M4200 and M4300 Series ProSAFE Managed Switches User Manual Sof tware Version 12.0.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Support Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources. Contact your Internet service provider for technical support. Conformity For the current EU Declaration of Conformity, visit http://kb.netgear.
Contents Chapter 1 Getting Started Release Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Available Publications and Online Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Register Your Product. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Understanding the User Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Global DNS Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 Add a Static Entry to the Local DNS Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Configure the Switch Database Management Template Preference . . . . . . . . . 73 Configure Green Ethernet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure LLDP-MED Global Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132 Configure LLDP-MED Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133 View LLDP-MED Local Device Information . . . . . . . . . . . . . . . . . . . . . . . . . . 134 View LLDP-MED Remote Device Information . . . . . . . . . . . . . . . . . . . . . . . . 135 View LLDP-MED Remote Device Inventory . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Protocol-Based VLAN Group Membership . . . . . . . . . . . . . . . . . . 182 Configure an IP Subnet-Based VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183 Configure a Port DVLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184 Configure a Voice VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure MLD Snooping Querier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240 Configure MLD Snooping Querier VLAN Settings . . . . . . . . . . . . . . . . . . . . . 242 Configure MVR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243 Configure Basic MVR Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual IPv6 Prefix Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300 View IPv6 Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 301 View the IPv6 Neighbor Table and Clear IPv6 Neighbors . . . . . . . . . . . . . . . 306 IPv6 Static Route Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the OSPFv3 Common Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375 Configure an OSPFv3 Stub Area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 377 Configure the OSPFv3 NSSA Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 378 Configure the OSPFv3 Area Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the IPv6 PIM Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435 View the IPv6 PIM Neighbor. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 436 Configure the IPv6 PIM Candidate Rendezvous Point . . . . . . . . . . . . . . . . . 437 Configure the IPv6 PIM Bootstrap Router Candidate Settings . . . . . . . . . . 438 Configure the IPv6 PIM Static Rendezvous Point . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Global TACACS Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495 Configure TACACS Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496 Configure Authentication Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 497 Configure a Login Authentication List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure a Private VLAN Promiscuous Interface . . . . . . . . . . . . . . . . . . . . . 550 Manage the Storm Control Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 551 Configure Global Storm Control Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 551 Configure Storm Control for a Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 552 Configure DHCP Snooping . . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Chapter 10 Monitor the System View Port and EAP Packet Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 616 View and Clear Port Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 616 View and Clear the Detailed Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . 617 View EAP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Dual Image Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 665 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 666 Ping IPv4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 666 Ping IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1. 1 Getting Started This chapter provides an overview of how you can using your switch and access the web management user interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Release Overview The NETGEAR Prosafe Managed software version 12.0.2 is for the M4200 and M4300 Series ProSAFE Managed Switches with 10G uplinks. These switches introduce the following new features: • Support for link dependency The link dependency feature lets you enable or disable one or more ports based on the link state of one or more different ports.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Register Your Product The first time you log in to the switch, you are given the option of registering with NETGEAR. Registration confirms that your e-mail alerts work, lowers technical support resolution time, and ensures that your shipping address accuracy. NETGEAR would also like to incorporate your feedback into future product development.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Software Requirements for Using the Web Interface To access the switch by using a web browser, the browser must meet the following software requirements: • Microsoft Internet Explorer 10 or 11 • Microsoft Edge 25 • Google Chrome 44 or 45 • Mozilla Firefox 40 or 40.6.01 • Opera 26, 29, or 31 • Apple Safari on OS X 9.0 Note: Other and later versions might work too but were not tested.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Web Interface Buttons and User-Defined Fields The following table shows the command buttons that are used on the pages in the web interface: Table 1. Web interface command buttons Button Function Add Clicking the Add button adds the new item configured in the heading row of a table. Apply Clicking the Apply button sends the updated configuration to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the naming convention for all interfaces available on the switch. Table 3. Naming conventions for interfaces Interface Description Example Physical The physical ports are Gigabit Ethernet interfaces and are numbered sequentially starting from one. 0/1, 0/2, 0/3, and so on Link aggregation group (LAG) LAG interfaces are logical interfaces that are used only for bridging functions.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Web Management Interface Device View The Device View is an HTML applet that displays the ports on the switch. This graphic provides an alternate way to navigate to configuration and monitoring options. The graphic also provides information about device ports, current configuration and status, tables, and feature components. To use Device View: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual If you click the graphic, but do not click a specific port, the main menu displays. This menu contains the same options as the navigation tabs at the top of the page. Using SNMP The switch software supports the configuration of SNMP groups and users that can manage traps that the SNMP agent generates. The switch uses both standard public MIBs for standard functionality and private MIBs that support additional switch functionality.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To enable authentication, select an Authentication Protocol option, which is either MD5 or SHA. 7. To enable encryption, select the DES option in the Encryption Protocol list Then enter an encryption code of eight or more alphanumeric characters in the Encryption Key field. 8. Click the APPLY button. Your settings are saved.
2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Initial Setup When you log in to a switch that has its factory settings, the Initial Setup page displays. To perform the initial system configuration: 1. Prepare your computer with a static IP address: • For access over an Ethernet network port, use a static IP address in the 169.254.0.0 subnet with subnet mask 255.255.0.0. For example, use 169.254.100.201 for your computer.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The new password does not display as you type it; only dots are shown to hide the entry. The password is from 8 to 64 alphanumeric characters in length and is case-sensitive. 9. In the Enable Password field, enter the new password for the enable mode in the command-line interface. The new password does not display as you type it; only dots are shown to hide the entry.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select System > Management > Initial Setup. The Initial Setup page displays. 6. Scroll down to display the IPv4 Management VLAN Configuration section of the page. 7. Specify the Management VLAN ID of the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the Initial IPv6 Management VLAN For IPv6 management, you can use the same management VLAN that you use for IPv4 management or you can use a different VLAN. By default, the switch does not include an IPv6 management VLAN and you must set it up manually if you want to use it. To configure the initial IPv6 management VLAN: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure the Initial Service Port Settings To perform the initial service port configuration: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Possible options are DHCPv6, Auto Config, or Static. The default value is Auto Config. 12. Specify the IPv6 Prefix and Prefix Length for the service port. When Auto Config is selected, the appropriate IPv6 prefix and prefix length are displayed in this field. 13. Specify the default IPv6 Gateway for the service port. 14. Click the Apply button. The updated configuration is sent to the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. The factory default is blank. • System Location. Enter the location of this switch. You can use up to 255 alphanumeric characters. The factory default is blank. • System Contact. Enter the contact person for this switch. You can use up to 255 alphanumeric characters. The factory default is blank.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 4. System Information (continued) Field Description IPv6 Loopback Interface The IPv6 prefix and prefix length assigned to the loopback interface. System Date The current date. Current SNTP Sync Status The current SNTP sync status. System SNMP OID The base object ID for the switch's enterprise MIB. System Mac Address Universally assigned network address.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page, click the Update button. The following table describes the nonconfigurable Fan Status information. Table 5. Fan Status Field Description Unit ID The unit ID of the switch to which the fan belongs. System-1 The working status of the System-1 fan in each unit. System-2 The working status of the System-2 fan in each unit. System-3 The working status of the System-3 fan in each unit.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page, click the Update button. The following table describes the nonconfigurable Temperature Status information. Table 6. Temperature Status information Field Description Unit ID The unit number in the switch. MAC-A The current temperature (in degrees Centigrade) of the MAC-A sensor of the switch. The maximum is 31°C. MAC-B The current temperature (in degrees Centigrade) of the MAC-B sensor of the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page, click the Update button. The following table describes the nonconfigurable Device Status information. Table 7. Device Status Field Description Unit ID The unit number in the switch. Firmware Version The release.version.maintenance number of the code currently running on the switch. For example, if the release was 1, the version was 2, and the maintenance number was 4, the format would be 1.2.4.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View the System CPU Status To view the system CPU status: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select System > Management > System CPU Status.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes CPU Memory Status information. Table 8. CPU Memory Status information Field Description Total System Memory The total memory of the switch in KBytes. Available Memory The available memory space for the switch in KBytes. Configure the CPU Thresholds The CPU Utilization Threshold notification feature allows you to configure thresholds that, when crossed, trigger a notification.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. Configure the Falling Threshold. Notification is triggered when the total CPU utilization falls below this level for a configured period of time. The falling utilization threshold must be equal to or less than the rising threshold value. The falling utilization threshold notification is made only if a rising threshold notification was done previously. Configuring the falling utilization threshold and time period is optional.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To clear all the counters, resetting all switch summary and detailed statistics to default values, click the Clear button. The discarded packets count cannot be cleared. The following table describes Switch Statistics information. Table 9. Switch Statistics information Field Description ifIndex The ifIndex of the interface table entry associated with the processor of this switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 9. Switch Statistics information (continued) Field Description Broadcast Packets Received The total number of packets received that were directed to the broadcast address. This does not include multicast packets. Receive Packets Discarded The number of inbound packets that were discarded even though no errors were detected to prevent their being deliverable to a higher-layer protocol.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View USB Device Information To display the USB device information: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the USB Directory Details information. Table 11. USB Directory Details information Field Description File Name The name of the file stored in the USB flash drive. File Size The size of the file stored in the USB flash drive in bytes Modification Time The last modification time of the file stored in the USB flash drive.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes information in the Slot Summary table. Table 12. Slot Summary table Field Description Slot The slot number. Status Indicates whether the slot is empty or full. Administrative State Indicates whether the slot is administratively enabled or disabled. Power State Indicates whether the device is providing power to the slot.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 14. Supported Switch Field Description Switch Model ID The model number of the supported switch. Switch Index The index assigned to the supported switch. Management Preference The management preference of the supported switch. Configure a Loopback Interface You can create, configure, and remove loopback interfaces. To configure a loopback interface: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. In the Primary IP Subnet Mask field, enter the primary IPv4 subnet mask in dotted-decimal notation. This option is visible when IPv4 loopback is selected. 10. In the Secondary IP Address field, enter the secondary IP address in dotted-decimal notation. This input field is visible only when Add Secondary is selected. This option is visible when IPv4 loopback is selected. 11.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual To configure the IPv4 service port: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. In the Subnet Mask field, specify the IP subnet mask for the interface: • If the service port configuration protocol is None, you can manually configure a static subnet mask. • If the service port configuration protocol is BootP or DHCP, this field displays the subnet mask that was dynamically acquired (if any). 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the IPv6 mode Enable or Disable radio button. This specifies the IPv6 administrative mode on the service port. 7. Select the Service Port Configuration Protocol None or DHCP radio button. This specifies whether the device acquires network information from a DHCPv6 server. Selecting None disables the DHCPv6 client on the service port. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 13. Click the Add button. The IPv6 address is added to the service port interface. 14. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Management VLAN Overview For you to manage the device by using the web-based configuration utility, the device management IP address must be defined and known.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select System > Management > Management Interfaces > IPv4 Management VLAN Configuration. 6. In the Management VLAN ID field, specify the Management VLAN ID of the switch. The management VLAN is used for management of the switch. It can be configured to any value in the range of 1–4093. 7. Select the Routing Mode radio button to Enable or Disable the global routing on the device.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The Current IPv4 Management Interface Status is displayed at the bottom of the page. The table below describes the nonconfigurable fields. Table 16. Nonconfigurable IPv4 Management Interface Status Field Description Management Interface Displays the current IPv4 management interface Link State Indicates whether the link status is up or down.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select System > Management > Management Interfaces > IPv6 Management VLAN Configuration. 6. In the Management VLAN ID field, specify the Management VLAN ID of the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 13. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. In the IPv6 Default Route Configuration section of the page, the nonconfigurable IPv6 Default Route that is displayed is the default route for the IPv6 VLAN interface. 14.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 17. Current IPv6 Management Interface Status Field Description IPv6 Routing Interface Status/Operational Mode Indicates whether the link status is up or down for the management interface. MAC Address The MAC address assigned to the management interface. IPv6 Enable Mode Indicates whether IPv6 Enable Mode on the management interface is enabled or disabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use the Interface list to select the interface for which IPv4 parameters or management interface can be changed. 7. When you select the Set Management Interface option, it means that the management interface must be configured based on the interface selected. By default, this option is not selected. 8. Select the Configuration Method DHCP or Manual radio button. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The table below describes the nonconfigurable fields. Table 18. Nonconfigurable IPv4 Management Interface Status Field Description Management Interface Displays the current IPv4 management interface Link State Indicates whether the link status is up or down. Routing Interface Status Indicates whether the link status is up or down for the management interface. MAC Address The MAC address assigned to the management interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select System > Management > Management Interfaces > IPv6 Management Interface Configuration. 6. Use the Interface list to select the interface for which IPv6 parameters or management interface can be changed. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 13. To make changes, do the following: • To add or remove the IPv6 default route, select the Change IPv6 Default Route option, and specify the address value in the IPv6 Default Route Address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Time The switch software supports the Simple Network Time Protocol (SNTP). As its name suggests, it is a less complicated version of Network Time Protocol, which is a system for synchronizing the clocks of networked computer systems, primarily when data transfer is handled through the Internet. Configure the Time Setting To configure the time setting: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the SNTP Global Settings To configure the SNTP global settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default value is Unicast. 7. In the Port field, specify the local UDP port that the SNTP client receives server packets on. The allowed range is 1025 to 65535 and the value 123. The default value is 123. When the default value is configured, the actual client port value used in SNTP packets is assigned by the operating system. 8. Select the Source Interface to use for the SNTP client.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 14. Use the Offset Hours field to specify the number of hours of difference from UTC. The allowed range is –12 to 13. The default value is 0. 15. Use the Offset Minutes field to specify the number of minutes of difference from UTC. The allowed range is 0 to 59. The default value is 0. 16. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table displays the nonconfigurable SNTP Global Status information. Table 20. SNTP Global Status Field Description Version The SNTP version that the client supports. Supported mode The SNTP modes that the client supports. Multiple modes can be supported by a client. Last Update Time The local date and time (UTC) that the SNTP client last updated the system clock.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure an SNTP Server SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. The switch software operates only as an SNTP client and cannot provide time services to other systems. Time sources are established by stratums. Stratums define the accuracy of the reference clock.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select System > Management > Time > SNTP Server Configuration. 6. In the Server Type list, select the address type of the configured SNTP server address. Possible values are as follows: • IPv4 • IPv6 • DNS The default value is IPv4. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 10. Specify the NTP Version running on the server. The range is 1 to 4. The default value is 4. 11. Click the Add button. The SNTP server entry is added. This sends the updated configuration to the switch. Configuration changes take effect immediately. 12. Repeat the previous steps to add additional SNTP servers. You can configure up to three SNTP servers. 13.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 21. SNTP Server Status (continued) Field Description Requests The number of SNTP requests made to this server since last agent reboot. Failed Requests The number of failed SNTP requests made to this server since last reboot. Configure Daylight Saving Time Settings To configure the Daylight Saving Time settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Recurring USA. Enable recurring USA daylight saving time. • Non Recurring. Configure non-recurring daylight saving time. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The fields in the following tables are visible only when DayLight Saving is Recurring or Recurring EU or Recurring USA. Table 22.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 23. DayLight Saving - Non Recurring Field Description Offset Configure the non-recurring offset in minutes. The valid range is 1–1440 minutes. Zone Configure the time zone. View the DayLight Saving Time Status To view the DayLight Saving Time status: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table displays the nonconfigurable Daylight Saving (DST) status information. Table 24. DayLight Saving Status Field Description Daylight Saving (DST) The Daylight Saving value, which is one of the following: • Disable • Recurring • Recurring EU • Recurring USA • Non Recurring Begins At Displays when the daylight saving time begins. This field is not displayed when daylight saving time is disabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the DNS Status Disable or Enable radio button: • Enable. Allow the switch to send DNS queries to a DNS server to resolve a DNS domain name. The default value is Enable. • Disable. Prevent the switch from sending DNS queries. 7. Enter the DNS Default domain Name to include in DNS queries.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 11. To specify the DNS server to which the switch sends DNS queries, enter an IP address in standard IPv4 dot notation in the DNS Server Address field and click the Add button. The server appears in the list. You can specify up to eight DNS servers. The precedence is set in the order created. 12. To remove a DNS server from the list, select its check box and click the Delete button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select System > Management > DNS > Host Configuration. 6. In the Host Name (1 to 255 characters) field, specify the static host name to add. Its length cannot exceed 255 characters and it is a mandatory field. 7. In the IP Address field, enter the IP address in standard IPv4 dot notation to associate with the host name. 8. Click the Add button. The entry appears in the list on the page.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Note: If you attach a unit to a stack and its template does not match the stack’s template, then the new unit automatically reboots using the template used by the other stacking members. To avoid the automatic reboot, first set the template to the SDM template used by existing members of the stack. Then power off the new unit, attach it to the stack, and power it on. You can configure SDM template preferences for the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Note: The templates with the Native keyword are supported only on the M4300-24X24F and M4300-48X stand-alone switches and on a homogenous stack of M4300-24X24F and M4300-48X switches. The following table displays Summary information. Table 27. SDM Template Preference Summary Field Description SDM Current Template ID The current active SDM template.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select System > Management > Green Ethernet > Green Ethernet Configuration. 6. Select the EEE mode Disable or Enable radio button. The factory default is enable. Energy Efficient Ethernet (EEE) combines the MAC with a family of PHYs that support operation in a low power mode. It is defined by IEEE 802.3az Energy Efficient Task Force.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure 7. Use the Auto Power Down mode selection to enable or disable this option. The factory default is Enable.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select System Management Green Ethernet Green Ethernet Details. 6. From the Interface menu, select the interface. 7. Use the EEE Admin Mode selection to enable or disable Energy Efficient Ethernet Admin Mode on the port. With EEE mode enabled, the port transitions to low power mode during a link idle condition. The default value is Disabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable fields. Table 28. Green Ethernet Local Device information Field Description Cumulative Energy Saved on this port due to Green mode(s) (Watts * Hours) Cumulative energy saved due to all green modes enabled on this port in (Watts * Hours). Rx Low Power Idle Event Count This field is incremented each time MAC RX enters low-power idle (LPI) state.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Green Ethernet Remote Device Details To configure the Green Ethernet remote device information: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View the Green Ethernet Statistics Summary To view the green Ethernet statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable fields. Table 30. Green Ethernet Statistics Summary Field Description Current Power Consumption /Stack (mWatts) Power Consumption by all ports in switch in mWatts (mW). Percentage Power Saving /Stack (%) Percentage of power saved on all ports in switch when Green mode is enabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable fields. Table 32. Green Ethernet Interface Summary Field Description Interface Interface for which data is displayed or configured. EEE Admin mode Enable or disable Energy Efficient Ethernet mode on the port. When EEE mode is enabled, the port transitions to Low Power mode during Link Idle condition. If EEE Admin Mode is not supported, then N/A is displayed.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the Interface. 7. In the Sampling Interval field, enter the interval at which EEE LPI data is collected. This is a global setting and is applied to all interfaces. The range is 30 to 36000.The default value is 3600. 8. In the Max Samples To Keep field, enter the maximum number of samples to keep. This is a global setting and is applied to all interfaces. The range is 1 to 168.The default value is 168. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select System > Services > DHCP Server > DHCP Server Configuration. 6. Select the Admin Mode Disable or Enable radio button. This specifies whether the DHCP service is enabled or disabled. The default value is Disable. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The exclude addresses are added to the switch 12. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure the DHCP Pool To configure the DHCP pool: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the DHCP Pool Configuration fields. Table 34. DHCP Pool Configuration Field Description Pool Name* For a user with read/write permission, this field shows names of all the existing pools along with an additional option Create.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 34. DHCP Pool Configuration (continued) Field Description Lease Time Can be selected as Infinite to specify lease time as Infinite or Specified Duration to enter a specific lease period. In case of dynamic binding infinite implies a lease period of 60 days and In case of manual binding infinite implies indefinite lease period. The default value is Specified Duration. Days The number of days of the lease period.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select System > Services > DHCP Server> DHCP Pool Options. 6. In Pool Name list, select the pool name. 7. Option Code specifies the Option Code configured for the selected Pool. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select System > Services > DHCP Server > DHCP Server Statistics. The following table describes the DHCP Server Statistics fields. Table 35. DHCP Server Statistics Field Description Automatic Bindings The number of automatic bindings on the DHCP Server. Expired Bindings The number of expired bindings on the DHCP Server. Malformed Messages The number of the malformed messages.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 35. DHCP Server Statistics (continued) Field Description DHCPACK The number of DHCPACK messages sent by the DHCP Server. DHCPNAK The number of DHCPNAK messages sent by the DHCP Server. View DHCP Bindings Information To view the DHCP bindings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the DHCP Bindings Information fields. Table 36. DHCP Bindings Information Field Description IP Address The client's IP address. Hardware Address The client's hardware address. Lease Time Left The Lease Time Left in Days, Hours and Minutes dd:hh:mm format. Type The Type of Binding: Dynamic or Manual.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To display DHCP conflicts information, select one of the following radio buttons: • All Address Conflicts. Specify all address conflicts to be deleted. • Specific Address Conflict. Specify a specific dynamic binding to be deleted. The following table describes the DHCP Conflicts Information fields. Table 37. DHCP Conflicts Information Field Description IP Address The IP address of the host as recorded on the DHCP server.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Maximum Hop Count to enter the maximum number of hops a client request can take before being discarded. The range is (1 to 16). The default value is 4. 7. Select the Admin mode Disable or Enable radio button. When you select Enable, DHCP requests are forwarded to the IP address you entered in the Server Address field. 8. Use Minimum Wait Time to enter a Minimum Wait Time in seconds.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual DHCP L2 Relay Configure Global DHCP L2 Relay Settings To configure global DHCP L2 Relay settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The pagination navigation menu functions as follows: - Rows per page. Select how many table entries are displayed per page. Possible values are 20, 50, 100, 200, and All. If you select All, the browser might be slow to display the information. - <. Display the previous page of the table data entries. - >. Display the next page of the table data entries. Configure a DHCP L2 Relay Interface To configure DHCP L2 Relay: 1.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View DHCP L2 Relay Interface Statistics To view the DHCP L2 Relay Interface Statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure UDP Relay Global Settings To configure UDP relay global settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • ntp. Relay network time protocol (UDP port 123) packets. • pim-auto-rp. Relay PIM auto RP (UDP port 496) packets. • rip. Relay Routing Image Protocol (RIP) (UDP port 520) packets • tacacs. Relay TACACS (UDP port 49) packet • tftp. Relay TFTP (UDP port 69) packets • time. Relay time service (UDP port 37) packets • Other. If this option is selected, the UDP Port Other Value is enabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Use Server Address to specify the UDP Relay Server Address in x.x.x.x format. 8. Use UDP Port to specify UDP Destination Port. The following ports are supported: • DefaultSet. Relay UDP port 0 packets. This is specified if no UDP port is selected when creating a Relay server. • dhcp. Relay DHCP (UDP port 67) packets. • domain. Relay DNS (UDP port 53) packets. • isakmp. Relay ISAKMP (UDP port 500) packets. • mobile-ip.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Manage the DHCPv6 Server Enable or Disable the DHCPv6 Server You can configure the Dynamic Host Configuration Protocol for IPv6 (DHCPv6) server settings on the device. The device can act as a DHCPv6 server or DHCPv6 relay agent to help assign network configuration information to IPv6 clients. To enable or disable DHCP service: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the DHCPv6 Pool You can view the currently configured DHCPv6 server pools as well as to add and remove pools. A DHCPv6 server pool is a set of network configuration information available to DHCPv6 clients that request the information. To configure DHCPv6 pool settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Use the Default Router Addresses field to specify the list of default router addresses for the pool. The user can specify up to eight default router addresses in order of preference. 8. User the Domain Name field to specify the domain name for a DHCPv6 client in the pool. The domain name can be up to 255 alphanumeric characters in length. To delete the selected pool on the switch, click the Delete button. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 12. Click the Add button. The delegated prefix is added for the selected pool. 13. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure DHCPv6 Interface Settings You can configure the per-interface settings for DHCPv6. The DHCPv6 interface modes are mutually exclusive.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. In the Admin mode list, select to Enable or Disable DHCPv6 mode to configure server functionality. DHCPv6 server and DHCPv6 relay functions are mutually exclusive. 8. In the Pool Name field, specify the DHCPv6 pool containing stateless and/or prefix delegation parameters. 9. Rapid Commit is an optional parameter. In the Rapid Commit list, select to Enable or Disable allowing an abbreviated exchange between the client and server.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page, click the Update button. The following table describes the nonconfigurable fields that are displayed. Table 40. DHCPv6 Binding Information Field Description Client Address The IPv6 address of the client associated with the binding. Client Interface The interface number where the client binding occurred. Client DUID The DHCPv6 Unique Identifier (DUID) of the client.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View DHCPv6 Server Statistics You can view the DHCPv6 server statistics for the device, including information about the DHCPv6 messages, sent, received, and discarded globally and on each interface. The values on the page indicate the various counts that accumulated since they were last cleared. To view DHCPv6 server statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To view detailed DHCPv6 statistics for an interface, from the Interface list select the entry for which data is to be displayed. If you select All, data is shown for all interfaces. 7. To reset the DHCPv6 counters for one or more interface, select each interface with the statistics to reset and click the Clear button. 8. To refresh the page, click the Update button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 41. DHCPv6 Server Statistics (continued) Field Description DHCPv6 Relay-reply Packets Received The number of DHCP v6 relay-reply messages received on the interface. This type of message is sent by a server to a DHCP v6 relay agent and contains the message for the relay agent to deliver to the client.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select System > Services > DHCPv6 Relay. 6. Select the Interface with the information to view or configure. You take one of the following actions: • In the Go To Interface field, enter the interface in unit/slot/port format and click the Go button. The entry corresponding to the specified interface is selected.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure PoE Configure Basic PoE Note: PoE is supported on models M4200-10MG-PoE+, M4300-28G-POE+, and M4300-52G-POE+ only. To configure basic PoE settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the PoE Configuration nonconfigurable fields. Table 42. PoE Configuration Nonconfigurable Fields Field Description Units The Current PoE Unit. You can change the PoE Unit by selecting another unit ID listed here. Model The model of the PoE card. Host The PoE host.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The Unit Selection field displays the current PoE unit. 6. To change the PoE unit, select another unit from the list. 7. To set the System Usage Threshold percentage, enter a number from 1 to 99. This sets the threshold level at which a trap is sent if consumed power is greater than the threshold power. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 43. PoE Configuration (continued) Field Description Threshold Power System can power up one port, if consumed power is less than this power. i.e. Consumed power can be between Nominal and Threshold Power values. The threshold power value is effected by changing System Usage Threshold. Consumed Power Total amount of a power which is currently being delivered to all ports.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. Select the High Power mode from the following options: • Disabled indicates that a port is powered in the IEEE 802.3af mode. • Legacy indicates that a port is powered using high-inrush current, used by legacy PD's whose power requirements are more than 15W from power up. • Pre-802.3at indicates a port is powered in the IEEE 802.3af mode initially and then switched to the high-power IEEE 802.3at mode before 75 msec.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 44. PoE Configuration (continued) Field Description Class The Class defines the range of power a PD is drawing from the system. Class definitions: 0 – 0.44-12.95 (watts) 1 – 0.44-3.83 (watts) 2 – 0.44-6.48 (watts) 3 – 0.44-12.95 (watts) 4 – 0.44-25.5 (watts) Output Voltage Current voltage being delivered to device in volts. Output Current Current being delivered to device in mA.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual V1 and SNMP V2 protocols. Only those communities with read/write level access can be used to change the configuration using SNMP. Note: If you want to use SNMP v3, use the User Accounts menu. To configure the SNMP V1/V2 community: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Address, and, if the values are equal, access is allowed. For example, if the Client Address and Client IP Mask parameters are 192.168.1.0/255.255.255.0, then any client whose IP address is 192.168.1.0 through 192.168.1.255 (inclusive) is allowed access. To allow access from only one station, use a Client IP Mask value of 255.255.255.255, and use that machine's IP address for Client Address. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Possible values are as follows: • Routing interface • Routing VLAN • Routing loopback interface • Tunnel interface • Service port VLAN 1 is used as source interface by default. 7. To add a host that receives SNMP traps, do the following steps: a. Community Name. Enter the community string for the SNMP trap packet to be sent to the trap manager. This name can be up to 16 characters and is case-sensitive. b. Version.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure SNMP V1/V2 Trap Flags You can enable or disable traps. When the condition identified by an active trap is encountered by the switch, a trap message is sent to any enabled SNMP Trap Receivers, and a message is written to the trap log. To configure the trap flags: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the Authentication Disable or Enable radio button. This enables or disables activation of authentication failure traps. The factory default is Enable. 7. Select the Link Up/Down Disable or Enable radio button This enables or disables activation of link status traps.The factory default is Enable. 8. Select the Multiple Users Disable or Enable radio button This enables or disables activation of multiple user traps.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the SNMP Supported MIBs Status fields. Table 45. SNMP Supported MIBs Field Description Name The RFC number if applicable and the name of the MIB. Description The RFC title or MIB description. Configure SNMP V3 Users To configure SNMPv3 settings for the user account: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the User Name list, select the user account to be configured. The SNMP v3 Access mode field indicates the SNMPv3 access privileges for the user account. The admin account has read/write access, and all other accounts are assigned read-only access. 7. Select an Authentication Protocol radio button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN. LLDP is a one-way protocol; there are no request/response sequences.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select System > LLDP > Global Configuration. 6. In the Transmit Interval field, enter the interval in seconds to transmit LLDP frames. The range is from 5 to 32768 secs. The default value is 30 seconds. 7. In the Transmit Hold Multiplier field, enter the multiplier on Transmit Interval to assign TTL. The range is from 2 to 10 secs. The default value is 4. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select System > LLDP > Interface Configuration. 6. Use Go To Port to enter the Port in unit/slot/port format and click the Go button. The entry corresponding to the specified Port, is selected. 7. Use Port to specify the list of ports on which LLDP - 802.1AB can be configured. The Link Status field indicates whether the link is up or down. 8. Use Transmit to specify the LLDP - 802.1AB transmit mode for the selected interface. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select System > LLDP > Statistics. The following table describes the LLDP Statistics fields. Table 46. LLDP Statistics Field Description Last Update The time when an entry was created, modified or deleted in the tables associated with the remote system.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 46. LLDP Statistics (continued) Field Description Discards The number of LLDP TLVs discarded for any reason by the LLDP agent on the corresponding port. Errors The number of invalid LLDP frames received by the LLDP agent on the corresponding port, while the LLDP agent is enabled. Age outs The number of age-outs that occurred on a given port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In Interface list, select the ports on which LLDP - 802.1AB frames can be transmitted. The following table describes the LLDP Local Device Information fields. Table 47. LLDP Local Device Information Field Description Chassis ID Subtype The string that describes the source of the switch identifier. Chassis ID The string value used to identify the switch component associated with the local system.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View LLDP Remote Device Information You can view information on remote devices connected to the port. To view LLDP remote device information: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 48. LLDP Remote Device Information (continued) Field Description System Capabilities Enabled The system capabilities of the remote system which are supported and enabled. Time to Live The Time To Live value in seconds of the received remote entry. Management Address Type The type of the management address. Management Address • • Management Address. The advertised management address of the remote system. Type.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 49. LLDP Remote Device Inventory (continued) Field Description System Name Specifies model name of the remote device. Remote Port ID The port component associated with the remote system. Configure LLDP-MED Global Settings You can specify LLDP-MED parameters that are applied to the switch. To configure LLDP-MED global settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure LLDP-MED Interface To configure LLDP-MED Interface 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Extended Power via MDI - PD. To transmit the extended PD TLV in LLDP frames. • Inventory Information. To transmit the inventory TLV in LLDP frames. 11. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. View LLDP-MED Local Device Information To view LLDP-MED local device information: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Interface to select the ports on which LLDP-MED frames can be transmitted. The following table describes the LLDP-MED Local Device Information fields.L Table 50. LDP-MED Local Device Information Field Description Network Policy Information: Specifies if network policy TLV is present in the LLDP frames. Media Application Type The application type.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select System > LLDP > LLDP-MED > Remote Device Information. 6. Use Interface to select the ports on which LLDP-MED is enabled. The following table describes the LLDP-MED Remote Device Information fields. Table 51. LLDP-MED Remote Device Information Field Description Capability Information: The supported and enabled capabilities that was received in MED TLV on this port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 51. LLDP-MED Remote Device Information (continued) Field Description Media Application Type The application type. Types of application types are unknown, voicesignaling, guestvoice, guestvoicesignalling, softphonevoice, videoconferencing, streammingvideo, vidoesignalling. Each application type that is received has the VLAN ID, priority, DSCP, tagged bit status and unknown bit status.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 51. LLDP-MED Remote Device Information (continued) Field Description Source The remote port's PD power source. Priority The remote port's PD power priority. View LLDP-MED Remote Device Inventory To view LLDP-MED remote device inventory: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Link Dependency The link dependency feature provides the ability to enable or disable one or more ports based on the link state of one or more different ports. With link dependency enabled on a port, the link state of that port is dependent on the link state of another port. For example, if port A is dependent on port B and the switch detects a link loss on port B, the switch automatically brings down the link on port A.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure a Link Dependency Interface To configure a link dependency interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. In the Link Dependency Interface Configuration section of the page, select which interfaces are displayed on the page: • Use LAG to display LAGs only. • Use All to display all physical ports and LAGs. 10. Use one of the following methods to select an interface: • Use the Go To Interface field by entering the interface in unit/slot/port format and click the Go button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 54. Link Dependency Group Statistic (continued) Field Description Group Transitions Indicates the number of group transitions. Last Transition Time Indicates the time of the last group transitions. Click the Update button to refresh the page with the latest information on the switch. Configure ISDP You can configure ISDP global and interface settings.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Use Timer to specify the period of time between sending new ISDP packets. The range is 5 to 254 seconds. The default value is 30 seconds. 8. Use Hold Time to specify the hold time for ISDP packets that the switch transmits. The hold time specifies how long a receiving device must store information sent in the ISDP packet before discarding it. The range 10 to 255 seconds. The default value is 180 seconds. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the Admin mode Disable or Enable radio button. This specifies whether the ISDP Service is enabled or disabled. The default value is Enable. 7. In the Timer field, specify the period of time between sending new ISDP packets. The range is 5 to 254 seconds. The default value is 30 seconds. 8. In the Hold Time field, specify the hold time for ISDP packets that the switch transmits.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure an ISDP Interface To configure an ISDP interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select System > ISDP > Advanced > Neighbor. The following table describes the ISDP Neighbor fields. Table 57. ISDP Neighbor Field Description Device ID The device ID of the ISDP neighbor. Interface The interface on which the neighbor is discovered. Address The address of the neighbor. Capability The capability of the neighbor.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View ISDP Statistics To view ISDP statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select System > ISDP > Advanced > Statistics.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 58. ISDP Statistics (continued) Field Description ISDP Bad Header The ISDP bad packets received. ISDP Checksum Error The number of the checksum error. ISDP Transmission Failure The number of the transmission failure. ISDP Invalid Format The number of the invalid format ISDP packets received. ISDP Table Full The table size of the ISDP table. ISDP Ip Address Table Full The table size of the ISDP IP address table.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Take one of the following actions: • Click the Add button. The timer schedule is added. The configuration changes take effect immediately. • Click the Delete button. The timer schedule is deleted.The configuration changes take effect immediately. Configure the Timer Schedule To configure the timer schedule: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. In the Time Start field, enter the time of the day in format (HH:MM) when the schedule operation is started. This field is required. If no time is specified, the schedule does not start running. 10. In the Time End field, enter the time of the day in format (HH:MM) when the schedule operation is terminated. 11. Use the Date Start to set the schedule start date. If no date is specified, the schedule starts running immediately. 12.
3. 3 Stacking This chapter covers the following topics: • M4300 Series Switch Stacking Overview • Firmware Synchronization and Upgrade • Stack Configuration Maintenance • Stack Master Election • Stack Factory Defaults Reset Behavior • Stack NSF • Configure a Stack • Run Stack Port Diagnostics • Configure Stack Firmware Synchronization • View NSF Summary Data • View NSF Checkpoint Statistics Note: The stacking feature applies to the M4300 series switches only.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual M4300 Series Switch Stacking Overview A stackable switch is a switch that is fully functional operating as a stand-alone unit but can also be set-up to operate together with up to seven other switches. This group of switches shows the characteristics of a single switch while having the port capacity of the sum of the combined switches. One of the switches in the stack controls the operation of the stack.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Note: We recommend that you set the active image for all stack members the same as the active image of the stack master. In other words, if image1 is the active image on the stack master, all units must use image1 as the active image. For information about configuring the active image, see Configure Dual Image Settings on page 665.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Stack Factory Defaults Reset Behavior If the stack master is reset to the factory default settings (see Reset the Switch to Its Factory Default Settings on page 653), the stack master applies the default settings to all the stack members and resets the stack, including all participating stack members. When the stack boots, the stack master election process begins.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual For NSF to be effective, adjacent networking devices must not reroute traffic around the restarting device. The switch uses three techniques to prevent traffic from being rerouted: • A protocol can distribute a part of its control plane to stack units so that the protocol can give the appearance that it is still functional during the restart. Spanning tree and port channels use this technique.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The Management Unit Selected menu displays the current primary management unit. 6. To change the primary management unit, select another unit ID of the stack member to become the stack master. A message displays to notify you that moving stack management unconfigures the entire stack including all interfaces. 7. Click the OK button to confirm the selection and reload the stack.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The valid range is 100 to 500. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure a Stack Member To configure a stack member before adding it to the stack: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 10. Click the Add button. The preconfigured unit is added to the stack. Change the Settings for an Existing Stack Member To change the settings for an existing stack member: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable Stack Configuration fields. Table 59. Stack Configuration Field Description Hardware Management Preference The hardware management preference of the switch. The hardware management preference can be disabled or unassigned. Standby Status Identifies the switch that is configured as the standby unit. The possible values are as follows: • Cfg Standby.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 60. Stack Status nonconfigurable fields (continued) Field Description Unit ID The unit ID of the specific switch. Switch Description The description for the unit that is configured by the user. Serial Number The unique box serial number for this switch. Up Time The relative time since the last reboot of the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The page is shown in two parts. 6. Select the check box associated with the unit and port to configure: 7. From the Configured Stack mode field, select the operating mode of the port to be either: • Stack. The port connects to the stack port on another stack member. This is the default value for back panel stack mode. • Ethernet. The port operates as a standard switch port that receives and transmits network traffic.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 61. Stack Port Configuration (continued) Field Description Transmit Data Rate (Mbps) The approximate transmit rate on the stacking port. Transmit Error Rate The number of errors in transmit packets per second. Total Transmit Errors The total number of errors in transmit packets since boot. The counter might wrap. Receive Data Rate (Mbps) The approximate receive rate on the stacking port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select Unit ID to display the packet path starting from the selected unit. 7. Select All to display the packet path from all the units in the stack. 8. To refresh the page with the latest information on the switch, click the Update button. The following table describes the Stack Port Diagnostics fields. Table 62. Stack Port Diagnostics Field Definition Unit ID The unit. Port The stackable interface on the given unit.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Specify whether Stack Firmware Auto Upgrade is enabled or disabled. This feature determines what to do when a new member attempts to join the stack, and its firmware does not match the version running on the master. • Enable. The stack master upgrades the version on the new member to match the version running on the rest of the stack. • Disable. The new member is not allowed to join. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use the Admin Status radio button to enable or disable the NSF feature on the stack. When enabled, the stack selects a backup unit. Applications on the management unit copy data to the backup unit. 7. To cause the supervisor unit to fail over to the backup blade, click the Initiate Failover button on the top right corner of the page. 8. To refresh the page with the latest information on the switch, click the Update button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 64. NSF Summary (continued) Field Description Time Since Last Restart Time since the current management card because the active management card. For the backup manager, the value is set to 0d:00:00:00. Restart In Progress Indicates whether a restart is in progress. A restart is not considered complete until all hardware tables are fully reconciled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To reset the statistics on the page, click the Clear button. 7. To refresh the page with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 65. NSF Checkpoint Statistics Field Description Messages Checkpoint The number of messages sent from the supervisor to the backup blade.
4.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure VLANs Adding virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a VLAN switch forwards traffic based on the Layer 2 header, which is fast, and like a router, it partitions the network into logical segments, which provides better administration, security, and management of multicast traffic.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Switching> VLAN > Basic > VLAN Configuration. 6. To reset VLAN settings to their default values, select the Reset Configuration check box. The factory default values are as follows: • All ports are assigned to the default VLAN of 1. • All ports are configured with a PVID of 1. • All ports are configured to an Acceptable Frame Types value of Admit All Frames.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The VLAN name can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always uses the name Default. The VLAN Type field identifies the type of the VLAN you are configuring. You cannot change the type of the default VLAN (VLAN ID = 1): it is always type Default. When you create a VLAN using this page, its type is always Static.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the Reset Configuration check box. WARNING: If you select this button and confirm your selection on the next page, all VLAN configuration parameters are reset to their factory default values. 7. Confirm your selection. All VLANs, except for the default VLAN, are deleted. The factory default values are as follows: • All ports are assigned to the default VLAN of 1. • All ports are configured with a PVID of 1.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Switching> VLAN > Advanced > VLAN Configuration. 6. In the Internal VLAN Allocation Base field, specify the VLAN allocation base for the routing interface. You can enter a value from 1 to 4093. 7. Select the Internal VLAN Allocation Policy Ascending or Descending radio button. This specifies a policy for the internal VLAN allocation. 8. Click the Apply button. The updated configuration is sent to the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Switching> VLAN > Advanced > VLAN Trunking Configuration. 6. To specify which interfaces are displayed on the page, select one of the following options: • Select the Unit ID field to display physical port information for the selected unit. • Use LAG to display LAGs only. • Use All to display all physical ports. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 10. Select from the list to configure the Native VLAN ID. This is the native VLAN for the port, and is valid only when the port switchport mode is Trunk. 11. Configure the Trunk Allowed VLANs. This is the set of VLANs of which the port can be a member when configured in Trunk mode. By default, this list contains all possible VLANs, even if they are not yet created. VLAN IDs are in the range 1 to 4093.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the VLAN ID list, select the VLAN ID. 7. In the Group Operation list, select all the ports and configure them: • Untag All. Select all the ports on which all frames transmitted for this VLAN are untagged. All the ports are included in the VLAN. • Tag All. Select the ports on which all frames transmitted for this VLAN are tagged. All the ports are included in the VLAN. • Remove All.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 66. Advanced VLAN Membership Field Definition VLAN Name The name for the VLAN that you selected. It can be up to 32 alphanumeric characters long, including blanks. VLAN ID 1 always uses the name Default. VLAN Type The type of the VLAN you selected: • Default (VLAN ID = 1). Always present • Static. A VLAN that you configured • Dynamic.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 67. VLAN Status Field Definition VLAN ID The VLAN identifier (VID) of the VLAN. The range of the VLAN ID is 1 to 4093. VLAN Name The name of the VLAN. VLAN ID 1 is always named `Default`. VLAN Type The VLAN type: • Default (VLAN ID = 1). Always present • Static. A VLAN that you configured • Dynamic.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To display information for all physical ports and LAGs, click the ALL button. 7. Select the interfaces. Select the Interface check box next to the interfaces. You can select multiple interfaces. To select all the interfaces, select the Interface check box in the heading row. 8. In the PVID field, specify the VLAN ID to assign to untagged or priority-tagged frames received on this port. The factory default is 1. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • When disabled, all frames are forwarded in accordance with the 802.1Q VLAN bridge specification. The factory default is disabled. 13. In the Port Priority field, specify the default 802.1p priority assigned to untagged packets arriving at the port. You can enter a number from 0 to 7. 14. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the MAC Address field, type a valid MAC address to be bound to a VLAN ID. This field is configurable only when a MAC-based VLAN is created. 7. In the VLAN ID field, specify a VLAN ID in the range of 1 to 4093. 8. Take one of the following actions: • To add the add a MAC address to the VLAN mapping, click the Add button. • To delete a MAC address from VLAN mapping, click the Delete button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Switching> VLAN > Advanced > Protocol Based VLAN Group Configuration. 6. In the Group Name field, type a name for the new group. You can enter up to 16 characters. 7. In the Protocol field, select the protocols to be associated with the group. There are three configurable protocols: • IP. IP is a network layer protocol that provides a connectionless service for the delivery of data. • ARP.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Switching> VLAN > Advanced > Protocol Based VLAN Group Membership. 6. In the Group ID list, select the protocol-based VLAN group ID. 7. Select port numbers (1, 2, 3, and so on) to select ports to add to this protocol-based VLAN group.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual To add or delete an IP subnet-based VLAN: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Switching> VLAN > Advanced > IP Subnet Based VLAN. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Switching> VLAN > Advanced > Port DVLAN Configuration. 6. Select Interface check boxes to select the physical interface. To select all ports, select the Interface check box at the top of the column. 7. In the Admin Mode field, select Enabled or Disabled. This specifies the administrative mode through which double VLAN ragging can be enabled or disabled. The default value for this is Disabled. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Switching> VLAN > Advanced > Voice VLAN Configuration. 6. Select the Admin Mode Disable or Enable radio button. This specifies the administrative mode for voice VLAN for the switch. The default is Disable. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 12. In the DSCP Value field, configure the Voice VLAN DSCP value for the port. The valid range is 0 to 64. The default value is 0. The Operational State field displays the operational status of the voice VLAN on the interface. 13. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure GARP Port Note: It can take up to 10 seconds for GARP configuration changes to take effect. To configure GARP port: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual This specifies the GARP multicast registration protocol administrative mode for the port. If you select Disable, the protocol is not active, and the join time, leave time, and leave all time have no effect. The factory default is Disable. 9. In the Join Time (centiseconds) field, specify the time between the transmission of GARP PDUs registering (or re-registering) membership for a VLAN or multicast group in centiseconds.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Switching > Auto-VoIP > Protocol-based > Port Settings. 6. In the Prioritization Type field, select Traffic Class or Remark. This specifies the type of prioritization. 7. In the Class Value list, specify the CoS tag value to be reassigned for packets received on the voice VLAN when Remark CoS is enabled. 8. Click the Apply button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Switching > Auto-VoIP > OUI-based > Properties. 6. In the VoIP VLAN ID field, type the VoIP VLAN ID of the switch. There is no default VLAN for auto-VoIP, you must create a VLAN for it first. 7. In the OUI-based priority list, select the OUI-based priority of the switch. The default value is 7. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The Operational Status field displays the current operational status of each interface. 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. 7. In the Auto VoIP Mode field, select Disable or Enable.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Telephony OUI(s) field, specify the VoIP OUI prefix to be added in the format AA:BB:CC. Up to 128 OUIs can be configured. 7. In the Description field, enter the description for the OUI. The maximum length of description is 32 characters.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View the Auto-VoIP Status To view the auto-VoIP status: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Switching > Auto-VoIP > Auto-VoIP Status.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual In networks containing iSCSI initiators and targets, iSCSI helps to monitor iSCSI sessions or give iSCSI traffic preferential Quality of Service (QoS) treatment. Dynamically-generated classifier rules are used to direct the iSCSI data traffic to queues that can be given the desired preference characteristics over other data traveling through the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual This globally enables or disables the iSCSI Optimization feature. By default, iSCSI Optimization is disabled. 7. Select the QoS Profile VLAN Priority Tag or DSCP radio button. This specifies the Quality of Service (QoS) profile that is applied to iSCSI flows. By default, iSCSI flows are assigned to the highest VLAN Priority tag (VPT)/DSCP mapped to the highest queue not used for switch management or voice VLAN.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. View iSCSI Sessions To view active iSCSI session information: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Control iSCSI Target Settings You can view iSCSI targets and assign target ports/port IP address combinations for iSCSI optimization on the switch. To configure iSCSI target settings 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View iSCSI Sessions To view information about active iSCSI sessions: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Switching > iSCSI > Advanced > Sessions Detailed. 6. To refresh the page with the latest information on the switch, click the Update button. The following table describes the nonconfigurable iSCSI Sessions Detailed information. Table 73.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops. Spanning tree versions supported include Common STP, Multiple STP, and Rapid STP. Classic STP provides a single path between end stations, avoiding and eliminating loops.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the Spanning Tree Admin Mode Disable or Enable radio button. This specifies whether spanning tree operation is enabled on the switch. 7. Use Force Protocol Version to specify the Force Protocol Version parameter for the switch. The options are IEEE 802.1d, IEEE 802.1w, IEEE 802.1s, PVST, and RPVST. 8. Use Configuration Name to specify an identifier used to identify the configuration currently being used.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual This specifies whether the BPDU Filter feature is enabled. STP BPDU filtering applies to all operational edge ports. Edge Port in an operational state is supposed to be connected to hosts that typically drop BPDUs. If an operational edge port receives a BPDU, it immediately loses its operational status. In that case, if BPDU filtering is enabled on this port then it drops the BPDUs received on this port. 13.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Advanced STP Settings To configure advanced STP settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. Use Configuration Revision Level to specify the identifier used to identify the configuration currently being used. The values allowed are between 0 and 65535. The default value is 0. 10. Select the Forward BPDU while STP Disabled Disable or Enable radio button. This specifies whether spanning tree BPDUs are forwarded while spanning-tree is disabled on the switch. The default is Disable. 11.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 75. STP Configuration Field Description Configuration Digest Key The 16-byte signature of type HMAC-MD5 created from the MST Configuration Table (a VLAN ID-to-MST ID mapping) which is used to identify the configuration currently being used.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Specify values for CST in the appropriate fields: • Bridge Priority. When switches or bridges are running STP, each is assigned a priority. After exchanging BPDUs, the switch with the lowest priority value becomes the root bridge. Specifies the bridge priority value for the Common and Internal Spanning Tree (CST). The valid range is 0–61440. The bridge priority is a multiple of 4096.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Spanning Tree Maximum Hops. The maximum number of bridge hops the information for a particular CST instance can travel before being discarded. The valid range is 6–40. The default is 20 hops. • Spanning Tree Tx Hold Count. Configures the maximum number of bpdus the bridge is allowed to send within the hello time window. The valid range is 1–10. The default value is 6. 7. Click the Apply button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual To configure CST port settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Switching > STP > Advanced > CST Port Configuration. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The possible values are Enable or Disable. The default value is Disable. 13. Use Auto Edge to configure the auto edge mode of a port, which allows the port to become an edge port if it does not see BPDUs for some duration. The possible values are Enable or Disable. The default value is Enable. 14.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View CST Port Status You can view the Common Spanning Tree (CST) and Internal Spanning Tree on a specific port on the switch. To view the CST port status: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the CST Status information displayed on the page. Table 78. CST Port Status Field Description Interface Identify the physical or port channel interfaces associated with VLANs associated with the CST. Port ID The port identifier for the specified port within the CST. It is made up from the port priority and the interface number of the port. Port Forwarding State The Forwarding State of this port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure MST Settings You can configure Multiple Spanning Tree (MST) on the switch. To configure an MST instance: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual b. Update the values. c. click the Apply button. 8. To delete an MST instance, do the following: a. Select the check box for the instance. b. Click the Delete button. For each configured instance, the information described in the following table displays on the page. Table 79. MST Configuration Field Description Bridge Identifier The bridge identifier for the selected MST instance.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Switching > STP > Advanced > MST Port Status. Note: If no MST instances were configured on the switch, the page displays a No MSTs Available message and does not display the fields shown in the field description table that follows. 6. Use MST ID to select one MST instance from existing MST instances. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the read-only MST port configuration information displayed on the Spanning Tree CST Configuration page. Table 80. MST Port Status Field Description Auto Calculated Port Path Cost Displays whether the path cost is automatically calculated (Enable) or not (Disable). Path cost is calculated based on the link speed of the port if the configured value for Port Path Cost is zero.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Switching > STP > Advanced > STP Statistics. 6. To refresh the page with the latest information on the switch, click the Update button. The following table describes the information available on the STP Statistics page. Table 81. STP Statistics Field Description Interface Selects one of the physical or port channel interfaces of the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Switching > STP > Advanced > PVST VLAN in the navigation menu. 6. Select a VLAN ID, a unique VLAN identifier, from the list of VLANs with enabled STP Admin mode and PVST or RPVST. 7. In the Root list, select None, Primary, or Secondary. The default value is None.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The allowed values are between 0 and 61440. The valid values are listed in the following table. Table 82. PVST/RPVST VLAN Configuration - VLAN Bridge Priority 0 4096 8192 12288 16384 20480 24576 28672 32768 (default) 36864 40960 45056 49152 53248 57344 61440 The default value is 32768. If the value configured is not among the specified values, then it is rounded off to the nearest valid value. 12.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select a VLAN ID from the list of VLANs with enabled STP Admin mode and PVST or RPVST. Note: The Other option is used for configuring a VLAN which is not yet created. Specify the required value for VLAN ID and click the Apply button to observe actual values. 7. Configure the Priority value used to allow the operator to select the relative importance of the port in the selection process for forwarding.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that the PVST/RPVST Interface Configuration page displays. Table 84. PVST/RPVST Interface Configuration Field Description Interface The list of physical interfaces and LAGs. Role Indicates the role of the interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page with the latest information on the switch, click the Update button. The Status field displays Neither PVST nor Rapid-PVST is enabled. If you change the STP mode to PVST or to RPVST, the page displays statistic information. Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Search by MAC Address to enter a MAC address. Enter six two-digit hexadecimal numbers separated by colons, for example 00:01:23:43:45:67. 7. Click the GO button. If the address exists, that entry is displayed. An exact match is required. Table 85. MFDB Table Field Description MAC Address The multicast MAC address for which you requested data. VLAN ID The VLAN ID to which the multicast MAC address is related.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Switching > Multicast > MFDB > MFDB Statistics. The following table describes the MFDB Statistics fields. Table 86. MFDB Statistics Field Description Max MFDB Table Entries The maximum number of entries that the Multicast Forwarding Database table can hold.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual wasting bandwidth is even worse when the LAN segment is not shared, for example in full-duplex links. Allowing switches to snoop IGMP packets is a creative effort to solve this problem. The switch uses the information in the IGMP packets as they are being forwarded throughout the network to determine which segments receive packets directed to the group address.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual This specifies the administrative mode for IGMP snooping for the switch. The default is Disable. 7. Use the Validate IGMP IP header option to Enable or Disable header validation for all IGMP versions. If Validate IGMP IP Header is enabled, then IGMP IP header checks for Router Alert option, ToS and TTL. The default value is Enable. 8. Select the Proxy Querier Mode Enable or Disable radio button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The page lists all physical, VLAN, and LAG interfaces. 6. Use the Interface check boxes to select interfaces. 7. In the Admin Mode field, select Disable or Enable. This specifies the interface mode for the selected interface for IGMP snooping for the switch. The default is Disable. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure IGMP Snooping for VLANs To configure IGMP snooping settings for VLANs: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Enable or Disable the Proxy Querier Mode for the specified VLAN ID. If proxy querier mode is disabled, then IGMP proxy query with source IP 0.0.0.0 is not sent in response to an IGMP leave packet. The default is Enable. c. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. 7. To disable IGMP snooping on a VLAN, do the following: a.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Interface to select the physical interface. 7. In the Multicast Router field, select Enable or Disable. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure a Multicast Router VLAN You can configure an interface to forward the snooped IGMP packets from a specific VLAN only to the multicast router that is connected to the interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Interface to select the interface. 7. Use VLAN ID to select the VLAN ID. 8. In the Multicast Router field, select Enable or Disable. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Switching> Multicast > IGMP Snooping > Querier Configuration. 6. Use Querier Admin Mode to select the administrative mode for IGMP snooping for the switch. The default is Disable. 7. In the Snooping Querier IP Address field, type an IP address. This specifies the snooping querier address to be used as the source address in periodic IGMP queries.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure IGMP Snooping Querier for VLANs You can configure IGMP queriers for use with VLANs on the network. To configure querier VLAN settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 88. Querier VLAN Configuration Field Description Operational State The operational state of the IGMP snooping querier on a VLAN. It can be in any of the following states: • Querier: The snooping switch is the querier in the VLAN.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use MLD Snooping Admin Mode to select the administrative mode for MLD snooping for the switch. The default is Disable. 7. Select the Proxy Querier Mode Enable or Disable radio button. This enables or disables an MLD proxy querier on the system. If it is disabled, then an MLD proxy query with source IP 0::0 is not sent in response to an MLD leave packet. If it is enabled, then MLD proxy queries are sent.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure a MLD Snooping Interface To configure a MLD snooping interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Enter a value greater than or equal to 1 and less than the group membership interval in seconds. The default is 10 seconds. The configured value must be less than the group membership interval. 10. Use Present Expiration Time to specify the amount of time you want the switch to wait to receive a query on an interface before removing it from the list of interfaces with multicast routers attached.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use VLAN ID to set the VLAN IDs for which MLD snooping is enabled. 7. Use Fast Leave Admin Mode to enable or disable the MLD snooping Fast Leave Mode for the specified VLAN ID. 8. Use Group Membership Interval to set the value for group membership interval of MLD snooping for the specified VLAN ID. The valid range is (Maximum Response Time + 1) to 3600. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Enable or Disable a Multicast Router on an Interface To enable or disable a multicast router on an interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Switching> Multicast > MLD Snooping > Multicast Router VLAN Configuration. 6. From the Interface menu, select the interface for which you want to enable or disable the multicast router configuration. 7. Use the VLAN ID field to specify the VLAN ID for which you want to enable or disable the multicast router configuration. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Querier Admin Mode to select the administrative mode for MLD snooping for the switch. The default is Disable. 7. Use Querier Address to specify the snooping querier address to be used as source address in periodic MLD queries. This address is used when no address is configured on the VLAN on which query is being sent. The supported IPv6 formats are x:x:x:x:x:x:x:x and x::x. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure MLD Snooping Querier VLAN Settings To configure MLD snooping querier VLAN settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 90. Querier VLAN Configuration Field Description Operational State The operational state of the MLD snooping querier on a VLAN. It can be in any of the following states: • Querier: Snooping switch is the querier in the VLAN. The snooping switch sends out periodic queries with a time interval equal to the configured querier query interval.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use MVR Running to Enable or Disable the MVR feature. The factory default is Disable. 7. Use MVR Multicast VLAN to specify the VLAN on which MVR multicast data is received. All source ports belong to this VLAN. The value can be set in a range of 1 to 4093. The default value is 1. 8. Use MVR Global Query Response Time to set the maximum time to wait for the IGMP reports membership on a receiver port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Advanced MVR Settings To configure advanced MVR settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable information displayed on the page. Table 92. Advanced MVR Configuration Field Definition MVR Max Multicast Groups The maximum number of multicast groups that MVR supports. MVR Current Multicast Groups Displays the current number of MVR groups allocated.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 93. MVR Group Configuration Field Definition Status The status of the specific MVR group. Members The list of ports that participate in the specific MVR group. Configure an MVR Interface To configure an MVR interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The factory default is Disable. 10. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure MVR Group Membership To configure MVR group membership: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View MVR Statistics To view MVR statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Switching > MVR > Advanced > MVR Statistics. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 94. MVR Statistics (continued) Field Definition IGMP Report V1 Transmitted The number of transmitted IGMP reports V1. IGMP Report V2 Transmitted The number of transmitted IGMP reports V2. IGMP Leave Transmitted The number of transmitted IGMP leaves. IGMP Packet Receive Failures The number of IGMP packet receive failures. IGMP Packet Transmit Failures The number of IGMP packet transmit failures.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Search By to search for MAC addresses by MAC address, VLAN ID, or port: • Searched by MAC Address. Select MAC Address, enter the 6-byte hexadecimal MAC address in two-digit groups separated by colons, for example, 01:23:45:67:89:AB. Then click the Go button. If the address exists, that entry is displayed as the first entry followed by the remaining (greater) MAC addresses. An exact match is required. • Searched by VLAN ID.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Switching > Address Table> Advanced > Dynamic Addresses. 6. Use Address Aging Timeout (seconds) to specify the time-out period in seconds for aging out dynamically learned forwarding information. IEEE 802.1D-1990 recommends a default of 300 seconds. The value can be specified as any number between 10 and 1000000 seconds. The factory default is 300. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Interface to select the physical interface/LAGs. 7. In the Static MAC Address field, type the MAC address. 8. Select the VLAN ID associated with the MAC address. 9. Take one of the following actions: • Click the Add button. The static MAC address is added to the switch. • Click the Delete button. The static MAC address deleted from the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default is Enable. 8. In the Admin Mode list, select Enable or Disable. This sets the port control administrative mode.For the port to participate in the network, you must select Enable. The factory default is Enable. 9. From the LACP Mode list, select Enable or Disable. This selects the Link Aggregation Control Protocol administrative mode. The mode must be enabled in order for the port to participate in link aggregation.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 14. Use Frame Size to specify the maximum Ethernet frame size the interface supports or is configured to use, including Ethernet header, CRC, and payload. The range is 1518 to 12288. The default maximum frame size is 1518. 15. Use Debounce Time to specify the timer value for port debouncing in a multiple of 100 milliseconds (msec) in the range to 100 to 5000.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Port Descriptions To configure and display the description for all ports in the device: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View Port Transceiver Information You can view the trans\ceiver information for all fiber ports on the switch To view port transceiver information: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Link Aggregation Groups Link aggregation groups (LAGs), which are also known as port-channels, allow you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, which increases fault tolerance and provides load sharing. You assign the LAG VLAN membership after you create a LAG. The LAG by default becomes a member of the management VLAN.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual When the LAG is disabled, no traffic flows and LACPDUs are dropped, but the links that form the LAG are not released. The factory default is Enable. 8. Use Hash Mode to select the load-balancing mode used on a port-channel (LAG). Traffic is balanced on a port-channel (LAG) by selecting one of the links in the channel over which to transmit specific packets.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 13. Click the Apply button. The switch is updated with the values you entered. Configuration changes take effect immediately. The following table describes the nonconfigurable information displayed on the page. Table 99. LAG Configuration Field Description LAG Description Enter the description string to be attached to a LAG. It can be up to 64 characters in length. LAG ID Identification of the LAG.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use LAG ID to select the identification of the LAG. 7. Use LAG Name to enter the name to be assigned to the LAG. You can enter any string of up to 15 alphanumeric characters. A valid name must be specified for you to create the LAG. 8. Use LAG Description to enter the description string to be attached to a LAG. It can be up to 64 characters in length. 9. Use Admin Mode to select Enable or Disable.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The link is selected by creating a binary pattern from selected fields in a packet, and associating that pattern with a particular link: • Src MAC,VLAN,EType,incoming port. Source MAC, VLAN, EtherType, and incoming port associated with the packet. • Dest MAC,VLAN,EType,incoming port. Destination MAC, VLAN, EtherType, and incoming port associated with the packet. • Src/Dest MAC,VLAN,EType,incoming port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual is common. Many nodes require ingress traffic to be tagged with a specific VLAN ID, and other nodes require egress traffic to be transmitted with a specific VLAN ID. With the use of MVRP on both ingress and egress, no manual VLAN configuration is required to pass tagged traffic through the network.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Note: The fields available on the MRP Configuration page vary based on the platform and its supported features. 6. Select the MVRP Mode Enable or Disable radio button. This specifies the global administrative mode of MVRP on the device. The default is Disable. Multiple VLAN Registration Protocol (MVRP) registers VLANs in the network, enabling automatic VLAN configuration on the device. In a typical network, VLAN tagging is common.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure MRP Port Settings You can configure the per-port MRP mode and timer settings. The timers control when and how often various messages are transmitted on each interface. To configure MRP port settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual If the amount of time specified in this field passes before the interface receives a JoinIn message, the interface resends the Join message. The range is 10 to 100 centiseconds. The default value is 20. 10. Use the MRP Leave Timer field to configure the amount of time in centiseconds to wait before the interface deregisters attributes from other MRV participants.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page with the latest information on the switch, click the Update button. 7. To clear the statistics for one or more ports, do the following: a. Select the check box next to the interface or interfaces. b. Click the Clear button. The statistics are cleared. The following table describes the nonconfigurable data that the MMRP Global Statistics page displays. Table 100.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View and Clear MVRP Statistics You can view and clear information about the MVRP frames transmitted and received by the switch and by each interface. To view and clear MVRP statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that the MVRP Global Statistics page displays. Table 101. MVRP Statistics Field Description Interface In the MVRP Statistics table, this field identifies the interface associated with the rest of the data in the row. Frames Received The number of MVRP frames that were received on the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual If the source MAC address matches the MAC address of the switch, the switch can perform one of the following actions, depending on how you configure the action: • The port is shut down. • A log message is generated. (If a syslog server is configured, the log message can be sent to the syslog server.) • The port is shut down and a log message is generated.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Switching> L2 Loop Protection > L2 Loop Protection Configuration. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the Loop Protection Settings for Ports and View the Loop Protection State Before you can configure loop protection for individual ports, you must globally enable loop protection (see Configure the Global Loop Protection Settings on page 270). To enable and configure loop protection for a port and view the loop protection state on the switch: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Note: You can select multiple ports. You can select all ports by selecting the check box in the table header. 8. From the Keep Alive menu, select Enable to specify that loop protection must be enabled on the port. By default, loop protection is disabled for a port. 9. From the RX Action menu, select the action that the switch takes when a loop is detected on the port: • Log. Log the message when a loop is detected on the port.
5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Manage Routes The Routing Table collects routes from multiple sources: static routes and local routes. The Routing Table can learn multiple routes to the same destination from multiple sources. The Routing Table lists all routes. Configure a Basic Route To configure a basic route: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The next router is always one of the adjacent neighbors or the IP address of the local interface for a directly attached network. 10. Preference displays an integer value from 1 to 255. You can specify the preference value (sometimes called administrative distance) of an individual static route. Among routes to the same destination, the route with the lowest preference value is the route entered into the forwarding database.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 103. Routing Table Basic Route Configuration (continued) Field Description Preference The preference is an integer value from (0 to 255). The user can specify the preference value (sometimes called administrative distance) of an individual static route. Among routes to the same destination, the route with the lowest preference value is the route entered into the forwarding database.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. Subnet Mask indicates the portion of the IP interface address that identifies the attached network. This is also referred to as the subnet/network mask. 9. Next Hop IP Address displays the outgoing router IP address to use when forwarding traffic to the next router (if any) in the path toward the destination.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 104. Route Configuration - Learned Routes (continued) Field Description Preference The preference is an integer value from 0 to 255. The user can specify the preference value (sometimes called administrative distance) of an individual static route. Among routes to the same destination, the route with the lowest preference value is the route entered into the forwarding database.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Static to specify the static route preference value in the router. The default value is 1. The range is 1 to 255. 7. Specify the RIP route preference value in the router. The default value is 120. The range is 1 to 255. 8. Specify the OSPF Intra route preference value in the router. The default value is 110. The range is 1 to 255.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the Routing IP Settings You can configure routing IP settings for the switch, as opposed to the IP settings for an interface. To configure the routing IP settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual By default, the rate limit is 100 packets/sec (the burst interval is 1000 msec). To disable ICMP Rate limiting, set this field to 0. The valid rate Interval is from 0 to 2147483647. 10. Use ICMP Rate Limit Burst Size to control the ICMP error packets by specifying the number of ICMP error packets that are allowed per burst interval. By default, burst size is 100 packets.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Routing> IP > Basic > Statistics. The following table describes the nonconfigurable information displayed on the page. Table 106. IP Basic Statistics Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 106. IP Basic Statistics (continued) Field Description IpForwDatagrams The number of input datagrams for which this entity was not their final IP destination, as a result of which an attempt was made to find a route to forward them to that final destination.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 106. IP Basic Statistics (continued) Field Description IpRoutingDiscards The number of routing entries that were discarded even though they were valid. One possible reason for discarding such an entry could be to free up buffer space for other routing entries. IcmpInMsgs The total number of ICMP messages that the entity received. This counter includes all those counted by icmpInErrors.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 106. IP Basic Statistics (continued) Field Description IcmpOutTimestamps The number of ICMP timestamp (request) messages. IcmpOutTimestampReps The number of ICMP timestamp reply messages sent. IcmpOutAddrMasks The number of ICMP address mask request messages sent. Configure Routing Parameters for the Switch You can configure routing parameters for the switch as opposed to an interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual If you select Enable, then only the router can send ECHO replies. By default ICMP echo replies are sent for echo requests. 8. Use ICMP Redirects to select Enable or Disable. If it is enabled globally and on interface level then only the router can send ICMP redirects. 9. Use ICMP Rate Limit Interval to control the ICMP error packets by specifying the number of ICMP error packets that are allowed per burst interval.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View IP Statistics The statistics reported on this page are as specified in RFC 1213. To view IP statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 108. IP Statistics Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 108. IP Statistics (continued) Field Description IpReasmReqds The number of IP fragments received that needed to be reassembled at this entity. IpReasmOKs The number of IP datagrams successfully reassembled. IpReasmFails The number of failures detected by the IP reassembly algorithm (for whatever reason: timed out, errors, etc).
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 108. IP Statistics (continued) Field Description IcmpOutErrors The number of ICMP messages that this entity did not send due to problems discovered within ICMP such as a lack of buffers. This value does not include errors discovered outside the ICMP Layer such as the inability of IP to route the resultant datagram. In some implementations there might be no types of error that contribute to this counter's value.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The page is shown in three parts. 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Port column, select the check box for the interface that you want to configure. 7. Use Description to enter the description for the interface. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual This is also referred to as the subnet/network mask, and defines the portion of the interface's IP address that is used to identify the attached network. 11. In the Routing Mode list, select Enable or Disable. The default value is Enable. 12. Use Administrative Mode to enable or disable the administrative mode of the interface. The default value is Enable. This mode is not supported for logical VLAN interfaces. 13.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 109. IP Interface Configuration Field Description VLAN ID The VLAN ID for the interface. OSPF Admin Mode Displays the OSPF admin mode of the interface. The default value is Disable. Link State The state of the specified interface is either Active or Inactive. An interface is considered active if it the link is up and it is in forwarding state.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. In the Secondary IP Subnet Mask field, enter the subnet mask associated with the secondary IP address. This is also referred to as the subnet/network mask, and defines the portion of the interface’s IP address that is used to identify the attached network. This value is read-only once configured. 9. Click the Add button. The secondary IP address for the selected interface is added.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the IPv6 Unicast Routing field, select the option to globally Enable or Disable IPv6 unicast routing. 7. In the Hop Limit field, enter a value for the unicast hop count used in IPv6 packets originated by the node. The value is also included in router advertisements. The valid values for hops are 1 to 255, inclusive. The default is Not Configured, which means that a value of zero is sent in router advertisements. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Routes Displayed list, select from the following: • All Routes. Shows all active IPv6 routes. • Best Routes Only. Shows only the best active routes. • Configured Routes Only. Shows the routes configured by the user. 7. To refresh the page with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 111.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Routing> IPv6 > Advanced > Interface Configuration. 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. All physical interfaces are valid. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 11. In the Admin Mode list, select to Enable or Disable IPv6 mode. The default is Disable. When IPv6 mode is enabled, the interface is capable of IPv6 operation without a global address. In this case, an EUI-64 based link-local address is used. 12. In the MTU field, specify the maximum transmit unit on an interface. If the value is 0, then this interface is not enabled for routing.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 112. IPv6 Advanced Interface Configuration Field Description Operational Mode Specifies the operational state of an interface. The default value is Disable. Link State Indicates whether the link is up or down. IPv6 Prefix Configuration Configure IPv6 prefix configuration: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 11. In the Preferred Life Time field, specify the router advertisement per prefix time. An autoconfigured address generated from this prefix is preferred. The preferred life time must be in the range 0 to 4294967295. 12. From the Onlink Flag list, select Enable or Disable. This specifies whether the selected prefix can be used for on-link determination. The default is Enable. 13.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. From the Interface list, select the interface. When the selection is changed, a page refresh occurs, causing all fields to be updated for the newly selected port. 7. To refresh the page with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 113.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 113. IPv6 Advanced Interface Statistics (continued) Field Description Received Datagrams Discarded Due To No Route The number of input datagrams discarded because no route could be found to transmit them to their destination Received Datagrams With Unknown The number of locally-addressed datagrams received successfully but Protocol discarded because of an unknown or unsupported protocol.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 113. IPv6 Advanced Interface Statistics (continued) Field Description Datagrams Failed To Fragment The number of output datagrams that could not be fragmented at this interface. Datagrams Fragments Created The number of output datagram fragments that were generated as a result of fragmentation at this output interface. Multicast Datagrams Received The number of multicast packets received by the interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 114. ICMPv6 Statistics (continued) Field Description ICMPv6 Neighbor Advertisement Messages Received The number of ICMP Neighbor Advertisement messages received by the interface. ICMPv6 Redirect Messages Received The number of ICMPv6 Redirect messaged received by the interface. ICMPv6 Group Membership Query Messages Received The number of ICMPv6 Group Membership Query messages received by the interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 114. ICMPv6 Statistics (continued) Field Description ICMPv6 Redirect Messages Transmitted The number of Redirect messages sent. ICMPv6 Group Membership Query Messages Transmitted The number of ICMPv6 Group Membership Query messages sent. ICMPv6 Group Membership Response Messages Transmitted The number of ICMPv6 Group Membership Response messages sent.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • To search by Interface, select Interface from the Search By list, enter the interface ID in unit/slot/port format, for example, 2/1/1. Then click the Go button. If the address exists, that entry is displayed. 7. To refresh the page with the latest information on the switch, click the Update button. 8. To clear the IPv6 neighbors on a selected interface or on all interfaces, click the Clear button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual IPv6 Static Route Configuration Configure an IPv6 static route: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View the IPv6 Route Table To view the IPv6 route table: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Routing> IPv6 > Advanced > Route Table.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 116. IPv6 Advanced Route Table (continued) Field Description Next Hop IP Address The next hop IPv6 address for the active route. Preference The route preference of the configured route. IPv6 Route Preferences Use this page to configure the default preference for each protocol. These values are arbitrary values in the range of 1 to 255 and are independent of route metrics.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The range is 1 to 255. The default value is 110. 8. In the OSPFv3 Inter field, specify the OSPFv3 inter route preference value in the router. The range is 1 to 255. The default value is 110. 9. In the OSPFv3 External field, specify the OSPFv3 external route preference value in the router. The range is 1 to 255. The default value is 110. 10. Click the Apply button. The updated configuration is sent to the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. Enable IPv6 on this interface using the IPv6 address. This option is configurable only until you specify an explicit IPv6 address. 10. From the IPv6 Unreachables list, select to Enable or Disable. This specifies the mode of sending ICMPv6 Destination Unreachables on this interface. If you select Disable, then this interface does not send ICMPv6 destination unreachables. By default IPv6 destination unreachables mode is enabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Since a port can be configured to belong to more than one VLAN, VLAN routing might be enabled for all of the VLANs on the port, or for a subset. VLAN routing can be used to allow more than one physical port to reside on the same subnet. It could also be used when a VLAN spans multiple physical networks, or when additional segmentation or security is required.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use VLAN ID to specify the VLAN identifier (VID) associated with this VLAN. The range of the VLAN ID is 1 to 4093. 7. Use Ports to display selectable physical ports and LAGs (if any). Selected ports are added to the routing VLAN. Each port has three modes: • T (Tagged). Select the ports on which all frames transmitted for this VLAN are tagged. The ports that are selected are included in the VLAN. • U (Untagged).
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure VLAN Routing To configure VLAN routing: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Routing> VLAN > VLAN Routing. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Address Resolution Protocol The Address Resolution Protocol (ARP) associates a Layer 2 MAC address with a Layer 3 IPv4 address. The switch software features both dynamic and manual ARP configuration. With manual ARP configuration, you can statically add entries into the ARP table.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Routing> ARP > Basic > ARP Cache. The page displays the following information: • IP Address. Displays the IP address associated with the system’s MAC address. This address must be the IP address of a device on a subnet attached to one of the switch's existing routing interfaces. • Port. Displays the associated unit/slot/port of the connection. • MAC Address.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Routing> ARP > Advanced > ARP Create. 6. Use IP Address to enter the IP address to add. It must be the IP address of a device on a subnet attached to one of the switch's existing routing interfaces. 7. Use MAC Address to specify the unicast MAC address of the device. Enter the address as six 2-digit hexadecimal numbers separated by colons, for example, 00:06:29:32:81:40. 8. Click the Add button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 118. ARP Cache (continued) Field Description Type The type of ARP entry. Possible values are as follows: • Local. An ARP entry associated with one of the switch’s routing interface’s MAC addresses. • Gateway. A dynamic ARP entry whose IP address is that of a router. • Static. An ARP entry configured by the user. • Dynamic. An ARP entry that was learned by the router.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Age Time to enter the amount of time, in seconds, that a dynamic ARP entry remains in the ARP table before aging out. The range is 15 to 21600 seconds. The default value for Age Time is 1200 seconds. 7. Use Response Time to enter the amount of time, in seconds that the device waits for an ARP response to an ARP request that it sends. The range for this field is 1 to 10 seconds. The default value is 1 second. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 119. ARP Table Configuration Field Description Total Entry Count Total number of entries in the ARP table. Peak Total Entries Highest value reached by Total Entry Count. This counter value is restarted whenever the ARP table Cache Size value is changed. Active Static Entries Total number of active static entries in the ARP table.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure RIP Settings To configure advanced RIP settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. In the Host Routes Accept Mode field, select the Enable or Disable option. If you select Enable, the router accepts host routes. The default is Enable. 10. In the Default Information Originate field, select to Enable or Disable default route advertisement. 11. In the Default Metric field, specify a default value for the metric of redistributed routes.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. 7. From the Send Version list, select the version of RIP control packets that the interface will send. The value is one of the following: • None.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Simple. If you select Simple, you are prompted to enter an authentication key. This key is included, in the clear, in the RIP header of all packets sent on the network. All routers on the network must be configured with the same key. • Encrypt. If you select Encrypt, you are prompted to enter both an authentication key and an authentication ID. Encryption uses the MD5 Message-Digest algorithm.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Routing > RIP > Advanced > Route Redistribution. The Source list is populated by only those source routes that are already configured for redistribution by RIP. This allows you to configure another source route among the available source routes. 6. In the Source list, select a value. The valid values are as follows: • Connected • Static • OSPF 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Note: A 1 in the mask indicates a do not care in the corresponding address bit. When an access list rule includes a destination IP address and netmask (an extended access list), the destination IP address is compared to the network mask of the destination of the route.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Router Discovery To configure router discovery: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual This is the maximum length of time that the advertised addresses are to be considered as valid router addresses by hosts. 12. Use Preference Level to specify the preference level of the router as a default router relative to other routers on the same subnet. Higher numbered addresses are preferred. You must enter an integer. 13. Click the Apply button. The updated configuration is sent to the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual By default, VRRP is disabled. 7. Select the VRID. The VRID field is configurable only if you are creating a new virtual router. The valid values are 1 to 255. 8. Select the unit/slot/port for the new virtual router from the Interface menu. 9. In the Primary IP Address field, enter the primary IP address of the virtual router. 10. From the Mode menu, select the Active or Inactive mode for the new virtual router. 11.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Global Configuration Admin Mode field, set the administrative status of VRRP in the router by selecting the Enable or Disable radio button. By default, VRRP is disabled. 7. Select the VRID. The VRID field is configurable only if you are creating a new virtual router. The valid values are 1 to 255. 8. Select the unit/slot/port for the new virtual router from the Interface menu. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Enter a number from 1 to 255. The default value is 1 second. 13. In the Primary IP Address field, enter the IP address that is associated with the virtual router. The default is 0.0.0.0. 14. From the Authentication Type menu, select the type of authentication for the virtual router. The options are as follows: • 0-None. No authentication is performed. The default is None. • 1-Simple.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure an Advanced VRRP Secondary IP Address To configure the advanced VRRP secondary IP address settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure an Advanced VRRP Tracking Interface To configure an advanced VRRP tracking interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. In the Tracked Route Prefix field, enter the prefix of the route. 10. In the Tracked Route Prefix Length field, enter the prefix length of the route. 11. In the Priority Decrement field, enter priority decrement value the for the route. The valid range is 1 to 254. The default value is 10. The nonconfigurable Reachable field displays the reachability of the tracked route. 12. Click the Add button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 126. Advanced VRRP Statistics Field Description Global Statistics Router Checksum Errors The total number of VRRP packets received with an invalid VRRP checksum value.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 126. Advanced VRRP Statistics (continued) Field Description Authentication Failure The total number of VRRP packets received that did not pass the authentication check. IP TTL Errors The total number of VRRP packets received by the virtual router with IP Time-To-Live (TTL) not equal to 255. Zero Priority Packets Received The total number of VRRP packets received by the virtual router with a priority of 0.
6. 6 OSPF and OSPFv3 This chapter covers the following topics: • Configure OSPF • Configure OSPFv3 Note: OSPF and OSPFv3 are supported on the M4300 series switches only.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure OSPF Note: OSPF is supported on the M4300 series switches only. Configure Basic OSPF Settings To configure basic OSPF settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the OSPF Default Route Advertise Settings To configure default route advertise settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Default Information Originate field, select the Enable or Disable option. If you select Enable, OSPF originates an external LSA advertising a default route (0.0.0.0/0.0.0.0). Default Information Originate is disabled by default. 7. In the Always field, select True or False.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Routing > OSPF > Advanced > OSPF Configuration. 6. In the Router ID field, enter the 32-bit integer in dotted-decimal format that uniquely identifies the router within the autonomous system (AS). To change the router ID, you must first disable OSPF. After you set the new router ID, you must reenable OSPF for the change to take effect. The default value is 0.0.0.0, although this is not a valid router ID. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual An opaque LSA is used for flooding user-defined information within an OSPF router domain. 10. When the number of nondefault external LSAs exceeds a configured limit, the router enters an overflow state as defined in RFC 1765. Use the Exit Overflow Interval field to specify how long in seconds OSPF must wait before attempting to leave overflow state. In overflow state, OSPF cannot originate nondefault external LSAs.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configuring this field overwrites any present interface level passive mode setting. OSPF does not form adjacencies on passive interfaces, but does advertise attached networks as stub networks. The default is Disabled. 18. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 127.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the OSPF Common Area ID To add or delete an area ID: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 128. OSPF Common Area Configuration (continued) Field Description SPF Runs The number of times that the intra-area route table was calculated using this area's link state database. This is typically done using Dijkstra's algorithm. Area Border Router Count The total number of area border routers reachable within this area. This is initially zero, and is calculated in each SPF pass.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. 7. Configure the Import Summary LSAs by selecting Enable or Disable from the list. If you select Enable, summary LSAs are imported into stub areas. 8. Configure the Default Cost by entering the metric value to be applied for the default route advertised to the stub area.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Routing > OSPF > Advanced > NSSA Area Configuration. 6. Enter the OSPF Area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. 7. Configure the Import Summary LSAs by selecting Enable or Disable from the list. If you select Enable, summary LSAs are imported into NSSA areas. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual b. Candidate. Cause the router to participate in the translator election process when it attains border router status. 10. In the Translator Stability Interval field, configure the translator of the NSSA. The value is the period of time that an elected translator continues to perform its duties after it determines that its translator status was deposed by another router. The valid range is 0 to 3600. 11.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the OSPF Area Range Configure the OSPF area range: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the OSPF Interface To configure the OSPF interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Next to the Interface column, select the check box for the interface that you want to configure. 7. In the OSPF Area ID field, enter the 32-bit integer in dotted-decimal format. This ID uniquely identifies the OSPF area to which the selected router interface connects. If you assign an area ID that does not exist, the area is created with default values. 8. In the Admin Mode list, select Enable or Disable.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 13. In the Iftransit Delay Interval field, enter the OSPF transit delay for the specified interface. This specifies the estimated number of seconds it takes to transmit a link state update packet over the selected interface. The valid values range from 1 to 3600 seconds (1 hour). The default value is 1 second. 14. Configure MTU Ignore by selecting Enable or Disable from the list.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 131. OSPF Interface Configuration Field Description IP Address The IP address of the interface. Subnet Mask The network mask, indicating the portion of the IP address that identifies the attached network. LSA Ack Interval (secs) The number of seconds to wait before sending a delayed acknowledgement.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 131. OSPF Interface Configuration (continued) Field Description Number of Link Events The number of times the specified OSPF interface changed its state. Local Link LSAs The number of opaque LSAs whose flooding scope is the link on this interface. Local Link LSA Checksum The sum of the checksums of local link LSAs for this link.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the OSPF Interface Selection area of the page, from the list in the Interface field, select the interface for which you want to display statistics. 7. To refresh the page with the latest information on the switch, click the Update button. 8. To clear all the statistics of the OSPF interface, click the Clear button. The following table describes the nonconfigurable OSPF Interface Statistics data that is displayed. Table 132.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 132. OSPF Interface Statistics (continued) Field Description Invalid Destination Address The number of OSPF packets discarded because the packet's destination IP address is not the address of the ingress interface and is not the AllDrRouters or AllSpfRouters multicast addresses.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View and the OSPF Neighbor Table and Clear OSPF Neighbors You can view the OSPF neighbor table list. When a particular neighbor ID is specified, detailed information about a neighbor is given. The information is displayed only if OSPF is enabled. You can also clear OSPF neighbors. To view the OSPF neighbor table and clear OSPF neighbors: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 133. OSPF Neighbor Table (continued) Field Description Options An integer value that indicates the optional OSPF capabilities supported by the neighbor. The neighbor's optional OSPF capabilities are also listed in its hello packets. This enables received hello packets to be rejected (for example, neighbor relationships do not even start to form) if there is a mismatch in certain crucial OSPF capabilities.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 133. OSPF Neighbor Table (continued) Field Description Retransmission Queue Length An integer representing the current length of the retransmission queue of the specified neighbor router ID of the specified interface. Up Time Neighbor uptime; how long since the adjacency last reached the Full state. Dead Time The amount of time, in seconds, to wait before the router assumes the neighbor is unreachable.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 134. OSPF Link State Database Field Description Router ID The 32-bit integer in dotted-decimal format that uniquely identifies the router within the autonomous system (AS). The router ID is set on the IP Configuration page. To change the router ID you must first disable OSPF.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 134. OSPF Link State Database (continued) Field Description Options The Options field in the link state advertisement header indicates which optional capabilities are associated with the advertisement. The options are as follows: • Q. This enables support for QoS traffic engineering. • E. This describes the way AS external LSAs are flooded. • MC.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed in the AS Opaque Link State Database (LSDB) table. Table 136. OSPF AS Opaque Link State Database Table Field Description Router ID The 32-bit integer in dotted-decimal format that uniquely identifies the router within the autonomous system (AS). The router ID is set on the IP Configuration page. To change the router ID you must first disable OSPF.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Area ID field, enter the OSPF area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. Virtual links can be configured between any pair of area border routers having interfaces to a common (non-backbone) area. 7. Configure the Neighbor Router ID by entering the neighbor portion of a virtual link specification.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 12. From the Authentication Type menu, select one of the following authentication types: • None. This is the initial interface state. • Simple. If you select Simple, you are prompted to enter an authentication key. This key is included, in the clear, in the OSPF header of all packets sent on the network. All routers on the network must be configured with the same key. • Encrypt.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 137. OSPF Virtual Link Configuration (continued) Field Description Neighbor State (continued) • • • • State Point-to-Point. The interface is operational, and is connected either to the virtual link. On entering this state the router attempts to form an adjacency with the neighboring router. hello packets are sent to the neighbor every hello interval seconds. Designated Router.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 137. OSPF Virtual Link Configuration (continued) Field Description State (continued) • Metric The metric value used by the Virtual Link. Other Designated Router. The interface is connected to a broadcast or NBMA network on which other routers were selected to be the designated router and backup designated router either.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • RIP • Static 7. In the Redistribute list, select to Enable or Disable the redistribution for the selected source protocol. 8. Set the Metric value to be used as the metric of redistributed routes. This fields displays the metric if the source was preconfigured and can be modified. The valid values are 0 to 16777214. 9. From the Metric Type list, select the OSPF metric type of redistributed routes. 10.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View the NSF OSPF Summary You can view the NSF OSPF summary. The allowable values for each field are displayed next to the field. If any invalid values are entered, an alert message is displayed with the list of all the valid values. To configure the NSF OSPF summary: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. Use the Helper Support Mode field to configure how the unit acts when a neighbor performs a warm restart. The possible values are as follows: • Always. Indicates that OSPF helps a restarting neighbor only during all planned and unplanned warm restart events. • Disabled. Disables OSPF acting as a helpful neighbor. • Planned. Indicates that OSPF helps a restarting neighbor only during planned events. The default is Always. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure OSPFv3 Note: OSPFv3 is supported on the M4300 series switches only. Configure Basic OSPFv3 Settings To configure the basic OSPFv3 settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure OSPFv3 Default Route Advertise Settings 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the Advanced OSPFv3 Settings To configure the advanced OSPFv3 settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. In the Exit Overflow Interval field, specify the number of seconds that, after entering overflow state, the router must wait before attempting to leave overflow state. Because OSPFv3 cannot originate nondefault external LSAs while in overflow state, this allows the router to again originate nondefault AS-external-LSAs. If you enter an exit overflow interval of 0, the router does not leave the overflow state until it is restarted.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 139. Advanced OSPFv3 Configuration Field Description ASBR Mode Reflects whether the ASBR mode is enabled or disabled. Enable implies that the router is an autonomous system border router. Router automatically becomes an ASBR when it is configured to redistribute routes learned from other protocol.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Area ID field, enter the OSPF area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. 7. Take one of the following actions: • Click the Add button. The area is configured as a common area. • Click the Delete button. The area is returned to the normal state. The following table describes the nonconfigurable data that is displayed. Table 140.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure an OSPFv3 Stub Area To configure the OSPFv3 stub area: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 141. Advanced OSPFv3 Stub Area Configuration Field Description SPF Runs The number of times that the intra-area route table was calculated using this area's link state database. This is done using Dijkstra's algorithm. Area Border Router Count The total number of area border routers reachable within this area.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Area ID field, enter the OSPF area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. 7. Configure the Import Summary LSAs by selecting Enable or Disable from the list. If you select Enable, summary LSAs are imported into stub areas. 8. Configure the Default Information Originate.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 142. Advanced OSPFv3 NSSA Area Configuration Field Description SPF Runs The number of times that the intra-area route table was calculated using this area's link state database. This is typically done using Dijkstra's algorithm.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Enter the OSPFv3 Area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. 7. Enter the IPv6 Prefix for the address range for the selected area. 8. From the list in the LSDB Type field, select the type of link advertisement associated with the specified area and address range. Options are: Network Summary or NSSA External.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. 7. In the Area ID field, enter the 32-bit integer in dotted-decimal format that uniquely identifies the OSPFv3 area to which the selected router interface connects.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. Configure the Router Priority by entering the OSPFv3 priority for the selected interface. The priority of an interface is specified as an integer from 0 to 255. The default is 1, which is the highest router priority. A value of 0 indicates that the router is not eligible to become the designated router on this network. 10. Configure the Retransmit Interval by entering the OSPFv3 retransmit interval for the specified interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 18. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 143. Advanced OSPFv3 Interface Configuration Field Description IPv6 Address The IPv6 address of the interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 143. Advanced OSPFv3 Interface Configuration (continued) Field Description Designated Router The identity of the designated router for this network, in the view of the advertising router. The designated router is identified here by its router ID. The value 0.0.0.0 means that there is no designated router. Note: This field displays only if the OSPFv3 admin mode is enabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the OSPFv3 Interface Selection area of the page, in the Interface list, select the interface. 7. To refresh the page with the latest information on the switch, click the Update button. 8. To clear all the statistics of the OSPFv3 interface, click the Clear button. The following table describes the nonconfigurable OSPF Interface Statistics data that is displayed. Table 144.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 144. Advanced OSPFv3 Interface Statistics (continued) Field Description Area LSA Count The total number of link state advertisements in this area's link state database, excluding AS External LSAs. IPv6 Address The IPv6 address of the interface. Interface Events The number of times the specified OSPFv3 interface changed its state, or an error occurred.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 144. Advanced OSPFv3 Interface Statistics (continued) Field Description LS Requests Sent The number of LS requests sent on this interface by this router. LS Requests Received The number of LS requests received on this interface by this router. LS Updates Sent The number of LS updates sent on this interface by this router. LS Updates Received The number of LS updates received on this interface by this router.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 145. Advanced OSPFv3 Neighbor Table Field Description Interface The interface for which data is to be displayed or configured. Slot 0 is the base unit. Interface Identifier The interface ID that the neighbor advertises in its hello packets on this link.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 146. Advanced OSPFv3 Link State Database Field Description Router ID The 32-bit integer in dotted-decimal format that uniquely identifies the router within the autonomous system (AS). The router ID is set on the OSPFv3 Configuration page.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 146. Advanced OSPFv3 Link State Database (continued) Field Description LS ID The link state ID identifies the piece of the routing domain that is being described by the advertisement. The value of the LS ID depends on the advertisement's LS type. Age The time since the link state advertisement was first originated, in seconds. Sequence The sequence number field is a signed 32-bit integer.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 147. Advanced OSPFv3 External Link State Database Table (continued) Field Description LSA Type (continued) • • • • Inter-Area Router LSA. This type describes a prefix external to the area, yet internal to the autonomous system. It is originated by an area border router. AS-External LSA. This LSA type describes a path to a prefix external to the autonomous system and is originated by an autonomous system border router.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Enter the Area ID of the OSPF area. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. Virtual links can be configured between any pair of area border routers with interfaces to a common (non-backbone) area. 7. Configure the Neighbor Router ID by entering the neighbor portion of a virtual link specification.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 148. Advanced OSPFv3 Virtual Link Configuration Field Description Neighbor State The state of the virtual neighbor relationship. The OSPFv3 interface state can be any of these values: • Down. This is the initial interface state.The lower-level protocols indicated that the interface is unusable. Interface parameters are set to their initial values.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 148. Advanced OSPFv3 Virtual Link Configuration (continued) Field Description State (continued) • • • Metric Designated Router. This router is the designated router on the attached network. Adjacencies are established to all other routers attached to the network. The router must also originate a network-LSA for the network node.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. From the Source menu, select from the list of available source routes that were not previously configured for redistribution by OSPFv3. The valid values are as follows: • Connected • Static 7. In the Redistribute Option list, select to Enable or Disable the redistribution for the selected source protocol. 8. Set the Metric value to be used as the metric of redistributed routes.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Routing > OSPFv3 > Advanced > NSF OSPFv3 Summary. 6. From the Support mode list, select one of the following values: • Always. OSPF performs a graceful restart for all planned and unplanned warm restart events. • Disabled. Prevents OSPF from performing graceful restarts. • Planned.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 149. Advanced NSF OSPFv3 Summary (continued) Field Description Restart Exit Reason Displays how the master unit on the switch last started up. The possible values are as follows: • Not Attempted. Graceful restart was not been attempted. • In Progress. Restart is in progress. • Completed. The previous graceful restart completed successfully. • Timed Out. The previous graceful restart timed out. • Topology Changed.
7. 7 Multicast Routing This chapter covers the following topics: • Multicast Overview • Configure Multicast IGMP Settings • Configure PIM Settings • Configure Multicast Static Routes • Configure the Multicast Admin Boundary • Configure IPv6 Multicast Settings Note: Multicast and IPv6 multicast are supported on the M4300 series switches only.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Multicast Overview Multicast is best suited for video and audio traffic requiring multicast packet control for optimal operation. Multicast includes support for IGMPv2 and IGMPv3. Communication from point to multipoint is called multicasting. The source host (point) transmits a message to a group of zero or more hosts (multipoint) that are identified by a single IP destination address.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 150. Multicast Mroute Table Field Description Group IP The destination group IP address. Source IP The IP address of the multicast packet source to be combined with the group IP to fully identify a single route whose Mroute table entry. Incoming Interface The incoming interface on which multicast packets for this source/group arrive.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Admin Mode field, select the Enable or Disable option to set the administrative status of multicast forwarding in the router. The default is Disable. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following describes the nonconfigurable data that is displayed. Table 151.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. 7. Enter the TTL Threshold below which a multicast data packet is not forwarded from the selected interface. Enter a number between 0 and 255. The default is 1.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the Admin Mode Disable or Enable radio button. This sets the administrative status of DVMRP to active or inactive. The default is Disable. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 152.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. 7. In the Interface Mode field, select the Enable or Disable option to set the administrative mode of the selected DVMRP routing interface. The default is Disable. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Search for DVMRP Neighbors To search for DVMRP neighbors: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 154. DVMRP Neighbor (continued) Field Description Expiry Time The DVMRP expiry time for the specified neighbor on the selected interface. This is the time left before this neighbor entry ages out, and is not applicable if the neighbor router's state is down. Generation ID The DVMRP generation ID for the specified neighbor on the selected interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 155. DVMRP Next Hop Field Description Source IP The IP address used with the source mask to identify the source network for this table entry. Source Mask The network mask used with the source IP address. Next Hop Interface The outgoing interface for this next hop. Type The next hop type.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 156. DVMRP Prune Field Description Group IP The group address that was pruned. Source IP The IP address used with the source mask to identify the source network for this table entry. Source Mask The network mask used with the source IP address. Expiry Time The amount of time remaining before this prune will expire at the upstream neighbor.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 157. DVMRP Route Field Description Source Address The network address that is combined with the source mask to identify the sources for this entry. Source Mask The network subnet mask used with the source IP address to identify the sources for this entry.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Admin Mode field, select the Enable or Disable option. This sets the administrative status of IGMP in the router to active or inactive. The default is Disable. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure the IGMP Routing Interface To configure the IGMP routing interface: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. In the Admin Mode field, select the Enable or Disable option to set the administrative status of IGMP on the selected routing interface. The default is Disable. 8. In the Version field, enter the version of IGMP to configure for the selected interface. Valid values are 1 to 3. The default value is 3. This field is configurable only when IGMP Interface mode is enabled. 9. In the Robustness field, enter the robustness value.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View IGMP Routing Interface Statistics To view the IGMP routing interface statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 158. Multicast IGMP Routing Interface Statistics (continued) Field Description Querier Up Time The time in seconds since the IGMP interface querier was last changed. Querier Expiry Time The time in seconds remaining before the other querier present timer expires. If the local system is the querier, this is zero.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use the Search menu to search for multicast entries by interface or group: • Select Interface from the menu, enter the interface in unit/slot/port format (for example 1/0/13), and click the Go button. If the entry exists, the entry is displayed as the first entry, followed by the remaining entries. • Select Group from the menu, enter the multicast group IP address, and click the Go button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View the IGMP Membership To view the IGMP membership: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 160. Multicast IGMP Membership (continued) Field Description Source Filter Mode The source filter mode (Include, Exclude, or NA) for the specified group on this interface. When NA mode is active, the field is blank. Source Hosts This parameter shows source addresses that are members of this multicast address.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Select Enable or Disable from the Admin Mode list. This sets the administrative status of IGMP proxy on the selected interface. The default is Disable. Routing, IGMP and Multicast global admin modes must be enabled to enable IGMP proxy interface mode. 8. In the Unsolicited Report Interval field, enter the unsolicited time interval value in seconds.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View the IGMP Proxy Interface Statistics To view the IGMP proxy interface statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View the IGMP Proxy Membership To view the IGMP proxy membership: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 163. Multicast IGMP Proxy Membership (continued) Field Description State The state of the host entry. A host can be in one of the state. Non-member state - does not belong to the group on the interface. Delaying member state - host belongs to the group on the interface and report timer running. The report timer is used to send out the reports.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure PIM SSM Settings While PIM employs a specially configured rendezvous point (RP) router that serves as a meeting junction for multicast senders and listeners, Protocol-Independent Multicast Single-Source Multicast (PIM-SSM) does not use an RP. It supports only source route delivery trees.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure PIM Interface To configure the multicast PIM interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The valid values are from 0 to 2147483647. The default value is 1. 12. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 164. Multicast PIM Interface Configuration Field Description Protocol State The state of PIM in the router. either Operational or Non-Operational.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 165. Multicast PIM Neighbor Field Description Interface The interface on which the neighbor is displayed. Neighbor IP The IP address of the PIM neighbor for this entry. Up Time (hh:mm:ss) The time since this PIM neighbor (last) became a neighbor of the local router.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 166. Multicast PIM Neighbor Field Description Neighbor IP The IP address of the PIM neighbor for this entry. Up Time (hh:mm:ss) The time since this PIM neighbor (last) became a neighbor of the local router. Expiry Time (hh:mm:ss) The minimum time remaining before this PIM neighbor is aged out. View the PIM Neighbor To view the multicast PIM neighbor: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the PIM Candidate Rendezvous Point To configure the PIM candidate rendezvous point (RP): 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the PIM Bootstrap Router Candidate To configure the multicast PIM bootstrap router (BSR) candidate: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 168. Multicast BSR Candidate Configuration Field Description BSR Expiry Time (hh:mm:ss) Time (in hours, minutes and seconds) in which the learned elected bootstrap router (BSR) expires. IP Address The IP address of the elected BSR.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 10. Click the Add button. The static RP address is added for one or more multicast groups 11. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure Multicast Static Routes To configure multicast static routes: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the Multicast Admin Boundary The definition of an administratively scoped boundary is a mechanism to stop the ingress and egress of multicast traffic for a given range of multicast addresses on a given routing interface. To configure the multicast admin boundary: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure IPv6 Multicast Settings Note: IPv6 multicast is supported on the M4300 series switches only. View the IPv6 Multicast Mroute Table You can view the contents of the Mroute Table in tabular format. To view the Mroute Table: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 169. Multicast Mroute Table (continued) Field Description Expiry Time (hh:mm:ss) The time in seconds before this entry ages out and is removed from the table. RPF Neighbor The IP address of the reverse path forwarding (RPF) neighbor. Protocol The multicast routing protocol which created this entry.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure IPv6 PIM SSM While PIM employs a specially-configured rendezvous point (RP) router that serves as a meeting junction for multicast senders and listeners, Protocol-Independent Multicast Single-Source Multicast (PIM-SSM) does not use an RP. It supports only source route delivery trees. It is used between routers so that they can track which multicast packets to forward to each other and to their directly connected LANs.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the IPv6 PIM Interface To configure the IPv6 PIM interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 170. IPv6 PIM Interface Configuration Field Description Protocol State The state of PIM in the router. either Operational or Non-Operational. IPv6 Prefix/Length The IPv6 address prefix and the length of the selected interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 171. IPv6 PIM Neighbor Field Description Up Time (hh:mm:ss) The time since this PIM neighbor (last) became a neighbor of the local router. Expiry Time (hh:mm:ss) The minimum time remaining before this PIM neighbor is aged out. Configure the IPv6 PIM Candidate Rendezvous Point To configure the IPv6 PIM candidate rendezvous point: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the IPv6 PIM Bootstrap Router Candidate Settings To configure the IPv6 PIM BSR Candidate settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 172. IPv6 PIM BSR Candidate Configuration Field Description BSR Expiry Time (hh:mm:ss) Time (in hours, minutes and seconds) in which the learned elected bootstrap router (BSR) expires. IP Address The IP address of the elected BSR.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 10. Click the Add button. The static RP address is added for one or more multicast groups. 11. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure IPv6 MLD Global Settings To configure the IPv6 PIM global settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the IPv6 MLD Routing Interface To configure the IPv6 MLD routing interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Valid values are 1 to 3600. The default value is 125. 10. In the Query Max Response Time field, enter the maximum query response time, in milliseconds, to be advertised in MLDv2 queries on this interface. Valid values are 0 to 65535. The default value is 10000 milliseconds. 11. In the Startup Query Interval field, enter the configured interval in seconds between general queries sent by a querier on startup. The default value is 31.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View IPv6 MLD Routing Interface Statistics To view the IPv6 multicast MLD routing interface statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 174. IPv6 MLD Routing Interface Statistics (continued) Field Description Number of Joins Received The number of times a group membership was added on the selected interface. Number of Groups The current number of membership entries for the selected interface in the cache table. View the IPv6 MLD Groups To view the IPv6 MLD groups: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 175. IPv6 Multicast MLD Groups Field Description Interface The interface for which data is to be displayed. Group IP The address of the MLD members. Last Reporter The IP address of the source of the last membership report received for this multicast group address on the selected interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page with the latest information on the switch, click the Update button. 7. To clear all IPv6 MLD traffic, click the Clear button. The following table describes the nonconfigurable data that is displayed. Table 176. IPv6 Multicast MLD Traffic Field Description Valid MLD Packets Received The number of valid MLD packets received by the router.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Routing> IPv6 Multicast > MLD > Proxy Interface Configuration. 6. In the Interface list, select the interface. 7. In the Admin Mode list, select Enable or Disable. This sets the administrative status of MLD proxy on the selected interface. The default is Disable.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 177. IPv6 Multicast MLD Proxy Interface Configuration (continued) Field Description Version This field is configurable only when MLD proxy interface mode is enabled. Enter the version of MLD to configure on the selected interface. Valid values are 1 to 2. The default version is 3. Version 1 Querier Timeout The older MLD version 1 querier time-out value in seconds.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 178. IPv6 Multicast MLD Proxy Interface Statistics Field Description Proxy Interface The interface on which MLD proxy packets received. Version The version of MLD proxy packets received. Queries Received The number of MLD proxy queries received. Reports Received The number of MLD proxy reports received.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data that is displayed. Table 179. IPv6 Multicast MLD Proxy Membership Field Description Proxy Interface The interface on which the MLD proxy is enabled. Group IP The IPv6 multicast group address. Source Hosts Source addresses that are members of this multicast address.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Source IP field, enter the IP address that identifies the multicast packet source for the entry you are creating. 7. In the Prefix Length field, enter the prefix length to be applied to the Source IPv6 address. 8. In the RPF Neighbor field, enter the IP address of the neighbor router on the path to the source. 9. In the Metric field, enter the link state cost of the path to the multicast source.
8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual QoS Overview In a typical switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Global CoS Settings To configure global CoS settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default value is untrusted. 10. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Map 802.1p Priorities to Queues The 802.1p to Queue Mapping page also displays the Current 802.1p Priority Mapping table. To map 802.1p priorities to queues: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The values in each list represent the traffic class. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position. Before traffic in a lower queue is sent, it must wait for traffic in higher queues to be sent. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure CoS Interface Settings for an Interface You can apply an interface shaping rate to all interfaces or to a specific interface. To configure CoS settings for an interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Interface Trust Mode can be one of the following: • Untrusted • 802.1p • IP DSCP The default value is 802.1p. 9. Use Interface Shaping Rate to specify the maximum bandwidth allowed. This is typically used to shape the outbound transmission rate.This value is controlled independently of any per-queue maximum bandwidth configuration. It is effectively a second-level shaping mechanism. The default value is 0.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply a trust mode or rate to all interfaces. 7. Use the Queue ID menu to select the queue to be configured (platform based). 8. Use Minimum Bandwidth to specify the minimum guaranteed bandwidth allotted to this queue.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure CoS Drop Precedence Settings To configure CoS Drop Precedence settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 11. Use WRED Drop Probability Scale to determine the packet drop probability for the current drop precedence level. The range is 0 to 100. The default is 10. 12. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 180.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Packet processing begins by testing the class match criteria for a packet. A policy is applied to a packet when a class match within that policy is found. DiffServ Wizard Overview The DiffServ wizard enables DiffServ on the switch by creating a traffic class, adding the traffic class to a policy, and then adding the policy to the ports that you select.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select QoS> DiffServ > DiffServ Wizard. 6. Use Traffic Type to define the DiffServ Class. Traffic type options are: VOIP, HTTP, FTP, Telnet, and Every. 7. Ports displays the ports which can be configured to support a DiffServ policy. The DiffServ policy is added to selected ports. 8. Use Enable Policing to add policing to the DiffServ policy.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Basic DiffServ Settings Packets are filtered and processed based on defined criteria. The filtering criteria is defined by a class. The processing is defined by a policy's attributes. Policy attributes can be defined on a per–class instance basis, and it is these attributes that are applied when a match occurs. The configuration process begins with defining one or more match criteria for a class.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the administrative mode for DiffServ: • Enable. Differentiated Services are active. This the default mode. • Disable. The DiffServ configuration is retained and can be changed but it is not active. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 181.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual To configure the global DiffServ mode: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select QoS > DiffServ > Advanced > Diffserv Configuration. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the information displayed in the Status table on the DiffServ Configuration page. Table 182. DiffServ Status Field Description Class Table The number of configured DiffServ classes out of the total allowed on the switch. Class Rule table The number of configured class rules out of the total allowed on the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To create a new class, enter a class name, select the class type, and click the Add button. This field also lists all the existing DiffServ class names, from which one can be selected. The switch supports only the Class Type value All, which means all the various match criteria defined for the class is satisfied for a packet match. All signifies the logical AND of all the match criteria.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The Class Configuration page displays, showing the configuration fields for the class. 10. To configure the class details, complete the fields: • Class Name - The name for the configured DiffServ class. • Class Type - The DiffServ class type. You can select the class type only when you are creating a new class. After you create the class, this field displays the class type, but you cannot change it. 11.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Secondary VLAN. Select this option to require a packet’s VLAN ID to match a secondary VLAN ID or a secondary VLAN ID within a continuous range. If you configure a range, a match occurs if a packet’s secondary VLAN ID is the same as any secondary VLAN ID within the range. After you select this option, use the following fields to configure the secondary VLAN match criteria: - Secondary VLAN ID Start.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Source IP Address. This is a valid source IP address in the dotted-decimal format. • Source Mask. This is a bit mask in IP dotted-decimal format indicating which part(s) of the source IP address to use for matching against packet content. • Source L4 Port. Select this option to require a packet's TCP/UDP source port to match the specified port or the port number within a range of port numbers.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual field in a packet is defined as the high-order three bits of the Service Type octet in the IP header. • IP ToS. Select this option to require the packet's Type of Service (ToS) bits in the IP header to match the specified value. The IP ToS field in a packet is defined as all eight bits of the Service Type octet in the IP header. After you select this option, use the following fields to configure the ToS match criteria: • ToS Bits.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To create a new class, enter a class name, select the class type, and click the Add button. This field also lists all the existing DiffServ class names, from which one can be selected. The switch supports only the Class Type value All, which means all the various match criteria defined for the class is satisfied for a packet match. All signifies the logical AND of all the match criteria.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The Class Configuration page displays, showing the configuration fields for the class. 10. To configure the IPv6 class, complete the fields: • Class Name - The name for the configured DiffServ class. • Class Type - The DiffServ class type. You can specify the class type only when you are creating a new class. After the class is created, this field displays the class type, but you cannot change it. 11.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Match Every - This adds to the specified class definition a match condition whereby all packets are considered to belong to the class. • Reference Class - This lists the class(es) that can be assigned as reference class(es) to the current class. • Protocol Type - This lists the keywords for the Layer 4 protocols from which one can be selected. The list includes 'other' as an option for the remaining values.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure DiffServ Policy You can associate a collection of classes with one or more policy statements. After creating a policy, click the policy link to the Policy page. To configure DiffServ policy: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The policy name is a hyperlink. The Policy Configuration page displays, showing the configuration fields for the policy. 11. Select the Assign Queue to which packets of this policy-class are assigned. This is an integer value in the range 0 to 6. 12. Configure the policy attributes: • Drop - Select the drop radio button. This flag indicates that the policy attribute is defined to drop every inbound packet.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Mark IP DSCP - This lists the keywords for the known DSCP values from which one can be selected. The list includes 'other' as an option for the remaining values. • Simple Policy - Use this attribute to establish the traffic policing style for the specified class. This command uses single data rate and burst size resulting in two outcomes (conform and violate). 13.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 14. If you select Two Rate, you can configure additional fields (same fields as for a simple policy). 15. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable information displayed on the page. Table 185.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to configure. 7. Policy Name - Lists all the policy names from which one can be selected.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use the Search menu to search for DiffServ statistics by interface or member class: • To search by interface, select Interface, enter the interface in unit/slot/port format (for example, 1/0/13), and click the Go button. If the entry exists, the entry is displayed as the first entry, followed by the remaining entries. • To search by member class, select Member Class, enter the member class, and click the Go button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 187. DiffServ Service Statistics (continued) Field Description Offered Packets A count of the total number of packets offered to all class instances in this service policy before their defined DiffServ treatment is applied. This is the overall count per interface, per direction.
9. Manage Device Security 9 You can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS) settings, and authentication lists.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Manage User Accounts and Passwords You can configure user accounts and login passwords. Configure User Accounts By default, two user accounts exist: • admin, with read/write privileges • guest, with read-only privileges By default, the password is blank for both of these accounts. The names are not case-sensitive.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual alphanumeric characters as well as the hyphen (-) and underscore (_) characters. The user name default is not valid. User names once created cannot be changed or modified. 7. Set the Edit Password field to Enable only when you are changing the password. The default value is Disable. 8. In the Password field, enter the password for the account. The characters do not display as they are typed; only asterisks (*) show.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Security> Management Security > Local User > User Password Configuration. 6. In the Password Minimum Length field, type the minimum character length of all new local user passwords. 7. In the Password Aging (days) field, type the maximum time for which the user passwords are valid in days, from the time the password is set.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Security> Management Security > Enable Password. 6. In the Password field, type the password. Passwords are a maximum of 64 alphanumeric characters. 7. In the Confirm Password field, type the password again, to confirm that you entered it correctly. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Console Password field, enter the console password. Passwords are a maximum of 64 alphanumeric characters. 7. In the Confirm Console Password field, type the password again to confirm that you typed it correctly. 8. In the Telnet Password field, type the Telnet password. Passwords are a maximum of 64 alphanumeric characters. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Security > Management Security > RADIUS > Radius Configuration. The Current Server IP Address field is blank if no servers are configured (see Configure a RADIUS Server on page 491). The switch supports up to three configured RADIUS servers. If more than one RADIUS servers is configured, the current server is the primary server.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. In the Timeout Duration field, specify the time-out value, in seconds, for request retransmissions. The valid range is 1–30. The default value is 5. Consider the maximum delay time when you configure RADIUS maximum retransmit and RADIUS time-out. If multiple RADIUS servers are configured, the maximum retransmit value on each is exhausted before the next server is attempted.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure a RADIUS Server To configure a RADIUS server: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the RADIUS server statistics displayed on the page. Table 189. RADIUS statistics Field Description Radius Server The address of the RADIUS server or the name of the RADIUS server for which the statistics are displayed.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure RADIUS Accounting Servers To configure a RADIUS accounting server: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes RADIUS accounting server statistics available on the page. Table 190. RADIUS Accounting Server Statistics Field Description Accounting Server Address The accounting server associated with the statistics. Round Trip Time(secs) The time interval, in hundredths of a second, between the most recent accounting-response and the accounting-request that matched it from this RADIUS accounting server.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Global TACACS Settings You can configure the TACACS settings for communication between the switch and the TACACS server you configure through the inband management port. To configure global TACACS settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Routing loopback interface. The primary IP address of a routing loopback interface is used as the source address. • Service port. The management port source IP is used as the source address. By default VLAN 1 is used as source interface. When the None value is displayed, it means that the configured routing interface has become nonrouting. 9. Click the Apply button. The updated configuration is sent to the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The range is 1–30. 11. Click the Add button. The server is added to the switch. Configure Authentication Lists The switch supports various authentication lists. Configure a Login Authentication List A login list specifies the authentication methods to be used to validate switch or port access for the users associated with the list.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The options are as follows: - Enable. The privileged EXEC password is used for authentication. - Line. The line password is used for authentication. - None. The user cannot be authenticated. - RADIUS. The user's name and password are authenticated using the RADIUS server instead of local server. - TACACS. The user's name and password are authenticated using the TACACS server. - Deny. Authentication always fails. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. In the columns in table header (1, 2, 3, 4, 5, 6), select the method to appear first in the selected authentication enable list. The options are as follows: - Enable. The privileged EXEC password is used for authentication. - Line. The line password is used for authentication. - None. The user cannot be authenticated. - RADIUS. The user's name and password are authenticated using the RADIUS server instead of local server.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the check box for the dot1x list name. 7. Select the method to appear first in the selected authentication login list. The options are as follows: • IAS. The user’s ID and password in internal authentication server database is used for authentication. • Local. The user’s locally stored ID and password are used for authentication. • RADIUS.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Security > Management Security > Authentication List > HTTP Authentication List. 6. Select the check box for the HTTP list name. 7. In the columns in table header (1, 2, 3, 4, 5, 6), select the method to appear first in the selected authentication enable list. The options are as follows: - Enable. The privileged EXEC password is used for authentication. - None.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure an HTTPS Authentication List You can configure an HTTPS list. A login list specifies the authentication methods to validate the switch or port access through HTTPS for the users associated with the list. The default list is httpsList. To configure an HTTPS authentication list: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual - RADIUS. The user's name and password are authenticated using the RADIUS server instead of local server. - TACACS. The user's name and password are authenticated using the TACACS server. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. View Login Sessions To view login sessions: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 191. Login Sessions Field Description Session Time The total session time. Session Type The type of session: Telnet, Serial, or SSH Manage HHTP, HTTPS, and SSH Access You can configure HTTP and Secure HTTP access to the switch’s management interface. Configure HTTP Server Settings To access the switch using a web browser, you must first configure it with IP information (IP address, subnet mask, and default gateway).
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the HTTP Access Disable or Enable radio button. This specifies whether the switch can be accessed from a web browser. If you enable web mode, you can manage the switch from a web browser. The factory default is Enable. 7. In the HTTP Port field, enter the HTTP port number. The valid range is 80 and 1025 to 65535. The default value is 80. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual HTTPS Configuration Secure HTTP enables the transmission of HTTP over an encrypted Secure Sockets Layer (SSL) or Transport Layer Security (TLS) connection. When you manage the switch by using a web interface, Secure HTTP can help ensure that communication between the management system and the switch is protected from eavesdroppers and man-in-the-middle attacks.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. Select the TLS Version 1 Disable or Enable radio button This enables or disables Transport Layer Security version 1.0. The currently configured value is displayed. The default value is Enable. 9. In the HTTPS Port field, type the HTTPS port number. The value must be in the range of 1025 to 65535. Port 443 is the default value. The currently configured value is displayed. 10.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The Certificate Present field displays whether there is a certificate present on the device. 6. Select one of the following radio buttons: • None. There is nothing to be done with respect to certificate management. This is the default selection. • Generate Certificates. Begin generating the certificate files. • Delete Certificates. Delete the corresponding certificate files, if present. 7. Click the Apply button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Security > Access > HTTPS > Certificate Download. 6. In the File Type list, specify the type of file to transfer: • SSL Trusted Root Certificate PEM File.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 12. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure SSH Settings You can view and modify the Secure Shell (SSH) server settings on the device. SSH is a network protocol that enables access to the CLI management interface by using an SSH client on a remote administrative system.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Select the SSH Version 1 Disable or Enable radio button. This enables or disables Protocol Level 1 for SSH. When Enable is selected, the SSH server on the device can accept connections from an SSH client using Protocol Level 1 for SSH (SSH-1). When Disable is selected, the device does not allow connections from clients using the SSH-1 protocol. The currently configured value is displayed. The default value is Enable. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable fields that display on the page. Table 192. SSH Configuration Field Description Current Number of SSH Sessions The number of active SSH sessions between remote SSH clients and the SSH server on the device.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select an RSA Keys Management radio button: • None. This is the default selection. • Generate RSA Keys. Begin generating the RSA host keys. To generate SSH key files SSH must be administratively disabled and there can be no active SSH sessions. • Delete RSA Keys. Delete the corresponding RSA key file, if it is present. 7. Select a DSA Keys Management radio button: • None. This is the default selection. • Generate DSA Keys.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Security > Access > SSH > Host Keys Download. 6. In the File Type list, select the type of file to transfer: • SSH-1 RSA Key File. SSH-1 Rivest-Shamir-Adelman (RSA) key file • SSH-2 RSA Key PEM File. SSH-2 Rivest-Shamir-Adelman (RSA) key file (PEM Encoded) • SSH-2 DSA Key PEM File. SSH-2 Digital Signature Algorithm (DSA) key file (PEM Encoded) 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Note: To download SSH key files SSH must be administratively disabled and there can be no active SSH sessions. Configure Telnet Access You can configure a Telnet authentication list and manage outbound and inbound Telnet. Configure a Telnet Authentication List You can select the Login Authentication List and the Enable Authentication List: • Login Authentication List.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. From the Login Authentication List menu, select which authentication list must be used to log in through Telnet. The default value is networkList. 7. From the Enable Authentication List menu, select which authentication list must be used to log in through Telnet for the privileged EXEC mode. The default value is enableList. 8. Click the Apply button. The updated configuration is sent to the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Security > Access > Telnet. 6. Next to Allow new telnet sessions, select the Disable or Enable radio button. This specifies whether the new inbound Telnet session is enabled or disabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Outbound Telnet You can regulate new outbound Telnet sessions. If Allow New Telnet Sessions is enabled, new outbound Telnet sessions can be established until there are no more sessions available. If Allow New Telnet Sessions is disabled, no new outbound Telnet sessions are established. An established session remains active until the session is ended or an abnormal network error ends the session.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual are established. An established session remains active until the session is ended or an abnormal network error ends the session. 7. In the Session Timeout field, specify how many minutes of inactivity occur on an inbound Telnet session before the session is logged off. You can enter any number from 1 to 160. The factory default is 5 minutes. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Serial Port Login Timeout (minutes) field, specify how many minutes of inactivity occur on a serial port connection before the switch closes the connection. Enter a number between 0 and 160. The factory default is 5. Entering 0 disables the time-out. 7. In the Baud Rate (bps) list, select the default baud rate for the serial port connection. You can choose from 1200, 2400, 4800, 9600, 19200, 38400, 57600, and 115200 baud.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Security > Access > Denial of Service Configuration. 6. In the Denial of Service Min TCP Header Size field, specify the minimum TCP header size allowed. If DoS TCP Fragment is enabled, the switch drops these packets: • First TCP fragments with a TCP payload: IP_Payload_Length - IP_Header_Size < Min_TCP_Header_Size. • Its range is 0 to 255. The default value is 20. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual If ICMPv6 DoS prevention is enabled, the switch drops IPv6 ICMP ping packets with a size greater than the configured maximum ICMPv6 packet size. Its range is 0 to 16376. The default value is 512. 11. Select the Denial of Service First Fragment Disable or Enable radio button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 21. Select the Denial of Service TCP SYN & FIN Disable or Enable radio button. Enabling TCP SYN & FIN DoS prevention causes the switch to drop packets with TCP flags SYN and FIN set. The factory default is Disable. 22. Select the Denial of Service UDP Port Disable or Enable radio button. Enabling UDP Port DoS prevention causes the switch to drop packets with UDP source port equal to UDP destination port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Access Profile Name field, enter the name of the access profile to be added. The maximum length is 32 characters. 7. Take one of the following actions: • To activate an access profile, select the Activate Profile check box. • To deactivate an access profile, select the Deactivate Profile check box. • To remove an access profile, select the Remove Profile check box.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Access Rule Settings for the Access Control Profile After you set up an access control profile, you can configure and apply an access control rules. However, to do this, the access control profile must be in a deactivated state. AFter you added the access control rule, you can reactivate the access control profile. To configure the access rule settings: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The rules are validated against the incoming management request in ascending order of their priorities. If a rule matches, the action is performed and subsequent rules below that are ignored. For example, if a source IP 10.10.10.10 is configured with priority 1 to permit, and source IP 10.10.10.10 is configured with priority 2 to deny, then access is permitted if the profile is active, and the second rule is ignored. 11.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Security > Port Authentication > Basic > 802.1X Configuration. 6. Select the Administrative Mode Disable or Enable radio button. This enables or disables 802.1X administrative mode on the switch. • Enable. Port-based authentication is permitted on the switch. If 802.1X is enabled, authentication is performed by a RADIUS server. This means the primary authentication method must be RADIUS.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure 802.1X Settings You can enable or disable 802.1X access control on the system. To configure 802.1X settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 10. Use Monitor Mode to select Disable or Enable. The default value is Disable. The feature monitors the dot1x authentication process and helps in diagnosis of the authentication failure cases. 11. Use Users to select the user name for the selected login list for 802.1x port security. 12. Use Login to select the login list to apply to the specified user. All configured login lists are displayed.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. For the selected ports, specify the following settings: • Control Mode. Select an option for the control mode. The control mode is set only if the link status of the port is Link Up. The options are as follows: - Force unauthorized. The authenticator port access entity (PAE) unconditionally sets the controlled port to unauthorized. - Force authorized.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual change the configuration until the Apply button is clicked. Enter 0 to clear the unauthenticated VLAN ID on the interface. • Supplicant Timeout. Enter the supplicant time-out for the selected port. The supplicant time-out is the value, in seconds, of the timer used by the authenticator state machine on this port to time-out the supplicant. The supplicant time-out must be in the range of 1 to 65535. The default value is 30.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual You can click this button only if the control mode is auto. If the button is not available, it is grayed out. Once you click this button, the action is immediate. You do not need to click the Apply button for the action to occur. View the Port Summary You can view information about the port access control settings on a specific port. To view the port summary: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 196. Port Summary (continued) Field Description Operating Control Mode The control mode under which the port is actually operating. Possible values are as follows: • ForceUnauthorized • ForceAuthorized • Auto • MAC Based • N/A: If the port is in detached state, it cannot participate in port access control.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 196. Port Summary (continued) Field Description VLAN Assigned The VLAN ID assigned to the selected interface by the authenticator. This field is displayed only when the port control mode of the selected interface is not MAC-based. This field is not configurable. VLAN Assigned Reason The reason for the VLAN ID assigned by the authenticator to the selected interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Security > Port Authentication > Advanced > Client Summary. The following table describes the fields on the Client Summary page. Table 197. Client Summary Field Description Port The port to be displayed. User Name The user name representing the identity of the supplicant device. Supplicant Mac Address The supplicant's device MAC address. Session Time The time since the supplicant as logged in seconds.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Security > Traffic Control > MAC Filter. This is the list of MAC address and VLAN ID pairings for all configured filters. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 10. Use Source Port Members to list the ports to be included in the inbound filter. If a packet with the MAC address and VLAN ID you selected is received on a port that is not in the list, it is dropped. 11. Use Destination Port Members to list the ports to be included in the outbound filter. Packets with the MAC address and VLAN ID you selected are transmitted only from ports that are in the list.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Port Security and Private Groups You can configure port security settings and set up port private groups. Configure the Global Port Security Mode You can lock one or more ports on the system. When a port is locked, only packets with an allowable source MAC addresses can be forwarded. All other packets are discarded. To configure the global port security mode: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 199. Port Security Violations Field Description Port The physical interface. Last Violation MAC The source MAC address of the last packet that was discarded at a locked port. VLAN ID The VLAN ID corresponding to the last violation MAC address. Configure a Port Security Interface A MAC address can be defined as allowable by one of two methods: dynamically or statically.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select a port: • In the Go To Port field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Port column, select the check box for the port that you want to configure, select multiple check boxes to apply the same setting to all selected ports, or select the check box in the table heading to apply the same settings to all ports. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Security > Traffic Control > Port Security > Dynamic MAC Address. 6. Select the Convert Dynamic Address to Static check box to convert a dynamically learned MAC address to a statically locked address.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Static MAC Addresses To configure a static MAC address: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Security > Traffic Control > Private Group > Private Group Configuration. 6. In the Group Name field, enter the private group name. The name can be up to 24 bytes of non-blank characters. 7. In the optional Group ID field, specify the private group identifier. The range of group ID is 1 to 192. 8. In the Group Mode list, select the mode of private group.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Group ID list, select the group ID. 7. Use Port List to add the ports you selected to this private group. The port list displays when at least one group is configured. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable information displayed on the page. Table 201.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Protect Ports If a port is configured as protected, it does not forward traffic to any other protected port on the switch, but it does forward traffic to unprotected ports. You can configure the ports as protected or unprotected. You need read-write access privileges to modify the configuration. To configure protected ports: 1. Launch a web browser. 2. Enter http:// in the web browser address field.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 10. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Set Up Private VLANs A private VLAN contains switch ports that cannot communicate with each other, but can access another network. These ports are called private ports. Each private VLAN contains one or more private ports and a single uplink port or uplink aggregation group.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Private VLAN Association Settings To configure private VLAN association: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure the Private VLAN Port Mode To configure the private VLAN port mode: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure a Private VLAN Host Interface To configure a private VLAN host interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure a Private VLAN Promiscuous Interface To configure a private VLAN promiscuous interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 204. Private VLAN Promiscuous Interface Configuration Field Description Interface Select the physical or LAG interface Operational VLAN(s) The operational VLANs. Manage the Storm Control Settings A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the storm control settings: • Select the Broadcast Storm Control All Disable or Enable radio button. This enables or disables Broadcast Storm Recovery mode on all ports. When you specify Enable and the broadcast traffic on any Ethernet port exceeds the configured threshold, the switch blocks (discards) the broadcast traffic. The factory default is Enable.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select a port: • In the Go To Port field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Port column, select the check box for the port that you want to configure, select multiple check boxes to apply the same setting to all selected ports, or select the check box in the table heading to apply the same settings to all ports. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure DHCP Snooping You can configure DHCP snooping global and interface settings. Configure DHCP Snooping Global Settings To configure DHCP snooping global settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 10. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure a DHCP Snooping Interface To configure a DHCP snooping interface: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. Use Rate Limit (pps) to specify rate limit value for DHCP snooping purposes. If the incoming rate of DHCP packets exceeds the value of this for consecutive burst interval seconds, the port is shut down. If this value is N/A, then burst interval has no meaning, hence it is disabled. The default value is N/A. It can be set to value –1, which means N/A. The range of rate limit is 0 to 300. 10.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual b. In the MAC Address field, specify the MAC address that must be added for the binding entry. This is the key to the binding database. c. From the VLAN ID menu, select the VLAN for the binding rule. The range of the VLAN ID is 1 to 4093. d. In the IP Address field, specify a valid IP address for the binding rule. e. Click the Add button. The DHCP snooping binding entry is added into the database.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the fields of the Dynamic Binding Configuration table. Table 205. Dynamic DHCP Bindings Field Description Interface The interface on which the dynamic binding was learned. MAC Address The learned MAC address for the binding. VLAN ID The VLAN ID that corresponds to the binding. IP Address The IP address that corresponds to the binding. Lease Time The remaining lease time for the binding.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual b. In the Remote File Name field, enter the remote file name to store the database. 8. In the Write Delay field, enter the maximum write time to write the database into local or remote. The range is 15 to 86400. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. View and Clear the DHCP Snooping Statistics To view and clear the DHCP snooping statistics: 1.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the DHCP snooping statistics. Table 206. DHCP Snooping Statistics Field Description Interface The untrusted and snooping-enabled interface for which statistics are to be displayed. MAC Verify Failures Number of packets that were dropped by DHCP snooping because there is no matching DHCP snooping binding entry found.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the port that you want to configure, select multiple check boxes to apply the same setting to all selected interfaces, or select the check box in the table heading to apply the same settings to all interfaces.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure IP Source Guard Binding Settings To configure IP source guard static binding settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 207. IP Source Guard Dynamic Binding Configuration (continued) Field Description IP Address Displays valid IP address for the binding entry. Filter Type Filter type used on the interface. One is source IP address filter type, and the other is source IP address and MAC address filter type. Configure IPv6 Source Guard Interface Settings To configure IPv6 source guard Interface settings: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual If IPv6SG port security is enabled, then the packets are not forwarded if the sender MAC address is not in FDB table and it is not in the DHCP snooping binding database. To enforce filtering based on MAC address other required configurations are as follows: • Enable port-security globally. • Enable port-security on the interface level. IPv6SG port security cannot be enabled if IPv6SG is disabled. The factory default is Disable.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. In the IPv6 Address field, specify valid IP address for the binding rule. 10. Click the Add button. The IPv6SG static binding entry is added to the database. The following table describes the nonconfigurable IPv6 Source Guard dynamic binding configuration information that is displayed. Table 208. IPv6 Source Guard Dynamic Binding Configuration Field Description Interface The interface to add a binding into the IPSG database.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the Validate Source MAC Disable or Enable radio button. This specifies the DAI source MAC validation mode for the switch. If you select Enable, sender MAC validation for the ARP packets is enabled. The factory default is Disable. 7. Select the Validate Destination MAC Disable or Enable radio button This specifies the DAI destination MAC validation mode for the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use the VLAN ID check box or boxes to select one ore more DAI-capable VLANs. 7. In the Admin Mode list, select Enable or Disable. This indicates whether the dynamic ARP inspection is enabled on this VLAN. If this is set to Enable, then dynamic ARP inspection is enabled. If this is set to Disable, then dynamic ARP inspection is disabled. The default is Disable. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Security > Control > Dynamic ARP Inspection > DAI Interface Configuration. 6. Use one of the following methods to select an interface: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure a DAI ACL You can configure a dynamic ARP inspection (DAI) ACL. To configure a DAI ACL: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Security > Control > Dynamic ARP Inspection > DAI ACL Rule Configuration. 6. From the ACL Name menu, select the DAI ARP ACL for which you want to configure the rule. 7. In the Source IP Address field, enter the source IP address that must be used as a match for the rule. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page with the latest information on the switch, click the Update button. 7. To clear the DAI statistics, click the Clear button. The following table describes the nonconfigurable information displayed on the page. Table 209. DAI Statistics Field Description VLAN The enabled VLAN ID for which statistics are to be displayed.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Set Up Captive Portals The captive portal feature allows you to prevent clients from accessing the network until user verification is established. You can configure captive portal verification to allow access for both guest and authenticated users. Authenticated users must be validated against a database of authorized captive portal users before access is granted.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the Admin Mode Disable or Enable radio button. This sets the administrative mode of the captive portal feature. By default CP is disabled. 7. In the Additional HTTP Port field, enter a port number between 0–65535 (excluding port 80). HTTP traffic uses standard port 80, but you can use the Additional HTTP Port field to configure an additional port for HTTP traffic. Enter 0 to unconfigure the additional HTTP port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 210. Captive Portal Global Configuration (continued) Field Description Local Supported Users Shows the number of entries that the local user database supports. Configured Local Users The number of local users configured. Authenticated Users Shows the number of users currently authenticated to all captive portal instances on this switch. Add a Captive Portal Instance By default, the switch has one captive portal.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. In the Protocol field, select either HTTP or HTTPS as the captive portal instances used for communication with clients during the verification process: • HTTP does not use encryption during verification. • HTTPS uses the Secure Sockets Layer (SSL), which requires a certificate to provide encryption. The certificate is presented to the user at connection time. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 18. In the Foreground Color field, specify the value of the foreground color. For example, #999999. 19. In the Separator Color field, specify the value of the separator color. For example, #46008F. 20. In the Max Bandwidth Down field, specify the maximum rate at which a client can receive data from the network. The rate is in bytes per seconds. 0 indicates the limit is not enforced. The range is 0 to 536870911. 21.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Security > Control > Captive Portal > CP Binding Configuration. 6. Select the CP ID from the list. The ID is a unique value that identifies the captive portal instance. This value is automatically assigned to the instance when it is created and cannot be changed. 7. In the CP Name field, specify the name of the configuration.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To refresh the page with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 211. Captive Portal Binding Table Field Description Interface The interface. CP ID The ID of the captive portal instance. Operational Status Indicates whether the portal is active on the specified interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Select the Group ID from the list. 7. In the Group Name field, specify the name of the user group. The name can contain from 1 to 31 alphanumeric characters. 8. Click the Add button. The group is added. Configure Captive Portal User Settings To configure captive portal user settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual To assign a user to more than one group, press the Ctrl key and click each group. New users are assigned to the 1-Default user group by default. 12. In the Session Timeout field, enter the number of seconds a user is permitted to remain connected to the network. Once the Session Timeout value is reached, the user is logged out automatically. 13.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Security > Control > Captive Portal > CP Trap Flags. 6. Select the CP Trap Mode Disable or Enable radio button. This sets the option to enable or disable the captive portal trap mode. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View and Clear the Captive Portal Client You can view and clear information about the traffic a client sent or received. To view and clear the captive portal client: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 212. Captive Portal Client (continued) Field Description Packets Received Total packets the client received. Packets Transmitted Total packets the client transmitted. Set Up and Manage Access Control Lists Access control lists (ACLs) ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Note: The steps in this procedure describe creating an ACL based on the destination MAC address. If you select a different ACL type, for example, ACL based on a source IPv4, then what is shown on this page varies, depending on the current step in the rule configuration process. 6. Use ACL Type to specify the ACL type you are using to create the ACL. You can select one type from 10 optional types: • ACL Based on Destination MAC.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • ACL Based on Source IPv4 L4 Port. To create an ACL based on the source IPv4 Layer 4 port number. • ACL Based on Destination IPv6 L4 Port. To create an ACL based on the destination IPv6 Layer 4 port number. • ACL Based on Source IPv6 L4 Port. To create an ACL based on the source IPv6 Layer 4 port number. Note: For L4 port options, two rules are created: one for TCP and one for UDP. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Rule ID to enter a whole number in the range of 1 to 1023 that is used to identify the rule. 7. Use Action to specify what action is taken if a packet matches the rule's criteria. The choices are Permit or Deny. 8. In the Match Every list, select either True or False: • True signifies that all packets must match the selected ACL and rule and are either permitted or denied.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Traffic rule applies either to inbound traffic only or to outbound traffic only. 13. From the Unit 1 and LAG switch figures onscreen, select the ports and LAGs to which the rule must apply. If a port or LAG is not selected, click the port or LAG to select it. If a port or LAG is selected, click the port or LAG to clear it again. 14. Click the Add button. The rule is added to the ACL based on the destination MAC address. 15.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual To configure a MAC ACL: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Security > ACL > Basic > MAC ACL.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure MAC ACL Rules You can define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. A default deny all rule is the last rule of every list. To configure MAC ACL rules: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 12. Use Match Every to specify an indication to match every Layer 2 MAC packet. Valid values are as follows: • True. Signifies that every packet is considered to match the selected ACL rule. • False. Signifies that it is not mandatory for every packet to match the selected ACL rule. 13. Use CoS to specify the 802.1p user priority to compare against an Ethernet frame. Valid range of values is 0 to 7. 14.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 19. Use Source MAC Mask to specify the Source MAC address mask specifying which bits in the Source MAC to compare against an Ethernet frame. Valid format is xx:xx:xx:xx:xx:xx. 20. Use VLAN to specify the VLAN ID to compare against an Ethernet frame. Valid range of values is 1 to 4095. Either VLAN range or VLAN can be configured. 21. Use Logging to enable or disable logging.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Security > ACL > Basic > MAC Binding Configuration. 6. Select a MAC ACL from the ACL ID list. You can select one and bind it to the interfaces. The packet filtering Direction for ACL is Inbound, which means the MAC ACL rules are applied to traffic entering the port. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the information that is displayed in the Interface Binding Status section. Table 213. Interface Binding Status Field Description Interface The interface of the ACL assigned. Direction Displays selected packet filtering direction for ACL. ACL Type The type of ACL assigned to selected interface and direction.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the information displayed in the MAC Binding Table. Table 214. MAC Binding Table Field Description Interface The interface of the ACL assigned. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to selected interface and direction. ACL ID The ACL name identifying the ACL assigned to selected interface and direction.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The IP ACL page shows the current size of the ACL table and the maximum size of the ACL table. The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs. The maximum size is 100. The Current Number of ACL field displays the current number of the all ACLs configured on the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Security > ACL > Advanced > IP Rules. If no rules exists, the Basic ACL Rule Table shows the message No rules have been configured for this ACL. If one or more rule exists for the ACL, the rules display in the Basic ACL Rule Table. 6. From the ACL ID menu, select the IP ACL for which you want to add or a change a rule.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Logging. When set to Enable, logging is enabled for this ACL rule (subject to resource availability in the device). If the access list trap flag is also enabled, this causes periodic traps to be generated indicating the number of times this rule was hit during the current report interval. A fixed 5-minute report interval is used for the entire system.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure Rules for an Extended IP ACL You can view the rules for the IP access control lists that you created. What is shown on this page varies depending on the step in the rule configuration process. Note: An implicit deny all default rule exists as the last rule of an ACL list.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. Configure the following options for the rule: • Sequence Number. Enter a whole number in the range of 1 to 2147483647. This number is used to identify the rule. An extended IP ACL can contain up to 1023 rules. • Action. Specify what action is taken if a packet matches the rule’s criteria. The choice is Permit or Deny. • Logging.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual True signifies that all packets must match the selected IP ACL and rule and are either permitted or denied. In this case, because all packets match the rule, the option of configuring other match criteria is not available. To configure specific match criteria for the rule, remove the rule and recreate it, or select False from the Match Every menu. • Protocol Type.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The relevant matching conditions for L4 port numbers are as follows: - • Equal. IP ACL rule matches only if the Layer 4 source port number is equal to the specified port number or port key. • Less Than. IP ACL rule matches if the Layer 4 source port number is less than the specified port number or port key. • Greater Than.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Each of these values translates into its equivalent port number, which is used as both the start and end of the port range. Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The relevant matching conditions for L4 port numbers are as follows: - • Equal.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The IPv4 ICMP message types are: echo, echo-reply, host-redirect, mobile-redirect, net-redirect, net-unreachable, redirect, packet-too-big, port-unreachable, source-quench, router-solicitation, router-advertisement, time-exceeded, ttl-exceeded, and unreachable. • Fragments.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure an IPv6 ACL An IPv6 ACL consists of a set of rules that are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (permitted or denied) is taken, and the additional rules are not checked for a match. You must specify the interfaces to which an IP ACL applies and select whether the IP ACL applies to inbound or outbound traffic. To configure an IPv6 ACL: 1.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 215. IPv6 ACL Field Description Current Number of ACL The current number of the IP ACLs configured on the switch. Maximum ACL The maximum number of IP ACLs that can be configured on the switch, depending on the hardware. Rules The number of the rules associated with the IP ACL. Type The type is IPv6 ACL.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Take one of the following actions: • To add an IPv6 ACL rule, click the Add button. • To change an existing rule, click the rule hyperlink in the Sequence Number column of the IPv6 ACL Rule Table. 8. Configure the following options for the rule: • Sequence Number. Enter a whole number in the range of 1 to 2147483647. This number is used to identify the rule. An IPv6 ACL can contain up to 1023 rules. • Action.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual True signifies that all packets must match the selected IPv6 ACL and rule and are either permitted or denied. In this case, because all packets match the rule, the option of configuring other match criteria is not available. To configure specific match criteria for the rule, remove the rule and recreate it, or select False from the Match Every menu. • • Protocol Type.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The relevant matching conditions for L4 port numbers are as follows:\ - • Equal. The IPv6 ACL rule matches only if the Layer 4 source port number is equal to the specified port number or port key. • Less Than.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The relevant matching conditions for L4 port numbers are as follows: - • Equal. The IPv6 ACL rule matches only if the Layer 4 destination port number is equal to the specified port number or port key. • Less Than.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Fragments. Either select Enable to allow initial fragments (that is, the fragment bit is asserted) or leave the default setting at Disable to prevent initial fragments from being used. This option is not valid for rules that match L4 information such as TCP port number, because that information is carried in the initial packet. • Flow Label.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Security > ACL > Advanced > IP Binding Configuration. 6. From the ACL ID menu, select an IP ACL. Note: Binding ACLs to interface fails when the system has no resources to bind a new ACL. IPv4 ACLs and IPv6 ACLs cannot be bound at the same time to an interface. 7. Select the packet filtering Direction for ACL. Valid directions are Inbound or Outbound.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable information displayed on the page. Table 216. IP Binding Configuration Field Description Interface Displays the selected interface. Direction Displays the selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the information displayed in the IP ACL Binding Table. Table 217. IP ACL Binding Table Field Description Interface Displays the selected interface. Direction Displays the selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual the currently attached ACL using that sequence number. If you do not specify a sequence number (the value is 0), a sequence number that is one greater than the highest sequence number currently in use for the VLAN ID and selected direction is used. The valid range is 1 to 4294967295. 9. From the ACL Type menu, select the type of ACL. Valid ACL types include IP ACL, MAC ACL, and IPv6 ACL. 10.
10.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View Port and EAP Packet Statistics You can view port statistics, including detailed statistics, and Extensible Authentication Protocol (EAP) packets statistics. View and Clear Port Statistics You can view a summary of per-port traffic statistics on the switch and clear the statistics. To view and clear port statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the per-port statistics displayed on the page. Table 218. Port Statistics Field Description Interface This object indicates the interface of the interface table entry associated with this port on an adapter. Total Packets Received Without Errors The total number of packets received that were without errors.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use a button at the bottom of the page to perform one of the following actions: • To clear all the counters, click the Clear button. This resets all statistics for this port to the default values. • To refresh the page with the latest information on the switch, click the Update button. The following table describes the detailed port information displayed on the page.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 219. Port Detailed Statistics (continued) Field Description Port Channel ID If the port is a member of a port channel, the port channel's interface ID and name are shown. Otherwise, Disable is shown. Port Role Each MST bridge port that is enabled is assigned a port tole for each spanning tree. The port role is one of the following values: Root, Designated, Alternate, Backup, Master, or Disabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 219. Port Detailed Statistics (continued) Field Description Packets RX and TX 256-511 Octets The total number of packets (including bad packets) received or transmitted that were between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 219. Port Detailed Statistics (continued) Field Description Packets Received > 1518 Octets The total number of packets received that were longer than 1518 octets (excluding framing bits, but including FCS octets) and were otherwise well formed. Total Packets Received Without Errors The total number of packets received that were without errors.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 219. Port Detailed Statistics (continued) Field Description 802.3x Pause Frames Received A count of MAC control frames received on this interface with an opcode indicating the PAUSE operation. This counter does not increment when the interface is operating in half-duplex mode. Unacceptable Frame Type The number of frames discarded from this port due to being an unacceptable frame type.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 219. Port Detailed Statistics (continued) Field Description Broadcast Packets Transmitted The total number of packets that higher-level protocols requested be transmitted to the broadcast address, including those that were discarded or not sent. Total Transmit Errors The sum of single, multiple, and excessive collisions.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual View EAP Statistics You can display information about EAP packets received on a specific port. To view EAP statistics: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 220. EAP Statistics Field Description EAPOL Frames Transmitted This displays the number of EAPOL frames of any type that were transmitted by this authenticator. EAPOL Start Frames Received This displays the number of EAPOL start frames that were received by this authenticator. EAPOL Logoff Frames Received This displays the number of EAPOL logoff frames that were received by this authenticator.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Monitoring > Ports > Cable Test. 6. Use one of the following methods to select a port: • In the Go To Port field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Port column, select the check box for the port that you want to test. 7. Click the Apply button. A cable test is performed on the selected interface. The cable test might take up to two seconds to complete.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Manage the Buffered, Command, and Console Logs The switch generates messages in response to events, faults, or errors occurring on the platform as well as changes in configuration or other occurrences. These messages are stored locally and can be forwarded to one or more centralized points of collection for monitoring purposes or long-term archival storage (see Configure the Syslog and Syslog Host Settings on page 631).
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual To configure the buffered logs settings: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Monitoring > Logs > Buffered Logs. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Message Log Format This topic applies to the format of all logged messages that are displayed for the message log, persistent log, or console log. Messages logged to a collector or relay through syslog use an identical format: • <15>Aug 24 05:34:05 0.0.0.0-1 MSTP[2110]: mspt_api.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use Admin Mode to enable/disable the operation of the CLI command logging by selecting the corresponding radio button. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Enable or Disable Console Logging This allows logging to any serial device attached to the host. To enable or disable console logging: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure the Syslog and Syslog Host Settings You can let the switch filter the messages that are forwarded, based on severity and generating component. You can also configure the syslog host settings. Configure the Syslog Settings To configure the syslog settings: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual This enables or disables logging to configured syslog hosts. When the Admin Status is disabled, the device does not relay logs to syslog hosts, and no messages are sent to any collectors or relays. When the syslog Admin Status is enabled, messages are sent to configured collectors or relays using the values configured for each collector or relay. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Monitoring > Logs > Syslog Configuration. 6. In the Host Configuration section, configure the following settings: • From the IP Address Type menu, select the address type of host. - IPv4 - IPv6 - DNS • In the Host Address field, specify the address of the host configured for the syslog. • In the Port field, specify the port on the host to which syslog messages are sent. The default port is 514.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the nonconfigurable data. Table 222. Syslog Configuration Field Description Messages Received The number of messages received by the log process. This includes messages that are dropped or ignored. Messages Relayed The count of syslog messages relayed. Messages Ignored The count of syslog messages ignored. View and Clear the Trap Logs You can view and clear the entries in the trap log.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The following table describes the Trap Log information displayed on the page. Table 223. Trap Logs Field Description Number of Traps Since Last Reset The number of traps that occurred since the switch last rebooted. Trap Log Capacity The maximum number of traps stored in the log. If the number of traps exceeds the capacity, the entries overwrite the oldest entries.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. To clear the messages from the Event Log, click the Clear button. The following table describes the event log information displayed on the page. Table 224. Event Logs Field Description Entry The sequence number of the event. Type The type of the event. File Name The file in which the event originated. Line The line number of the event. Task Id The task ID of the event. Code The event code.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Monitoring > Mirroring > Multiple Port Mirroring. 6. Select the number of the port mirroring session ID from the Session ID list. The number of sessions allowed is platform specific. 7. Select the Administrative Mode for the selected port mirroring session using the True (enabled) or False (disabled) radio button. Select the True option to enable Admin mode for the selected session.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 11. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure The Port Mirroring Source Interface Note: If an interface participates in a VLAN and is a LAG member, the VLAN cannot be assigned as a source VLAN for a monitor session.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Source Interface Configuration section, select which interfaces are displayed on the page: • Select Unit ID to display the physical ports of the selected unit. • Select LAG to display a list of LAGs only. • Select CPU to display a list of CPUs only. • Select VLANs to display a list of available VLANs. • Select All to display a list of all physical ports, LAG, CPU, and VLANs. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Manage an RSPAN VLAN You can configure the VLAN to use the remote switched port analyzer (RSPAN) VLAN. RSPAN allows you to mirror traffic from multiple source ports (or from all ports that are members of a VLAN) from different network devices and send the mirrored traffic to a destination port (a probe port connected to a network analyzer) on a remote device.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure an RSPAN Source Switch To configure an RSPAN source switch: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Possible values are as follows: • None. • IP ACL. Configure IP ACL. • MAC ACL. Configure MAC ACL. 11. Enter the Filter Name, if a filter is configured for the session. 12. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure an RSPAN Source Interface To configure an RSPAN source interface: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to display available interfaces on the page: • Select a Unit ID (1, 2, 3) to display a list of physical ports for the selected unit. • Select LAG to display LAGs only. • Select CPU to display CPUs only. • Select VLAN to display a list of available VLAN IDs. • Select All to display all physical ports, LAGs, CPUs, and VLANs. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. From the Session ID list, select the session ID. 7. Select the Admin Mode True (enabled) or False (disabled) radio button for the selected session. When a particular session is enabled, any traffic entering or leaving the source ports of the session is copied (mirrored) onto the corresponding destination port or a remote switched port analyzer (RSPAN) VLAN. By default, the Admin mode is disabled. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The sFlow Agent uses two forms of sampling: statistical packet-based sampling of switched or routed Packet Flows, and time-based sampling of counters. sFlow Agent Summary Packet Flow Sampling and Counter Sampling are performed by sFlow Instances associated with individual Data Sources within the sFlow Agent. Packet Flow Sampling and Counter Sampling are designed as part of an integrated system.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Source Interface list, select the management interface that is used for sFlow Agent. Possible values are as follows: • None • Routing interface • Routing VLAN • Routing loopback interface • Tunnel interface • Service port By default, VLAN 1 is used as the source interface. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. In the Source Interface list, select the management interface to be used for sFlow Agent. Possible values are as follows: • None • Routing interface • Routing VLAN • Routing loopback interface • Tunnel interface • Service port By default, VLAN 1 is used as the source interface. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Configure an sFlow Receiver Use the sFlow Receiver Configuration page to configure the sFlow Receiver. To configure an sFlow receiver: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Sampling is not stopped until the No Timeout selected entry is True. The default value is False. 10. In the Maximum Datagram Size field, specify the maximum number of data bytes that can be sent in a single sample datagram. Set this value to avoid fragmentation of the sFlow datagrams. The default value is 1400. The allowed range is 200 to 12188. 11. In the Receiver Address field, specify the IP address of the sFlow collector.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Use one of the following methods to select an interface for the flow poller and sampler: • In the Go To Interface field, enter the interface in the unit/slot/port format and click on the Go button. • Next to the Interface column, select the check box for the interface that you want to use. This agent supports physical ports only. 7. The Poller Receiver Index is the sFlow Receiver associated with this counter poller.
11.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Save the Configuration When you save the configuration, changes that you made are retained by the switch when it is rebooted. You can manually save the configuration or you can set up autosave. To save the configuration: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Maintenance > Save Config > Auto Install Configuration. The Autoinstall State field displays the current status of the Autoinstall process. 6. From the AutoInstall Mode menu, select the start/stop auto install mode on the switch. 7. From the AutoInstall Persistent Mode menu, enable or disable the AutoInstall persistent mode. 8. From the AutoSave Mode menu, select Enabled or Disabled.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Maintenance > Reset > Factory Default. 6. Select the check box. 7. Click the Apply button. A confirmation pop-up window opens. 8. Click Yes to confirm. All configuration parameters are reset to their factory default values. All changes you made are, even if you issued a save. Reset All User Passwords to Their Default Settings To reset all user passwords to their default settings: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Upload or Export a File From the Switch You can upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to the TFTP server. Upload a File to the TFTP Server To upload a file from the switch to the TFTP server: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Backup Configuration. Specify Backup Configuration in text mode to retrieve the stored backup configuration. • CPU Packets Capture File. Specify CPU Packets Capture File to retrieve the stored captured CPU packets. • Factory Default Configuration. Specify Factory Default Configuration in text mode to retrieve the stored factory default configuration. The factory default is CLI Banner. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual HTTP File Upload To use HTTP file upload: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Maintenance > Export > HTTP File Export. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Upload a File from the Switch to a USB Device To use upload a file from the switch to a USB device: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual To download a file: 1. Launch a web browser. 2. Enter http:// in the web browser address field. The login window opens. 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Maintenance > Upgrade > File Upgrade. 6.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Use SSL DH Weak Encryption Parameter PEM File. Select this option to transfer an SSL Diffie-Hellman Weak Encryption Parameter File (PEM Encoded) to the device. • Use SSL DH Strong Encryption Parameter PEM File. Select this option to transfer an SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded) to the device. • Script File. Select this option to transfer a text-based configuration script file to the device.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 12. Use Server Address to enter the IP address of the TFTP server in accordance with the format indicated by the server address type, for example an IP address in the x.x.x.x format. The factory default is the IPv4 address 0.0.0.0. 13. Use Remote File Path to enter the path of the file to download. The file path cannot include the following symbols: ' \:*?”<>| '. Up to 160 characters can be entered. The factory default is blank. 14.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Maintenance > Upgrade > HTTP File Upgrade. 6. Use File Type to specify what type of file to transfer: • Software. Software code to upgrade the operational flash. • Text Configuration.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 9. Click the Apply button. The download begins. The Download Status field displays the status during transfer file to the switch. Note: After a file transfer is started, wait until the page refreshes. When the page refreshes, the Select File option is blanked out. This indicates that the file transfer is done. Download a File from a USB Device To download a file from a USB device: 1. Launch a web browser. 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 8. Use the File Path field to give a path for the file to download. You can enter up to 146 characters. The default is blank. 9. Use USB File to give a name along with path for the file to download. You can enter up to 32 characters. The factory default is blank. 10. Click the Apply button. The download begins. The Download Status field displays the status of the file transfer to the switch.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 7. Use Switch Member to select the destination unit to which you are going to copy from the supervisor. 8. Use Destination Image to select the image1 or image2 as the destination image. 9. Click the Apply button. The image is copied. Configure Dual Image Settings The Dual Image feature allows the switch to retain two images in permanent storage.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Note: After activating an image, you must perform a system reset of the switch to run the new image. The following table describes the nonconfigurable information displayed on the page. Table 227. Dual Image Configuration Field Description Image Name This displays the image name for the selected unit. Active Image The current active image of the selected unit. Version The version of the image1 code file.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 5. Select Maintenance > Troubleshooting > Ping IPv4. 6. Use IP Address/Host Name to enter the IP address or host name of the station for the switch to ping. The initial value is blank. 7. In the Count field, enter the number of echo requests to send. The default value is 3. The range is 1 to 15. 8. Enter the Interval between ping packets in seconds. The default value is 3 seconds. The range is 1 to 60. 9.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Ping IPv6 This page is used to send a ping request to a specified host name or IPv6 address. You can use this to check whether the switch can communicate with a particular IPv6 station. When you click the Apply button, the switch sends a specified number of ping requests and the results are displayed below the configurable data. The output displays the following: Send count=n, Receive count=n from (IPv6 Address).
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The range is 1 to 15. The default value is 3. 9. Enter the Interval in seconds between ping packets. The range is 1 to 60. The default value is 3. 10. Use Datagram Size to enter the datagram size. The valid range is 0 to 13000. The default value is 0 bytes. 11. Enter the Source IP address or interface to use when sending the echo request packets. If the source is not required, select None as the source option.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 3. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. 4. Click the Login button. The System Information page displays. 5. Select Maintenance > Troubleshooting > Traceroute IPv4. 6. Use IP Address/Hostname to enter the IP address or host name of the station to which you want to discover a path. The default value is blank. 7.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default value is 33434. The range is 1- 65535. 13. Enter the Size of the probe packets. The default value is 0. The range is 0 to 39936. 14. Enter the Source IP address or interface to use when sending the echo request packets. If source is not required, select None as the source option. Possible values are as follows: • None. The source address of the ping packet would be the address of the default outgoing interface.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. Click the Login button. The System Information page displays. 5. Select Maintenance > Troubleshooting > Traceroute IPv6. 6. In the IPv6 Address/Hostname field, enter the IPv6 address or host name of the station to which you want the switch to discover a path. The initial value is blank. The IPv6 address or host name you enter is not retained across a power cycle. 7. Enter the Probes Per Hop. The default value is 3.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The default value is 33434. The range is 1- 65535. The port you enter is not retained across a power cycle. 13. Enter the Size of the probe packets. The default value is 0. The range is 0 to 39936. The size you enter is not retained across a power cycle. 14. Enter the Source IP address or interface to use when sending the echo request packets. If source is not required, select None as the source option.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. Next to RPCAP USB, select the Enable radio button. 7. From the Capture Mode menu, select the CPU traffic type: • All. Capture all traffic. This option is the default setting. • TX. Capture transmitted traffic only. • RX. Capture received traffic only. 8. In the File Name field, enter the name of the USB file. The file name cannot include the following symbols: '\/:*?”<>|'.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The System Information page displays. 5. Select Maintenance > Troubleshooting > Full Memory Dump. 6. From the Protocol menu, select the protocol used to store the core dump file. Possible values are as follows: • None. Disable core dump. • TFTP. Set TFTP protocol. • NFS. Set NFS protocol. • USB. Set USB protocol. 7. In the File Path field, enter the path to the location to store the core dump file. 8.
A. A Default Settings This appendix describes the default settings for many of the NETGEAR switch software features. Table 228. Default Settings Feature Default IP address for management VLAN 169.254.100.100 Service port IP address 192.168.0.239 Subnet mask 255.255.0.0 Default gateway 0.0.0.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 228. Default Settings (continued) Feature Default Auto Save Disabled sFlow Enabled ISDP Enabled (Versions 1 and 2) RMON Enabled TACACS Not configured RADIUS Not configured SSH/SSL Disabled Telnet Enabled Denial of Service Protection Disabled Captive Portal Disabled Dot1x Authentication (IEEE 802.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 228.
B. Configuration Examples This appendix contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) • Access Control Lists (ACLs) • Differentiated Services (DiffServ) • 802.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router. Routers connect LANs together, routing the traffic to the appropriate port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged. Inversely, a T for a given port means that packets leaving the switch from that port are tagged with the VLAN ID that is associated with the port.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Access Control Lists (ACLs) ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents of routing updates, decide which types of traffic are forwarded or blocked, and provide security for the network.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual • Destination MAC Mask: 00:00:00:00:FF:FF • EtherType User Value: • Source MAC: 02:02:1A:BC:DE:EF • Source MAC Mask: 00:00:00:00:FF:FF • VLAN ID: 2 For more information about MAC ACL rules, see Configure MAC ACL Rules on page 589. 3. From the MAC Binding Configuration page, assign the Sales_ACL to the interface gigabit ports 6, 7, and 8, and then click the Apply button. (See Configure MAC Binding on page 591.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 4. From the IP Rules page, create a second rule for IP ACL 1 with the following settings: • Rule ID: 2 • Action: Permit • Match Every: True 5. Click the Add button. 6. From the IP Binding Configuration page, assign ACL ID 1 to the interface gigabit ports 2, 3, and 4, and assign a sequence number of 1 (See Configure IP ACL Interface Bindings on page 610).
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The DiffServ feature contains a number of conceptual QoS building blocks you can use to construct a differentiated service network. Use these same blocks in different ways to build other types of QoS architectures.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual To configure DiffServ, you must define service levels, namely the forwarding classes/PHBs identified by a given DSCP value, on the egress interface. These service levels are defined by configuring BA classes for each. Creating Policies Use DiffServ policies to associate a collection of classes that you configure with one or more QoS policy statements. The result of this association is referred to as a policy.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Color aware mode takes into consideration the current packet marking when determining the policing outcome. An auxiliary traffic class is used in conjunction with the policing definition to specify a value for one of the 802.1p, secondary 802.1p, IP DSCP, or IP Precedence fields designating the incoming color value to be used as the conforming color. The color of exceeding traffic can be optionally specified as well. • Counting.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual The policy is added. 7. Click the Policy1 hyperlink to view the Policy Class Configuration page for this policy. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual between the authenticator (the system that passes an authentication request to the authentication server) and the supplicant (the system that requests authentication), as well as between the authenticator and the authentication server. The switch support a guest VLAN, which allows unauthenticated users limited access to the network resources.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Figure 1. 802.1X Authentication Roles 802.1X Example Configuration This example shows how to configure the switch so that 802.1X-based authentication is required on the ports in a corporate conference room (1/0/5– 1/0/8). These ports are available to visitors and must be authenticated before granting access to the network. The authentication is handled by an external RADIUS server.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual 6. From the RADIUS Server Configuration page, configure a RADIUS server with the following settings: • Server Address: 192.168.10.23 • Secret Configured: Yes • Secret: secret123 • Active: Primary For more information, see Manage the RADIUS Server Settings on page 488. 7. Click the Add button. 8.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual MSTP ensures that frames with a given VLAN ID are assigned to one and only one of the MSTIs or the IST within the Region, that the assignment is consistent among all the networking devices in the Region and that the stable connectivity of each MSTI and IST at the boundary of the Region matches that of the CST.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual MSTP Example Configuration This example shows how to create an MSTP instance on the switch. The example network includes three different switches that serve different locations in the network. In this example, ports 1/0/1-1/0/5 are connected to host stations, so those links are not subject to network loops. Ports 1/0/6–1/0/8 are connected across switches 1, 2 and 3. Figure 2.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual If you do not specify a root bridge and all switches are assigned the same bridge priority value, the switch with the lowest MAC address is elected as the root bridge (see Configure CST Settings on page 206). 5. From the CST Port Configuration page, select ports 1/0/1–1/0/8 and select Enable from the STP Status menu (see Configure CST Port Settings on page 208). 6. Click the Apply button. 7.
C. Acronyms and Abbreviations C In most cases, acronyms and abbreviations are defined on first use in this document. Acronyms and abbreviations are also defined in the following table. Table 229. Acronyms and Abbreviations Acronym Definition 100BASE-TX Fast Ethernet at 100 Mbps (12.5 MBps) with auto-negotiation 1000BASE-T Gbps Ethernet over twisted pair a 1 Gbps (125 Mbps) 10GBASE-T Or IEEE 802.3an. A standard by the IEEE 802.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 229. Acronyms and Abbreviations (continued) Acronym Definition DAPI Destination Access Point Identifier DCVPN Data Center Virtual Private Network Default Gateway The IP address of a router that a host can use as its first hop when the host does not know a more specific route to a given destination. Default Route A manually configured (static) route whose destination is 0.0.0.0/0.0.0.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 229. Acronyms and Abbreviations (continued) Acronym Definition IGMP Internet Group Management Protocol In-band Interface An IP interface that could be used for in-band management. Any IP interface other than the Out-of-Band port. IP Internet Protocol IP Address Owner The VRRP router that has the virtual router’s IP address(es) as real interface address(es).
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 229. Acronyms and Abbreviations (continued) Acronym Definition MLAG Multi-switch Link Aggregation MMU Memory Management Unit MPLS Multiprotocol Label Switching: A standard involving IP quality.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 229. Acronyms and Abbreviations (continued) Acronym Definition Routing Interface An IP interface whose physical ports are front panel ports and associated with a VLAN. Packets received on a routing interface can be transmitted on a different VLAN than they were received on.
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual Table 229. Acronyms and Abbreviations (continued) Acronym Definition VRRP Router A router running the Virtual Router Redundancy Protocol. It can participate in one or more virtual routers.
