interface. Forbidden VLANs The number of forbidden VLANs for the interface.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Switching> VLAN > Advanced > MAC Based VLAN. The MAC Based VLAN Configuration page displays. 7. In the MAC Address field, enter a MAC address. This field is configurable only when a MAC-based VLAN exists. 8. In the VLAN ID field, specify a VLAN ID in the range from 1 to 4093. 9.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure protocol-based VLAN group membership To configure protocol-based VLAN group membership: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. In the Ports table and LAG table, click each port and LAG that you want to include in the protocol-based VLAN group. A protocol-based VLAN group can include both port and LAGs. A selected port or LAG is displayed by a check mark. 9. Click the Apply button Your settings are saved. 10. To display the current numbers in the selected protocol-based VLAN group, click the Current Members button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select the Admin Mode Disable or Enable radio button. This selection specifies the administrative mode for the voice VLAN for the switch. The default is Disable. 8. Select the interface by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Note: Authentication through dot1x is possible only if dot1x is enabled. 13. In the DSCP Value field, configure the Voice VLAN DSCP value for the port. The range is from 0 to 64. The default value is 0. 14. Click the Apply button. Your settings are saved. The Operational State field displays the operational status of the voice VLAN on an interface.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 11. In the Leave Timer field, specify the time in centiseconds to wait after receiving an unregister request for a VLAN or multicast group before deleting the associated entry. This allows time for another station to assert registration for the same attribute to maintain uninterrupted service. Enter a number between 20 and 600 (0.2 to 6.0 seconds). The default is 60 centiseconds (0.6 seconds).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • All. Both physical interfaces and LAGs are displayed. b. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The OUI-Based Properties page displays. 7. In the Auto-VoIP VLAN ID field, enter the VoIP VLAN ID of the switch. The default Auto-VoIP VLAN ID is 4088. You can use that VLAN ID or create another VLAN ID for Auto-VoIP. 8. From the OUI-based priority menu, select the OUI-based priority of the switch, from 0 to 7. The default value is 7. 9. Click the Apply button. Your settings are saved.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • 00:E0:BB: 3COM • 00:04:0D: AVAYA1 • 00:1B:4F: AVAYA2 You can select an existing OUI or add a new OUI and description to identify the IP phones on the network. Configure the OUI table To configure the OUI Table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Delete one or more OUI prefixes from the OUI table To delete one or more OUI prefixes from the OUI table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • MSTP. Multiple Spanning Tree Protocol (MSTP, also referred to as MST) supports multiple instances of spanning tree to efficiently channel VLAN traffic over different interfaces. For information on configuring MSTP, see Manage the MST settings on page 186 and Configure and view the port settings for an MST instance on page 190. • RSTP. Rapid STP. Each instance of the spanning tree behaves in the manner specified in IEEE 802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Switching > STP > Basic > STP Configuration. 7. Configure the following global settings for the switch: a. Spanning Tree State.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the nonconfigurable fields displayed on the page. Table 30. STP Configuration status Field Description Global Settings Configuration Digest Key The identifier used to identify the configuration currently being used. STP Status Bridge Identifier The bridge identifier for the CST. It is made up using the bridge priority and the base MAC address of the bridge.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Bridge Hello Time (secs). The bridge hello time for the Common and Internal Spanning Tree (CST), which indicates the time in seconds a root bridge must wait between configuration messages. The value is fixed at 2 seconds. The value must be less than or equal to (Bridge Max Age / 2) – 1. • Bridge Forward Delay (secs).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The option is Enable or Disable. The default value is Disable. When BPDU forwarding is enabled, the switch forwards the BPDU traffic arriving on the port when STP is disabled on the port. 12. From the Auto Edge menu, specify if the port is allowed to become an edge port if it does not detect BPDUs for some time. The option is Enable or Disable. The default value is Enable. 13.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the CST Status information displayed on the page. Table 33. CST port status Field Description Interface The physical port or LAG that is associated with the CST. Port Role Each MST bridge port that is enabled is assigned a port role for each spanning tree. The port role can be Root, Designated, Alternate, Backup, Master, or Disabled. Designated Root The root bridge for the CST.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch For each configured instance, the information described in the following table displays on the page. Table 35. MST configuration Field Description Bridge Identifier The bridge identifier for the selected MST instance. It is made up using the bridge priority and the base MAC address of the bridge. Last TCN The time in the format “day:hour:minute:second” since the topology of the selected MST instance last changed.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The System Information page displays. 6. Select Switching > STP > Advanced > MST Configuration. The MST Configuration page displays. 7. Select the check box next to the instance. You can select multiple check boxes to apply the same setting to all selected ports. 8. Update the values. 9. Click the Apply button. Your settings are saved. Delete an MST instance To delete an MST instance: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure and view the port settings for an MST instance You can configure and display the port setting for a Multiple Spanning Tree (MST) on the switch. A port can become diagnostically disabled (D-Disable) if a severe DOT1S error condition occurs. The most common cause is that BPDU flooding occurs for DOT1S, for example, if DOT1S receives more than 15 BPDUs during 3 seconds. Other causes for DOT1S D-Disable are rare.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Note: If no MST instances are configured on the switch, the page displays a “No MSTs Available” message. 7. From the Select MST menu, select the MST instance. You can select only instances that you added to the switch (see Configure an MST instance on page 186). 8. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the read-only MST port configuration information displayed on the Spanning Tree CST Configuration page. Table 36. MST port status information Field Description Auto Calculated Port Path Cost Indicates whether the path cost is automatically calculated (Enabled) or not (Disabled). Path cost is calculated based on the link speed of the port if the configured value for Port Path Cost is zero.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View the STP statistics You can view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To view the spanning tree statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the information available about the STP Statistics page. Table 37. STP Statistics Field Description Interface The physical port or LAG on the switch. STP BPDUs Received The number of STP BPDUs received at the selected port. STP BPDUs Transmitted The number of STP BPDUs transmitted from the selected port. RSTP BPDUs Received The number of RSTP BPDUs received at the selected port.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View the MFDB statistics To view the MFDB statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the auto-video multicast settings You can configure the auto-video multicast settings. To configure auto-video multicast settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Manage IGMP snooping Internet Group Management Protocol (IGMP) snooping is a feature that allows a switch to forward IPv4 multicast traffic intelligently. Multicast IPv4 traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 40. IGMP Snooping Configuration information (continued) Field Description VLAN IDs Enabled For IGMP Snooping The IDs of the VLANs that are enabled for IGMP snooping. VLAN IDs Enabled For IGMP Snooping Querier The IDs of the VLANs that are enabled for IGMP snooping querier. Configure IGMP snooping for interfaces To configure IGMP snooping for interfaces: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The option are Enable and Disable. The default is Disable. 14. Click the Apply button. Your settings are saved. View, search, or clear the IGMP snooping table You can view and clear all entries in the Multicast Forwarding Database that were created for IGMP snooping. To view, search, or clear the IGMP snooping table: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 9. To refresh the page with the latest information about the switch, click the Refresh button. 10. To clear all multicast forwarding address entries that were created for IGMP snooping, click the Clear button. The following table describes the information in the IGMP snooping table. Table 41.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 5. Click the Go button. The System Information page displays. 6. Select Switching> Multicast > IGMP Snooping > IGMP Snooping VLAN Configuration. 7. Select the check boxes for one or more VLANs. If you select the check box for a single VLAN, the VLAN ID displays in the VLAN ID field. 8. Configure the IGMP snooping values for the selected VLAN or VLANs: • Admin Mode. Enable or disable IGMP snooping for the specified VLAN ID.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Modify IGMP snooping settings for a VLAN To modify IGMP snooping settings for a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure an IGMP multicast router VLAN You can configure an interface to forward only snooped IGMP packets from a specific VLAN to the multicast router connected to the interface. This configuration is usually not required because the switch automatically detects a multicast router and forwards the IGMP packets accordingly.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. In the VLAN ID field, enter the VLAN ID. 9. From the Multicast Router menu, select Enable or Disable. 10. Click the Apply button. Your settings are saved. IGMP snooping querier overview IGMP snooping requires that one central switch or router periodically queries all end-devices on the network to announce their multicast memberships. This central device is the IGMP querier.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. Select Switching> Multicast > IGMP Snooping Querier > Querier Configuration. 7. Configure the following settings: • Querier Admin Mode. Enable or disable IGMP snooping for the switch. The default is Disable. • Snooping Querier IP Address. Enter the snooping querier IP address to be used as the source address in periodic IGMP queries. This address is used when no address is configured on the VLAN on which a query is being sent.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 42. Querier VLAN Status information (continued) Field Description Operational Version The operational IGMP protocol version of the querier. Last Querier Address The IP address of the last querier from which a query was snooped on the VLAN. Last Querier Version The IGMP protocol version of the last querier from which a query was snooped on the VLAN.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure MLD snooping for interfaces To configure MLD snooping for interfaces: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface. • To configure all interfaces with the same settings, select the check box in the heading row. 9.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Your settings are saved. Modify the MLD snooping settings for a VLAN To the modify MLD snooping settings for a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure an MLD multicast router VLAN To configure an MLD multicast router VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure an MLD snooping querier You can configure the settings for an MLD snooping querier. To configure an MLD snooping querier: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch used when no address is configured on the VLAN on which a query is being sent. The supported IPv6 formats are x:x:x:x:x:x:x:x and x::x. • MLD Version. Specify the MLD protocol version used in periodic MLD queries. • Query Interval (secs). Specify the interval in seconds between periodic queries sent by the snooping querier. The query interval must be a value in the range of 1 to 1800. The default value is 60.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. In the VLAN ID field, specify the VLAN ID on which the MLD snooping querier is administratively enabled and for which a VLAN exists in the VLAN database. 8. From the Querier Election Participate Mode menu, select to enable or disable the querier participation election mode for MLD snooping. When this mode is disabled, on detecting another querier of same version in the VLAN, the snooping querier moves to a non-querier state.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View, search, and manage the MAC address table You can view or configure the MAC address table. This table contains information about unicast entries for which the switch holds forwarding or filtering information. This information lets the transparent bridging function determine how an incoming frame must be propagated. If you clear the MAC address entries in the MAC address table, only the dynamic entries are removed.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Use the Search menu and field to search for a MAC address, VLAN ID, or interface number: • MAC Address. From the Search menu, select MAC Address, and enter the 6-byte hexadecimal MAC address in two-digit groups separated by colons, for example, 01:23:45:67:89:AB. Then click the Go button. If the address exists, that entry is displayed as the first entry followed by the remaining (higher) MAC addresses. An exact match is required.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 45. MAC address table information (continued) Field Description Interface The interface upon which this address was learned. Status The status of this entry. The meanings of the values are as follows: • Static. The value of the corresponding instance was added by the system or a user and cannot be relearned. • Learned. The value of the corresponding instance was learned, and is being used. • Management.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. In the Address Aging Timeout (seconds) field, specify the time-out period in seconds for aging out dynamically learned forwarding information. The value can be any number between 10 and 1000000 seconds. The default is 300 seconds. 8. Click the Apply button. Your settings are saved. Add a static MAC address to the MAC address table To add a static MAC address to the MAC address table: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. From the Interface menu, select the interface. 8. In the Static MAC Address field, enter the static MAC address that you want to add. 9. From the VLAN ID menu, select the VLAN ID that must be associated with the MAC address. 10. Click the Add button. The static MAC address is added to the switch. Configure Layer 2 loop protection Loops inside a network are costly because they consume resources and reduce the performance of the network.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Loop protection is supported on physical interfaces and static LAG interfaces, but not on dynamic LAG interfaces. Configure global Layer 2 loop protection To configure L2 loop protection globally: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 9. From the Max PDU Receive menu, select the maximum number of packets to be received before an action is taken. The default is 1. 10. In the Disable Timer field, enter the time in seconds after which a port is disabled when a loop is detected. The range is from 0 to 604800 seconds. The default is 0 seconds. 11. Click the Apply button. Your settings are saved.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the nonconfigurable information displayed on the page. Table 46. L2 Loop Protection Interface Information Field Description Loop Detected Shows whether a loop is detected on the interface. If the interface is disabled and then reenabled, the status changes to No again. Loop Count The number of packets that were received after the loop was detected.
4 4 Configure Routing This chapter contains the following sections: • Routing concepts • Configure the IPv4 routing mode • Configure IPv6 routing • Configure VLAN routing • Configure router discovery for a VLAN routing interface • Manage routes and view the routing table • Configure Address Resolution Protocol 234
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Routing concepts The switch supports IP routing. When a packet enters the switch, the switch checks the destination MAC address to determine if it matches any of the configured routing interfaces. If it does, the switch searches the host table for a matching destination IP address. If a matching entry is found, the packet is routed to the host.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the nonconfigurable information displayed on the page. Table 48. IP Statistics information Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 48. IP Statistics information (continued) Field Description IpReasmReqds The number of IP fragments received that were reassembled at this entity. IpReasmOKs The number of IP datagrams successfully reassembled. IpReasmFails The number of failures detected by the IP reassembly algorithm (for whatever reason: timed out, errors, and so on).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 48. IP Statistics information (continued) Field Description IcmpOutTimeExcds The number of ICMP time exceeded messages sent. IcmpOutParmProbs The number of ICMP parameter problem messages sent. IcmpOutSrcQuenchs The number of ICMP source quench messages sent. IcmpOutRedirects The number of ICMP redirect messages sent. For a host, this is always zero, since hosts do not send redirects.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 5. Click the Go button. The System Information page displays. 6. Select Routing> IPv6 > Basic > Route Table. 7. From the Routes Displayed menu, select one of the following options: • All Routes. Show all active IPv6 routes. • Best Routes Only. Show only the best active routes. • Configured Routes Only. Show only the manually configured routes. 8. To refresh the page with the latest information about the switch, click the Refresh button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch When IPv6 mode is enabled, the interface is capable of IPv6 operation without a global address. In this case, an EUI-64-based link-local address is used. The default value is Disable. 9. From the DHCPv6 Client Mode menu, select to enable or disable the DHCPv6 client mode on an interface. Only one interface can function as a client. The default value is Disable. 10.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 19. From the Router Preference menu, specify the router preference advertisement on an interface. The default value is Medium. 20. From the Adv Suppress Flag menu, select to enable or disable the router advertisement suppression on an interface. The default value is Disable. 21. From the Destination Unreachables menu, select to enable or disable the mode for sending ICMPv6 destination unreachable messages on this interface.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Routing> IPv6 > Advanced > Prefix Configuration. 7. From the Interface menu, select the interface to be configured.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The IPv6 address is added to the interface. 16. Click the Apply button. Your settings are saved. View the IPv6 routing statistics To view the IPv6 routing statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The previous figure shows the top of the page only. 7. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable IPv6 data that is displayed. Table 51. IPv6 Statistics information Field Description Ip6InReceives The total number of input datagrams received, including those received in error.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 51. IPv6 Statistics information (continued) Field Description Ip6InAddrErrors The number of input datagrams discarded because the IPv6 address in their IPv6 header's destination field was not a valid address to be received at this entity. This count includes invalid addresses (for example, ::0) and unsupported addresses (such as addresses with unallocated prefixes).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 51. IPv6 Statistics information (continued) Field Description Ip6ReasmFails The number of failures detected by the IPv6 reassembly algorithm (for whatever reason: timed out, errors, and so on). This is not necessarily a count of discarded IPv6 fragments since some algorithms (notably the algorithm in RFC 815) can lose track of the number of fragments by combining them as they are received.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 52. ICMPv6 Statistics information (continued) Field Description Icmp6OutMsgs The number of ICMP messages sent. This counter includes all those counted by icmpOutErrors. Icmp6OutErrors The number of ICMP messages not sent because of problems discovered within ICMP, such as a lack of buffers. This number does not include errors discovered outside the ICMP layer such as the inability of IPv6 to route the resulting datagram.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 52. ICMPv6 Statistics information (continued) Field Description Icmp6OutRouterSolicits The number of ICMP Neighbor Solicitation messages sent. Icmp6OutRouterAdvertisements The number of ICMP Router Advertisement messages sent. Icmp6OutNeighborSolicits The number of ICMP Neighbor Solicitation messages sent. Icmp6OutRedirects The number of Redirect messages sent.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Routing> IPv6 > Advanced > Neighbor Table. 7.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 53. IPv6 Neighbor Table information (continued) Field Description Neighbor State The state of the neighbor cache entry. Following are the states for dynamic entries in the IPv6 neighbor discovery cache: • Incmp. Address resolution is being performed on the entry. A neighbor solicitation message was sent to the solicited-node multicast address of the target, but the corresponding neighbor advertisement message is not yet received.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure IPv6 route preferences You can configure the default preference for each protocol. These values are arbitrary values in the range of 1 to 255 and are independent of route metrics. Most routing protocols use a route metric to determine the shortest path known to the protocol, independent of any other protocol. The switch selects the route with the lowest preference value as the best route to a destination.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. Click the Apply button. Your settings are saved. The Local field displays the local preference. Configure VLAN routing You can configure the switch with some ports supporting VLANs and some ports supporting routing. You can also configure the switch to allow traffic on a VLAN to be treated as if the VLAN were a router port.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • U (Untagged). Selects the port as an untagged port in the VLAN. All frames transmitted on the port are untagged for this VLAN. • Blank. The port is excluded from the VLAN. By default, the selection is blank, which means that the port is excluded from the VLAN but can be dynamically registered (autodetected) in the VLAN through GVRP. 11.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Routing> VLAN > VLAN Routing Configuration. 7. From the VLAN menu, select the VLAN.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Delete a VLAN routing interface You can delete a VLAN routing interface that you no longer need. To delete a VLAN routing interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure router discovery for a VLAN routing interface By default, a VLAN routing interface does not send router advertisements.You can enable the router advertisements for a VLAN routing interface and configure the setting for the router advertisements. To configure router discovery for a VLAN routing interface: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 9. In the Advertise Address field, specify the IP address that must be advertised. In the Maximum Advertise Interval field, enter the maximum time in seconds allowed between router advertisements sent from the interface. The default value is 600. 10. In the Minimum Advertise Interval field, enter the minimum time in seconds allowed between router advertisements sent from the interface. The value must be in the range of 3 to 1800.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. In the Description field, enter a description for the route. The description must consist of alphanumeric, hyphen, or underscore characters and can be up to 31 characters in length. 9. Click the Add button. The static route is added to the switch. 10. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable data that is displayed. Table 55.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Therefore, entries are updated or periodically refreshed to determine if an address still exists. If an entry was identified as a sender of an ARP packet, the entry can be removed from the ARP cache. You can configure an age-out interval that determines how long an entry that is not updated remains in the ARP cache. View the ARP cache You can view ARP entries in the ARP cache.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Navigate through the table by doing the following: • From the Rows per page menu, select how many table entries are displayed per page. Possible values are 20, 50, 100, 200, and All. If you select All, the browser might be slow to display the information. • Click the < button to display the previous page of the table data entries. • Click the > button to display the next page of the table data entries. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Manually add an entry to the ARP table You can manually add an entry to the ARP table. To manually add an entry to the ARP table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Enter the address as six two-digit hexadecimal numbers separated by colons, for example, 00:06:29:32:81:40. 9. Click the Add button. The static ARP entry is added to the switch. For information about viewing the new entry and other entries in the ARP cache, see View the ARP cache on page 268. View or globally configure the ARP table You can change the global settings for the ARP table. To view or configure the ARP table: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. In the Age Time field, enter the time, in seconds, that a dynamic ARP entry remains in the ARP table before aging out. The range is 15 to 21600 seconds. The default is 1200 seconds. 8. In the Response Time field, enter the time, in seconds, that the device waits for an ARP response to an ARP request that it sends. The range is 1 to 10 seconds. The default is 1 second. 9.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
5 5 Configure Quality of Service This chapter contains the following sections: • Quality of Service concepts • Manage the Class of Service • Manage Differentiated Services 274
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Quality of Service concepts In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch ports, in accordance with the configured default priority of the ingress port. This process is also used for cases where a trusted port mapping cannot be honored, such as when a non-IP packet arrives at a port configured to trust the IP DSCP value. Configure the global CoS settings A global configuration setting is automatically applied to all interfaces on the switch. To configure the CoS trust mode settings on all interfaces: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch By default, the Global radio button is selected. • To configure the same CoS trust mode settings for all CoS configurable interfaces, do the following: a. Select the Global radio button. b. From the Global Trust Mode menu, select one of the following trust mode options for ingress traffic on the switch: - Untrusted. Do not trust any CoS packet marking at ingress. • - 802.1p. The eight priority tags that are specified in IEEE 802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 10. In the Interface Shaping Rate field, specify the maximum outbound transmission rate bandwidth in kbps. This setting is used to shape the outbound transmission rate in increments of 1 percent in a range of 0–100. This value is controlled independently of any per-queue maximum bandwidth configuration. It is effectively a second-level shaping mechanism. The default value is 0. The value 0 means that the maximum is unlimited.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The Queue Management Type field displays the queue depth management technique that is used for queues on the interface. By default, this method is Taildrop, irrespective of your selection from the Scheduler Type menu. Map 802.1p priorities to queues You can view or change which internal traffic classes are mapped to the 802.1p priority class values in Ethernet frames that the device receives.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The 802.1p Priority row contains traffic class selectors for each of the eight 802.1p priorities to be mapped. The priority goes from low (0) to high (7). For example, traffic with a priority of 0 is for most data traffic and is sent using best effort. Traffic with a higher priority, such as 7, might be time-sensitive traffic, such as voice or video. The values in the menu under each priority represent the traffic class.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. For each DSCP value, select from the corresponding Queue menu which internal traffic class must be mapped to the DSCP value. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position. Before traffic in a lower queue is sent, it must wait for traffic in higher queues to be sent.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch acceptable and in many cases unnoticeable. However, any degradation of service can negatively affect applications with strict timing requirements, such as voice and multimedia. Defining DiffServ To use DiffServ for QoS, you must first define the following categories and their criteria: 1. Class. Create classes and define class criteria. 2. Policy. Create policies, associate classes with policies, and define policy statements. 3. Service.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 57. DiffServ Status information (continued) Field Description Policy table The number of configured policies out of the total allowed on the switch. Policy Instance Table The number of configured policy class instances out of the total allowed on the switch. Policy Attributes Table The number of configured policy attributes (attached to the policy class instances) out of the total allowed on the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. Select QoS > DiffServ > Advanced > Class Configuration. The Class Name page displays. 7. In the Class Name field, enter a class name. The Class Name field also lists all existing DiffServ class names, from which you can select one for modification or deletion. The class name can be 1 to 31 alphanumeric characters in length.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Reference Class. Select this radio button to reference another class for criteria. The match criteria defined in the reference class function as match criteria in addition to the match criteria that you define for the selected class. After you select the radio button, the classes that can be referenced are displayed. Select the class to reference. A class can reference only one other class of the same type. • Class of Service.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Source IP. Select this radio button to require a packet’s source IP address to match the specified IP address. After you select the radio button, use the following fields to configure the source IP address match criteria: - Address. The source IP address format to match in dotted-decimal. - Mask. The bit mask in IP dotted-decimal format indicating which parts of the source IP address to use for matching against packet content.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the nonconfigurable information displayed in the Class Summary section at the bottom of the DiffServ Class Configuration page. Table 58. DiffServ Class Configuration, Class Summary information Field Description Match Criteria The configured match criteria for the specified class. Values The values of the configured match criteria. Rename an existing DiffServ class To rename an existing DiffServ class: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Change the criteria for an existing DiffServ class To change the criteria for an existing DiffServ class: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 11. Define the criteria that must be associated the IPv6 DiffServ class: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class. The only selection from the Match Every menu is Any. • Reference Class. Select this radio button to reference another class for criteria.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Destination L4 Port. Select this radio button to require a packet’s TCP/UDP destination port to match the specified protocol, which you must select from the menu. The range is 0 to 65535. The menu includes Other as an option for unnamed ports. • IP DSCP. Select this radio button to require the packet’s IP DiffServ Code Point (DSCP) value to match the specified IP DSCP keyword code, which you must select from the menu.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The System Information page displays. 6. Select QoS > DiffServ > Advanced > IPv6 Class Configuration. The Class Name page displays. 7. Select the check box next to the class name. 8. In the Class Name field, specify the new name. 9. Click the Apply button. Your settings are saved. Change the criteria for an existing IPv6 DiffServ class To change the criteria for an existing IPv6 DiffServ class: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Delete an IPv6 DiffServ class To delete an IPv6 DiffServ class: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 11. Configure the policy attributes by selecting one of the following radio buttons: • Assign Queue. Select this radio button to specify that traffic must be assigned to a queue, which you must select from the menu. The queue is expressed as a value in the range from 0 to 7. • Drop. Select this radio button to require each inbound packet to be dropped. • Mark VLAN CoS.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch specify any other action for those packets. You must specify a policy action for packets that conform to the policy. - Committed Rate. Enter the committed rate that is applied to conforming packets by specifying a value in the range from 16 to 1000000 Kbps. - In the Conform Action section, select one of the following radio buttons: • Send. Packets are forwarded unmodified. This is the default confirming action. • Drop.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > Policy Configuration. The Policy Configuration page displays. 7.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The page on which you can change the policy attributes displays. 8. Change the policy attributes as needed. 9. Click the Apply button. Your settings are saved. Change or remove a class from an existing DiffServ policy To change or remove a class from an existing DiffServ policy: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Delete a DiffServ policy To delete a DiffServ policy: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 10. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information displayed on the page. Table 60. Service Interface Configuration information Field Description Direction Shows the traffic direction of this service interface, which is always inbound (In). Operational Status Shows the operational status of this service interface (either Up or Down).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8. Select the check box for the interface. 9. From the Policy In Name menu, select another policy name. 10.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8. Select the check box for the interface. 9. From the Policy In Name menu, select None. 10. Click the Apply button. Your settings are saved. View DiffServ service statistics You can display service-level statistical information about all interfaces to which DiffServ policies are attached. To view the DiffServ service statistics: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the information available on the Service Statistics page. Table 61. DiffServ Service Statistics information Field Description Interface All valid port numbers on the switch with a DiffServ policy that is attached in the inbound direction. Direction The traffic direction of interface is inbound (In). This field shows only the direction for which a DiffServ policy is attached.
6 6 Manage Device Security This chapter contains the following sections: • Change the device admin password for the device UI • Manage the RADIUS settings • Configure the TACACS+ settings • Configure authentication lists • Manage the Smart Control Center • Configure management access • Control access with profiles and rules • Configure port authentication • Set up traffic control • Configure access control lists 309
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Change the device admin password for the device UI You can change the device admin password for the user with the user name admin. To change the device admin password for the device UI: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The password is displayed in dots. 10. Click the Apply button. Your settings are saved. Manage the RADIUS settings RADIUS servers provide additional security for networks. The RADIUS server maintains a user database, which contains per-user authentication information. The switch passes information to the configured RADIUS server, which can authenticate a user name and password before authorizing use of the network.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. In the Timeout Duration field, specify the time-out value, in seconds, for request retransmissions. The range is from 1 to 30. The default value is 5. 9. From the Accounting Mode menu, select to enable or disable RADIUS accounting on the server. The default is Disabled. 10. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable fields displayed on the page. Table 62.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Server Configuration. 7.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the RADIUS server statistics displayed on the page. Table 63. RADIUS authentication server statistics information Field Description Server Address The address of the RADIUS server or the name of the RADIUS server for which the statistics are displayed.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the RADIUS server statistics displayed on the page. Table 64. RADIUS accounting server statistics information Field Description Accounting Server Address The accounting server associated with the statistics. Round Trip Time (secs) The time interval, in hundredths of a second, between the most recent accounting-response and the accounting-request that matched it from this RADIUS accounting server.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. Select Security > Management Security > RADIUS > Accounting Server Configuration. The Accounting Server Configuration page displays. 7. Remove the server IP address from the Accounting Server Address field. Leave the field blank. 8. Click the Apply button. Your settings are saved. The RADIUS accounting server is removed.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Modify the settings for a TACACS+ server on the switch To modify the settings for a TACACS+ server on the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch This is the method that is used if the first method times out. If you select a method that does not time out as the second method, the third method is not tried. 10. From the menu in the 3 column, select the authentication method, if any, that must be used third in the selected authentication login list. 11. From the menu in the 4 column, select the method, if any, that must be used fourth in the selected authentication login list.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select the check box next to the httpsList name. 8. From the menu in the 1 column, select the authentication method that must be used first in the selected authentication login list. If you select a method that does not time out as the first method, such as Local, no other method is tried, even if you specified more than one method. This setting does not display when you first create a new login list.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure the dot1x authentication list The dot1x authentication list defines the IEEE 802.1X authentication method used for the default list. The default list is dot1xList. To configure the dot1x authentication list: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Manage the Smart Control Center By default, the configuration option of the Smart Control Center (SCC) is disabled. You still can use the SCC to discover the IP address of the switch, but you cannot use the SCC to perform any actions on the switch. If you enable the configuration option of the SCC, you can use it to configure the switch. For more information about the SCC, visit netgear.com/support/product/SCC.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Disable. The SCC can discover the switch but cannot perform any actions on the switch. This is the default setting. 8. Click the Apply button. Your settings are saved. Configure management access You can configure the global settings for HTTP and secure HTTP (HTTPS) access to the switch’s device UI. You can also configure access control profiles and access rules.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select the Admin Mode Enable or Disable radio button. This selection enables or disables HTTP. The default value is Enable. 8. In the HTTP Session Soft Timeout field, specify the number of minutes an HTTP session can be idle before a time-out occurs. The value must be in the range from 0 to 60 minutes. The default value is 5 minutes.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 12. Click the Apply button. Your settings are saved. Browser security warning with HTTPS access After you enable HTTPS access (see Configure HTTP access settings on page 331) and you attempt to access the device UI, your browser might display a security warning that your connection is not private or not secure, or that a problem with the security certificate occurred.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Manage certificates for HTTPS access You can manage certificates for HTTPS access. Generate an SSL certificate Note: Before you can generate a certificate, you must disable HTTPS (see Configure HTTPS access settings on page 332) and log back in to the device UI over an HTTP session. After you generate the certificate, you can reenable HTTPS and log back in to the device UI over an HTTPS session. To generate an SSL certificate: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The Certificate Present field displays whether a certificate is present on the switch. 7. In the Certificate Management section, select the Generate Certificates radio button. 8. Click the Apply button. The switch generates an SSL certificate. The Certificate Generation Status field shows progress information.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch To configure the certificate transfer settings for HTTPS sessions: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. From the Server Address Type menu, select IPv4 or DNS to indicate the format for the TFTP Server IP field. The default is IPv4. 9. In the TFTP Server IP field, specify the address or host name of the TFTP server. The address can be an IP address in standard x.x.x.x format or a host name. The host name must start with a letter of the alphabet. 10. In the Remote File Path field, enter the path of the file to download.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Add a rule to the access profile After you add the access profile, you can add one or more security access rules to the access profile. If you access the switch from a computer, make sure that you add a permit rule for the type of service that you use (for example, HTTPS), your computer’s IP address, and your computer’s subnet mask.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. From the Rule Type menu, select Permit or Deny to permit or deny access when the selected rules are matched. A Permit rule allows access from a device that matches the rule criteria. A Deny rule blocks a device that matches the rule criteria. 8. From the Service Type menu, select the access method to which the rule is applied. The policy is restricted by the selected access method.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Deactivate an access profile You can deactivate an access profile. To deactivate an access profile: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Remove an access profile You can remove an access profile that you no longer need. Before you can remove the access profile, you must deactivate it (see Deactivate an access profile on page 345). To remove an access profile: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure port authentication With port-based authentication, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions. At any time, only one supplicant is allowed to attempt authentication on a port in this mode. Ports in this mode are under bidirectional control. This is the default authentication mode. An 802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The System Information page displays. 6. Select Security > Port Authentication > Basic > 802.1X Configuration. 7. Configure the following port authentication settings: • Port Based Authentication State. This selection specifies the 802.1X administrative mode on the switch. The default value is Disable. • - Enabled. If 802.1X is enabled, authentication is performed by a RADIUS server.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Manage port authentication on individual ports You can enable and configure port access control on one or more physical ports. Configure 802.1X settings for a port To configure 802.1X settings for a port: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • To configure multiple interfaces with the same settings, select the check box associated with each interface. • To configure all interfaces with the same settings, select the check box in the heading row. 9. Specify the following settings: • Port Control. Defines the port authorization state. The control mode is set only if the link status of the port is link up. Select one of the following options: - Auto.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch from 0 to 65535. A value of 0 means that the port remains in the quiet state and never attempts to acquire a supplicant. The default value is 60 seconds. • Resending EAP. Specify the EAP retransmit period for the selected port. The transmit period is the time in seconds, after which an EAPoL EAP Request/Identify frame is resent to the supplicant. The retransmit period must be a value in the range from 1 to 65535.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 66. Port authentication status information (continued) Field Description Backend State The current state of the backend authentication state machine. The options are as follows: • Request • Response • Success • Fail • Timeout • Initialize • Idle Initialize 802.1X on a port To initialize 802.1X on a port: Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 802.1X on the selected interface is reset to the initialization state. Traffic sent to and from the port is blocked during the authentication process. This button is available only if the control mode is auto. When you click this button, the action is immediate. You do not need to click the Apply button for the action to occur. Restart the 802.1X authentication process on a port To restart the 802.1X authentication process on a port: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View the port summary You can view summary information about the port-based authentication settings for each port. To view the port summary: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the fields on the Port Summary page. Table 67. Port summary Field Description Port The port whose settings are displayed in the current table row. Control Mode This field indicates the configured control mode for the port. The options are as follows: • Force Unauthorized. The authenticator port access entity (PAE) unconditionally sets the controlled port to unauthorized. • Force Authorized.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Set up traffic control You can configure MAC filters, storm control, port security, and protected port settings. Manage MAC filtering You can create MAC filters that limit the traffic allowed into and out of specified ports on the switch. Create a MAC filter If a packet with a MAC address and VLAN ID that you specify for a filter is received on a port that is not part of the inbound filter, the packet is dropped.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. From the MAC Filter menu, select Create Filter. If you did not configure any filters, this is the only option available. 8. From the VLAN ID menu, select the VLAN that must be used with the MAC address. 9. In the MAC Address field, specify the MAC address of the filter in the format XX:XX:XX:XX:XX:XX.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Note: Destination ports can be included only in a multicast filter. A multicast filter is determined by the MAC address that you enter in the MAC Address field. 12. Click the Apply button. Your settings are saved. Delete a MAC filter To delete a MAC filter: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View the MAC filter summary You can view the MAC filters that are configured on the switch. To view the MAC filter summary: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure storm control settings A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses can overload network resources, cause the network to time out, or do both. The switch measures the incoming packet rate per port for broadcast, multicast, unknown, and unicast packets and discards packets if the rate exceeds the defined value.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. In the Storm Control section, from the Ingress Control Mode menu, select one of the following modes for storm control: • Disabled. Storm control is disabled. This is the default setting. • Unknown Unicast. If the rate of incoming unknown Layer 2 unicast traffic (that is, traffic for which a destination lookup failure occurs) increases beyond the configured threshold on an interface, the traffic is dropped. • Multicast.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure storm control settings for one or more ports After you configure the global settings, you can specify storm control settings for one or more ports. To configure storm control settings for one or more ports: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The default settings in the Port Settings section depends on the global storm control settings (see Configure global storm control settings on page 361), which apply to all ports. 7. In the Port Settings section, select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure a port security interface A MAC address can be defined as allowed on a port by one of two methods: dynamically or statically. Both methods can occur concurrently when a port is locked. Dynamic locking implements a first arrival mechanism for port security. You specify how many addresses can be learned on the locked port. If the limit is not reached, a packet with an unknown source MAC address is learned and forwarded normally.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View learned MAC addresses and convert them to static MAC addresses After you enabled port security globally (see Configure the global port security mode on page 364) and enabled port security for specific interfaces (see Configure a port security interface on page 366), you can convert a dynamically learned MAC address to a statically locked address.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Port security must be enabled on the selected interface. The Dynamic MAC Address Table displays the MAC addresses and their associated VLANs that were learned on the selected port. Field Description VLAN ID The VLAN ID corresponding to the MAC address. MAC Address The MAC addresses learned on a specific port. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > Traffic Control > Protected Port. 7. In the Ports table, click each port that you want to configure as a protected port. Protected ports are marked with a check mark. No traffic forwarding is possible between two protected ports. 8. Click the Apply button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Use the ACL Wizard to create a simple ACL The ACL Wizard helps you create a simple ACL and apply it to the selected ports easily and quickly. First, select an ACL type to use when you create an ACL. Then add an ACL rule to this ACL and apply this ACL on the selected ports. Note: The steps in the following procedure describe how you can create an ACL based on the destination MAC address.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. From the ACL Type menu, select the type of ACL. You can select from the following ACL types: • ACL Based on Destination MAC. Creates an ACL based on the destination MAC address, destination MAC mask, and VLAN. • ACL Based on Source MAC. Creates an ACL based on the source MAC address, source MAC mask, and VLAN. • ACL Based on Destination IPv4. Creates an ACL based on the destination IPv4 address and IPv4 address mask.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Note: For L4 port options, two rules are created (one for TCP and one for UDP). 8. In the Sequence Number field, enter a whole number in the range from 1 to 2147483647 that is used to identify the rule. 9. From the Action menu, select Permit or Deny to specify the action that must be taken if a packet matches the rule’s criteria. 10. From the Match Every menu, select one of the following options: • False.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch ACL Based On Fields Source IPv4 L4 Port • • Source L4 port (protocol). Specify the source IPv4 L4 port protocol. Source L4 port (value). Specify the source IPv4 L4 port value. Destination IPv6 L4 Port • • Destination L4 port (protocol). Specify the destination IPv6 L4 port protocol. Destination L4 port (value). Specify the destination IPv6 L4 port value. • • Source L4 port (protocol). Specify the source IPv6 L4 port protocol.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > ACL Wizard. The ACL Wizard page displays. 7. Select check box that is associated with the rule. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure a MAC ACL A MAC ACL consists of a set of rules that are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken, and the additional rules are not checked for a match. Multiple steps are involved in defining a MAC ACL and applying it to the switch: 1. Create a MAC ACL ID (see Add a MAC ACL on page 377). 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The MAC ACL Table displays the number of ACLs currently configured in the switch and the maximum number of ACLs that can be configured. The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs. 7. In the Name field, specify a name for the MAC ACL. The name string can include alphabetic, numeric, hyphen, underscore, or space characters only. The name must start with an alphabetic character.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Basic > MAC ACL. The MAC ACL page displays. 7. Select check box that is associated with the MAC ACL. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 8. Click the Delete button. The MAC ACL is removed. Configure MAC ACL rules You can define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. A default deny all rule is the last rule of every list. Add a rule to a MAC ACL To add a rule to a MAC ACL: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The previous figure does not show all columns. 7. From the ACL Name menu, select the MAC ACL. 8. In the Sequence Number field, enter a whole number in the range from 1 to 2147483647 to identify the rule. 9. From the Action menu, select the action that must be taken if a packet matches the rule’s criteria: • Permit. Forwards packets that meet the ACL criteria. • Deny. Drops packets that meet the ACL criteria. 10.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • IPv4 • IPv6 • IPX • MPLS Multicast • MPLS Unicast • NetBios • Novell • PPPOE • RARP • User Value 18. If you select User Value from the EtherType Key menu, in the EtherType User Value field, specify the customized EtherType value that must be used. This value must be compared against the information in an Ethernet frame. The range is from 0x0600 to 0xFFFF. 19.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Basic > MAC Rules. The MAC Rules page displays. 7. Select the check box that is associated with the rule. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. From the ACL ID menu, select an ACL. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface. 8. In the Sequence Number field, optionally specify a number to indicate the order of the access list relative to other access lists already assigned to the interface and direction. A low number indicates high precedence order.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 71. Interface Binding Status table (continued) Field Description ACL Type The type of ACL assigned to the selected interface and direction. ACL ID The ACL name identifying the ACL assigned to the selected interface and direction. Sequence Number The sequence number signifying the order of the specified ACL relative to other ACLs assigned to the selected interface and direction.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. To delete a MAC ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed. The following table describes the information that is displayed in the MAC binding table. Table 72. MAC Binding Table Field Description Interface The interface of the ACL assigned. Direction The selected packet filtering direction for the ACL.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Add an IPv4 ACL To add an IPv4 ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The Maximum ACL field displays the maximum number of ACLs that you can configure on the switch. 7. In the IP ACL ID field, specify the ACL ID or IP ACL name, which depends on the IP ACL type. The IP ACL ID is an integer in the following range: • 1–99. Creates a basic IP ACL, which allows you to permit or deny traffic from a source IP address. • 100–199.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Advanced > IP ACL. The IP ACL Configuration page displays. 7. Select the check box that is associated with the IP ACL. 8. In the IP ACL field, specify the new number or name. 9. Click the Apply button. Your settings are saved. Delete an IPv4 ACL To delete an IPv4 ACL: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure rules for a basic IPv4 ACL You can define rules for IP-based standard ACLs (basic ACLs). The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. Note: An implicit deny all rule is included at the end of an ACL list.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If no rules exist, the Basic ACL Rule Table might show the message No rules were configured for this ACL. If one or more rules exist for the ACL, the rules display in the Basic ACL Rule Table. 7. From the ACL ID menu, select the IP ACL for which you want to add a rule. For basic IP ACLs, this must be an ID in the range from 1 to 99. 8. Click the Add button. 9. Specify the following match criteria for the rule: • Sequence Number.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • • Match Every. Select one of the radio buttons to specify whether all packets must match the selected IP ACL rule: - Enable. All packets must match the selected IP ACL rule and are either permitted or denied. - Disable. Not all packets need to match the selected IP ACL rule. Interface. Select one of the radio buttons to specify whether all packets must be mirrored or redirected: - Mirror.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Advanced > IP Rules. The IP Rules page displays. 7. From the ACL ID menu, select the ACL that includes the rule that you want to modify. 8. In the Basic ACL Rule Table, click the rule. The rule is a hyperlink. The Standard ACL Rule Configuration page displays. 9. Modify the basic IP ACL rule criteria. 10. Click the Apply button. Your settings are saved.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 9. Click the Delete button. The rule is removed. Configure rules for an extended IPv4 ACL You can define rules for extended IPv4 ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. Note: An implicit deny all rule is included at the end of an ACL list.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The previous figure does not show all columns on the page. If no rules exists, the Extended ACL Rule Table might show the message No rules were configured for this ACL. If one or more rules exist for the ACL, the rules display in the Extended ACL Rule Table. 7. From the ACL ID menu, select the IP ACL for which you want to add a rule. For extended IP ACLs, this must be an ID in the range from 101 to 199 or a name. 8. Click the Add button. 9.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Logging. If the selection form the Action menu is Deny, you can enable logging for the ACL by selecting the Enable radio button. (Logging is subject to resource availability in the device.) • • Interface.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The only relevant matching condition for L4 port numbers is Equal. This means that an IP ACL rule matches only if the Layer 4 source port number is equal to the specified port number or port protocol. - Range.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • The destination IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp. • The destination IP UDP port protocols are domain, echo, snmp, ntp, rip, time, who, and tftp. Each of these values translates into its equivalent port number, which is used as both the start and end of the port range. Select Other from the menu to enter a port number.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch - • If you specify information in the Code field, the IP ACL rule matches the specified ICMP message code. The code can be from 0 to 255. • If these fields are left empty, it means any. If you select the Message radio button, from the menu, select the type of the ICMP message to match with the selected IP ACL rule. Specifying a type of message implies that both the ICMP type and ICMP code are specified.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Modify the match criteria for an extended IPv4 ACL rule To modify the match criteria for an existing extended IPv4 ACL rule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Add an IPv6 ACL To add an IPv6 ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following table describes the nonconfigurable information displayed on the page. Table 73. IPv6 Configuration and IPv6 ACL Table information Field Description Current Number of ACL The current number of ACLs configured on the switch. Maximum ACL The maximum number of ACLs that can be configured on the switch. Rules The number of the rules associated with the IPv6 ACL. Type The type is IPv6 ACL.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Delete an IPv6 ACL To delete an IPv6 ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 9. Configure the following match criteria for the rule: • Action. Select the ACL forwarding action by selecting one of the following radio buttons: - Permit. Forward packets that meet the ACL criteria. - Deny. Drop packets that meet the ACL criteria. • Egress Queue. If you select the Permit radio button, select the hardware egress queue identifier that is used to handle all packets matching this IPv6 ACL rule.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • • True. All packets must match the selected IPv6 ACL rule and are either permitted or denied. In this case, you cannot configure other match criteria on the page. Protocol Type. Specify the IPv6 protocol type in one of the following ways: - From the Protocol Type menu, select IPv6, ICMPv6, TCP, or UDP. - From the Protocol Type menu, select Other, and in the associated field, specify an integer ranging from 0 to 255.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • The source IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp. • The source IP UDP port protocols are domain, echo, snmp, ntp, rip, time, who, and tftp. Each of these values translates into its equivalent port number, which is used as both the start and end of the port range. Select Other from the menu to enter port numbers.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch You can either enter the port range yourself or select one of the following protocols from the menu: • The destination IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp. • The destination IP UDP port protocols are domain, echo, snmp, ntp, rip, time, who, and tftp. Each of these values translates into its equivalent port number, which is used as both the start and end of the port range.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The DSCP is defined as the high-order 6 bits of the service type octet in the IPv6 header. Enter an integer from 0 to 63. To select the IPv6 DSCP, select one of the DSCP keywords. To specify a numeric value, select Other and enter the numeric value of the DSCP. 10. Click the Apply button. Your settings are saved. Modify the match criteria for an IPv6 ACL rule To modify the match criteria for an IPv6 ACL rule: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Delete an IPv6 ACL rule To delete an IPv6 ACL rule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch To bind an IP ACL to one or more interfaces: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The fixed selection from the Direction menu is Inbound, which means that IP ACL rules are applied to traffic entering the interface. 8. In the Sequence Number field, optionally specify a number to indicate the order of the access list relative to other access lists already assigned to the interface and direction. A low number indicates high precedence order.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Configure VLAN ACL bindings You can associate a MAC ACL, any type of IPv4 ACL, or an IPv6 ACL with a VLAN. When you do so, the ACL is applied to all interfaces that are members of the VLAN. Add a VLAN ACL binding To add a VLAN ACL binding: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch the currently attached ACL using that sequence number. If you do not specify a sequence number (the value is 0), a sequence number that is one greater than the highest sequence number currently in use for the VLAN ID and selected direction is used.The range is from 1 to 4294967295. 9. From the ACL Type menu, select the type of ACL. You can select a MAC ACL, IP ACL, or IPv6 ACL. 10.
7 7 Monitor the Switch and the Traffic This chapter contains the following sections: • Monitor the switch and the ports • Configure and view the logs • Configure port mirroring 418
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Monitor the switch and the ports You can view and clear port and switch statistics and perform a cable test. View or clear switch statistics You can view detailed statistical information about the traffic that the switch processes. To view or clear the switch statistics: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Click the Refresh button to refresh the page with the latest information about the switch. 8. To clear all the statistics counters, click the Clear button. Clearing resets all switch summary and detailed statistics to default values. However, the discarded packets count cannot be cleared. The following table describes the switch statistics displayed on the page. Table 76.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 76. Switch statistics (continued) Field Description Receive Packets Discarded The number of inbound packets that were chosen to be discarded, even though no errors were detected, in order to prevent their being delivered to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space. Octets Transmitted The total number of octets transmitted out of the interface, including framing characters.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch View port statistics You can view a summary of per-port traffic statistics on the switch. To view port statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • To view a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To view multiple interfaces, select the check box associated with each interface. The following table describes the per-port statistics displayed on the page. Table 77. Port statistics Field Description Interface The interface or LAG.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The previous figure does not show all fields on the Port Detailed Statistics page. 7. From the Interface menu, select the interface for which you want to view the statistics. 8. From the MST ID menu, select the MST ID associated with the interface (if available). 9. To refresh the page with the latest information about the switch, click the Refresh button. 10. To clear all the counters, click the Clear button.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 78. Detailed port statistics (continued) Field Description Port Role Each MST bridge port that is enabled is assigned a port role for each spanning tree. The port role is one of the following values: Root, Designated, Alternate, Backup, Master, or Disabled. STP Mode The Spanning Tree Protocol administrative mode that is associated with the port or port channel. The options are as follows: • Enable.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 78. Detailed port statistics (continued) Field Description Packets RX and TX 512-1023 The total number of packets (including bad packets) received or transmitted that Octets were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 78. Detailed port statistics (continued) Field Description Receive Packets Discarded The number of inbound packets that were discarded even though no errors were detected to prevent their being delivered to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 78. Detailed port statistics (continued) Field Description Packets Transmitted 256-511 The total number of packets (including bad packets) received that were between Octets 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 78. Detailed port statistics (continued) Field Description STP BPDUs Received The number of STP BPDUs received at the selected port. STP BPDUs Transmitted The number of STP BPDUs transmitted from the selected port. RSTP BPDUs Received The number of RSTP BPDUs received at the selected port. RSTP BPDUs Transmitted The number of RSTP BPDUs transmitted from the selected port.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Monitoring > Ports > EAP Statistics. The previous figure does not show all fields on the EAP Statistics page. 7.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 79. EAP statistics Field Description EAPOL Last Frame Source The source MAC address carried in the most recently received EAPoL frame. EAPOL Invalid Frames Received The number of EAPoL frames that were received by this authenticator in which the frame type is not recognized. EAPOL Length Error Frames The number of EAPoL frames that were received by this authenticator in which Received the frame type is not recognized.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The System Information page displays. 6. Select Monitoring > Ports > Cable Test. 7. Select one or more interfaces by taking one of the following actions: • To test a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To test multiple interfaces, select the check box associated with each interface.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 80. Cable Test information (continued) Field Description Failure Location The estimated distance in meters from the end of the cable to the failure location. The failure location is displayed only if the cable status is Open or Short. Configure and view the logs The switch generates messages in response to events, faults, or errors occurring on the platform as well as changes in configuration or other occurrences.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The System Information page displays. 6. Select Monitoring > Logs > Memory Log. The Memory Log page displays. 7. Select one of the following Admin Status radio buttons: • Enable. Enable system logging. This is the default setting. • Disable. Prevent the system from logging messages. 8. From the Behavior menu, specify the behavior of the log when it is full: • Wrap.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The following example shows the standard format for a log message: *Jan 01 2018 00:00:18: AAA-5-CONNECT: New http connection for user admin, source 192.168.1.111 ACCEPTED The message was generated by component AAA on January 1, 2018 at 00:00:18 a.m. with severity 5 (Notice). The message indicates that the administrator logged on to the HTTP management interface from a host with IP address 192.168.1.111. 11.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select one of the following Admin Status radio buttons: • Enable. A log that is enabled logs messages. • Disable. A log that is disabled does not log messages. 8. From the Severity Filter menu, select the logging level for messages that must be logged. Log messages with the selected severity level and all log messages of greater severity are logged.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Manage the server log You can let the switch send log messages to remote logging hosts. A remote log server is the same as a remote syslog host. You must enable the server log on the switch and specify one or more remote syslog hosts. Enable the server log and add a remote syslog host To enable the server log and add a remote syslog host: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 9. In the Server Configuration section, specify the following settings: • IP Address Type. Specify the IP address type of the host, which can be IPv4, IPv6, or DNS. • Host Address. Specify the IP address or host name of the syslog host. • Port. Specify the port on the host to which syslog messages must be sent. The default port number is 514. • Severity Filter.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The System Information page displays. 6. Select Monitoring > Logs > Server Log. The Server Log Configuration page displays. 7. Select the check box that is associated with the host. 8. Click the Delete button. The host is removed. View or clear the trap logs and the counters You can view information about the SNMP traps generated on the switch. You can also display information about the traps that were sent.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. To refresh the page with the latest information about the switch, click the Refresh button. 8. To clear the messages from the trap logs in the memory and clear the counters, click the Clear button. The following table describes the Trap Log information that is displayed on the page. Table 81. Trap Logs information Field Description Number of Traps Since Last Reset The number of traps that occurred since the switch last rebooted.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch transmitted packet, the copied packet is VLAN-tagged or untagged as it is being transmitted on the source port. To globally enable port mirroring, specify the destination port, and specify one or more source ports: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select an Admin Mode radio button: • Disable. Port mirroring is disabled. This is the default setting. • Enabled. Port mirroring is enabled. 8. From the Destination Port menu, select the physical destination port to which port traffic must be copied. You can configure one destination port only. The port functions as a probe port and receives traffic from all configured source ports. If no port is configured, None is displayed.
8 Maintain or Troubleshoot the Switch 8 This chapter contains the following sections: • Reboot the switch • Reset the switch to its factory default settings • Export a file from the switch • Download a file to the switch or update the software • Manage software images • Perform diagnostics and troubleshooting 446
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Reboot the switch You can reboot the switch from the device UI. Note: If you can physically access the switch, you can reboot the switch by pressing the multi-function Reset button on the front panel for less than 5 seconds. (Do not press the button for more than 5 seconds!) To reboot the switch: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Reset the switch to its factory default settings You can reset the system configuration to the factory default values. All changes that you made are lost. If the IP address changes, your web session might disconnect. Note: If you reset the switch to the default configuration, the IP address is reset to 192.168.0.239, and the DHCP client is enabled.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Export a file from the switch You can export configuration (ASCII) or log (ASCII log) files from the switch to a file server by using TFTP or to a computer by using HTTP. Use TFTP to export a file from the switch to a TFTP server You can upload (export) configuration (ASCII or log ASCII) files from the switch to a TFTP server on the network. To export a file from the switch to a TFTP server: 1.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. From the File Type menu, select the type of file: • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed. The most common usage of text-based configuration is to upload a working configuration from a device, edit it offline to personalize it for another similar device (for example, change the device name or IP address), and download it to that device.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Use HTTP to export a file from the switch to a computer You can upload (export) files of various types from the switch to a computer through an HTTP session by using your web browser. To export a file from the switch to a computer by using HTTP: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The page displays information about the file transfer progress. The page refreshes automatically when the file transfer completes. Download a file to the switch or update the software You can manually check for the latest software version (also referred to as firmware version) through the device UI of the switch, download the firmware, and upload the firmware to the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Note: We recommended that you do not overwrite the active image. 9. From the Server Address Type menu, select the format for the TFTP Server IP field: • IPv4. Indicates that the TFTP server address is an IP address in dotted-decimal format. This is the default setting. • DNS. Indicates that the TFTP server address is a host name. 10. In the TFTP Server IP field, enter the IP address of the TFTP server indicated by the server address type.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Use HTTP to download a file to the switch or update the software image You can download a software (firmware) image, configuration files, and SSL files from a computer to the switch by using an HTTP session over a web browser. To download a file to the switch using HTTP: 1. Connect your computer to the same network as the switch.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed. The most common usage of text-based configuration is to upload a working configuration from a device, edit it offline to personalize it for another similar device (for example, change the device name, serial number, IP address), and download it to that device. • SSL Trusted Root Certificate PEM File.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Use an HTTP session to download and install an SSL security certificate file on the switch Note: You are not required to obtain an SSL certificate. The security warning that might display in your browser prompts you to confirm that the self-signed certificate of the switch is valid. Once you do so, the browser warning might no longer display when you log in.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 5. Click the Go button. The System Information page displays. 6. Select Security > Access > HTTPS. HTTPS Configuration page displays. 7. Select the Admin Mode Disable radio button. 8. Click the Apply button. Your settings are saved. Because you changed the access mode from HTTPS to HTTP, you are logged out of the switch. 9. Wait one minute, refresh your browser, and log back in to the switch (see steps 3 through 5). 10.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Manage software images The switch maintains two versions of the switch software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded when the switch starts or reboots. This feature reduces switch down time when you are updating the switch software.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 7. Select the Source Image image1 or image2 radio button to specify the image to be copied. 8. Select the Destination Image image1 or image2 radio button to specify the destination image. 9. Click the Apply button. Your settings are saved. Configure dual image settings The Dual Image feature allows the switch to retain two images in permanent storage.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. Select Maintenance > File Management > Dual Image Configuration. 7. From the Image Name menu, select the image that is not the image displayed in the Current-active field but that is the image that you want the switch to run after it reboots. The Current-active field displays the name of the active image. 8. As an option, specify a name for the selected image by entering one in the Image Description field. 9.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch For information about the credentials, see Credentials for the device UI on page 28. 5. Click the Go button. The System Information page displays. 6. Select Maintenance > File Management > Dual Image Configuration. The Dual Image Configuration page displays. 7. From the Image Name menu, select the image that is not the image displayed in the Current-active field. The Current-active field displays the name of the active image.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. Select Maintenance > File Management > Dual Image > Dual Image Status. The following table describes the information available on the page. Table 82. Dual Image Status information Field Description Image1 Ver The version of the image1 file. Image2 Ver The version of the image2 file. Current-active The currently active image on this switch. Next-active The image to be used after the switch reboots.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 10. In the Size field, enter the size of the ping packet. The default value is 0 bytes. The range is 0 to 13000. 11. From the Source menu, as an option, you can select the IP address or interface that must be used to send echo request packets: • None. The source address of the ping packet is the address of the default egress interface. • IP Address. The source IP address that must be used when echo request packets are sent.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 9. In the Count field, enter the number of echo requests that must be sent. The range is 1 to 15. The default value is 3. 10. In the Interval (secs) field, enter the time in seconds between ping packets. The range is 1 to 60. The default value is 3. 11. In the Datagram Size field, enter the datagram size. The valid range is 0 to 13000. The default value is 0 bytes. 12.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 30. 4. Enter one of the following passwords: • After initial login, enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 10. In the Init TTL field, enter the initial TTL to be used. The default value is 1. The range is 1 to 255. 11. In the MaxFail field, enter the maximum number of failures allowed in the session. The default value is 5. The range is 1 to 255. 12. In the Interval (secs) field, enter the time between probes in seconds. The default value is 3. The range is 1 to 60. 13. In the Port field, enter the UDP destination port for the probe packets.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch The default value is 3. The range is 1 to 10. 9. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 10. In the Init TTL field, enter the initial TTL to be used. The default value is 1. The range is 1 to 255. 11. In the MaxFail field, enter the maximum number of failures allowed in the session. The default value is 5. The range is 1 to 255. 12.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 19 or Access the switch off-network and not connected to the Internet on page 27. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
A Configuration Examples A This appendix contains the following sections: • Virtual Local Area Networks (VLANs) • Access control lists (ACLs) • Differentiated Services (DiffServ) • 802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router. Routers connect LANs together, routing the traffic to the appropriate port.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If the port is a member of the VLAN specified by the packet’s VLAN ID, the packet can be sent to other ports with the same VLAN ID. • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a port means that packets leaving the switch from that port are untagged.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • If an untagged packet enters port 4, the switch tags it with VLAN ID 20. The packet can access port 5 and port 6. The outgoing packet is stripped of its tag to become an untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Assign Queue ID. 0 • Match Every. False • CoS. 0 • Destination MAC. 01:02:1A:BC:DE:EF • Destination MAC Mask. 00:00:00:00:FF:FF • EtherType. User Value. • Source MAC. 02:02:1A:BC:DE:EF • Source MAC Mask. 00:00:00:00:FF:FF • VLAN ID. 2 For more information about MAC ACL rules, see Configure MAC ACL rules on page 380. 3.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch • Source IP Address. 192.168.187.0 • Source IP Mask. 255.255.0 For additional information about IP ACL rules, see Configure rules for a basic IPv4 ACL on page 391. 3. Click the Add button. 4. On the IP Rules page, create a second rule for IP ACL 1 with the following settings: • Sequence Number. 2 • Action. Permit • Match Every. True 5. Click the Add button. 6.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Two basic types of QoS are supported: • Integrated Services. Network resources are apportioned based on request and are reserved (resource reservation) according to network management policy (RSVP, for example). • Differentiated Services. Network resources are apportioned based on traffic classification and priority, giving preferential treatment to data with strict timing requirements. The switch supports DiffServ.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch DiffServ traffic classes With DiffServ, you define which traffic classes to track on an ingress interface. You can define simple BA classifiers (DSCP) and a wide variety of multifield (MF) classifiers: • Layer 2; Layers 3, 4 (IP only) • Protocol-based • Address-based You can combine these classifiers with logical AND operations to build complex MF-classifiers (by specifying a class type of all or any, respectively).
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch definition to convey some QoS characteristics to downstream switches that do not routinely look at the DSCP value in the IP header. • Policing. A method of constraining incoming traffic associated with a particular class so that it conforms to the terms of the TCS. Out-of-profile packets that are either in excess of the conformance specification or are nonconformant are dropped. • Counting.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. Click the Add button. The policy is added. 7. Click the Policy1 hyperlink to view the Policy Class Configuration page for this policy. 8. Configure the Policy attributes as follows: • Assign Queue. 3 • Policy Attribute. Simple Policy • Color Mode. Color Blind • Committed Rate. 1000000 Kbps • Confirm Action. Send • Violate Action. Drop For more information, see Configure a DiffServ policy on page 297. 9.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch between the authenticator (the system that passes an authentication request to the authentication server) and the supplicant (the system that requests authentication), as well as between the authenticator and the authentication server. The switch supports a guest VLAN, which allows unauthenticated users limited access to the network resources.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Figure 3. 802.1X authentication roles 802.1X example configuration This example shows how to configure the switch so that 802.1X-based authentication is required on the ports in a corporate conference room (1/0/5–1/0/8). These ports are available to visitors and must be authenticated before access is granted to the network. The authentication is handled by an external RADIUS server.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch 6. On the RADIUS Server Configuration page, configure a RADIUS server with the following settings: • Server Address. 192.168.10.23 • Secret Configured. Yes • Secret. secret123 • Active. Primary For more information, see Manage the RADIUS settings on page 311. 7. Click the Add button. 8. On the Authentication List page, configure the default list to use RADIUS as the first authentication method.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch MSTP ensures that frames with a VLAN ID are assigned to one and only one of the MSTIs or the IST within the region, that the assignment is consistent among all the networking devices in the region, and that the stable connectivity of each MSTI and IST at the boundary of the region matches that of the CST.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch MSTP example configuration This example shows how to create an MSTP instance from the switch. The example network includes three different switches that serve different locations in the network. In this example, ports 1/0/1–1/0/5 are connected to host stations, so those links are not subject to network loops. Ports 1/0/6–1/0/8 are connected across switches 1, 2, and 3. Figure 4.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch If you do not specify a root bridge and all switches are assigned the same bridge priority value, the switch with the lowest MAC address is elected as the root bridge (see Configure the CST settings on page 179). 5. On the CST Port Configuration page, select ports 1/0/1–1/0/8 and select Enable from the STP Status menu (see Configure the CST port settings on page 181). 6. Click the Apply button. 7.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch known as inter-VLAN routing. On the switch, it is accomplished by creating Layer 3 interfaces (switch virtual interfaces [SVI]). When a port is enabled for bridging (the default) rather than routing, all normal bridge processing is performed for an inbound packet, which is then associated with a VLAN. Its MAC destination address (MAC DA) and VLAN ID are used to search the MAC address table.
B B Specifications and Default Settings This appendix contains the following sections: • Switch default settings • General feature default settings • System setup and maintenance settings • Port characteristics • Traffic control settings • Quality of Service settings • Security settings • System management settings • Settings for other features • Hardware technical specifications 492
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Switch default settings The following table describes the switch default settings. Table 83. Switch default settings Feature Default IP address 192.168.0.239 Subnet mask 255.255.255.0 Default gateway 192.168.0.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 83. Switch default settings (continued) Feature Default MAC table address aging 300 seconds (dynamic addresses) Default VLAN IDs and names 1. Default VLAN. 4088. Auto-VoIP VLAN 4089. Auto-Video VLAN Note: All ports are members of VLAN 1. No ports are members of the Auto-VoIP VLAN or the Auto-Video VLAN.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 84. General feature default settings (continued) Feature Name/Setting Default Acceptable frame types Admit All Ingress filtering Disabled Port priority 0 GARP Join timer 20 (centiseconds) Leave timer 60 (centiseconds) Leave all timer 1000 (centiseconds) GVRP, Global GVRP mode Disabled GVRP, Interface Port GVRP mode Disabled Jumbo Frames Frame size 1522 Flow Control Admin mode Disabled 802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 84. General feature default settings (continued) Feature Name/Setting Default STP/RSTP/MSTP, Global Spanning tree state Enabled STP operation mode IEEE 802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 84.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 84. General feature default settings (continued) Feature Name/Setting Default Maximum advertise interval 600 Minimum advertise interval 450 Advertise lifetime 1800 Preference level 0 ARP/ARP Aging Age time (seconds) 1200 Response time (seconds) 1 Retries 10 Cache size 512 Dynamic renewal Enabled Differentiated Services (DiffServ) Admin mode Enabled Class of Service (CoS), Global Trust mode 802.1p 802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 84. General feature default settings (continued) Feature Name/Setting Default 802.1p to queue mapping (802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 84. General feature default settings (continued) Feature Name/Setting Default DSCP to queue mapping (DSCP -> queue) (continued) (49) 110001 -> 3 (50) 110010 -> 3 (51) 110011 -> 3 (52) 110100 -> 3 (53) 110101 -> 3 (54) 110110 -> 3 (55) 110111 -> 3 (57) 111011 -> 3 (58) 111010 -> 3 (59) 111011 -> 3 (60) 111100 -> 3 (61) 111101 -> 3 (62) 111110 -> 3 (63) 111111 -> 3 Class of Service (CoS), Interface Trust mode 802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 84. General feature default settings (continued) Feature Name/Setting Default L2 Loop Protection Admin mode Disabled System setup and maintenance settings The following table describes the system setup and maintenance settings. Table 85. System setup and maintenance settings Feature Sets Supported Default Boot code update 1 N/A DHCP 1 Enabled Static IP address 1 192.168.0.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 86. Port characteristics (continued) Feature Sets Supported Default Port trunking (aggregation) 4 Preconfigured 802.1D spanning tree 1 Disabled 802.1w RSTP 1 Enabled 802.1s spanning tree 8 instances Disabled Static 802.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Security settings The following table describes the security settings. Table 89. Security settings Feature Sets Supported Default 802.1X All ports Disabled MAC ACLs 100 (shared with IPv4 and IPv6 ACLs) All MAC addresses allowed IPv4 ACLs 100 (shared with MAC and IPv6 ACLs) All IPv4 addresses allowed IPv6 ACLs 100 (shared with IPv4 ACL and MAC ACL) All IPv6 addresses allowed Password control access 1 Idle time-out = 5 mins.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Settings for other features The following table describes the settings for other features. Table 91.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Hardware technical specifications The tables in the following sections describes the main hardware technical specifications for each model. For more hardware information, see the data sheet, which you can download by visiting netgear.com/support/download/. Model GS110TUP hardware technical specifications Table 92.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 92. Hardware technical specifications for model GS110TUP (continued) Feature Description Safety certifications CB report / certificate IEC 60950-1:2005 + A1:2009 + A2:2013; IEC 62368-1: 2014/AC:2015 UL/cUL listed UL60950-1, 2nd Edition; CAN/CSA-C22/2 No. 60950-1-07, 2nd Edition, 2014-10 CE LVD: EN 60950-1:2006 + A11:2009 + A1:2010 + A12:2011 + A2:2013; EN 62368-1:2014+A11:2017 RCM: AS/NZS 60950.1:2015; AS/NZS: 62368.
10-Port Gigabit Ethernet Ultra60 PoE++ Smart Managed Pro Switch Table 93. Hardware technical specifications for model GS710TUP (continued) Feature Description Electromagnetic certifications CE: EN 55032:2012 + AC:2013 / CISPR 32:2012, EN 61000-3-2:2014, and compliance Class A, EN 61000-3-3:2013 Class A, EN 55024:2010, EN 55035:2017 VCCI: VCCI-CISPR 32:2016, Class A RCM: AS/NZS CISPR 32:2015 Class A CCC: YD/T993-1998, GB/T9254-2008 (Class A) FCC: 47 CFR FCC Part15, Class A, ANSI C63.
