ProSAFE 8-Port and 16-Port 10-Gigabit Smart Managed Switch Models XS708T and XS716T User Manual April 2016 202-11652-01 350 East Plumeria Drive San Jose, CA 95134 USA
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Support Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources. Conformity For the current EU Declaration of Conformity, visit http://kb.netgear.com/app/answers/detail/a_id/11621.
Contents Chapter 1 Get Started Switch Management Interface Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Change the Default IP Address of the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . Discover a Switch in a Network With a DHCP Server . . . . . . . . . . . . . . . . . . . . . Discover a Switch in a Network Without a DHCP Server . . . . . . . . . . . . . . . . . . Configure the Network Settings on Your Computer . . . . . . . . . . . . . . . . . . . . . .
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View the Supported MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Configure SNMP V3 Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Configure LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Configure LLDP Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Multicast. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161 View the MFDB Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161 View the MFDB Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162 Auto-Video . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual IPv6 Route Preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216 Configure VLAN Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217 Use the VLAN Static Routing Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217 VLAN Routing Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Manage Port Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289 View the Port Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293 View the Client Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294 Set Up Traffic Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual HTTP File Upload. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 386 Upload a File From the Switch to a USB Device . . . . . . . . . . . . . . . . . . . . . . . 387 Download a File to the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388 Download a File to the Switch Using TFTP . . . . . . . . . . . . . . . . . . . . . . . . . . .
1. 1 Get Started This manual describes how you can configure and operate the NETGEAR ProSAFE 8-Port and 16-Port 10-Gigabit Smart Managed Switch Models XS708T and XS716T by using the web-based management interface. The manual describes the software configuration procedures and explains the options that are available within those procedures. This chapter provides an overview of how you can start your switch and access the web-based management interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Switch Management Interface Overview The switch provides administrative management options that let you configure, monitor, and control the network. Using the web browser–based management interface, you can configure the switch and the network, including the ports, the management VLAN, VLANs for traffic control, link aggregation for increased bandwidth, quality of service (QoS) for prioritizing traffic, and network security.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Discover a Switch in a Network With a DHCP Server This section describes how to set up your switch in a network that includes a DHCP server. The DHCP client on the switch is enabled by default. When you connect the switch to your network, the DHCP server automatically assigns an IP address to the switch. Use the Smart Control Center to discover the IP address automatically assigned to the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The Smart Control Center launches a browser that displays the login page of the selected device. Use your web browser to manage your switch. The default password is password. For more information about the page layout and options, see Use a Web Browser to Access the Switch and Log In on page 17.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 9. Type your password to continue with the configuration change. Tip: You must enter the current password each time that you use the Smart Control Center to update the switch settings. The default password is password. 10. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To modify the network settings on your computer: 1. Open the Control Panel and click the Network and Sharing Center option. 2. Click the Local Area Connection link. The Local Area Connection Status pop-window opens. 3. Click the Properties button. 4. Select Internet Protocol Version 4 (TCP/IPv4). 5. Click the Properties button. The Internet Protocol Version 4 (TCP/IPv4) Properties pop-up window opens. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual WARNING: When you change the IP address of your administrative system, you lose your connection to the rest of the network. Be sure to write down your current network address settings before you change them. 7. Click the OK button. 8. Close all other pop-up windows. To configure a static address on the switch: 1. Use a straight-through cable to connect the Ethernet port on the administrative system directly to any port on the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Access the Web Browser–Based Management Interface You must be able to ping the IP address of the switch from your administrative system for web access to be available. If you used the Smart Control Center to set up the IP address and subnet mask, either with or without a DHCP server, use that IP address in the address field of your web browser. If you did not change the IP address of the switch from the default value, enter 192.168.0.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Supported Web Browsers The following browsers were tested and support the web browser–based management interface. Later browser versions might function fine but were not tested. The supported web browsers include the following: • Microsoft Internet Explorer (IE) versions 9–11 • Microsoft Edge • Mozilla Firefox versions 18–40 • Chrome versions 28–44 • Opera Versions 26–31 • Safari on Windows OS 5.1.6 • Safari on MAC OS: 8.0.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Navigation tab Configuration menus Help link Logout button Help page Buttons Page menu Configuration status and options Navigation Tabs, Configuration Menus, and Page Menu The navigation tabs along the top of the web interface give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which feature you configure.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Link Submenu links Configuration and Status Options The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual User-Defined Fields User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page. All characters can be used except for the ones stated in the following table (unless specifically noted in a procedure for a feature). Table 2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Depending upon the status of the port, the port color in Device View is either red, green, or black. • Green indicates that the port is linking up. • Red indicates that an error occurred on the port or that the port is administratively disabled. • Black indicates that no link is present. Each port also provides two LEDs in Device View to indicate the link status of the port.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Power LED The Power LED is a bicolor LED that serves as an indicator of power and diagnostic status: • Solid green. The power is supplied to the switch and operating normally. • Solid yellow. The system is in the boot-up stage. • Off. No power is supplied to the switch. Fan LED The Fan LED indicates the following status: • Solid yellow. The fan is faulty. • Off. The fan is operating normally.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Interface Settings For some features that allow you to configure interface settings, you can apply the same settings simultaneously to any of the following: • A single port • Multiple ports • All ports • A single LAG • Multiple LAGs • All LAGs • Multiple ports and LAGs • All ports and LAGs Many of the pages that allow you to configure or view interface settings include links to display all ports, all LAGs, or al
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 4. Configure the desired settings. 5. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. To configure a single LAG by using the Go To Interface field: 1. Click the LAGS link or the All link to display the LAGs. 2. In the Go To Interface field, type the LAG number, for example l3. For information, see Interface Naming Conventions on page 22. 3. Click the Go button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The row for the selected interface is highlighted, and the interface number appears in the heading row. 3. Configure the desired settings. 4. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. To configure multiple ports: 1. Ensure that the page is displaying all ports, and not only the LAGs. 2. Select the check box next to each port to configure.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The check box associated with every port is selected, and the rows for all ports are highlighted. 3. Configure the desired settings. 4. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. To configure all LAGs: 1. Click the LAGS link to display only the LAG interfaces. 2. Select the check box in the heading row.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The check box associated with every port and LAG is selected, and the rows for all ports and LAGs are highlighted. 3. Configure the desired settings. 4. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual User Guide The user manual (the guide you are now reading) is available at the NETGEAR download center at downloadcenter.netgear.com. To access the user manual online from the web browser–based management interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View and Configure the Switch Management Settings This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 5. Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Location. Enter the location of this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Contact. Enter the contact person for this switch. You can use up to 255 alphanumeric characters. The default is blank. 6. Click the Apply button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View the Temperature Sensor Information You can view the current temperature of the temperature sensors. The temperature is instant and can be updated with the latest information about the switch when you click the Update button. The maximum temperature of the temperature sensors depends on the actual hardware. To view temperature information: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View the Fan Status YOu can view the status of the fans in all units. These fans remove the heat generated by the power, CPU, and other components, and allow the switch to function normally. To view the fan status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View the Power Supplies You can view s the status of the power supplies. To view the power supplies status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View the Software Versions You can view the software versions that are running on the switch. To view the software versions: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To view the system CPU status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure the CPU Thresholds The CPU Utilization Threshold notification feature allows you to configure thresholds that, when exceeded, trigger a notification. The notification occurs through SNMP trap and syslog messages. To configure the CPU thresholds: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Falling Interval. The utilization monitoring time period can be configured from 5 seconds to 86400 seconds in multiples of 5 seconds. • Free Memory Threshold. The free memory threshold value for the CPU in KB. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The Device Status field displays the current status of the device. The status is one of the following: • Active. The device is USB plugged in and recognized by the switch. • Inactive. The device is not mounted. • Invalid. The device is not present or an invalid device is plugged in. 6. To refresh the page, click the Update button. The following table describes the USB Memory Statistics information. Table 10.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual IP Configuration Use the IP Configuration page to configure network information for the management interface, which is the logical interface used for in-band connectivity with the switch through any of the switch’s front-panel ports. The configuration parameters associated with the switch’s network interface do not affect the configuration of the front panel ports through which traffic is switched or routed.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. Specify the VLAN ID for the management VLAN. The management VLAN is used to establish an IP connection to the switch from a workstation that is connected to a port in the same VLAN. If not specified, the active management VLAN ID is 1 (default), which allows an IP connection to be established through any port.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To configure the network information for an IPv6 network: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 10. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. View the IPv6 Network Neighbor Use the IPv6 Network Neighbor page to view information about the IPv6 neighbors that the switch discovered through the network interface by using the Neighbor Discovery Protocol (NDP). To view the IPv6 Network Neighbor Table: 1.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 12. IPv6 network interface neighbor table information (continued) Field Description Neighbor State The state of the neighboring switch: • reachable (1). The neighbor is reachable by this switch. • stale (2). Information about the neighbor is scheduled for deletion. • delay (3). No information was received from the neighbor during the delay period. • probe (4). The switch is attempting to probe for this neighbor. • unknown (5).
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select the Clock Source Local radio button. 7. In the Date field, specify the current date in months, days, and years (MM/DD/YYYY). 8. In the Time field, specify the current time in hours, minutes, and seconds (HH:MM:SS). Note: If you do not enter a date and time, the switch calculates the date and time using the CPU’s clock cycle. 9. Click the Apply button. The updated configuration is sent to the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Unicast. SNTP operates in a point-to-point fashion. A unicast client sends a request to a designated server at its unicast address and expects a reply from which it can determine the time and, optionally, the round-trip delay and local clock offset relative to the server. • Broadcast. SNTP operates in the same manner as multicast mode but uses a local broadcast address instead of a multicast address.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual See the description for Time Zone Name in Step 14 for more information. The allowed range is –12 to 13. The default value is 0. 16. In the Offset Minutes field, specify the number of minutes that the time zone is different from UTC. See the description for Time Zone Name in Step 14 for more information. The allowed range is 0 to 59. The default value is 0. 17. Click the Apply button. The updated configuration is sent to the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select a Client mode radio button to specify the mode of operation of the SNTP client: • Disable. SNTP is not operational. No SNTP requests are sent from the client and no received SNTP messages are processed. • Unicast. SNTP operates in a point-to-point fashion.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The allowed range is 1 to 30. The default value is 5. 11. In the Unicast Poll Retry field, specify the number of times to retry a unicast poll request to an SNTP server after the first time-out before the switch attempts to use the next configured server. The allowed range is 0 to 10. The default value is 1. 12. In the Time Zone Name field, specify a time zone.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select System > Management > Time > Time Configuration > SNTP Global Status. When you select the SNTP option as the clock source, the SNTP Global Status is displayed below the SNTP Global Configuration section. 6. Click the Update button to update the page with the latest information about the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 13. SNTP Global Status information (continued) Field Description Last Attempt Status The status of the last SNTP request or unsolicited message for both unicast and broadcast modes. If no message was received from a server, a status of Other is displayed. These values are appropriate for all operational modes. • Other. The status of the last request is unknown. • Success.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following is an example of strata: • Stratum 0. A real-time clock is used as the time source, for example, a GPS system. • Stratum 1. A server that is directly linked to a Stratum 0 time source is used. Stratum 1 time servers provide primary network time standards. • Stratum 2. The time source is distanced from the Stratum 1 server over a network path.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select System > Management > Time > SNTP Server Configuration. 6. From the Server Type menu, select the type of SNTP address to enter in the address field. The address can be either an IP address (IPv4, IPv6) or a host name (DNS). The default value is IPv4. 7. In the Address field, specify the IP address or the host name of the SNTP server.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The SNTP Server Status table displays status information about the SNTP servers configured on your switch. The following table describes the SNTP Server Global Status information. Table 14. SNTP Server Status information Field Description Address All the existing server addresses. If no server configuration exists, a message stating that no SNTP server exists displays on the page.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select System > Management > Time > SNTP Server Configuration. The SNTP Server Configuration page displays. 6. Select the check box next to the configured server. 7. Specify new values in the available fields. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To configure the daylight saving time settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The fields in the following tables are visible only when the DayLight Saving (DST) Recurring, Recurring EU, or Recurring USA radio button is selected. Table 15. Daylight saving setting is Recurring, Recurring EU, or Recurring USA Field Description Begins At These fields are used to configure the start values of the date and time. • Week.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 16. Daylight saving setting is Non Recurring (continued) Field Description Offset Specify the number of minutes to shift the summer time from the standard time. The valid range is 1–1440 minutes. Zone Specify the acronym associated with the time zone when summer time is in effect. This field is not validated against an official list of time zone acronyms.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table displays the nonconfigurable daylight saving status information. Table 17. Daylight Saving (DST) Status information Field Description Daylight Saving (DST) The Daylight Saving value, which is one of the following: • Disable • Recurring • Recurring EU • Recurring USA • Non Recurring Begins At Displays when the daylight saving time begins. This field is not displayed when daylight saving time is disabled.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select System > Management > Denial of Service > Auto-DoS Configuration. The Auto-DoS Configuration page displays. 6. Next to Auto-DoS Mode, select the Enable radio button. When an attack is detected, a warning message is logged to the buffered log and is sent to the syslog server.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select the types of DoS attacks for the switch to monitor and block and configure any associated values: • Denial of Service Min TCP Header Size. Specify the minimum TCP header size allowed. If DoS TCP Fragment is enabled, the switch drops packets with a TCP header smaller than the configured value. • Denial of Service ICMPv4.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Denial of Service SMAC=DMAC. Enabling SMAC=DMAC DoS prevention causes the switch to drop packets with a source MAC address equal to the destination MAC address. • Denial of Service TCP FIN&URG&PSH. Enabling TCP FIN & URG & PSH DoS prevention causes the switch to drop packets with TCP Flags FIN, URG, and PSH set and TCP sequence number equal to 0. • Denial of Service TCP Flag&Sequence.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select System > Management > DNS > DNS Configuration. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. 12. To refresh the page, click the Update button. The following table displays DNS Server Configuration information. Table 18. DNS Server Configuration information Field Description ID The identification of the DNS Server. Preference Shows the preference of the DNS server.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. In the Host Name (1 to 255 characters) field, specify the static host name to add. Its length cannot exceed 255 characters and it is a required field. 7. In the IPv4/IPv6 Address field, enter the IP address to associate with the host name. 8. Click the Add button. The entry displays in the list on the page. Remove an Entry From the Dynamic Host Mapping Table To remove an entry from the dynamic host mapping table: 1.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select System > Management > DNS > Host Configuration. The DNS Host Configuration page display. 6. Select the check box next to the entry to update. 7. Enter the new information in the appropriate field. 8. Click the Apply button. The updated configuration is sent to the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select System > Management > Green Ethernet > Green Ethernet Configuration. 6. Select the EEE Mode Disable or Enable radio button. Energy Efficient Ethernet (EEE) combines the MAC with a family of physical layers that support operation in a low power mode. It is defined by IEEE 802.3az Energy Efficient Task Force.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Do one of the following: • In the Go To Interface field, enter the port using the respective naming convention (for example, xg1 or l1), and click the Go button. The entry corresponding to the specified interface is selected. For more information about naming conventions, see Interface Naming Conventions on page 22. • Select the port. 7. From the EEE mode menu, select Enable or Disable. The default is Disable.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select System > Management > Green Ethernet > Green Ethernet Details. 6. From the Interface menu, select the interface. 7. Use the EEE Admin mode menu to enable or disable this option on the port. With EEE mode enabled, the port transitions to low power mode during a link idle condition. The default value is Disabled.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable fields. Table 20. Green Ethernet Local Device Information Field Description Cumulative Energy Saved on this port due to Green mode(s) (Watts * Hours) Cumulative energy saved due to all green modes enabled on this port in watts * hours. Rx Low Power Idle Event Count This field is incremented each time MAC RX enters low-power idle (LPI) state.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View Green Ethernet Remote Device Details To view green Ethernet remote device information: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View the Green Ethernet Statistics Summary This page summarizes the green Ethernet settings currently in use. To view the green Ethernet statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable fields. Table 22. Green Ethernet Statistics Summary information Field Description Current Power Consumption by all Estimated Power Consumption by all ports in chassis in mWatts. ports in Chassis (mWatts) Estimated Percentage Power Saving per chassis (%) Estimated percentage of power saved on all ports in chassis when green modes are enabled.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select System > Management > Green Ethernet > Green Ethernet LPI History. 6. Select the interface. 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 23. Interface Green Mode EEE LPI History information (continued) Field Description Percentage Time spent in LPI mode since last sample Percentage of time spent in LPI mode during the current measurement interval. Percentage Time spent in LPI mode since last reset Percentage of time spent in LPI mode since EEE LPI statistics were reset.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select System > SNMP > SNMP V1/V2 > Community Configuration. 6. In the Management Station IP field, specify the IP address of the management station. 7. In the Management Station IP Mask field, specify the subnet mask to associate with the management station IP address.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select System > SNMP > SNMP V1/V2 > Community Configuration. The Community Configuration page displays. 6. Select the check box next to the community. 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure SNMPv1/v2 Trap Settings You can configure settings for each SNMPv1 or SNMPv2 management host that must receive notifications about traps generated by the device. The SNMP management host is also known as the SNMP trap receiver. Add an SNMP Trap Receiver To add an SNMP trap receiver: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Modify Information About an Existing SNMP Recipient To modify information about an existing SNMP recipient: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The Trap Configuration page displays. 6. Select the check box next to the recipient to remove. 7. Click the Delete button. The trap recipient is removed. Configure SNMPv1/v2 Trap Flags Use the Trap Flags page to enable or disable traps the switch can send to an SNMP manager.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Link Up/Down. When enabled, SNMP traps are sent when the administrative or operational state of a physical or logical link changes. The default is Enable. • Spanning Tree. When enabled, SNMP traps are sent when various spanning tree events occur. The default is Enable. • ACL. When enabled, SNMP traps are sent when a packet matches a configured ACL rule that includes ACL logging. The default is Disable. 7. Click the Apply button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the SNMP Supported MIBs Status fields. Table 24. SNMP supported MIBs Field Description Name The RFC number if applicable and the name of the MIB. Description The RFC title or MIB description. Configure SNMP V3 Users Any user can connect to the switch using the SNMPv3 protocol, but for authentication and encryption, the switch supports only one user (admin).
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. To enable encryption: a. Next to Encryption Protocol, select the DES radio button to encrypt SNMPv3 packets using the DES encryption protocol. b. In the Encryption Key field, enter an encryption code of eight or more alphanumeric characters. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure LLDP The IEEE 802.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure LLDP Global Settings Use the LLDP Configuration page to specify the global LLDP and LLDP-MED parameters that are applied to the switch. To configure global LLDP settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual This value sets the number of LLDP packets sent when the LLDP-MED fast start mechanism is initialized, which occurs when a new endpoint device links with the LLDP-MED network connectivity device. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure LLDP Port Settings Use the LLDP Port Settings page to specify per-interface LLDP settings.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. Use the following menus to configure the LLDP settings for the selected ports: • Admin Status. Select the status for transmitting and receiving LLDP packets: - Tx Only. Enable only transmitting LLDP PDUs on the selected ports. - Rx Only. Enable only receiving LLDP PDUs on the selected ports. - Tx and Rx. Enable both transmitting and receiving LLDP PDUs on the selected ports. - Disabled.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select System > LLDP > Advanced > LLDP-MED Network Policy. The LLDP-MED Network Policy page displays. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual LLDP-MED Port Settings Use this page to enable LLDP-MED mode on an interface and configure its properties. To configure LLDP-MED settings for a port: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Local Information Use the LLDP Local Information page to view the data that each port advertises through LLDP. To view local LLDP information: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Field Description System Capabilities The primary functions that the switch supports. Interface The interface associated with the rest of the data in the row. Port ID Subtype The type of information used to identify the interface in the Port ID field. Port ID The port number. Port Description The user-defined description of the port.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Field Description Network Policies Application Type The media application type associated with the policy. VLAN ID The VLAN ID associated with the policy. VLAN Type Specifies whether the VLAN associated with the policy is tagged or untagged. User Priority The priority associated with the policy. DSCP The DSCP associated with a particular policy type.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the information that displays for all LLDP neighbors that were discovered. Field Description MSAP Entry The Media Service Access Point (MSAP) entry number for the remote device. Local Port The interface on the local system that received LLDP information from a remote system. Chassis ID Subtype The type of data displayed in the Chassis ID field on the remote system.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Field Description Managed Addresses Address SubType The type of the management address. Address The advertised management address of the remote system. Interface SubType The port subtype. Interface Number The port on the remote device that sent the information. MAC/PHY Details Auto-Negotiation Supported Specifies whether the remote device supports port-speed autonegotiation. The possible values are True or False.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Field Description Location Information Civic The physical location, such as the street address, that the remote device advertised in the location TLV, for example, 123 45th St. E. The field value length range is 6–160 characters. Coordinates The location map coordinates that the remote device advertised in the location TLV, including latitude, longitude, and altitude.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual DHCP L2 Relay DHCP relay agents eliminate the need to connect to a DHCP server on each physical network. Relay agents populate the giaddr field and also append the Relay Agent Information option to the DHCP messages. DHCP servers use this option for IP addresses and other parameter assignment policies. These DHCP relay agents are typically IP routing-aware devices and are referred to as Layer 3 relay agents.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select the Enable radio button The default admin mode is disabled. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. DHCP L2 Relay Interface Configuration Use this page to view and configure the DHCP L2 relay interface. To configure DHCP L2 relay interface settings: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. From the Admin Mode menu, select to enable or disable the DHCP L2 relay on the selected interface. The default is Disable. 8. From the 82 Option Trust Mode menu, select to enable or disable an interface to be trusted for DHCP L2 Relay (Option-82) received. The default is Disable. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable data that is displayed. Field Description Interface The interface from which the DHCP message is received. Untrusted Server Messages With Opt82 The number of DHCP message with option82 received from an untrusted server. Untrusted Client Messages With Opt82 The number of DHCP message with option82 received from an untrusted client.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select System> Services > DHCP Snooping > Global Configuration. 6. Next to DHCP Snooping Mode, select the Enable radio button. 7. To enable the verification of the sender’s MAC address for DHCP snooping, next to MAC Address Validation, select the Enable radio button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 5. Select System> Services > DHCP Snooping > Global Configuration. The DHCP Snooping Global Configuration page displays. 6. In the VLAN ID field, specify the VLAN on which DHCP snooping is enabled. 7. From the DHCP Snooping Mode menu, select Enable. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Binding Configuration Use this page to view, add, and remove static bindings in the DHCP snooping bindings database and to view or clear the dynamic bindings in the bindings table. To configure static DHCP bindings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 26. DHCP Dynamic Configuration information Field Description Interface The interface on which the DHCP client message was received. MAC Address The MAC address associated with the DHCP client that sent the message. This is the key to the binding database. VLAN ID The VLAN ID of the client interface. IP Address The IP address assigned to the client by the DHCP server.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Specify where the DHCP snooping bindings database is located. • Local. The binding table is stored locally on the switch. • Remote. The binding table is stored on a remote TFTP server. If the database is stored on a remote server, specify the following information: a. Specify the IP address of the TFTP server. b. Specify the file name of the DHCP snooping bindings database in which the bindings are stored. 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Click Clear to clear all interfaces statistics. The following table describes the DHCP snooping statistics. Table 27. DHCP Snooping Statistics information Field Description Interface The interface associated with the rest of the data in the row. MAC Verify Failures The number of DHCP messages that were dropped because the source MAC address and client hardware address did not match.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual the ARP packet equals the destination MAC address. This check applies only to ARP responses, since the target MAC address is unspecified in ARP requests. You can also enable IP address checking. When this option is enabled, DAI drops ARP packets with an invalid IP address. The following IP addresses are considered invalid: • 0.0.0.0 • 255.255.255.255 • All IP multicast addresses • All class E addresses (240.0.0.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The additional ARP validations are performed on packets received on VLANs that are enabled for DAI and interfaces configured as untrusted. Configure DAI on a VLAN In this example, DAI is enabled on VLAN 1. Ports 1–10 connect end users to the network and are members of VLAN 1.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default is Disable. 8. From the Invalid Packets menu, select one of the following options: • Select Enable to enable logging the invalid ARP packet information for the selected VLAN. • Select Disable to disable dynamic ARP inspection logging for the selected VLAN. The default is Enable. 9. In the ARP ACL Name field, enter the name of the ARP access list.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Click the LAG link to view all LAG interfaces. 7. Next to l1, select the check box. 8. From the Trust Mode menu, select Enable to indicate that the interface is trusted. The Trust Mode field indicates whether the interface is trusted for dynamic ARP inspection purposes. All interfaces are untrusted by default. 9. In the Rate Limit (pps) field, specify the rate limit value for dynamic ARP inspection purposes.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 13. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure a DAI ACL DAI relies on the information in the DHCP snooping bindings database to validate ARP packets. For networks that use static IP addresses and do not use DHCP, DAI access control lists (ACLs) can be used to statically map an IP address to a MAC address on a VLAN.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The System Information page displays. 5. Select System> Services > Dynamic ARP Inspection > DAI ACL Configuration. The DAI ACL Configuration page displays. 6. In the Name field, specify a name for the ACL. For example, enter arpACL. 7. Click the Add button. The page displays the new ACL. 8. Click the ACL name. The ACL name is a hyperlink to the Dynamic ARP Inspection ACL Rule Configuration page. 9.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 12. Click the Add button. 13. Repeat Step 10 through Step 12 to add a second rule. You can add up to 20 static IP address–MAC address mappings to a DAI ACL. 14. Select System> Services > Dynamic ARP Inspection > DAI VLAN Configuration. 15. Next to VLAN 1, select the check box. 16. In the ARP ACL Name field, specify the name of the DAI ACL to associate with the VLAN. For example, enter arpACL. 17. Click the Apply button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable DAI statistics information that is displayed. Field Description VLAN The enabled VLAN ID for which statistics are displayed. DHCP Drops The number of ARP packets that were dropped by DAI because no matching DHCP snooping binding entry was found. DHCP Permits The number of ARP packets that were forwarded by DAI because a matching DHCP snooping binding was entry found.
3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Port Settings You can view, configure, and monitor the physical port information for the ports (that is, the physical interfaces) on the switch. To configure port settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 10. In the Speed field, specify the speed value for the selected port. Possible field values are as follows: • Auto. All supported speeds. • 100. 100 Mbits/second • 10G. 10 Gbits/second. The delimiter characters for setting different speed values are a comma (,), a period (.) and a space ( ). For you to set the auto-negotiation speed, the autonegotiation mode must be set to Enable. The default is Auto.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 28. Port Configuration information Field Description Port Type For normal ports this field is blank. Otherwise, the possible values are as follows: • Mirrored. The port is a mirrored port on which all the traffic is copied to the probe port. • Probe.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To configure LAG settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 11. From the LAG Type menu, select Static or LACP: • Static. Disables Link Aggregation Control Protocol (LACP) on the selected LAG. The LAG is configured manually. The default is Static. • LACP. Disables LACP on the selected LA. The LAG is configured automatically. 12. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. From the LAG ID menu, select the LAG ID. 7. In the LAG Name field, enter the name to be assigned to the LAG. You can enter any string of up to 15 alphanumeric characters. A valid name must be specified for you to create the LAG. 8. In the Ports table, click each port that you want to include as a member of the selected LAG. A selected port is displayed by a check mark. 9. Click the Apply button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. In the LACP System Priority field, specify the device’s link aggregation priority relative to the devices at the other ends of the links on which link aggregation is enabled. A higher value indicates a lower priority. You can change the value of the parameter globally by specifying a priority from 1 to 65535. The default value is 32768. 7. Click the Apply button. The updated configuration is sent to the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the interface, or type the interface number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual packet can either reject it or insert a tag using its default VLAN ID. A given port can handle traffic for more than one VLAN, but it can support only one default VLAN ID. You can define VLAN groups stored in the VLAN membership table. The switch supports up to 256 VLANs. VLAN 1 is created by default and is the default VLAN of which all ports are members.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The VLAN name can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always uses the name Default. 8. The VLAN Type field displays the type of the VLAN that you are configuring. You cannot change the type of the default VLAN (VLAN ID = 1): it is always type Default. When you create a VLAN using this page, its type is always Static.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Reset a VLAN to Its Default Settings To reset a VLAN to its default settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching > VLAN > Advanced > VLAN Membership. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 9. In the LAG table, click each LAG once, twice, or three times to configure one of the following modes or reset the LAG to the default settings: • T (Tagged). Select the LAGs on which all frames transmitted for this VLAN are tagged. The LAGs that are selected are included in the VLAN. • U (Untagged). Select the LAGs on which all frames transmitted for this VLAN are untagged. The LAGs that are selected are included in the VLAN.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 5. Select Switching > VLAN > Advanced > VLAN Status. The following table describes the nonconfigurable information displayed on the page. Table 31. VLAN status Field Definition VLAN ID The VLAN identifier (VID) of the VLAN. The range of the VLAN ID is 1 to 4093. VLAN Name The name of the VLAN. VLAN ID 1 is always named Default. VLAN Type The VLAN type: • Default (VLAN ID = 1). Always present. • Static. A VLAN that you configured.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching> VLAN > Advanced > Port PVID Configuration. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 12. From the Ingress Filtering menu, select one of the following options: • Enable. The frame is discarded if this port is not a member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is identified by the VLAN ID in the tag. In an untagged frame, the VLAN is the port VLAN ID specified for the port that received this frame. • Disable. All frames are forwarded in accordance with the 802.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Add a MAC-Based VLAN To add a MAC-based VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching> VLAN > Advanced > MAC Based VLAN. The MAC Based VLAN Configuration page displays. 6. In the MAC Address field, enter a valid MAC address. This field is configurable only when a MAC-based VLAN exists. 7. In the VLAN ID field, specify a VLAN ID in the range of 1 to 4093. 8.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The System Information page displays. 5. Select Switching> VLAN > Advanced > Protocol Based VLAN Group Configuration. 6. In the Group Name field, type a name for the new group. You can enter up to 16 characters. 7. In the Protocol field, enter one or more protocols that must be associated with the group. You can enter keywords such as arp, ip, and ipx. Separate keywords with a comma.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching> VLAN > Advanced > Protocol Based VLAN Group Membership. 6. From the Group ID menu, select the protocol-based VLAN group ID.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure a Voice VLAN You can configure the parameters for a voice VLAN configuration. To configure a voice VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. From the Interface Mode menu, select the voice VLAN mode for selected interfaces: • Disable. This is the default value. • None. Allow the IP phone to use its own configuration to send untagged voice traffic. • VLAN ID. Configure the phone to send tagged voice traffic. • dot1p. Configure voice VLAN 802.1p priority tagging for voice traffic. When this is selected, enter the dot1p value in the Value field. • Untagged.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual GARP is part of the IEEE 802.1p extension to its 802.1D (spanning tree) specification. It includes the following: • GARP Information Declaration (GID). The part of GARP that generates data. • GARP Information Propagation (GIP). The part of GARP that distributes data. Note: It can take up to 10 seconds for GARP configuration changes to take effect. To configure GARP switch settings: 1.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure GARP Port Note: It can take up to 10 seconds for GARP configuration changes to take effect. To configure GARP ports: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. In the Join Timer field, specify the time in centiseconds between the transmission of GARP PDUs registering (or reregistering) membership for a VLAN or multicast group. Enter a number between 10 and 100 (0.1 to 1.0 seconds). The default is 20 centiseconds (0.2 seconds). An instance of this timer exists for each GARP participant for each port. 9.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To configure protocol-based port settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Auto-VoIP OUI-Based Properties With Organizationally Unique Identifier (OUI)–based Auto-VoIP, voice prioritization is provided based on OUI bits. To configure Auto-VoIP OUI-based properties: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching > Auto-VoIP > OUI-based > Port Settings. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Manage the OUI Table Device hardware manufacturers can include an OUI in a network adapter to help identify a hardware device. The OUI is a unique 24-bit number assigned by the IEEE registration authority.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. In the Telephony OUI(s) field, specify the VoIP OUI prefix to be added in the format AA:BB:CC. Up to 128 OUIs can be configured. 7. In the Description field, enter the description for the OUI. The maximum length of description is 32 characters.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching > Auto-VoIP > OUI-based > OUI Table.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable Auto-VoIP status information. Table 34. Auto-VoIP status Field Description Auto-VoIP VLAN ID The Auto-VoIP VLAN ID. Maximum Number of Voice Channels Supported The maximum number of voice channels supported.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure STP Settings The STP Configuration page contains fields for enabling STP on the switch. To configure STP settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable STP Status fields displayed on the page. Table 35. STP configuration status Field Description Configuration Digest Key Identifier used to identify the configuration currently being used. STP Status Bridge Identifier The bridge identifier for the CST.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching > STP > Advanced > CST Configuration. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Spanning Tree Maximum Hops. The maximum number of bridge hops the information for a particular CST instance can travel before being discarded. The valid range is 6–40. The default is 20 hops. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the MSTP Status information that is displayed. Table 36.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. 15. To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable information displayed on the page. Table 37. CST port configuration Field Description Port State The forwarding state of this port. The default is Disabled.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. To refresh the page with the latest information about the switch, click the Update button. The following table describes the CST Status information displayed on the page. Table 38. CST port status Field Description Interface Identify the physical or port channel interfaces associated with VLANs associated with the CST. Port Role Each MST bridge port that is enabled is assigned a port role for each spanning tree.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View Rapid STP Information Use the Rapid STP page to view information about Rapid Spanning Tree (RSTP) port status. To view information about RSTP: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Manage MST Settings Use the Spanning Tree MST Configuration page to configure Multiple Spanning Tree (MST) on the switch. Configure an MST Instance To configure an MST instance: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual For each configured instance, the information described in the following table displays on the page. Table 40. MST configuration Field Description Bridge Identifier The bridge identifier for the selected MST instance. It is made up using the bridge priority and the base MAC address of the bridge. Last TCN The time in day:hour:minute:second format since the topology of the selected MST instance last changed.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Delete an MST Instance To delete an MST instance: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching > STP > Advanced > MST Port Configuration. Note: If no MST instances were configured on the switch, the page displays a “No MSTs Available” message. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the read-only MST port configuration information displayed on the Spanning Tree CST Configuration page. Table 41. MST port status information Field Description Auto-calculated Port Path Cost Displays whether the path cost is automatically calculated (Enabled) or not (Disabled). Path cost is calculated based on the link speed of the port if the configured value for Port Path Cost is zero.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View STP Statistics You can view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To view Spanning Tree statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups for IPv4 multicast are identified by class D addresses, which range from 224.0.0.0 to 239.255.255.255. Host groups for IPv6 multicast are identified by the prefix ff00::/8. View the MFDB Table The Multicast Forwarding Database holds the port membership information for all active multicast address entries.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 43. MFDB table information Field Description MAC Address The multicast MAC address for which you requested data. VLAN ID The VLAN ID to which the multicast MAC address is related. Type This displays the type of the entry. Static entries are those that are configured by the end user. Dynamic entries are added to the table as a result of a learning process or protocol.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the MFDB Statistics fields. Table 44. MFDB Statistics information Field Description Max MFDB Table Entries The maximum number of entries that the Multicast Forwarding Database table can hold. Most MFDB Entries Since Last Reset The largest number of entries that were present in the Multicast Forwarding Database table since last reset. This value is also known as the MFDB high-water mark.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual IGMP Snooping Internet Group Management Protocol (IGMP) snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch. Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select Switching> Multicast > IGMP Snooping > Configuration. 6. Select the IGMP Snooping Status Enable or Disable radio button. This specifies the administrative mode for IGMP snooping for the switch. The default is Disable. 7. Select the Validate IGMP IP header Enable or Disable radio button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure IGMP Snooping for Interfaces To configure IGMP snooping for interfaces: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 9. In the Max Response Time field, specify the time that the switch must wait after sending a query on an interface because it did not receive a report for a particular group on that interface. Enter a value greater or equal to 1 and less than the group membership interval in seconds. The default is 10 seconds. The configured value must be less than the group membership interval. 10.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. Click the Go button. If the address exists, the entry is displayed. An exact match is required. The following table describes the information in the IGMP snooping table. Table 46. IGMP Snooping Table information Field Description MAC Address A multicast MAC address for which the switch holds forwarding and/or filtering information.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. To enable IGMP snooping on a VLAN, in the VLAN ID field, enter the VLAN ID. 7. Configure the IGMP snooping values: • Admin Mode. Enable or disable IGMP snooping for the specified VLAN ID. The default is Disable. • Fast Leave Mode. Enable or disable the IGMP snooping fast leave mode for the specified VLAN ID. The default is Disable. • Host Timeout.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Modify IGMP Snooping Settings for a VLAN To modify IGMP snooping settings for a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The System Information page displays. 5. Select Switching> Multicast > IGMP Snooping > IGMP VLAN Configuration. The IGMP Snooping VLAN Configuration page displays. 6. Select the check box next to the VLAN ID. 7. Click the Delete button. Snooping is disabled on the VLAN and the VLAN is removed from the table.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. From the Interface menu, select the interface. 7. In the VLAN ID field, enter the VLAN ID. 8. From the Multicast Router menu, select Enable or Disable. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching> Multicast > IGMP Snooping Querier > Querier Configuration. 6. Configure the following settings: • Querier Admin Mode. Enable or disable IGMP snooping for the switch. The default is Disable. • Snooping Querier IP Address.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching> Multicast > IGMP Snooping Querier > Querier VLAN Configuration. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching> Multicast > IGMP Snooping Querier > Querier VLAN Status. The following table describes the nonconfigurable information displayed on the page. Table 47.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Enable MLD Snooping You can enable MLD snooping, which is used to build forwarding lists for multicast traffic. To enable MLD snooping: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable MLD Snooping Configuration fields. Table 48. MLD Snooping Configuration information Field Definition Multicast Control Frame Count The number of multicast control frames that were processed by the CPU. Interfaces Enabled for MLD Snooping One or more interfaces on which MLD snooping is administratively enabled.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • To configure multiple interfaces with the same settings, select the check box associated with each interface. • To configure all interfaces with the same settings, select the check box in the heading row. 7. From the Admin Mode menu, select to enable or disable the interface mode for the selected interface for MLD snooping for the switch. The default is Disable. 8.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Switching> Multicast > MLD Snooping > MLD VLAN Configuration. 6. In the VLAN ID field, specify the VLAN IDs for which MLD snooping is enabled. 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Enable or Disable a Multicast Router on Interfaces To enable or disable a multicast router on interfaces: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 13. Launch a web browser. 14. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Multicast Router VLAN Settings To configure multicast router VLAN settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure MLD Snooping Querier You can configure the parameters for an MLD snooping querier. Only a user with read/write access privileges can change the settings on this page. To configure an MLD snooping querier: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Querier Expiry Interval(secs). Specify the time interval in seconds after which the last querier information is removed. The querier expiry interval must be a value in the range of 60 to 300. The default value is 60. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The page displays VLAN IDs enabled for the MLD snooping querier.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. In the Querier VLAN Address field, specify the snooping querier address to be used as the source address in periodic MLD queries sent on the specified VLAN. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable information displayed on the page. Table 49.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Basic MVR Settings To configure basic MVR settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 9. From the MVR Mode menu, specify the MVR mode of operation. The options are compatible and dynamic. The default is compatible. 10. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. 11. To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable information displayed on the page.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual This number helps you to create multiple MVR groups through a single click of the Add button. If the field is empty, then clicking the button creates only one new group. The field is displayed as empty for each particular group. The range is from 1 to 256. 8. Click the Add button. The MVR group is added. The following table describes the nonconfigurable information displayed on the page. Table 51.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. From the Group IP menu, select the IP multicast address of the MVR group. 7. In the Ports table, click each port that you want to make a member of the MVR group. A selected port is shown by a check mark. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. View MVR Statistics To view MVR statistics: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable information displayed on the page. Table 52. MVR Statistics information Field Definition IGMP Query Received The number of received IGMP queries. IGMP Report V1 Received The number of received IGMP V1 reports. IGMP Report V2 Received The number of received IGMP V2 reports.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure the MAC Address Table To configure the MAC Address Table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable information displayed on the page. Table 53. MAC Address Table information Field Description Total MAC Address The number of total MAC addresses learned or configured. MAC Address A unicast MAC address for which the switch holds forwarding and/or filtering information. The format is a 6-byte MAC address that is separated by colons, for example 01:23:45:67:89:AB.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. In the Address Aging Timeout (seconds) field, specify the time-out period in seconds for aging out dynamically learned forwarding information. 802.1D-1990 recommends a default of 300 seconds. The value can be any number between 10 and 1000000 seconds. The default is 300. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
4. 4 Configure Routing The switch supports IP routing. Use the menus under the Routing tab to manage routing on the system. When a packet enters the switch, the destination MAC address is checked to see if it matches any of the configured routing interfaces. If it does, the switch searches the host table for a matching destination IP address. If an entry is found, the packet is routed to the host. If no matching entry is found, the switch performs a longest prefix match on the destination IP address.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure IP Settings For information about how to configure and display IP routing data, see the following sections: • Configure the Router IP on page 196 • IP Statistics on page 197 Configure the Router IP Use the IP Configuration page to configure routing parameters for the switch. To enable routing on the switch: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the IP configuration information displayed on the page. Table 54. Global IP status information Field Description Default Time to Live The default value inserted into the Time-To-Live field of the IP header of datagrams originated by the switch, if a TTL value is not supplied by the transport layer protocol. The default value is 64. Maximum Next Hops The maximum number of hops supported by the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable information displayed on the page. Table 55. IP Statistics information Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 55. IP Statistics information (continued) Field Description IpInUnknownProtos The number of locally addressed datagrams received successfully but discarded because of an unknown or unsupported protocol. IpInDiscards The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but that were discarded (for lack of buffer space).
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 55. IP Statistics information (continued) Field Description IcmpInErrors The number of ICMP messages that the entity received but determined as having ICMP-specific errors (bad ICMP checksums, bad length, and so on). IcmpInDestUnreachs The number of ICMP destination unreachable messages received. IcmpInTimeExcds The number of ICMP time exceeded messages received.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure IPv6 Note: IPv6 is supported only on VLAN interfaces, not on physical ports. Configure IPv6 Global Settings You can configure IPv6 routing parameters for the switch, as opposed to for an interface. To configure IPv6 global settings: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual This value controls the ICMPv6 error packets. The default rate limit is 100 packets per second, meaning that the burst interval is 1000 mseconds. To disable ICMP rate limiting, set this field to 0. The valid rate interval must be in the range 0 to 2147483647 mseconds. 9. In the ICMPv6 Rate Limit Burst Size field, specify the number of ICMP error packets allowed per burst interval. This value controls the ICMP error packets.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 56. IPv6 Route Table information Field Description Number of Routes The total number of active routes in the route table. IPv6 Prefix The network prefix for the active route. Prefix Length The prefix length for the active route.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 14. In the Adv NS Interval field, specify the retransmission time field of router advertisements sent from the interface. A value of 0 means the interval is not specified for the router. The range of the neighbor solicit interval is 1000 to 4294967295. The default is 0. 15. In the Adv Reachable Interval field, specify the router advertisement time. This is the time allocated to consider the neighbors reachable after ND confirmation.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual IPv6 Prefix Configuration Configure IPv6 prefix configuration: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default is Enable. 13. From the Autonomous Flag menu, select Enable or Disable to specify whether the selected prefix can be used for autonomous address configuration. The default value is Enable. The Current State field displays the state of the IPV6 address. The state is TENT if routing is disabled or DAD fails. The state is Active if the interface is active and DAD is successful. 14. Click the Add button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. From the Interface menu, select the interface. When the selection is changed, the page refreshes, causing all fields to be updated for the newly selected interface. 7. To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable IPv6 data that is displayed. Table 58.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 58. IPv6 Statistics information (continued) Field Description Received Datagrams Discarded Due To No Route The number of input datagrams discarded because no route could be found to transmit them to their destination. Received Datagrams With Unknown The number of locally addressed datagrams received successfully but Protocol discarded because of an unknown or unsupported protocol.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 58. IPv6 Statistics information (continued) Field Description Datagrams Failed To Fragment The number of output datagrams that could not be fragmented at this interface. Datagrams Fragments Created The number of output datagram fragments that were generated as a result of fragmentation at this output interface. Multicast Datagrams Received The number of multicast packets received by the interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 59. ICMPv6 Statistics information (continued) Field Description ICMPv6 Neighbor Advertisement Messages Received The number of ICMP Neighbor Advertisement messages received by the interface. ICMPv6 Redirect Messages Received The number of ICMPv6 Redirect messaged received by the interface. ICMPv6 Group Membership Query Messages Received The number of ICMPv6 Group Membership Query messages received by the interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 59. ICMPv6 Statistics information (continued) Field Description ICMPv6 Redirect Messages Transmitted The number of Redirect messages sent. ICMPv6 Group Membership Query Messages Transmitted The number of ICMPv6 Group Membership Query messages sent. ICMPv6 Group Membership Response Messages Transmitted The number of ICMPv6 Group Membership Response messages sent.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If the address exists, the entry is displayed. An exact match is required. • Search by Interface. Select Interface from the Search menu. Enter the interface using the respective naming convention (for example, xg1 or l1). Then click the Go button. If the address exists, the entry is displayed. 7. To clear the IPv6 neighbors on a selected interface or on all interfaces, click the Clear button. 8.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual IPv6 Static Route Configuration Configure the IPv6 static route: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View the IPv6 Route Table To view the IPv6 Route Table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 61. IPv6v Route Table information (continued) Field Description Next Hop IP Address The next hop IPv6 address for the active route. Preference The route preference of the configured route. IPv6 Route Preferences Use this page to configure the default preference for each protocol. These values are arbitrary values in the range of 1 to 255 and are independent of route metrics.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure VLAN Routing You can configure the switch software with some ports supporting VLANs and some supporting routing. You can also configure the software to allow traffic on a VLAN to be treated as if the VLAN were a router port. When a port is enabled for bridging (the default) rather than routing, all normal bridge processing is performed for an inbound packet, which is then associated with a VLAN.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Routing> VLAN > VLAN Routing Wizard. 6. In the VLAN ID field, specify the VLAN ID that is associated with the VLAN. The range of the VLAN ID is 1 to 4093. 7. In the IP Address field, define the IP address of the VLAN interface. 8.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. VLAN Routing Configuration To configure VLAN routing: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable information displayed on the page. Table 62. VLAN Routing Configuration information Field Description Port The interface assigned to the VLAN for routing. MAC Address The MAC address assigned to the VLAN routing interface. Routing Mode Displays whether routing is enabled for the VLAN Routing Interface. Configure Router Discovery To configure router discovery: 1.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 9. In the Minimum Advertise Interval field, enter the minimum time (in seconds) allowed between router advertisements sent from the interface. The value must be in the range of 3 to 1800. The default value is 450. In the Advertise Lifetime field, enter the value (in seconds) to be used as the lifetime field in router advertisements sent from the interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. From the Route Type menu, select one of the following route types. • Default. Creates a default route. You must specify the next hop address and preference. • Static. Creates a static route. You must specify the network address, subnet mask, next hop address, and preference. • Static Reject. Create a static reject route. You must specify the network address, subnet mask, and preference.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. 9. To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 63. Learned Routes information Field Description Network Address The IP route prefix for the destination.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The ARP cache is a table maintained locally in each station on a network. The switch learns ARP cache entries by examining the source information in the ARP packet payload fields, regardless of whether it is an ARP request or response. Thus, when an ARP request is broadcast to all stations on a LAN segment or virtual LAN (VLAN), each recipient can store the sender’s IP and MAC address in its respective ARP cache.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Navigate through the table by doing the following: • From the Rows per page menu, select how many table entries are displayed per page. Possible values are 20, 50, 100, 200, and All. If you select All, the browser might be slow to display the information. • Click the < button to display the previous page of the table data entries. • Click the > button to display the next page of the table data entries. 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 64. ARP cache information (continued) Field Description Type The type of ARP entry. Possible values are as follows: • Local. An ARP entry associated with one of the switch’s routing interface’s MAC addresses. • Gateway. A dynamic ARP entry whose IP address is that of a router. • Static. An ARP entry configured by the user. • Dynamic. An ARP entry that was learned by the router.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. Use the MAC Address field to specify the unicast MAC address of the device. Enter the address as six two-digit hexadecimal numbers separated by colons, for example, 00:06:29:32:81:40. 8. Click the Add button. The static ARP entry is added to the switch. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To configure the ARP table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Remove an ARP Entry From the ARP Cache Use this page to remove certain entries from the ARP table. To remove certain entries from the ARP table: 1. Connect your computer to the same network as the switch.
5. Configure Quality of Service 5 In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria. When a packet is queued for transmission in a port, the rate at which it is serviced depends on how the queue is configured and possibly the amount of traffic present in the other queues of the port.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Manage Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not required. The priority of a packet arriving at an interface can be used to steer the packet to the appropriate outbound CoS queue through a mapping table.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The System Information page displays. 5. Select QoS> CoS > Basic > CoS Configuration. 6. Either configure the same CoS trust mode settings for all CoS configurable interfaces or configure CoS settings per interface: • To configure the same CoS trust mode settings for all CoS configurable interfaces, do the following: a. Select the Global radio button. b.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure CoS Interface Settings for an Interface Use the CoS Interface Configuration page to configure the trust mode for one or more interfaces and to apply an interface shaping rate to all interfaces or to a specific interface. To configure CoS settings for an interface: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • 802.1p. The eight priority tags that are specified in IEEE 802.1p are p0 to p7. The QoS setting lets you map each of the eight priority levels to one of seven internal hardware priority queues. The default value is 802.1p. • DSCP. The six most significant bits of the DiffServ field are called the Differentiated Services Code Point (DSCP) bits. 9. In the Interface Shaping Rate field, specify the maximum bandwidth allowed.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select QoS > CoS > Advanced > Interface Queue Configuration. 6. Select LAG to displays all LAG interfaces or select All to display both all physical and all LAG interfaces. 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 802.1p to Queue Mapping Use this page to view or change which internal traffic classes are mapped to the 802.1p priority class values in Ethernet frames the device receives. The priority-to-traffic class mappings can be applied globally or per interface. The mapping allows the switch to group various traffic types (for example, data or voice) based on their latency requirements and give preference to time-sensitive traffic.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual position. Before traffic in a lower queue is sent, it must wait for traffic in higher queues to be sent. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. DSCP to Queue Mapping Use the DSCP to Queue Mapping page to map an internal traffic class to a DSCP value. To map DSCP values to queues: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The allowed Per Hop Behavior (PHBs) values, apart from other DSCP experimental values, are as follows: • Class Selector (CS) PHB. These values are based on IP precedence. • Assured Forwarding (AF) PHB. These values define four main levels to sort and manipulate some flows within the network. • Expedited Forwarding (EF) PHB. These values are used to prioritize traffic for real-time applications.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure DiffServ Settings Packets are filtered and processed based on defined criteria. The filtering criteria is defined by a class. The processing is defined by a policy's attributes. Policy attributes can be defined on a per-class instance basis, and it is these attributes that are applied when a match occurs. The configuration process begins with defining one or more match criteria for a class.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select the administrative mode for DiffServ: • Enable. Differentiated services are active. • Disable. The DiffServ configuration is retained and can be changed but is not active. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the information displayed in the Status table on the DiffServ Configuration page. Table 66.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Create and Configure a DiffServ Class To create and configure a DiffServ class: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The class name is a hyperlink to the page on which you can define the class configuration. 10. Define the criteria that must be associated the DiffServ class: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class. The only selection from the Match Every menu is Any. • Reference Class. Select this radio button to reference another class for criteria.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • • Source MAC. Select this radio button to require a packet’s source MAC address to match the specified MAC address. After you select this radio button, use the following fields to configure the source MAC address match criteria: - Address. The source MAC address to match. - Mask. The MAC mask, which specifies the bits in the source MAC address to compare against the Ethernet frame. Use Fs and zeros to configure the MAC mask.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • IP DSCP. Select this radio button to require the packet’s IP DiffServ Code Point (DSCP) value to match the specified IP DSCP keyword code, which you must select from the menu. The menu includes Other as a selection, which lets you enter an IP DSCP value from 0 to 63. The DSCP value is defined as the high-order 6 bits of the Service Type octet in the IP header. • Precedence Value.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select QoS > DiffServ > Advanced > Class Configuration. The Class Name page displays. 6. Select the check box next to the class name. 7. In the Class Name field, specify the new name. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Delete a DiffServ Class To delete a DiffServ class: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual IPv6 ACL/DiffServ assignment is appropriate for LAG interfaces. The procedures described by an ACL or DiffServ policy are equally applicable on a LAG interface. Create and Configure an IPv6 DiffServ Class To create and configure an IPv6 DiffServ class: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 10. Define the criteria that must be associated the IPv6 DiffServ class: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class. The only selection from the Match Every menu is Any. • Reference Class. Select this radio button to reference another class for criteria.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Destination L4 Port. Select this radio button to require a packet’s TCP/UDP destination port to match the specified protocol, which you must select from the menu. The menu includes Other as a selection, which lets you enter a destination port number. • Flow Label. Select this radio button to require a packet’s flow label to match the specified flow label.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The Class Name page displays. 6. Select the check box next to the class name. 7. In the Class Name field, specify the new name. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Change the Criteria for an Existing IPv6 DiffServ Class To change the criteria for an existing IPv6 DiffServ class: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select QoS > DiffServ > Advanced > IPv6 Class Configuration. The Class Name page displays. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Enter a policy name in the Policy Name field. You cannot specify the policy type. By default, the policy type is In, indicating that the policy applies to ingress packets. 7. From the Member Class menu, optionally select an existing class that you want to associate with the new policy. 8. Click the Add button. The new policy is added. 9. After creating the policy, click the policy name.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Mark IP Precedence. Select this radio button to require packets to be marked with an IP precedence value before being forwarded. You must select an IP precedence value from 0 to 7 from the menu. • Mirror. Select this radio button to require packets to be mirrored to an interface or LAG, one of which you must select from the menu. • Redirect.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Mark CoS. Packets are marked by DiffServ with the specified CoS value before being forwarded. This selection requires that the Mark CoS field is set. You must select a CoS value from 0 to 7 from the menu. • Mark IP Precedence. These packets are marked by DiffServ with the specified IP Precedence value before being forwarded. This selection requires that the Mark IP Precedence field is set.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select the check box next to the policy name. 7. In the Policy Name field, specify the new name. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Change the Policy Attributes for an Existing DiffServ Policy To change the policy attributes for an existing DiffServ policy: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select QoS > DiffServ > Advanced > Policy Configuration. The Policy Configuration page displays. 6. Select the check box next to the policy name. 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure the DiffServ Service Interface Use the Service Configuration page to activate a policy on an interface. Attach a DiffServ Policy to an Interface To attach a DiffServ policy to an interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable information displayed on the page. Table 70. Service Interface Configuration information Field Description Direction Shows that the traffic direction of this service interface is In. Operational Status Shows the operational status of this service interface, either Up or Down. Remove a DiffServ Policy From an Interface To remove a DiffServ policy from an interface: 1.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View DiffServ Service Statistics Use the Service Statistics page to display service-level statistical information about all interfaces to which DiffServ policies are attached. To view the DiffServ service statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 71. DiffServ Service Statistics information (continued) Field Description Policy Name Name of the policy currently attached to the specified interface and direction. Operational Status Operational status of the policy currently attached to the specified interface and direction. The value is either Up or Down.
6. Manage Device Security 6 Use the features available from the Security navigation tab to configure management security settings for port, user, and server security. The Security tab contains links to the features described in the following sections.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Management Security Settings From the Management Security menu, you can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS) settings, and authentication lists. Change the Password Use the Change Password page to change the login password. To change the login password for the management interface: 1.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The entered password is displayed in dots. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Note: If you forget the password and are unable to log in to the switch management interface, press the Factory Defaults button on the front panel of the switch for more than five seconds.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > Management Security > RADIUS > Global Configuration.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual all configured servers. If the RADIUS request was generated by a user login attempt, all user interfaces are blocked until the RADIUS application returns a response. 8. From he Accounting Mode menu, select to disable or enable RADIUS accounting on the server. The default is Disabled. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. In the Server Address field, specify the IP address of the RADIUS server. 7. In the Authentication Port field, specify the UDP port number the server uses to verify the RADIUS server authentication. The valid range is from 1 to 65535. The default value is 1812. 8. From the Secret Configured menu, select Yes. You must select Yes before you can configure the RADIUS secret.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 73. RADIUS authentication server statistics information Field Description Server Address The address of the RADIUS server or the name of the RADIUS server for which the statistics are displayed. Round Trip Time The time interval, in hundredths of a second, between the most recent access-reply/access-challenge and the access-request that matched it from this RADIUS authentication server.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > Management Security > RADIUS > Server Configuration. The Server Configuration page displays. 6. Select the check box next to the server IP address. 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure a RADIUS Accounting Server Use the Accounting Server Configuration page to view and configure various settings for a RADIUS accounting servers on the network. Add a RADIUS Accounting Server to the Switch To add a RADIUS accounting server to the switch and view the RADIUS accounting server statistics: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The server is added to the switch. 12. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the RADIUS server statistics displayed on the page. 13. To reset the accounting server and RADIUS statistics to their default values, click the Clear Counters button. Table 74.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure TACACS+ TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. TACACS+ provides the following services: • Authentication. Provides authentication during login and through user names and user-defined passwords. • Authorization. Performed at login.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The valid range is 0–128. The key must match the key configured on the TACACS+ server. 7. In the Connection Timeout field, specify the maximum number of seconds allowed to establish a TCP connection between the switch and the TACACS+ server. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 9. In the Key String field, specify the authentication and encryption key for TACACS+ communications between the device and the TACACS+ server. The valid range is 0–128. The key must match the key used on the TACACS+ server. 10. In the Connection Timeout field, specify the time that passes before the connection between the device and the TACACS+ server times out. The range is 1–30.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select the check box next to the httpList name. 7. From the menu in the 1 column, select the authentication method that must be used first in the selected authentication login list. If you select a method that does not time out as the first method, such as Local, no other method is tried, even if you specified more than one method. User authentication occurs in the order the methods are selected.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure an HTTPS Authentication List Use the HTTPS Authentication List to configure the default login list for secure HTTP (HTTPS). To configure an HTTPS authentication list: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • RADIUS. The user’s ID and password are authenticated using the RADIUS server. If you select RADIUS or TACACS+ as the first method and an error occurs during the authentication, the switch uses Method 2 to authenticate the user. • TACACS+. The user’s ID and password are authenticated using the TACACS+ server.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select the check box next to the dot1xList name. 7. From the menu in the 1 column, select the method that must be used r first in the selected authentication login list. The options are as follows: • Local. The user’s locally stored ID and password are used for authentication. • Radius. The user’s ID and password are authenticated using the RADIUS server instead of locally. • None. The user is not authenticated. 8.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > Access > HTTP > HTTP Configuration. 6. In the HTTP Session Soft Timeout field, specify the number of minutes an HTTP session can be idle before a time-out occurs. The value must be in the range of 0–60 minutes. The default value is 5 minutes.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To configure HTTPS settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 10. In the HTTPS Session Soft Timeout (Minutes) field, enter the inactivity time-out for HTTPS sessions. The value must be in the range of 1 to 60 minutes. The default value is 5 minutes. The configured value is displayed. 11. In the HTTPS Session Hard Timeout (Hours) field, set the hard time-out for HTTPS sessions. This time-out is unaffected by the activity level of the session. The value must be in the range of 1 to 168 hours.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The Certificate Present field displays whether a certificate is present on the switch. 6. In the Certificate Management area, select Generate Certificates. 7. Click the Apply button. The switch generates an SSL certificate. The Certificate Generation Status field shows information about the progress. Delete an SSL Certificate To delete an SSL certificate: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Download Certificates You can transfer a certificate file to the switch. For the web server on the switch to accept HTTPS connections from a management station, the web server needs a public key certificate. You can generate a certificate externally (for example, offline) and download it to the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • SSL DH Strong Encryption Parameter PEM File. SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded) 7. From the Server Address Type menu, select IPv4, IPv6, or DNS to indicate the format of the TFTP/SFTP/SCP Server Address field. The default is IPv4. 8. In the TFTP Server IP field, specify the address of the TFTP server. The address can be an IP address in standard x.x.x.x format or a host name.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 5. Select Security > Access > Access Control > Access Profile Configuration. 6. In the Access Profile Name field, enter the name of the access profile to be added. The maximum length is 32 characters. 7. Select one of the following check boxes: • Activate Profile. Activate an access profile. • Deactivate Profile. Deactivate an access profile. • Remove Profile. Remove an access profile.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Access Rule Settings Use the Access Rule Configuration page to add security access rules. You can apply changes an the access rule only when the access profile is in a deactivated state. Note: Make sure that the access profile is created before adding the rules. To configure the access rule settings: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 10. In the Priority field, assign a priority to the rule. The rules are validated against the incoming management request in ascending order of their priorities. If a rule matches, the action is performed and subsequent rules below that are ignored. For example, if a source IP 10.10.10.10 is configured with priority 1 to permit, and source IP 10.10.10.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The System Information page displays. 5. Select Security > Port Authentication > Basic > 802.1X Configuration. 6. Next to Port Based Authentication State, select the Enable radio button. This enables or disables 802.1X administrative mode on the switch. Note: If 802.1X is enabled, authentication is performed by a RADIUS server. This means that the primary authentication method must be RADIUS.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Manage Port Authentication Use the Port Authentication page to enable and configure port access control on one or more ports. Configure 802.1X Settings for a Port To configure 802.1X settings for a port: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual - Unauthorized. The system denies the selected interface system access by moving the interface into unauthorized state. The switch cannot provide authentication services to the client through the interface. - MAC based. This mode allows multiple supplicants connected to the same port to each authenticate individually. Each host connected to the port must authenticate separately in order to gain access to the network.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the port authentication status information available on the page. Table 76. Port authentication status information Field Description Control Direction The control direction for the specified port, which is always Both. The control direction dictates the degree to which protocol exchanges take place between supplicant and authenticator.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > Port Authentication > Advanced > Port Authentication. The Port Authentication page displays. 6. Select the check box associated with the port to initialize. 7. Click the Initialize button. 802.1X on the selected interface is reset to the initialization state.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View the Port Summary Use the Port Summary page to view summary information about the port-based authentication settings for each port. To view the port summary: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 77. Port summary (continued) Field Description Operating Control Mode The control mode under which the port is actually operating. Possible values are as follows: • ForceUnauthorized • ForceAuthorized • Auto • MAC Based • N/A: If the port is in detached state, it cannot participate in port access control. Reauthentication Enabled This field shows whether reauthentication of the supplicant for the specified port is allowed.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the fields on the Client Summary page. Table 78. Client Summary information Field Description Port The port to be displayed. User Name The user name representing the identity of the supplicant device. Supplicant Mac Address The supplicant’s device MAC address. Session Time The time since the supplicant logged in seconds.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The System Information page displays. 5. Select Security > Traffic Control > MAC Filter > MAC Filter Configuration. 6. From the MAC Filter menu, select Create Filter. If you did not configure any filters, this is the only option available. 7. From the VLAN ID menu, select the VLAN that must be used with the MAC address. 8. In the MAC Address field, specify the MAC address of the filter in the format XX:XX:XX:XX:XX:XX.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual A packet with the MAC address and VLAN ID that you specify can be transmitted only from a port that is part of the outbound filter. Note: Destination ports can be included only in a multicast filter. 11. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Delete a MAC FIlter To delete a MAC filter: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > Traffic Control > MAC Filter > MAC Filter Summary. The following table describes the information displayed on the page. Table 79.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > Traffic Control > Storm Control. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 10. From the Control Action mode menu, select one of the following options: • None. This is the default setting. • Trap. If the threshold of the configured broadcast storm is exceeded, a trap is sent. • Shutdown. If the threshold of the configured broadcast storm is exceeded, the port is shut down. 11. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. To enable port security on the switch, select the Port Security Mode Enable radio button. The default is Disable. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. 8. Click the Update button to refresh the page with the latest information about the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > Traffic Control > Port Security > Interface Configuration. 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View Learned MAC Addresses and Convert Them to Static MAC Addresses Use the Security MAC Address page to convert a dynamically learned MAC address to a statically locked address. To view learned MAC addresses for an individual interface or LAG and convert these MAC addresses to static MAC addresses: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The Dynamic MAC Address Table displays the MAC addresses and their associated VLANs that were learned on the selected port. Field Description VLAN ID The VLAN ID corresponding to the MAC address. MAC Address The MAC addresses learned on a specific port. 11. To convert the dynamically learned MAC address to a statically locked addresses, select the Convert Dynamic Address to Static check box. 12. Click the Apply button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. In the Ports table, click each port that you want to configure as a protected port. Protected ports are marked with a check mark. No traffic forwarding is possible between two protected ports. 7. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select the check box that is associated with the VLAN ID that you want to configure. 7. From the Private VLAN Type menu, select the type of private VLAN. Possible values are as follows: • Primary. Sets the private VLAN type as primary. • Isolated. Sets the private VLAN type as isolated. • Community. Sets the private VLAN type as community. • Unconfigured. Sets the private VLAN type as unconfigured. The default is Unconfigured.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. From the Primary VLAN menu, select the primary VLAN ID of the domain. 7. In the Secondary VLAN(s) field, enter the VLAN that you want to associate with the primary VLAN. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable information displayed on the page. Table 81.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select Security > Traffic Control > Private VLAN > Private VLAN Promiscuous Interface Configuration. 6. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Access Control Lists Access control lists (ACLs) ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents of routing updates, decide which types of traffic are forwarded or blocked, and above all provide security for the network. The switch’s software supports IPv4, IPv6, and MAC ACLs.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > ACL > ACL Wizard. 6. From the ACL Type menu, select the type of ACL. You can select from the following ACL types: • ACL Based on Destination MAC. Creates an ACL based on the destination MAC address, destination MAC mask, and VLAN. • ACL Based on Source MAC.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Note: For L4 port options, two rules are created (one for TCP and one for UDP). 7. In the Sequence Number field, enter a whole number in the range of 1 to 2147483647 that is used to identify the rule. 8. From the Action menu, select Permit or Deny to specify the action that must be taken if a packet matches the rule’s criteria. 9. From the Match Every menu, select one of the following options: • False.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual ACL Based On Fields Source IPv4 L4 Port • • Source L4 port (protocol). Specify the source IPv4 L4 port protocol. Source L4 port (value). Specify the source IPv4 L4 port value. Destination IPv6 L4 Port • • Destination L4 port (protocol). Specify the destination IPv6 L4 port protocol. Destination L4 port (value). Specify the destination IPv6 L4 port value. • • Source L4 port (protocol). Specify the source IPv6 L4 port protocol.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > ACL > ACL Wizard. The ACL Wizard page displays. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual ACL Wizard Example In the following figure, the ACL rule is configured to check for packet matches on ports 4, 5, and 9 and on LAG 1. Only the Inbound option is valid. Packets that include a source address in the 192.168.3.0/16 network are permitted to be forwarded by the interfaces. All other packets are dropped because every ACL includes an implicit deny all rule as the last rule.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Add a MAC ACL To add a MAC ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Change the Name of a MAC ACL To change the name of a MAC ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The MAC ACL page displays. 6. Select check box that is associated with the rule. 7. Click the Delete button. The rule is removed. Configure MAC ACL Rules Use the MAC Rules page to define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. A default deny all rule is the last rule of every list.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. From the Action menu, select the action that must be taken if a packet matches the rule’s criteria: • Permit. Forwards packets that meet the ACL criteria. • Deny. Drops packets that meet the ACL criteria. 9. In the Assign Queue field, specify the hardware egress queue identifier that must be used to handle all packets matching this ACL rule. The valid range of queue IDs is 0 to 7. 10.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • IPX • MPLS multicast • MPLS unicast • NetBIOS • Novell • PPPoE • Reverse ARP • User Value 17. In the EtherType User Value field, specify the customized EtherType value that must be used when you select User Value from the EtherType Key menu. This value must be compared against the information in an Ethernet frame. The valid range of values is 0x0600 to 0xFFFF. 18.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > ACL > Basic > MAC Rules. The MAC Rules page displays. 6. Select the check box that is associated with the rule. 7. Modify the fields as needed. 8.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure MAC Bindings When an ACL is bound to an interface, all the rules that are defined are applied to the selected interface. Use the MAC Binding Configuration page to assign MAC ACL lists to ACL priorities and interfaces. To configure MAC bindings: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual sequence number that is one number greater than the highest sequence number currently in use for this interface and direction is used. The valid range is 1–4294967295. 8. To add the selected ACL to a port or LAG, in the Ports table or LAG table, click the port or LAG so that a check mark displays. You can add the ACL to several ports and LAGs. The Ports and LAG tables display the available and valid interfaces for ACL binding.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The System Information page displays. 5. Select Security > ACL > Basic > MAC Binding Table. 6. To delete a MAC ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed. The following table describes the information that is displayed in the MAC Binding Table. Table 83. MAC Binding Table Field Description Interface The interface of the ACL assigned.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > ACL > Advanced > IP ACL.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Type. Identifies the ACL as a basic IP ACL (with ID from 1 to 99), extended IP ACL (with ID from 100 to 199), or a named IP ACL. 7. Click the Add button. The IP ACL is added to the switch configuration. Delete an IP ACL To delete an IP ACL: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Add a Rule for a Basic IP ACL To add a rule for a basic IP ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. Specify the following match criteria for the rule: • Sequence Number. Enter an ACL sequence number in the range of 1 to 2147483647 that is used to identify the rule. An IP ACL can contain up to 50 rules. • Action. Select the ACL forwarding action, which is one of the following: - Permit. Forward packets that meet the ACL criteria. - Deny. Drop packets that meet the ACL criteria. • Egress Queue.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Redirect Interface. From the Redirect Interface menu, select the egress interface to which the matching traffic stream must be redirected, bypassing any forwarding decision normally performed by the switch. This field cannot be set if a mirror interface is already configured for the IP ACL rule. • Src IP Address.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Delete a Basic IP ACL RUle To delete a basic IP ACL rule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > ACL > Advanced > IP Extended Rules.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. Configure the following match criteria for the rule: • Sequence Number. Enter a whole number in the range of 1 to 2147483647 that is used to identify the rule. An extended IP ACL can contain up to 50 rules. • Action. Select the ACL forwarding action, which is one of the following: - Permit. Forward packets that meet the ACL criteria. - Deny. Drop packets that meet the ACL criteria. • Egress Queue.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The wildcard mask determines which bits are used and which bits are ignored. A wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard of 255.255.255.255 indicates that all of the bits are important. • Src L4. The options are available only when the protocol is set to TCP or UDP. Use the source L4 port option to specify relevant matching conditions for L4 port numbers in the extended ACL rule.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The wildcard mask determines which bits are used and which bits are ignored. A wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard of 255.255.255.255 indicates that all of the bits are important. • Dst.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual - If you select the Range radio button, the IP ACL rule matches only if the Layer 4 destination port number is within the specified port range. The starting port, ending port, and all ports in between are a part of the Layer 4 port range. The Start Port and End Port fields identify the first and last ports that are part of the port range. They values can range from 0 to 65535.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Fragments. Either select the Enable radio button to allow initial fragments (that is, the fragment bit is asserted) or leave the default Disable radio button selected to prevent initial fragments from being used. This option is not valid for rules that match L4 information such as a TCP port number, because that information is carried in the initial packet. • Service Type.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Security > ACL > Advanced > IP Extended Rules. The IP Rules page displays. 6. From the ACL ID menu, select the ACL that includes the rule that you want to modify. 7. In the Extended ACL Rule Table, click the rule. The rule is a hyperlink.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure IPv6 ACL An IP or IPv6 ACL consists of a set of rules that are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken, and the additional rules are not checked for a match. On this page the interfaces to which an IP ACL applies must be specified, as well as whether it applies to inbound or outbound traffic.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the nonconfigurable information displayed on the page. Table 84. IPv6 Configuration and IPv6 ACL Table information Field Description Current Number of ACL The current number of the IP ACLs configured on the switch. Maximum ACL The maximum number of IP ACLs that can be configured on the switch. Rules The number of the rules associated with the IP ACL. Type The type is IPv6 ACL.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Add a Rule for an IPv6 ACL Add a rule for an ACL IPv6: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. Configure the following match criteria for the rule: • Action. Select the ACL forwarding action by selecting one of the following radio buttons: - Permit. Forward packets that meet the ACL criteria. - Deny. Drop packets that meet the ACL criteria. • Egress Queue. If you select the Permit radio button, select the hardware egress queue identifier that is used to handle all packets matching this IPv6 ACL rule.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Src. In the Src field, enter a source IPv6 address or source IPv6 address range to be compared to a packet’s source IPv6 address as a match criterion for the selected IPv6 ACL rule: - If you select the IPv6 Address radio button, enter an IPv6 address or IPv6 range to apply this criteria. If this field is left empty, it means any.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual You can either enter the port range yourself or select one of the following protocols from the menu: • The source IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp. • The source IP UDP port protocols are domain, echo, snmp, ntp, rip, time, who, and tftp. Each of these values translates into its equivalent port number, which is used as both the start and end of the port range.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual - • Greater Than. The IPv6 ACL rule matches if the Layer 4 destination port number is greater than the specified port number. • Not Equal. The IPv6 ACL rule matches only if the Layer 4 destination port number is not equal to the specified port number or port protocol. If you select the Range radio button, the IPv6 ACL rule matches only if the Layer 4 destination port number is within the specified port range.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Fragments. Either select the Enable radio button to allow initial fragments (that is, the fragment bit is asserted) or leave the default Disable radio button selected to prevent initial fragments from being used. This option is not valid for rules that match L4 information such as TCP port number, because that information is carried in the initial packet. • Routing.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. In the IPv6 ACL Rule Table, click the rule. The rule is a hyperlink. The IPv6 ACL Rule Configuration page displays. 8. Modify the IPv6 ACL rule criteria. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Delete an IPv6 ACL Rule To delete an IPv6 ACL rule: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To bind an IP ACL to one or more interfaces: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. To add the selected ACL to a port or LAG, in the Ports table or LAG table, click the port or LAG so that a check mark displays. You can add the ACL to several ports and LAGs. The Ports and LAG tables display the available and valid interfaces for ACL binding. All nonrouting physical interfaces, VLAN interfaces, and interfaces participating in LAGs are listed. 9. Click the Apply button. The updated configuration is sent to the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 5. Select Security > ACL > Advanced > Binding Table. 6. To delete an IP ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed. The following table describes the information displayed in the IP ACL Binding Table. Table 86. IP ACL Binding Table Field Description Interface The interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The default password is password. The System Information page displays. 5. Select Security > ACL> Advanced > VLAN Binding Configuration. 6. In the VLAN ID field, enter the VLAN ID to which the binding must apply. 7. From the Direction menu, select the packet filtering direction. 8. In the Sequence Number field, enter an optional sequence number.
7. 7 Monitor the System Use the features available from the Monitoring navigation tab to view a variety of information about the switch and its ports and to configure how the switch monitors events. The Monitoring tab contains configuration menus described in the following sections.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Monitor the Switch and the Ports The pages available from the Ports menu contain a variety of information about the number and type of traffic transmitted from and received on the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Click the Update button to refresh the page with the latest information about the switch. 7. Click the Clear button to clear all the statistics counters, resetting all switch summary and detailed statistics to default values. The discarded packets count cannot be cleared. The following table describes the switch statistics displayed on the page. Table 87.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 87. Switch statistics (continued) Field Description Broadcast Packets Received The total number of packets received that were directed to the broadcast address. This does not include multicast packets. Receive Packets Discarded The number of inbound packets that were chosen to be discarded, even though no errors were detected, in order to prevent their being delivered to a higher-layer protocol.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View Port Statistics The Port Statistics page displays a summary of per-port traffic statistics on the switch. To view port statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the per-port statistics displayed on the page. Table 88. Port statistics Field Description Interface This object indicates the interface of the interface table entry associated with this port on an adapter. Total Packets Received Without Errors The total number of packets received that were without errors.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. Click the Clear button. All counters are reset to 0. Reset Counters for a Specific Interface To reset the counters for a specific interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Monitoring > Ports > Port Detailed Statistics. The following figure does not show all fields on the Port Detailed Statistics page. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 89. Detailed port statistics Field Description ifIndex This object indicates the ifIndex of the interface table entry associated with this port on an adapter. Port Type For normal ports this field displays Normal. Otherwise, the possible values are as follows: • Mirrored. This port is a participating in port mirroring as a mirrored port. Look at the Port Mirroring pages for more information. • Probe.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 89. Detailed port statistics (continued) Field Description Packets RX and TX 64 Octets The total number of packets (including bad packets) received or transmitted that were 64 octets in length (excluding framing bits but including FCS octets).
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 89. Detailed port statistics (continued) Field Description Packets Received 512-1023 Octets The total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 89. Detailed port statistics (continued) Field Description Overruns The total number of frames discarded because this port was overloaded with incoming packets, and could not keep up with the inflow. Total Received Packets Not Forwarded A count of valid frames received that were discarded (that is, filtered) by the forwarding process. 802.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 89. Detailed port statistics (continued) Field Description Unicast Packets Transmitted The total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 89. Detailed port statistics (continued) Field Description EAPOL Frames Transmitted The number of EAPoL frames of any type that were transmitted by this authenticator. Time Since Counters Last Cleared The elapsed time in days, hours, minutes, and seconds since the statistics for this port were last cleared. View EAP Statistics Use the EAP Statistics page to display information about EAP packets received on a specific port.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the EAP statistics displayed on the page. Table 90. EAP statistics Field Description Port Selects the port to be displayed. When the selection is changed, a page update occurs causing all fields to be updated for the newly selected port. All physical interfaces are valid. EAPOL Frames Received This displays the number of valid EAPoL frames of any type that were received by this authenticator.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Monitoring > Ports > Cable Test. 6.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 91. Cable Test information (continued) Field Description Cable Length The estimated length of the cable in meters. The length is displayed as a range between the shortest estimated length and the longest estimated length. Unknown is displayed if the cable length could not be determined. The cable length is displayed only if the cable status is Normal.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The Memory Log page displays. 6. Next to Admin Status, select one of the following radio buttons: • Enable. Enable system logging. • Disable. Prevent the system from logging messages. 7. From the Behavior menu, specify the behavior of the log when it is full. • Wrap. When the buffer is full, the oldest log messages are deleted as the system logs new messages. • Stop on Full.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The facility value is usually 1, which means it is a user-level message. Therefore, to determine the severity level of the message, subtract 8 from the number in the angle brackets. The sample log message shows a severity level of 6 (informational). For more information about the severity of a log message, see Manage the Server Log on page 372. The message was generated on March 24 at 5:34:05 a.m. by the switch with an IP address of 10.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To configure flash log settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. From the Logs to be Displayed menu, select one of the following options: • Current Logs. The log messages for the current switch sessions are displayed. This is the default setting. • Previous Logs. The previous log messages are displayed, that is, the log messages that are still in the flash memory from before the switch was rebooted. 9. Click the Apply button. The updated configuration is sent to the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The Server Log page displays. 6. Next to Admin Status, select one of the following: • Enable. Send log messages to all configured hosts (syslog collectors or relays) using the values configured for each host. • Disable. Stop logging to all syslog hosts. Disable means no messages are sent to any collector or relay. 7. In the Local UDP Port field, specify the port on the switch from which syslog messages must be sent. 8.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Specify the following settings: • IP Address Type. Specify the IP address type of the host, which can be IPv4, IPv6, or DNS. • Host Address. Specify the IP address or host name of the syslog host. • Port. Specify the port on the host to which syslog messages must be sent. The default port number is 514. • Severity Filter. Use the menu to select the severity of the logs that must be sent to the logging host.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The System Information page displays. 5. Select Monitoring > Logs > Server Log. The Server Log Configuration page displays. 6. Select the check box that is associated with the host. 7. Change the information as needed. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual View the trap logs and clear the counters: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 92. Trap Logs information (continued) Field Description Log The sequence number of this trap. System Up Time The time when this trap occurred, expressed in days, hours, minutes, and seconds, since the last reboot of the switch. Trap Information identifying the trap. View the Event Log Use the Event Logs page to display the event log, which is used to hold error messages for catastrophic events.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The following table describes the event log information that is displayed on the page. Table 93. Event Logs information Field Description Entry The sequence number of the event. Type The type of the event. File Name The file in which the event originated. Line The line number of the event. Task Id The task ID of the event. Code The event code. Time The time this event occurred.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To globally enable port mirroring, specify the destination port, and specify one or more source ports: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 9. Use one of the following methods to narrow down the ports that are displayed: • Select Unit ID to display the physical ports of the selected unit. • Select LAG to display a list of LAGs only. • Select CPU to display a list of CPUs only. • Select All to display a list of all physical ports, LAGs, CPUs, and VLANs. 10.
8.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Reboot the Switch Use the Device Reboot page to reboot the switch. To reboot the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To reset the switch to the factory default settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Upload a File to the TFTP Server Use the TFTP File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to a TFTP server on the network. To upload a file from the switch to the TFTP server: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Trap Log. The trap log with the system trap records. • Buffered Log. The system buffered (in-memory) log. • Tech Support. The tech support file is a text-base file that contains a variety of hardware, software, and configuration information that can assist in device and network troubleshooting. • Crash Logs. Specify the crash logs to retrieve them. 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual HTTP File Upload Use the HTTP File Upload page to upload files of various types from the switch to the management system through an HTTP session by using your web browser. To upload a file from the switch to another system by using HTTP: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. If the selection from the File Type menu is Archive, the Image Name menu is displayed and you must select the software image on the switch that must be uploaded to the other system: • image1. Select image1 to upload image1. • image2. Select image2 to upload image2. 8. Click the Apply button. The file transfer begins. The page displays information about the file transfer progress.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual while the other image stores a second copy. The device boots and runs from the active image. If the active image is corrupted, the system automatically boots from the nonactive image. This is a safety feature for faults occurring during the boot upgrade process. The default setting is Archive. • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • The switch contains a path to the TFTP server. You can also download files by using HTTP. See Download a File to the Switch Using HTTP on page 391 for additional information. To download a file to the switch from a TFTP server: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • SSL Server Certificate PEM File. SSL Server Certificate File (PEM Encoded). • SSL DH Weak Encryption Parameter PEM File. SSL Diffie-Hellman Weak Encryption Parameter File (PEM Encoded). • SSL DH Strong Encryption Parameter PEM File. SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded). 7.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Download a File to the Switch Using HTTP Use the HTTP File Download page to download files of various types to the switch through an HTTP session by using your web browser. To download a file to the switch using HTTP: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • SSL DH Weak Encryption Parameter PEM File. SSL Diffie-Hellman Weak Encryption Parameter File (PEM Encoded). • SSL DH Strong Encryption Parameter PEM File. SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded). 7. If the selection from the File Type menu is Archive, the Image Name menu is displayed and you must select the software image that must be downloaded to the switch: • image1. Select image1 to upload image1.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. 4. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. 5. Select Maintenance > Download > USB File Download. 6. From the File Type menu, select the type of file: • Archive.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual The page displays information about the progress of the file transfer. The page refreshes automatically when the file transfer completes (or if it fails). Manage Files The system maintains two versions of the switch software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded during subsequent switch restarts.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. Next to Source Image, select the image1 or image2 radio button to specify the image to be copied. 7. Next to Destination Image, select the image1 or image2 radio button to specify the destination image. 8. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 7. To specify a name for the selected image, enter one in the Image Description field. 8. Select the Activate Image check box. 9. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Note: After activating an image, you must perform a system reset of the switch to run the new code.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Dual Image Status The Dual Image Status page shows information about the active and backup images on the system. To view dual image status information: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Troubleshooting You can use a ping or a traceroute, and you can perform a memory dump.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. In the IP Address/Host Name field, enter the IP address or host name of the device that must be pinged. 7. In the Count field, enter the number of echo requests that must be sent. The default value is 3. The range is 1 to 15. 8. In the Interval field, enter the time between ping packets in seconds. The default value is 3 seconds. The range is 1 to 60. 9. In the Size field, enter the size of the ping packet.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To send an IPv6 ping: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 11. From the Source menu, select the IP address or interface that must be used to send echo request packets: • None. The source address of the ping packet is the address of the default egress interface. • IPv6 Address. The source IP address that must be used when echo request packets are sent. With this selection, the IPv6 Address field displays and you must enter the IPv6 address that must be used as the source. • Interface.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. In the IP Address/Hostname field, enter the IP address or host name of the device for which the path must be discovered. 7. In the Probes Per Hop field, enter the number of probes per hop. The default value is 3. The range is 1 to 10. 8. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 9. In the Init TTL field, enter the initial TTL to be used.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Interface. The interface that must be used for the traceroute. With this selection, the Interface menu displays and you must select an interface as the source. 15. Click the Apply button. A traceroute request is sent to the specified IP address or host name. The results are displayed below the configurable data in the Results field.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 6. In the IPv6 Address/Host Name field, enter the IPv6 address or host name of the device for which the path must be discovered. 7. In the Probes Per Hop field, enter the number of probes per hop. The default value is 3. The range is 1 to 10. 8. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 9. In the Init TTL field, enter the initial TTL to be used.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • IP Address. The source IP address that must be used for the traceroute. With this selection, the IPv6 Address field displays and you must enter the IPv6 address that must be used as the source. • Interface. The interface that must be used for the traceroute. With this selection, the Interface menu displays and you must select an interface as the source. 15. Click the Apply button.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Configure Memory Dump Settings and Perform a Full Memory Dump You can perform a full memory dump to retrieve the core dump for the purpose of troubleshooting. To configure the memory dump settings, test a memory dump to a USB device, and perform a full memory dump: 1. Connect your computer to the same network as the switch.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 8. In the File Name field, specify the core dump file name. Up to 15 characters can be used. The file name must consists of -, _, and alphanumeric characters. The default is core. The form of the file name is as follows: _.bin (timestamp disabled) or __.bin (host name disabled) 9. To append a host name to the core dump file name, select the Hostname check box.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual CAUTION: Make sure that the Write Core check box is cleared when you click the Apply button. Otherwise, the switch reboots. 15. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
A. Configuration Examples This appendix contains information about how to configure the following features. The appendix covers the following topics: • Virtual Local Area Networks (VLANs) • Access Control Lists (ACLs) • Differentiated Services (DiffServ) • 802.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router. Routers connect LANs together, routing the traffic to the appropriate port.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged. Inversely, a T for a given port means that packets leaving the switch from that port are tagged with the VLAN ID that is associated with the port.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20. Access Control Lists (ACLs) ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Match Every. False • CoS. 0 • Destination MAC. 01:02:1A:BC:DE:EF • Destination MAC Mask. 00:00:00:00:FF:FF • EtherType. User Value. • Source MAC. 02:02:1A:BC:DE:EF • Source MAC Mask. 00:00:00:00:FF:FF • VLAN ID. 2 For more information about MAC ACL rules, see Configure MAC ACL Rules on page 319. 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual For additional information about IP ACL rules, see Configure Rules for a Basic IP ACL on page 327. 3. Click the Add button. 4. On the IP Rules page, create a second rule for IP ACL 1 with the following settings: • Sequence Number. 2 • Action. Permit • Match Every. True 5. Click the Add button. 6. On the IP Binding Configuration page, assign ACL ID 1 to the interface Gigabit ports 2, 3, and 4, and assign a sequence number of 1.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Two basic types of QoS are supported: • Integrated Services. Network resources are apportioned based on request and are reserved (resource reservation) according to network management policy (RSVP, for example). • Differentiated Services. Network resources are apportioned based on traffic classification and priority, giving preferential treatment to data with strict timing requirements. The switch supports DiffServ.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual DiffServ Traffic Classes With DiffServ, you define which traffic classes to track on an ingress interface. You can define simple BA classifiers (DSCP) and a wide variety of multifield (MF) classifiers: • Layer 2; Layers 3, 4 (IP only) • Protocol-based • Address-based You can combine these classifiers with logical AND or OR operations to build complex MF-classifiers (by specifying a class type of all or any, respectively).
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual definition to convey some QoS characteristics to downstream switches that do not routinely look at the DSCP value in the IP header. • Policing. A method of constraining incoming traffic associated with a particular class so that it conforms to the terms of the TCS. Special treatment can be applied to out-of-profile packets that are either in excess of the conformance specification or are nonconformant.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual • Source Mask. 255.255.255.0. • Source L4 Port. Other, and enter 4567 as the source port value. • Destination IP Address. 192.12.2.0. • Destination Mask. 255.255.255.0. • Destination L4 Port. Other, and enter 4568 as the destination port value. For more information about this page, see Configure a DiffServ Class on page 240. 4. Click the Apply button. 5.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual 802.1X Local area networks (LANs) are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure, or permit unauthorized users to attempt to access the LAN through equipment already attached. In such environments you might want to restrict access to the services offered by the LAN to those users and devices that are permitted to use those services.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual A port access entity (PAE) is able to adopt one of two distinct roles within an access control interaction: 1. Authenticator. A port that enforces authentication before allowing access to services available through that port. 2. Supplicant. A port that attempts to access services offered by the authenticator. Additionally, there exists a third role: 3. Authentication server.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Authorized, the port is unconditionally put in a force-authorized state and does not require any authentication. When the selection from the Port Control menu is Auto, the authenticator PAE sets the controlled port mode. 3. In the Guest VLAN field for ports 1/0/5–1/0/8, enter 150 to assign these ports to the guest VLAN. You can configure additional settings to control access to the network through the ports.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual pointtopoint and edgeport. MSTP is compatible to both RSTP and STP. It behaves in a way that is appropriate for STP and RSTP bridges. An MSTP bridge can be configured to behave entirely as a RSTP bridge or an STP bridge. So, an IEEE 802.1s bridge inherently also supports IEEE 802.1w and IEEE 802.1D.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual To support multiple spanning trees, configure an MSTP bridge with an unambiguous assignment of VLAN IDs (VIDs) to spanning trees. For such a configuration, ensure the following: 1. The allocation of VIDs to FIDs is unambiguous. 2. Each FID that is supported by the bridge is allocated to exactly one spanning tree instance.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Perform the following procedures on each switch to configure MSTP: 1. On the VLAN Configuration page, create VLANs 300 and 500 (see Configure VLAN Settings on page 123). 2. On the VLAN Membership page, include ports 1/0/1–1/0/8 as tagged (T) or untagged (U) members of VLAN 300 and VLAN 500 (see Configure VLAN Settings on page 123). 3.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual In this example, assume that Switch 1 became the root bridge for the MST instance 1, and Switch 2 became the root bridge for MST instance 2. Switch 3 supports hosts in the sales department (ports 1/0/1, 1/0/2, and 1/0/3) and in the HR department (ports 1/0/4 and 1/0/5). Switches 1 and 2 also include hosts in the sales and HR departments.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual In the following figure, VLAN 300 is created with IP address 10.1.2.1 and subnet mask 255.255.255.0. Port r1 is a member port. (For more information about this page, see VLAN Routing Configuration on page 219.
B. Specifications and Default Settings This appendix describes the default settings for the switch and for its software features.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Switch Default Settings The following table describes the switch default settings. Table 95. Switch default settings Feature Default IP address 192.168.0.239 Subnet mask 255.255.255.0 Default gateway 192.168.0.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 95.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 96. General feature default settings (continued) Feature Name/Setting Default Virtual LAN (IEEE 802.1Q) Default VLANs 1 (Default), 4089 (Auto-Video) Note: All ports are members of default VLAN Note: No ports are member of the Auto-Video VLAN PVID 1 Acceptable Frame Types Admit All Ingress Filtering Disabled Port Priority 0 Jumbo Frames Maximum Frame Size 1518 Flow Control Admin Mode Disabled 802.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 96. General feature default settings (continued) Feature Name/Setting Default STP/RSTP/MSTP, Global Spanning Tree State Enabled STP Operation Mode IEEE 802.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 96.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 96. General feature default settings (continued) Feature Name/Setting Default Write Delay 300 IP Routing Admin Mode Disabled Time-To-Live 64 Maximum Next Hops 1 ARP/ARP Aging Age Time (seconds) 1200 Response Time (seconds) 10 Retries 10 Cache Size 512 Dynamic Review Enabled Router Discovery Protocol Advertise Mode Disabled Advertise Address 224.0.0.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 96.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 96.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 96. General feature default settings (continued) Feature Name/Setting Default Auto-VoIP, OUI-Based Admin Mode Disabled Auto-VoIP VLAN 2 OUI-based priority 7 System Setup and Maintenance Settings The following table describes the system setup and maintenance settings. Table 97. System setup and maintenance settings Feature Sets Supported Default Boot code update 1 N/A DHCP/manual IP 1 DHCP enabled/192.168.0.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Table 98. Port characteristics (continued) Feature Sets Supported Default Port trunking (aggregation) 8 Preconfigured 802.1D spanning tree 1 Disabled 802.1w RSTP 1 Enabled 802.1s spanning tree 4 instances Disabled Static 802.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Security Settings The following table describes the security settings. Table 101. Security settings Feature Sets Supported Default 802.1X All ports Disabled MAC ACL 100 (shared with IP and IPv6 ACLs) All MAC addresses allowed IP ACL 100 (shared with MAC and IPv6 ACLs) All IP addresses allowed IPv6 ACL 100 (shared with IP ACL and MAC All IP addresses allowed ACL) Password control access 1 Idle timeout = 5 mins.
ProSAFE 10-Gigabit Smart Managed Switch XS708T and XS716T User Manual Settings for Other Features The following table describes the settings for other features. Table 103.
