Page 1 ProSAFE 28-Port and 48-Port 10-Gigabit Smart Managed Switch Models XS728T and XS748T Us e r Manual June 2016 202-11649-02 350 East Plumeria Drive San Jose, CA 95134...
Page 2 Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources. Conformity For the current EU Declaration of Conformity, visit http://kb.netgear.com/app/answers/detail/a_id/11621.
Page 3: Table Of Contents
Contents Chapter 1 Get Started Switch Management Interface Overview ....... 10 Change the Default IP Address of the Switch .
Page 4 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure SNMPv3 Users ......... . 66 Configure LLDP .
Page 5 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View the CST Port Status......... . 124 View Rapid STP Information .
Page 6 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure IPv6........... . . 179 Configure IPv6 Global Settings.
Page 7 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Port Authentication ........253 Configure Global 802.1X Settings .
Page 8 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Download a File to the Switch Using TFTP ......336 Download a File to the Switch Using HTTP .
Page 9: Chapter 1 Get Started
Get Started This manual describes how you can configure and operate the NETGEAR ProSAFE 28-Port and 48-Port 10-Gigabit Smart Managed Switch Models XS728T and XS748T by using the web-based management interface. The manual describes the software configuration procedures and explains the options that are available within those procedures.
Page 10: Switch Management Interface Overview
Windows-based computer and is included on the resource CD. You can also download the SCC program from downloadcenter.netgear.com. If you do not use a Windows-based computer, get the IP address of the switch from the DHCP server in the network or use an IP scanner utility.
Page 11: Discover A Switch In A Network With A Dhcp Server
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Discover a Switch in a Network With a DHCP Server This section describes how to set up your switch in a network that includes a DHCP server. The DHCP client on the switch is enabled by default. When you connect the switch to your network, the DHCP server automatically assigns an IP address to the switch.
Page 12: Discover A Switch In A Network Without A Dhcp Server
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Web Browser Access button. The Smart Control Center launches a browser that displays the login page of the selected device. Use your web browser to manage your switch. The default password is password. For more information about the page layout and options, see Use a Web Browser to Access the Switch and Log In...
Page 13: Configure The Network Settings On Your Computer
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Type your password to continue with the configuration change. Tip: You must enter the current password each time that you use the Smart Control Center to update the switch settings. The default password is password.
Page 14 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual  To modify the network settings on your computer: Open the Control Panel and click the Network and Sharing Center option. Click the Local Area Connection link. The Local Area Connection Status pop-window opens. Click the Properties button.
Page 15 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual WARNING: When you change the IP address of your administrative system, you lose your connection to the rest of the network. Be sure to write down your current network address settings before you change them. Click the OK button.
Page 16: Access The Web Browser-Based Management Interface
For more information about the Smart Control Center (SCC) program, see the SCC user manual that is included on the resource CD. You can also download the SCC program from downloadcenter.netgear.com. About the User Interfaces The switch software includes a set of comprehensive management functions for configuring and monitoring the system by using one of the following methods: •...
Page 17: Supported Web Browsers
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Supported Web Browsers The following browsers were tested and support the web browser–based management interface. Later browser versions might function fine but were not tested. The supported web browsers include the following: •...
Page 18: Navigation Tabs, Configuration Menus, And Page Menu
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Navigation tab Configuration menus Logout button Online help Buttons Configuration status and options Page menu Navigation Tabs, Configuration Menus, and Page Menu The navigation tabs along the top of the web interface give you quick access to the various switch functions.
Page 19: Configuration And Status Options
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Link Submenu links Configuration and Status Options The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.
Page 20: User-Defined Fields
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 1. Web interface command buttons (continued) Button Function Update Clicking the Update button refreshes the page with the latest information from the device. Logout Clicking the Logout button ends the session. User-Defined Fields User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page.
Page 21 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select System > Device View. The following figure shows the device view of the XS748T switch. Depending upon the status of the port, the port color in Device View is either yellow, green, or black.
Page 22: Interface Naming Conventions
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Fan LED The Fan LED indicates the following status: • Solid yellow. A fan is faulty. • Off. Fans are operating normally. Interface Naming Conventions The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number.
Page 23 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Use these links as follows: • To display all ports, click the PORTS link. • To display all LAGs, click the LAGS link. • To display all ports and LAGs, click the All link. The procedures in this section describe how to select the ports and LAGs to configure.
Page 24 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure the desired settings. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.  To configure a single port: Ensure that the page is displaying all ports, and not only the LAGs. Select the check box for the port number.
Page 25 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.  To configure multiple LAGs: Click the LAGS link or the All link to display the LAGs. Select the check box for each LAG to configure.
Page 26: Context-Sensitive Help And Access To The Support Website
For example, if the IP Addressing page is open, the help topic for that page displays if you click the link to the online help. From the web browser–based management interface, you can access the NETGEAR support website at www.netgear.com/support.
Page 27: User Guide
The Support page displays. To access the NETGEAR support site for the switch, click the Apply button. User Guide The user manual (the guide you are now reading) is available at the NETGEAR download center at downloadcenter.netgear.com.  To access the user manual online from the web browser–based management interface: Connect your computer to the same network as the switch.
Page 28: Register Your Product
We never sell or rent your email address and you can opt out of communications at any time. To register with NETGEAR when you are prompted, click the Register button. Or, at any time you can visit the NETGEAR website for registration at https://my.netgear.com/registration/login.aspx.
Page 29: Chapter 2 Configure System Information
Configure System Information This chapter covers the following topics: • View and Configure the Switch Management Settings • Use the Device View • Configure SNMP • Configure LLDP • Configure DHCP Snooping...
Page 30: View And Configure The Switch Management Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View and Configure the Switch Management Settings This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information.
Page 31 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Location. Enter the location of this switch. You can use up to 255 alphanumeric characters.
Page 32: View The System Cpu Status
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Field Description Boot Version The boot code version of the switch. Software Version The software version of the switch. View the System CPU Status Use the System CPU Status page to monitor the CPU, memory resources, and utilization patterns across various intervals to assess the performance of the switch.
Page 33: View Usb Device Information
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View USB Device Information Use the USB Device Information page to display the USB device status, memory statistics, and directory details. The limitations for the USB device supported on the switch are as follows: •...
Page 34: Ip Configuration
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the USB Memory Statistics information. Table 4. USB Memory Statistics information Field Description Total Size The USB flash device storage size in bytes. Bytes Used The size of memory used on the USB flash device. Bytes Free The size of memory free on the USB flash device.
Page 35 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > Management > IP Configuration. The IP Configuration page displays. Select the appropriate radio button to determine how to configure the network information for the switch management interface: •...
Page 36: Ipv6 Network Configuration
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following requirements apply to the management VLAN: • Only one management VLAN can be active at a time. • When a new management VLAN is configured, connectivity through the existing management VLAN is lost.
Page 37: View The Ipv6 Network Neighbor
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The IPv6 Network Global Configuration page displays. Ensure that the Admin Mode Enable radio button is selected. Select IPv6 Address Auto Configuration Mode Enable radio button to enable the network interface to acquire an IPv6 address through IPv6 Neighbor Discovery Protocol (NDP) and through the use of router advertisement messages.
Page 38: Configure The Time Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select System > Management > IPv6 Network Neighbor. The following table describes the information that the IPv6 Network Interface Neighbor Table displays about each IPv6 neighbor that the switch discovered. Table 6.
Page 39 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure the Time Setting Manually Use the Time Configuration page to view and adjust date and time settings.  To manually configure the time setting: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 40 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following is an example of strata: • Stratum 0. A real-time clock is used as the time source, for example, a GPS system. • Stratum 1. A server that is directly linked to a Stratum 0 time source is used. Stratum 1 time servers provide primary network time standards.
Page 41 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The default password is password. The System Information page displays. Select System > Management > Time > SNTP Server Configuration. From the Server Type menu, select the type of SNTP address to enter in the Address field. The address can be either an IP address (IPv4, IPv6) or a host name (DNS).
Page 42 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Change the Settings for an Existing SNTP Server  To change the settings for an existing SNTP server: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 43 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The SNTP Server Configuration page displays. Select the check box for the configured server to remove. Click the Delete button. The entry is removed, and the device is updated. Enable SNTP and Configure the Time Zone Offset You must first configure an SNTP server (see Configure an SNTP Server on page 39) before...
Page 44 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Note: When you use SNTP/NTP time servers to update the switch’s clock, the time data received from the server is based on the UTC 0:00, which is the same as Greenwich Mean Time (GMT). This might not be the time zone in which the switch is located.
Page 45 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table displays the nonconfigurable SNTP Global Status information. Table 8. SNTP Global Status information Field Description Version The SNTP version that the client supports. Supported mode The SNTP modes that the client supports. Multiple modes can be supported by a client.
Page 46 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select System > Management > Time > Daylight Saving Configuration. Select a Daylight Saving (DST) radio button: • Disable. Disable daylight saving time. • Recurring. Daylight saving time occurs at the same time every year. The start and end times and dates for the time shift must be manually configured.
Page 47 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Field Description Ends At If you select the Recurring radio button, specify the end date and time of daylight saving in the following fields: Note: These fields do not apply if you select •...
Page 48: Configure Dns Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > Management > Time > DayLight Saving Configuration. To refresh the page, click the Update button. The following table displays the nonconfigurable daylight saving status information.
Page 49 In the DNS Default Name field, enter the default DNS domain name to include in DNS queries. When the system is performing a lookup on an unqualified host name, this field is provides the domain name (for example, if default domain name is netgear.com and the Configure System Information...
Page 50 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual user enters test, then test is changed to test.netgear.com to resolve the name). The name must not be longer than 158 characters. To add a DSN server, do the following: a.
Page 51 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > Management > DNS > Host Configuration. In the Host Name (1 to 158 characters) field, specify the static host name to add. Its length cannot exceed 158 characters and it is a required field.
Page 52: Configure Green Ethernet Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Change the Host Name or IP Address in an Entry of the Dynamic Host Mapping Table and View All Entries  To change the host name or IP address in an entry of the dynamic host mapping table and view all entries: Connect your computer to the same network as the switch.
Page 53 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual  To configure the Green Ethernet settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 54 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Green Ethernet Interface Settings Use this page to configure per-port Green Ethernet settings.  To configure the Green Ethernet interface settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 55 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Green Ethernet Local and Remote Devices Use this page to view detailed per-port green Ethernet information and to enable or disable green Ethernet settings on a single port. Using the green Ethernet features allows for power consumption savings.
Page 56 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual a certain limit. The Operational Status field shows whether the short reach operational status is active or inactive. The Reason field shows the reason for the operational status. Use the EEE Admin Mode menu to enable or disable this option on the port. With the EEE mode enabled, the port transitions to low power mode during a link idle condition.
Page 57 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual  Select System > Management > Green Ethernet > Green Ethernet Details. The Green Ethernet Details page displays. Scroll down to the Remote Device Information section. Select the interface. The following table describes the nonconfigurable fields. Table 13.
Page 58 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > Management > Green Ethernet > Green Ethernet Summary. To refresh the page, click the Update button. The following table describes the nonconfigurable fields.
Page 59: Use The Device View
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 14. Green Ethernet Statistics Summary information (continued) Field Description Short Reach Admin mode Enable or disable Short Reach Admin mode on the port. With Short Reach mode enabled, PHY is forced to operate in low power mode irrespective of the cable length.
Page 60 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Add an SNMP Community:  To add an SNMP community: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 61 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you select Enable, the community name must be unique among all valid community names or the set requests are rejected. If you select Disable, the community name becomes invalid. Click the Add button.
Page 62: Configure Snmpv1/V2 Trap Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > SNMP > SNMPv1/v2 > Community Configuration. The Community Configuration page displays.
Page 63 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Version menu, select the trap version to be used by the SNMP trap receiver: • SNMPv1. The switch uses SNMPv1 to send traps to the receiver. • SNMPv2. The switch uses SNMPv2 to send traps to the receiver. In the Community String field, specify the name of the SNMP community that includes the SNMP management host and the SNMP agent on the device.
Page 64: Configure Snmpv1/V2 Trap Flags
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 65: View The Supported Mibs
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure the following options: • All. Globally activate or disable all traps by selecting the corresponding radio button. By default, the Enable radio button is selected. • Authentication. When authentication is enabled, SNMP traps are sent when events involving authentication occur.
Page 66: Configure Snmpv3 Users
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the SNMP Supported MIBs Status fields. Table 15. SNMP supported MIBs Field Description Name The RFC number if applicable and the name of the MIB. Description The RFC title or MIB description.
Page 67: Configure Lldp
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual To enable encryption, do the following: a. Select the Encryption Protocol DES radio button to encrypt SNMPv3 packets using the DES encryption protocol. b. In the Encryption key field, enter an encryption code of eight or more alphanumeric characters.
Page 68: Configure Lldp Global Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure LLDP Global Settings Use the LLDP Configuration page to specify the global LLDP and LLDP-MED parameters that are applied to the switch.  To configure global LLDP settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 69: Configure Lldp Port Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual To configure a nondefault value for LLDP-MED, enter a value in the Fast Start Duration field. This value sets the number of LLDP packets sent when the LLDP-MED fast start mechanism is initialized, which occurs when a new endpoint device links with the LLDP-MED network connectivity device.
Page 70: Lldp-Med Network Policy
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • To configure multiple interfaces with the same settings, select the check box associated with each interface. • To configure all interfaces with the same settings, select the check box in the heading row.
Page 71 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 72: Lldp-Med Port Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual LLDP-MED Port Settings Use this page to enable LLDP-MED mode on an interface and configure its properties.  To configure LLDP-MED settings for a port: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 73: Local Information
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Local Information Use the LLDP Local Information page to view the data that each port advertises through LLDP.  To view local LLDP information: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 74 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the LLDP device information and port summary information. Field Description Chassis ID Subtype The type of information used to identify the switch in the Chassis ID field. Chassis ID The hardware platform identifier for the switch.
Page 75: Neighbors Information
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Field Description Operational MAU Type The Medium Attachment Unit (MAU) type. The MAU performs physical layer functions, including digital data conversion from the Ethernet interface collision detection and bit injection into the network. MED Details Capabilities Supported The MED capabilities enabled on the port.
Page 76 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If no information was received from a neighbor device, or if the link partner is not LLDP-enabled, no information displays. The following table describes the information that displays for all LLDP neighbors that were discovered.
Page 77 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Field Description Port ID The physical address of the port on the remote system from which the data was sent. Port Description The user-defined description of the port. System Name The system name associated with the remote device.
Page 78 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Field Description PoE Power Value The power value for the port. Hardware Revision The hardware version advertised by the remote device. Firmware Revision The firmware version advertised by the remote device. Software Revision The software version advertised by the remote device.
Page 79: Configure Dhcp Snooping
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure DHCP Snooping DHCP snooping is a useful feature that provides security by filtering untrusted DHCP messages and by building and maintaining a DHCP snooping binding table. An untrusted message is a message that is received from outside the network or firewall and that can cause traffic attacks within your network.
Page 80: Enable Dhcp For All Interfaces In A Vlan
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select the DHCP Snooping Mode Enable radio button. To enable the verification of the sender’s MAC address for DHCP snooping, select the MAC Address Validation Enable radio button. When MAC address validation is enabled, the device checks packets that are received on an untrusted interface to verify that the MAC address and the DHCP client hardware address match.
Page 81: Configure Dhcp Snooping Interface Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the VLAN ID field, specify the VLAN on which DHCP snooping is enabled. From the DHCP Snooping Mode menu, select Enable. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
Page 82 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select which type of interfaces display onscreen: • To display physical ports only, click the PORTS link. • To display LAGs only, click the LAGS link. • To display both physical ports and LAGs, click the All link. Select one or more interfaces by taking one of the following actions: •...
Page 83: Configure Static Dhcp Bindings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Static DHCP Bindings Use this page to view, add, and remove static bindings in the DHCP snooping bindings database and to view or clear the dynamic bindings in the bindings table. ...
Page 84: Configure The Dhcp Snooping Persistent Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 17. DHCP Dynamic Configuration information Field Description Interface The interface on which the DHCP client message was received. MAC Address The MAC address associated with the DHCP client that sent the message. This is the key to the binding database.
Page 85: Chapter 3 Configure Switching
Configure Switching This chapter covers the following topics: • Configure Port Settings and Flow Control • Configure Link Aggregation Groups • Configure VLANs • Configure a Voice VLAN • Configure Auto-VoIP • Configure Spanning Tree Protocol • Configure Multicast • View, Search, and Manage the MAC Address Table...
Page 86: Configure Port Settings And Flow Control
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Port Settings and Flow Control You can configure global flow control for all ports and view, configure, and monitor the port information for individual ports. From the Switching > Ports menu, you can access pages that are described in the following sections: •...
Page 87: Configure The Port Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure the Port Settings You can view, configure, and monitor the physical port information for the ports (that is, the physical interfaces) on the switch.
Page 88: Configure Link Aggregation Groups
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual This sets the port control administrative mode. You must select Enable in order for the port to participate in the network. The default is Enable. In the Port Speed field, specify the speed value for the selected port. Possible field values are as follows: •...
Page 89: Configure Lag Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Switching > LAG > Advanced menu, you can access pages that are described in the following sections: • Configure LAG Settings on page 89 • Configure LAG Membership on page 90 •...
Page 90: Configure Lag Membership
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the LAG Name field, enter the name to be assigned to the LAG. You can enter any string of up to 15 alphanumeric characters. A valid name must be specified for you to create the LAG.
Page 91: Set The Lacp System Priority
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 92: Set The Lacp Port Priority Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 93: Configure Vlans
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select Switching> LAG > Advanced > LACP Port Configuration. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the interface, or type the interface number in the Go To Interface field and click the Go button.
Page 94: Configure Vlan Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Each VLAN in a network is assigned an associated VLAN ID, which appears in the IEEE 802.1Q tag in the Layer 2 header of packets transmitted on a VLAN. An end station can omit the tag, or the VLAN portion of the tag, in which case the first switch port to receive the packet can either reject it or insert a tag using its default VLAN ID.
Page 95 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Switching> VLAN > Basic > VLAN Configuration. In the VLAN ID field, specify the VLAN identifier for the new VLAN. The range of the VLAN ID can be from 2 to 4093.
Page 96 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 97: Configure Vlan Membership
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The default values are as follows: • All ports are assigned to default VLAN 1. • All ports are configured with PVID 1. All VLANs, except for the default VLAN, are deleted.
Page 98 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Group Operation menu, select one of the following options, which applies to all ports in the VLAN: • Tag All. For all ports that are members of the VLAN, all egress packets are tagged. •...
Page 99: View Vlan Status
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View VLAN Status You can view the status of all currently configured VLANs.  To view the VLAN status: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 100: Configure Port Pvid Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Port PVID Settings You can assign a port VLAN ID (PVID) to an interface. The following requirements apply to a PVID: • You must define a PVID for all ports. •...
Page 101 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Do one of the following: • To configure a single interface, select the check box associated with the interface, or type the interface number in the Go To Interface field and click the Go button. •...
Page 102: Configure Mac-Based Vlan Groups
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure MAC-Based VLAN Groups The MAC-Based VLAN feature allows incoming untagged packets to be assigned to a VLAN and thus classify traffic based on the source MAC address of the packet. You define a MAC-to-VLAN mapping by configuring an entry in the MAC-to-VLAN table.
Page 103 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Prefix Mask field, enter a value from 9 to 48. In the Group ID field, specify a group ID that allows you to identify the group. Click the Add button. The MAC address is added to the MAC-based VLAN group.
Page 104: Manually Add Members To Or Remove Them From A Mac-Based
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Manually Add Members to or Remove Them From a MAC-Based VLAN Group  To add members to or remove them from a MAC-based VLAN group: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 105: Configure Protocol-Based Vlan Groups
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure Protocol-Based VLAN Groups You can use a protocol-based VLAN to define filtering criteria for untagged packets. By default, if you do not configure any port-based (IEEE 802.1Q) or protocol-based VLANs, untagged packets are assigned to VLAN 1.
Page 106 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Protocol field, enter one or more protocols that must be associated with the group. You can enter the ARP, IP, and IPX keywords. Separate keywords with a comma. Although you cannot enter other keywords, you can enter hexadecimal or decimal values in the range of 0x0600 (1536) to 0xFFFF (65535).
Page 107: Manually Add Members To Or Remove Them From A Protocol-Based Vlan Group
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Manually Add Members to or Remove Them From a Protocol-Based VLAN Group  To add members to or remove them from a protocol-based VLAN group: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 108: Configure Garp Switch Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure GARP Switch Settings The Generic Attribute Registration Protocol (GARP) is used to exchange information between GARP participants to register and deregister attribute values within a bridged LAN.
Page 109: Configure Garp Ports
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select the GVRP Mode Disable or Enable radio button. This selects the GARP VLAN registration protocol administrative mode for the switch. The default is Disable. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
Page 110 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select which type of interfaces display onscreen: • To display physical ports only, click the PORTS link. • To display LAGs only, click the LAGS link. • To display both physical ports and LAGs, click the All link. Select one or more interfaces by taking one of the following actions: •...
Page 111: Configure A Voice Vlan
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure a Voice VLAN You can configure the global settings for a voice VLAN and enable or disable the voice VLAN for specific ports and LAGs that carry traffic from IP phones. The voice VLAN feature can help ensure that the sound quality of an IP phone is safeguarded from deteriorating when the data traffic on the port is high.
Page 112: Configure Membership For The Voice Vlan
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select the Voice VLAN Status Enable radio button. This enables the administrative mode for the voice VLAN for the switch. The default is Disable. In the Voice VLAN ID menu, select the VLAN that must be the voice VLAN. VLAN 1, the default VLAN, cannot be the voice VLAN.
Page 113 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Switching> Voice VLAN > Advanced > Port Setting. Select which type of interfaces display onscreen: •...
Page 114: Manage The Oui Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Manage the OUI Table Device hardware manufacturers can include an OUI in a network adapter to help identify a hardware device. The OUI is a unique 24-bit number assigned by the IEEE registration authority.
Page 115 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Telephony OUI(s) field, specify the VoIP OUI prefix to be added in the format AA:BB:CC. In the Description field, enter the description for the OUI. The maximum length of description is 32 characters. Click the Add button.
Page 116: Configure Auto-Voip
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Auto-VoIP Voice over Internet Protocol (VoIP) enables telephone calls over a data network. Because voice traffic is typically more time-sensitive than data traffic, the Auto-VoIP feature helps to provide a classification mechanism for voice packets so that they can be prioritized above data packets in order to provide better Quality of Service (QoS).
Page 117: Configure Spanning Tree Protocol
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select which type of interfaces display onscreen: • To display physical ports only, click the PORTS link. • To display LAGs only, click the LAGS link. • To display both physical ports and LAGs, click the All link. Select one or more interfaces by taking one of the following actions: •...
Page 118: Configure Stp Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Multiple Spanning Tree Protocol (MSTP) supports multiple instances of spanning tree to efficiently channel VLAN traffic over different interfaces. Each instance of the spanning tree behaves in the manner specified in IEEE 802.1w, Rapid Spanning Tree (RSTP), with slight modifications in the working but not the end effect (chief among the effects is the rapid transitioning of the port to the forwarding state).
Page 119 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Switching > STP > Basic > STP Configuration. Configure the following settings: •...
Page 120: Configure Cst Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the nonconfigurable STP Status fields displayed on the page. Table 24. STP Status Field Description Bridge Identifier The bridge identifier for the CST. It is made up using the bridge priority and the base MAC address of the bridge.
Page 121 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Switching > STP > Advanced > CST Configuration. Specify the CST options: •...
Page 122: Configure Cst Port Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the MSTP Status information that is displayed. Table 25. STP advanced CST configuration, MSTP status Field Description MST ID...
Page 123 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select which type of interfaces display onscreen: • To display physical ports only, click the PORTS link. • To display LAGs only, click the LAGS link. • To display both physical ports and LAGs, click the All link. Select one or more interfaces by taking one of the following actions: •...
Page 124: View The Cst Port Status
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The port priority is set in multiples of 16. The range is 0 to 240. The possible values are 0, 16, 32, 48, 64, 80, 96, 112, 128, 144, 160, 176, 192, 208, 224, or 240. The default value is 128.
Page 125 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select which type of interfaces display onscreen: • To display physical ports only, click the PORTS link. • To display LAGs only, click the LAGS link. • To display both physical ports and LAGs, click the All link. To refresh the page with the latest information about the switch, click the Update button.
Page 126: View Rapid Stp Information
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View Rapid STP Information Use the Rapid STP page to view information about Rapid Spanning Tree (RSTP) port status.  To view information about RSTP: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 127: Manage Mst Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the Rapid STP Status information displayed on the page. Table 28. Rapid STP status information Field Description Interface The physical or port channel interfaces associated with VLANs associated with the CST.
Page 128 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure the MST values: • MST ID. Specify the ID of the MST to create. The valid values for this are 1 to 15. • Priority. The bridge priority value for the MST. When switches or bridges are running STP, each is assigned a priority.
Page 129 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Switching > STP > Advanced > MST Configuration. The MST Configuration page displays.
Page 130: Configure Mst Port Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure MST Port Settings Use the MST Port Configuration page to configure and display Multiple Spanning Tree (MST) settings on a specific port on the switch.  To configure MST port settings and start the STP migration process for an MST instance: Connect your computer to the same network as the switch.
Page 131 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • To configure all interfaces with the same settings, select the check box in the heading row. Configure the MST values for the selected interfaces: • Port Priority. Specify the priority for the interfaces. The port priority is set in multiples of 16.
Page 132: View Stp Statistics
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 30. MST port status information (continued) Field Description Designated Bridge Bridge identifier of the bridge with the designated port. It is made up using the bridge priority and the base MAC address of the bridge. Designated Port Port identifier on the designated bridge that offers the lowest cost to the LAN.
Page 133: Configure Multicast
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the information available about the STP Statistics page. Table 31. STP Statistics Field Description Interface The physical port or LAG. STP BPDUs Received The number of STP BPDUs received at the port or LAG. STP BPDUs Transmitted The number of STP BPDUs transmitted from the port or LAG.
Page 134: View The Mfdb Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Configure Multicast Group Membership on page 155 • Configure the Multicast Forward All Option on page 156 View the MFDB Table The Layer 2 Multicast Forwarding Database (MFDB) holds the port membership information for all active multicast address entries.
Page 135: View The Mfdb Statistics
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If the address exists, the entry is displayed. An exact match is required. Table 32. MFDB table information Field Description MAC Address The multicast MAC address for which you requested data. VLAN ID The VLAN ID to which the multicast MAC address is related.
Page 136: Configure Auto-Video
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the MFDB Statistics fields. Table 33. MFDB Statistics information Field Description Max MFDB Table Entries The maximum number of entries that the Multicast Forwarding Database table can hold. Current Entries The current number of entries in the Multicast Forwarding Database table.
Page 137: Igmp Snooping Overview
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual IGMP Snooping Overview Internet Group Management Protocol (IGMP) snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch. Multicast IP traffic is traffic that is destined to a host group.
Page 138 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The System Information page displays. Select Switching> Multicast > IGMP Snooping > IGMP Snooping Configuration. Next to IGMP Snooping Status, select whether IGMP snooping is enabled on the switch: • Enable.
Page 139: Configure Igmp Snooping For Vlans
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure IGMP Snooping for VLANs You can configure the parameters for IGMP snooping, which is used to build forwarding lists for multicast traffic.  To configure IGMP snooping for a VLAN: Connect your computer to the same network as the switch.
Page 140: View The Igmp Snooping Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table displays nonconfigurable information about IGMP snooping for VLANs. Table 35. IGMP VLAN snooping information Field Description Host Timeout...
Page 141: Modify Igmp Snooping Settings For A Vlan
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If the address exists, the entry is displayed. An exact match is required. The following table describes the information in the IGMP snooping table. Table 36. IGMP Snooping Table information Field Description MAC Address...
Page 142: Disable Igmp Snooping On A Vlan And Remove It From The Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Disable IGMP Snooping on a VLAN and Remove It From the Table  To disable IGMP snooping on a VLAN and remove it from the table: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 143: Configure Igmp Snooping Querier
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure IGMP Snooping Querier You can configure the parameters for IGMP snooping querier. Only a user with read/write access privileges can change the data on this page.  To configure IGMP snooping querier settings: Connect your computer to the same network as the switch.
Page 144: Configure Igmp Snooping Querier For Vlans
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table displays nonconfigurable information about the IGMP snooping querier. Table 37. IGMP snooping querier information Field Description IGMP Version...
Page 145: Display The Igmp Snooping Querier For Vlan Status
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure the following settings: • VLAN ID. The VLAN ID for which the IGMP snooping querier is to be enabled. • Querier Election Participate Mode. Enable or disable querier this mode: Disable.
Page 146: Mld Snooping Overview
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the nonconfigurable information displayed on the page. Table 38. Querier VLAN Status information Field Description VLAN ID The VLAN ID on which IGMP snooping querier is administratively enabled and the VLAN exists in the VLAN database.
Page 147: Configure The Global Mld Snooping Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure the Global MLD Snooping Settings You can enable MLD snooping globally.  To enable MLD snooping globally: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 148: Configure Mld Snooping For A Vlan
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure MLD Snooping for a VLAN When you enable MLD snooping globally (see Configure the Global MLD Snooping Settings on page 147), you can enable MLD snooping on a per-VLAN basis. ...
Page 149: Configure A Multicast Router Interface On A Vlan
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Maximum Response Time field, set the value for the maximum response time of MLD snooping. The valid range is 1 to 20 seconds. The default value is 20 seconds. This value must be shorter than the group membership interval value.
Page 150: Configure Mld Snooping Querier
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Interface menu, select the multicast router interface. This is the interface to which an external multicast router is connected. From the VLAN ID menu, select the VLAN ID of which the interface must be a member. From the Multicast Router menu, Enable or to enable the multicast router mode for the VLAN (and therefore, for the multicast router interface).
Page 151: Configure Mld Snooping Querier Vlan Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure the following settings: • Querier Admin Mode. Enable or disable MLD snooping for the switch. The default is Disable. • Snooping Querier Address. Enter an IPv6 address that is used as the source address in periodic MLD queries.
Page 152 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 153: Configure A Multicast Group
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 39. MLD Snooping Querier VLAN Configuration information (continued) Field Description Last Querier Address The IP address of the last querier from which a query was snooped on the VLAN. Last Querier Version The MLD protocol version of the last querier from which a query was snooped on the VLAN.
Page 154: Remove A Multicast Group
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The multicast group is added. The following table describes the nonconfigurable information displayed on the page. Table 40. Multicast Group Configuration information Field Definition VLAN Name The VLAN name, if any, that is associated with the VLAN ID. Type The type of multicast group, which is determined by the way in which members are added to the group:...
Page 155: Configure Multicast Group Membership
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Multicast Group Membership By default, an interface is excluded from multicast groups but could be dynamically added to any multicast group. You can manually add interfaces to a group (which changes the type of the group from dynamic to static) and you can lock interfaces so that they cannot be added dynamically to a group.
Page 156: Configure The Multicast Forward All Option
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Multicast Address menu, select the MAC address that identifies the multicast group. Select which type of interfaces display onscreen: • To display physical ports only, click the PORTS link. •...
Page 157 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 158: View, Search, And Manage The Mac Address Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Forbidden. The interface cannot receive any multicast traffic on the VLAN, even if the IGMP or MLD snooping process designated the interface as a member of a multicast group. •...
Page 159 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The default password is password. The System Information page displays. Select Switching > Address Table > Address Table. From the Search By menu, select one of the following options: • VLAN ID.
Page 160: Change The Aging-Out Period Of Dynamic Mac Addresses
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Change the Aging-Out Period of Dynamic MAC Addresses You can change the aging-out period after which a learned MAC address entry that is not updated is automatically removed from the forwarding database. By default, this period is 300 seconds.
Page 161: Remove A Static Mac Address
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Switching > Address Table > Address Table > Advanced > Static MAC Address.
Page 162 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Static MAC Address table, select the check box for the MAC address. In the previous figure, none is shown. Click the Delete button. The MAC address is removed from the Static MAC Address table and from the MAC Address Table.
Page 163: Chapter 4 Configure Routing
Configure Routing The switch supports IP routing. Use the menus under the Routing tab to manage routing on the system. When a packet enters the switch, the destination MAC address is checked to see if it matches any of the configured routing interfaces. If it does, the switch searches the host table for a matching destination IP address.
Page 164: Configure Ip Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure IP Settings From the Routing > IP menu, you can access pages that are described in the following sections: • Configure the Routing Settings on page 164 • View the IP Statistics on page 165 Configure the Routing Settings Use the IP Configuration page to configure routing settings for the switch.
Page 165: View The Ip Statistics
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the IP configuration information displayed on the page. Table 42. Global IP status information Field Description Default Time to Live...
Page 166 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the nonconfigurable information displayed on the page. Table 43. IP Statistics information Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error. IpInHdrErrors The number of input datagrams discarded due to errors in their IP headers, including bad checksums, version number mismatch, other format errors,...
Page 167 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 43. IP Statistics information (continued) Field Description IpInUnknownProtos The number of locally addressed datagrams received successfully but discarded because of an unknown or unsupported protocol. IpInDiscards The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but that were discarded (for lack of buffer space).
Page 168 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 43. IP Statistics information (continued) Field Description IcmpInErrors The number of ICMP messages that the entity received but determined as having ICMP-specific errors (bad ICMP checksums, bad length, and so on). IcmpInDestUnreachs The number of ICMP destination unreachable messages received.
Page 169: Configure Vlan Routing
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure VLAN Routing You can configure the switch with some ports supporting VLANs and some supporting routing. You can also configure the switch to allow traffic on a VLAN to be treated as if the VLAN were a router port.
Page 170 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual  To use the VLAN Static Routing Wizard: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 171: Vlan Routing Configuration
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the LAG table, click each LAG once, twice, or three times to configure one of the following modes or reset the LAG to the default settings: • T (Tagged). Select the LAGs on which all frames transmitted for this VLAN are tagged.
Page 172: Manage Ipv4 Routes
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Add button. The VLAN routing interface is added for the selected VLAN. The MAC Address field displays the MAC address that is associated with the VLAN routing interface. Manage IPv4 Routes The routing table collects routes from multiple sources: static routes and local routes.
Page 173 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Depending on the type of route that you are creating, specify the following information: a. In the Network Address field, specify the IP address for the destination. b. In the Subnet Mask field, specify the subnet mask for the attached network. c.
Page 174: Configure Address Resolution Protocol
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Address Resolution Protocol The Address Resolution Protocol (ARP) associates a Layer 2 MAC address with a Layer 3 IPv4 address. The switch supports both dynamic and manual ARP configurations. With manual ARP configuration, you can statically add entries into the ARP table.
Page 175: Display The Arp Cache
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Display the ARP Cache You can display ARP entries in the ARP cache based on the remote connections most recently detected switch.  To display ARP entries in the ARP cache: Connect your computer to the same network as the switch.
Page 176: Add An Entry To The Arp Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Add an Entry to the ARP Table You can add an entry to the Address Resolution Protocol (ARP) table.  To add an entry to the ARP table: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 177: Configure The Global Aging-Out Time For Arp
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the nonconfigurable information displayed on the page. Table 46. Routing VLANs ARP Cache information Field Description Interface The routing interface associated with the ARP entry. IP Address The IP address of the device (on a subnet) that is attached an existing routing interface of the switch.
Page 178: Remove An Arp Entry From The Arp Cache
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Remove an ARP Entry From the ARP Cache You can remove all or specific entries from the ARP table.  To remove entries from the ARP table: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 179: Configure Ipv6
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure IPv6 IPv6 is supported only on VLAN interfaces, not on physical ports. From the Routing > IPv6 > Advanced menu, you can access pages that are described in the following sections: •...
Page 180: Add A Static Ipv6 Route
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Next to IPv6 Unicast Routing, specify whether IPv6 unicast routing is globally enabled by selecting the Enable radio button or the Disable radio button. In the IPv6 Hop Limit field, enter a value for the unicast hop count used in IPv6 packets originated by the node.
Page 181 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 182: Change The Preference For A Static Ipv6 Route
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Change the Preference for a Static IPv6 Route  To change the preference for a static IPv6 route: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 183: View The Ipv6 Route Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select Routing> IPv6 > Basic > Route Table. The Configure Routes page displays. The page also shows the IPv6 Route Table. In the table in the Configure Routes section, select the check boxes for the static IPv6 routes.
Page 184: Configure Ipv6 Vlan Interface Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • All Static Routes. Show only the manually configured routes. To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 47.
Page 185 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual To view more columns, move the gray bar below the table to the right. Select one or more VLANs by taking one of the following actions: • To configure a single VLAN, select the check box associated with the VLAN, or, in the Go To VLAN field, type the VLAN in the format VLANxx in which xx is the VLAN ID, and click the Go button.
Page 186: Add An Ipv6 Global Address To An Ipv6 Vlan
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual A value of 0 means the interval is not specified for the router. The range of the neighbor solicit interval is 1000 to 4294967295. The default is 0. In the Adv Reachable Interval field, specify the router advertisement time. This is the time allocated to consider the neighbors reachable after ND confirmation.
Page 187 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual  To add an IPv6 global address to an IPv6 VLAN: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 188: Change The Settings For An Ipv6 Global Address On An Ipv6 Vlan
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The Current State field is a nonconfigurable field that shows the state of the IPv6 address. The state can be one of the following: • Tent. Routing is disabled or the address does not work because of a duplicate address detection (DAD) condition.
Page 189: Remove An Ipv6 Global Address From An Ipv6 Vlan
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Remove an IPv6 Global Address From an IPv6 VLAN IPv6 link-local addresses are created automatically when you enable the IPv6 admin mode on an VLAN interface, and they cannot be removed or edited. However, you can manually remove one or more IPv6 global addresses from a VLAN.
Page 190 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 191: Change The Settings For An Ipv6 Prefix For Advertisement On
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Change the Settings for an IPv6 Prefix for Advertisement on an IPv6 VLAN You can change the settings for a prefix for advertisement on an IPv6 VLAN.  To change the settings for an IPv6 prefix for advertisement on an IPv6 VLAN: Connect your computer to the same network as the switch.
Page 192: View Ipv6 Statistics For An Interface
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 193 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Interface menu, select the interface. When you select an interface, the page refreshes and all fields are updated. To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable IPv6 statistics that are displayed.
Page 194 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 49. IPv6 Statistics information (continued) Field Description Received Datagrams With Unknown The number of locally addressed datagrams received successfully but Protocol discarded because of an unknown or unsupported protocol. This counter is incremented at the interface to which these datagrams were addressed, which might not be the input interface for some of the datagrams.
Page 195: View Or Clear The Ipv6 Neighbor Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View or Clear the IPv6 Neighbor Table  To view or clear the IPv6 Neighbor Table: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 196 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Search by Interface. Select Interface from the Search menu. Enter the interface using the respective naming convention (for example, xg1 or l1). Then click the Go button. If the address exists, the entry is displayed. To clear the IPv6 neighbors for all interfaces, click the Clear button.
Page 197: Chapter 5 Configure Quality Of Service
Configure Quality of Service In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria. When a packet is queued for transmission in a port, the rate at which it is serviced depends on how the queue is configured and possibly the amount of traffic present in the other queues of the port.
Page 198: Manage Class Of Service
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Manage Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not required.
Page 199: Configure Global Cos Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Global CoS Settings  To configure CoS trust mode settings on all interfaces: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 200 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 201: Configure The Global Cos Queue Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure the Global CoS Queue Settings Use the Queue Configuration page to define what a particular queue does by configuring switch egress queues.
Page 202: Configure The Global 802.1P To Queue Mapping
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select the check box for the queue that you want to configure. You can select more than one check box or you can select the check box in the table heading to configure all queues in the same way.
Page 203: Dscp To Queue Mapping
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select QoS > CoS > Advanced > 802.1p to Queue Mapping. In the 802.1p to Queue Mapping table, map each of the eight 802.1p priorities to a queue (internal traffic class).
Page 204 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual  To map DSCP values to queues: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 205: Manage Differentiated Services
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Manage Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-based networks are designed to provide best effort data delivery service.
Page 206: View The Global Diffserv Resources
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View the Global DiffServ Resources By default, the DiffServ administrative mode is enabled. (You cannot manually disable it.) You can view the used DiffServ resources.  To view the global DiffServ resources: Connect your computer to the same network as the switch.
Page 207 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual For example, assume three levels of service—A, B, and C—and that the DSCP incoming values used to mark these levels are 10, 20, and 30 respectively. If this traffic is forwarded to another service provider that provides the same three levels of service, but uses DSCP values 16, 24, and 48, the DSCP violate action mapping changes the incoming values as they are mapped to the outgoing values.
Page 208: Configure Ipv4 Diffserv Classes
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure IPv4 DiffServ Classes You can add a DiffServ class and define the criteria that are associated with a DiffServ class. As packets are received, these DiffServ classes are used to prioritize packets. You can set up multiple match criteria in a class.
Page 209 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The new class is added. After creating the class, click the class name. The class name is a hyperlink to the page on which you can define the class configuration. The class name and class type are stated in the Class Configuration section at the top of the page.
Page 210 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual values for the Class of Service match criterion in the range 0 to 7 from which one can be selected. • VLAN. Select this check box to require a packet’s VLAN ID to match a VLAN ID or a VLAN ID within a continuous range.
Page 211 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Source L4 Port. Select this check box to require a packet’s TCP/UDP source port to match the specified protocol, which you must select from the menu. If you select Other from the menu, you can enter a source port number.
Page 212: Configure An Ipv6 Diffserv Ipv6 Classes
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The System Information page displays. Select QoS > DiffServ > Advanced > Class Configuration. The Class Configuration page displays. Click the class name, which is a hyperlink. The page on which you can change the class configuration displays. Change the class configuration as needed.
Page 213 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The destination and source IPv6 addresses use a prefix length value instead of an individual mask to qualify them as a subnet addresses or a host addresses. The flow label is a 20-bit number that is unique to an IPv6 packet, used by end stations to signify some form of Quality of Service (QoS) handling in routers.
Page 214 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The new class is added. After creating the class, click the class name. The class name is a hyperlink to the page on which you can define the class configuration. The class name and class type are stated in the IPv6 Class Configuration section at the top of the page.
Page 215 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual range from 0 to FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF and the prefix length can be in the range from 0 to 128. • Source L4 Port. Select this check box to require a packet’s TCP/UDP source port to match the specified protocol, which you must select from the menu.
Page 216: Configure A Diffserv Policy
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Change the class configuration as needed. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Delete an IPv6 DiffServ Class  To delete an IPv6 DiffServ class: Connect your computer to the same network as the switch.
Page 217 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 218 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The policy name, policy type, and member class name are stated in the Class Information section at the top of the page. These fields are nonconfigurable on this page. From the Assign Queue menu, select the queue to which packets of this policy class must be assigned.
Page 219 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Committed Burst Size. Enter the committed burst size that is applied to conforming packets by specifying an integer from 3000 to 19173960. The committed burst size is the maximum amount of traffic that is allowed in one burst (in bytes). Note: The switch uses the token bucket algorithm, in which the committed rate is the rate at which the bucket is filled, and the committed burst...
Page 220 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select QoS > DiffServ > Advanced > Policy Configuration. The Policy Configuration page displays.
Page 221: Configure Diffserv Service Interfaces
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Delete a DiffServ Policy  To delete a DiffServ policy: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 222 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select QoS > DiffServ > Advanced > Service Configuration. Select which type of interfaces display onscreen: • To display physical ports only, click the PORTS link. • To display LAGs only, click the LAGS link. •...
Page 223: View Diffserv Service Statistics
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Remove a DiffServ Policy From an Interface  To remove a DiffServ policy from an interface: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 224 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The default password is password. The System Information page displays. Select QoS > DiffServ > Advanced > Service Statistics. Click the Update button to refresh the page with the latest information about the switch. The following table describes the information available on the Service Statistics page.
Page 225: Chapter 6 Manage Device Security
Manage Device Security Use the features available from the Security navigation tab to configure management security settings for port, user, and server security. The Security tab contains links to the features described in the following sections. • Management Security Settings •...
Page 226: Management Security Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Management Security Settings From the Management Security menu, you can access the pages that are described in the following sections: • Change the Password on page 226 • Reset the Password to the Factory Default Value on page 227 •...
Page 227: Reset The Password To The Factory Default Value
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The entered password is displayed in dots. Passwords are up to 20 alphanumeric characters in length, and are case sensitive. In the Confirm Password field, enter the password again to confirm that you entered it correctly.
Page 228: Configure Radius Servers
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Note: If you forget the password and are unable to log in to the switch management interface, press the Factory Defaults button on the front panel of the switch for more than two seconds. The device reboots, and all switch settings, including the password, are reset to the factory default values.
Page 229 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual  To configure the global RADIUS server settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 230: Configure A Radius Authentication Server On The Switch
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From he Accounting Mode menu, select to disable or enable RADIUS accounting on the server. The default is Disabled. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
Page 231: Modify The Settings For A Radius Authentication Server On The Switch
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Server Address field, specify the IP address of the RADIUS server. In the Authentication Port field, specify the UDP port number the server uses to verify the RADIUS server authentication. The valid range is from 1 to 65535.
Page 232: Remove A Radius Authentication Server From The Switch
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The Server Configuration page displays. Select the check box for the server. Modify the configuration for the selected server. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
Page 233: Configure A Radius Accounting Server
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure a RADIUS Accounting Server You can configure various settings for a single RADIUS accounting server on the network. RADIUS accounting is supported for both AAA and 802.1x sessions. Add a RADIUS Accounting Server to the Switch ...
Page 234: Modify The Settings For A Radius Accounting Server On The Switch
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Modify the Settings for a RADIUS Accounting Server on the Switch  To modify the settings for a RADIUS accounting server on the switch: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 235: Configure Tacacs+ Servers
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Delete button. All fields are set to their defaults. Configure TACACS+ Servers TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. TACACS+ provides the following services: •...
Page 236 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Key String field, specify the authentication and encryption key for TACACS+ communications between the switch and the TACACS+ server. The valid range is 0–128. The key must match the key configured on the TACACS+ server.
Page 237 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the TACACS+ Server field, enter the TACACS+ server IP address. In the Priority field, specify the priority for the TACACS+ server. The priority determines the order in which the TACACS+ servers are contacted when attempting to authenticate a user.
Page 238: Configure Authentication Lists
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select Security > Management Security > TACACS+ > TACACS+ Server Configuration. The TACACS+ Server Configuration page displays. Select the check box for the server. Modify the configuration for the selected accounting server. Click the Apply button.
Page 239 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Security > Management Security > Authentication List menu, you can access the pages that are described in the following sections: • Configure an HTTP Authentication List on page 239 •...
Page 240 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • RADIUS. The user’s ID and password are authenticated using the RADIUS server. If you select RADIUS or TACACS+ as the first method and an error occurs during the authentication, the switch uses Method 2 to authenticate the user. •...
Page 241 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select the check box for the httpsList name. From the menu in the 1 column, select the authentication method that must be used first in the selected authentication login list. If you select a method that does not time out as the first method, such as Local or None, you cannot configure a second and third method.
Page 242: Configure Management Access
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Management Access You can configure HTTP and secure HTTP access to the switch management interface. You can also configure access control profiles and access rules. From the Security > Management Security > Access menu, you can access the pages that are described in the following sections: •...
Page 243: Configure Https Settings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual After the session is inactive for the configured time, you are automatically logged out and must reenter the password to access the management interface. A value of zero means that the session does not time out. Click the Apply button.
Page 244: Manage The Certificate
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual This enables or disables the administrative mode of secure HTTP (HTTPS). The configured value is displayed. The default value is Disable. You can download SSL certificates only when the HTTPS admin mode is disabled. HTTPS admin mode can be enabled only if a certificate is present on the device.
Page 245 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select the Generate Certificates radio button. Click the Apply button. The switch generates a certificate. The Certificate Generation Status field shows progress information. Import a Certificate  To import a certificate: Connect your computer to the same network as the switch.
Page 246 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Generate a Certificate Request  To generate a certificate request: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 247: Configure Access Control
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 248 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The System Information page displays. Select Security > Access > Access Control > Access Profile Configuration. In the Access Profile Name field, enter a name for the access profile. The maximum length is 32 characters. Click the Apply button.
Page 249 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Rule Type menu, select Permit or Deny to permit or deny access when the selected rules are matched. A Permit rule allows access by traffic that matches the rule criteria. A Deny rule blocks traffic that matches the rule criteria.
Page 250 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Security > Access > Access Control > Access Rule Configuration. The Access Rule Configuration page displays. Select the check box for the access rule.
Page 251 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Activate or Deactivate an Access Control Profile and View the Profile Summary After you set up an access profile and add access rules to the profile, you must activate the profile to be able to use it.
Page 252 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the nonconfigurable data that is displayed. Table 54. Access profile configuration profile summary Field Description Rule Type The action performed when the rules are matched. Service Type The service type chosen.
Page 253: Configure Port Authentication
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Port Authentication With port-based authentication, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions (unless dynamic VLAN assignment is enabled on port, in which case user authentication occurs individually).
Page 254 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The System Information page displays. Select Security > Port Authentication > Basic > 802.1X Configuration. To enable the 802.1X administrative mode on the switch, select the Port Based Authentication State Enable radio button. The default value is Disable.
Page 255: Manage Port Authentication
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The updated configuration is sent to the switch. Configuration changes take effect immediately. Manage Port Authentication Use the Port Authentication page to enable and configure port access control on one or more ports.
Page 256 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Specify the following settings: • Port Control. Defines the port authorization state. The control mode is set only if the link status of the port is link up. Select one of the following options: Auto.
Page 257 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Supplicant Timeout. Specify the supplicant time-out for the selected port. The supplicant time-out is the value, in seconds, after which the supplicant times out. The valid range is 1–65535 seconds, and the default is 30 seconds. •...
Page 258: View The Port Summary
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View the Port Summary Use the Port Summary page to view summary information about the port-based authentication settings for each port.  To view the port summary: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 259: View The Client Summary
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 56. Port summary (continued) Field Description Operating Control The control mode under which the port is actually operating. Possible values are as follows: Mode • ForceUnauthorized • ForceAuthorized • Auto •...
Page 260: Set Up Traffic Control
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the fields on the Client Summary page. Table 57. Client Summary information Field Description Port The port to be displayed. User Name The user name representing the identity of the supplicant device. Supplicant Mac Address The supplicant’s device MAC address.
Page 261 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 262: Configure Port Security
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Port Security Port security lets you lock one or more ports on the switch. When a port is locked, only packets with an allowable source MAC addresses can be forwarded. All other packets are discarded.
Page 263 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select which type of ports display onscreen: • To display physical ports only, click the PORTS link. • To display LAGs only, click the LAGS link. • To display both physical ports and LAGs, click the All link. Select one or more ports by taking one of the following actions: •...
Page 264 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The System Information page displays. Select Security > Traffic Control > Port Security > Port Security Configuration. The Port Security Configuration page displays. Make sure that port security is globally enabled. For more information, see Configure 802.1X Settings for a Port on page 255.
Page 265: Configure Protected Ports
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The Number of Dynamic MAC Addresses Learned field displays the number of dynamically learned MAC addresses on a specific port. To refresh the page with the latest information about the switch, click the Update button. Configure Protected Ports If a port is configured as protected, it does not forward traffic to any other protected port on the switch, but it does forward traffic to unprotected ports.
Page 266: Configure Private Vlans
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure Private VLANs A private VLAN contains switch ports that cannot communicate with each other, but can access another network. These ports are called private ports. Each private VLAN contains one or more private ports and a single uplink port or uplink aggregation group.
Page 267 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Private VLAN Type menu, select the type of private VLAN. Possible values are as follows: • Unconfigured. Sets the private VLAN type as unconfigured. This is the default selection.
Page 268 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Secondary VLAN(s) field, enter the VLAN that you want to associate with the primary VLAN. You can specify statically created VLANs (excluding the primary and default VLANs). You can associate a single, isolated VLAN and multiple community VLANs with the selected primary VLAN.
Page 269 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the interface, or type the interface number in the Go To Interface field and click the Go button. •...
Page 270 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Security > Traffic Control > Private Vlan > Private Vlan Host Interface Configuration.
Page 271 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Configure a Private VLAN Promiscuous Interface  To configure a private VLAN promiscuous interface: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 272: Configure Access Control Lists
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The range of the VLAN ID is 2–4093. You can enter only a VLAN that you previously configured as a primary VLAN (see Configure the Private VLAN Type on page 266). In the Promiscuous Secondary VLAN field, enter the secondary VLAN ID for promiscuous association mode.
Page 273: Use The Acl Wizard To Create A Simple Acl
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Configure an IP ACL on page 287 • Configure Rules for a Basic IP ACL on page 289 • Configure Rules for an Extended IP ACL on page 292 •...
Page 274 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the ACL Type menu, select the type of ACL. You can select from the following ACL types: • ACL Based on Destination MAC. Creates an ACL based on the destination MAC address, destination MAC mask, and VLAN.
Page 275 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the Rule ID field, enter a whole number in the range of 1 to 50 that is used to identify the rule. From the Action menu, select Permit or Deny to specify the action that must be taken if a packet matches the rule’s criteria.
Page 276 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual ACL Based On Fields Destination IPv6 L4 Port • Destination L4 port (protocol). Specify the destination IPv6 L4 port protocol. • Destination L4 port (value). Specify the destination IPv6 L4 port value. Source IPv6 L4 Port •...
Page 277 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Security > ACL > ACL Wizard. The ACL Wizard page displays. Select check box for the rule.
Page 278: Configure A Basic Mac Acl
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual For information about the ACL Wizard, see Use the ACL Wizard to Create a Simple ACL page 273. Configure a Basic MAC ACL A MAC ACL consists of a set of rules that are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken, and the additional rules are not checked for a match.
Page 279 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 280: Configure Mac Acl Rules
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select Security > ACL > Basic > MAC ACL. The MAC ACL page displays. Select check box for the rule. In the Name field, specify the new name. Click the Apply button. The updated configuration is sent to the switch.
Page 281 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Add a Rule to a MAC ACL  To add a rule to a MAC ACL: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 282 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The MAC address mask specifies which bits in the destination MAC to compare against an Ethernet frame. Use Fs and 0s in the MAC mask, which is in a wildcard format. An F means that the bit is not checked, and a 0 in a bit position means that the data must equal the value given for that bit.
Page 283 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Logging menu, select whether to enable or disable logging. When set to Enable, logging is enabled for this ACL rule (subject to resource availability on the switch). If the access list trap flag is also enabled, periodic traps are generated, indicating the number of times the rule was evoked during the report interval.
Page 284: Configure Mac Bindings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 285 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the ACL ID menu, select a MAC ACL. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface. In the Sequence Number field, optionally specify a number to indicate the order of the access list relative to other access lists already assigned to the interface and direction.
Page 286: View Or Delete Mac Acl Bindings In The Mac Binding Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 59. Interface Binding Status table (continued) Field Description ACL Type The type of ACL assigned to the selected interface and direction. ACL ID The ACL number (for an IP ACL) or ACL name for a MAC ACL) identifying the ACL assigned to the selected interface and direction.
Page 287: Configure An Ip Acl
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the information that is displayed in the MAC Binding Table. Table 60. MAC Binding Table Field Description Interface The interface of the ACL assigned. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
Page 288 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the IP ACL ID field, specify the ACL ID, which depends on the IP ACL type. The IP ACL ID is an integer in the following range: • 1–99. Creates a basic IP ACL, which allows you to permit or deny traffic from a source IP address.
Page 289: Configure Rules For A Basic Ip Acl
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select the check box for the IP ACL. Click the Delete button. The IP ACL is removed. Configure Rules for a Basic IP ACL Use the IP Rules page to define rules for IP-based standard ACLs (basic ACLs). The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded.
Page 290 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If one or more rules exist for the ACL, the rules display in the Basic ACL Rule Table. From the ACL ID menu, select the IP ACL for which you want to add a rule. For basic IP ACLs, this must be an ID in the range from 1 to 99.
Page 291 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The new rule is added to the Basic ACL Rule Table on the IP Rules page and the fields on the Standard ACL Rule Configuration (1-99) page are automatically cleared so that you can add another rule (if you want to).
Page 292: Configure Rules For An Extended Ip Acl
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Security > ACL > Advanced > IP Rules. The IP Rules page displays.
Page 293 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following figure does not show all columns. If one or more rules exist for the ACL, the rules display in the Extended ACL Rule Table. From the ACL ID/Name menu, select the IP ACL for which you want to add a rule. For extended IP ACLs, this must be an ID in the range from 101 to 199.
Page 294 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual report interval is used for the switch. A trap is not issued if the ACL rule hit count is zero for the current interval. • Match Every. From the Match Every menu, select whether all packets must match the selected IP ACL rule: False.
Page 295 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual subnet, enter 0.0.0.255 in the Dst IP Mask field. This field is required when you configure a destination IP address. • Destination L4 port. The options are available only when the protocol is set to TCP or UDP.
Page 296: Configure An Ipv6 Acl
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Modify the extended IP ACL rule criteria. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Delete an Extended IP ACL Rule ...
Page 297 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Add an IPv6 ACL  To add an IPv6 ACL: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 298: Configure Ipv6 Rules
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Delete an IPv6 ACL  To delete an IPv6 ACL: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 299 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The default password is password. The System Information page displays. Select Security > ACL > Advanced > IPv6 Rules. The following figure does not show all columns. From the ACL Name menu, select the IPv6 ACL for which you want to add a rule. An IPv6 ACL can contain up to 50 rules.
Page 300 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Match Every. Select whether all packet must match the selected IPv6 ACL rule: Disable. Not all packets need to match the selected IPv6 ACL rule. You can configure other match criteria on the page. Enable.
Page 301 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Modify the Match Criteria for an IPv6 ACL Rule  To modify the match criteria for an IPv6 ACL rule: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 302: Configure Ip Acl Interface Bindings
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The System Information page displays. Select Security > ACL > Advanced > IPv6 Rules. The IPv6 Rules page displays. From the ACL Name menu, select the ACL that includes the rule that you want to delete. In the IPv6 ACL Rules Table, select the check box for the rule.
Page 303 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the ACL ID menu, select an existing IP ACL for which you want to add an IP ACL interface binding. The fixed selection from the Direction menu is Inbound, which means that ACL rules are applied to traffic entering the interface.
Page 304: View Or Delete Ip Acl Bindings In The Ip Acl Binding Table
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the nonconfigurable information displayed on the page. Table 62. Interface Binding Status table information Field Description Interface The selected interface. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
Page 305 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the information displayed in the IP ACL Binding Table. Table 63. IP Binding Table information Field Description Interface The interface. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
Page 306: Chapter 7 Monitor The System
Monitor the System Use the features available from the Monitoring navigation tab to view a variety of information about the switch and its ports and to configure how the switch monitors events. The Monitoring tab contains configuration menus described in the following sections. •...
Page 307: Monitor The Switch And The Ports
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Monitor the Switch and the Ports The pages available from the Monitoring > Ports menu contain a variety of information about the number and type of traffic transmitted from and received on the switch. From the Monitoring >...
Page 308 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Click the Update button to refresh the page with the latest information about the switch. Click the Clear button to clear all the statistics counters, resetting all switch summary and detailed statistics to default values.
Page 309: View Port Statistics
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 64. Switch statistics information (continued) Field Description Broadcast Packets The total number of packets that higher-level protocols requested be Transmitted transmitted to the broadcast address, including those that were discarded or not sent.
Page 310 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select which type of interfaces display onscreen: • To display physical ports only, click the PORTS link. • To display LAGs only, click the LAGS link. • To display both physical ports and LAGs, click the All link. To view information about a single interface, type the interface number in the Go To Interface field, and click the Go button.
Page 311: View Detailed Port Statistics
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The System Information page displays.  Select Monitoring Ports > Port Statistics. The Port Statistics page displays. Select which type of interfaces display onscreen: • To display physical ports only, click the PORTS link. •...
Page 312 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Interface menu, select the interface for which you want to view the statistics. From the MST ID menu, select the MST ID associated with the interface (if available). To view more fields, move the gray bar on the right of the page to the bottom of the page.
Page 313 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 66. Detailed port statistics (continued) Field Description Port Channel ID If the port is a member of a port channel, the port channel’s interface ID and name are shown. Otherwise, Not a LAG member is shown. Port Role Each MST bridge port that is enabled is assigned a port role for each spanning tree.
Page 314 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 66. Detailed port statistics (continued) Field Description Packets Received 256-511 The total number of packets (including bad packets) received that were between Octets 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).
Page 315 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 66. Detailed port statistics (continued) Field Description 802.3x Pause Frames A count of MAC control frames received on this interface with an opcode Received indicating the PAUSE operation. This counter does not increment when the interface is operating in half-duplex mode.
Page 316: View Eap Statistics
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View EAP Statistics Use the EAP Statistics page to display information about Extensible Authentication Protocol (EAP) packets received on a specific port.  To view EAP statistics and clear the statistics: Connect your computer to the same network as the switch.
Page 317: Perform A Cable Test
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The following table describes the EAP statistics displayed on the page. Table 67. EAP Statistics information Field Description Port Selects the port to be displayed. When the selection is changed, a page update occurs causing all fields to be updated for the newly selected port.
Page 318 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 319: Configure And View Logs
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Table 68. Cable Test information (continued) Field Description Cable Length The estimated length of the cable in meters. The length is displayed as a range between the shortest estimated length and the longest estimated length.
Page 320 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Monitoring > Logs > Buffered Log. Select one of the following Admin Status radio buttons: •...
Page 321: Manage The Flash Log
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Description (http connection for user admin, source 10.5.70.19 destination 10.5.234.201 TERMINATED in the first example; http connection for user admin, source 10.5.70.19 destination 10.5.234.201 ACCEPTED in the second example.) To refresh the page with the latest information about the switch, click the Update button.
Page 322 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Log messages with the selected severity level and all log messages of greater severity are sent to the host. For example, if you select Error, the logged messages include Error, Critical, Alert, and Emergency.
Page 323: Manage The Server Log
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Manage the Server Log You can allow the switch to send log messages to remote logging hosts configured on the switch. Add a Remote Syslog Host A remote syslog host is the same as a remote log server. ...
Page 324 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Critical. The third-highest warning level. A critical log is saved if a critical device malfunction occurs, for example, two device ports are not functioning, while the rest of the device ports remain functional. Error.
Page 325: View The Trap Logs
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Delete the Settings for a Remote Syslog Host  To delete the settings for a remote syslog host: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 326: Configure Port Mirroring
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The System Information page displays. Select Monitoring > Logs > Trap Logs. The Trap Logs page displays. The page shows the number of traps that occurred since the switch last rebooted. To refresh the page with the latest information about the switch, click the Update button.
Page 327 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Select one or more source ports by taking one of the following actions: • To configure a single port as the source port, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
Page 328: View The System Resource Utilization
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual View the System Resource Utilization The switch uses Ternary Content Addressable Memory (TCAM) to support packet actions at wire speed. TCAM holds rules that are produced by various applications. The maximum number of TCAM rules that can be allocated by all applications on the switch is 2048.
Page 329 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual To refresh the page with the latest information about the switch, click the Update button. The following table describes the nonconfigurable information displayed on the page. Table 70. System Resource Utilization and Used Resources information Field Description System Resources Utilization...
Page 330: Chapter 8 Maintenance
Maintenance The Maintenance tab contains configuration menus described in the following sections. • Reboot the Switch • Reset the Switch to Its Factory Default Settings • Upload a File From the Switch • Download a File to the Switch • Manage Files •...
Page 331: Reboot The Switch
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Reboot the Switch Use the Device Reboot page to reboot the switch.  To reboot the switch: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 332: Upload A File From The Switch
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual  To reset the switch to the factory default settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 333: Upload A File To The Tftp Server
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Upload a File to the TFTP Server Use the TFTP File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to a TFTP server on the network. ...
Page 334: Http File Upload
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Server Address Type menu, select the format for the Server Address field: • IPv4. Indicates that the TFTP server address is an IP address in dotted-decimal format. This is the default setting. •...
Page 335: Upload A File From The Switch To A Usb Device
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the File Type menu, the only option is Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed. The most common usage of text-based configuration is to upload a working configuration from a device, edit it offline to personalize it for another similar device (for example, change the device name or IP address), and download it to that device.
Page 336: Download A File To The Switch
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the File Type menu, select the type of file: • Archive. The archive is the system software image. The device boots and runs from the active image. If the active image is corrupted, the system automatically boots from the nonactive image.
Page 337 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual You can also download files by using HTTP. See Download a File to the Switch Using HTTP on page 338 for additional information.  To download a file to the switch from a TFTP server: Connect your computer to the same network as the switch.
Page 338: Download A File To The Switch Using Http
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the Server Address Type menu, select the format for the TFTP Server IP field: • IPv4. Indicates that the TFTP server address is an IP address in dotted-decimal format. This is the default setting. •...
Page 339 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual From the File Type menu, select the type of file: • Archive. The archive is the system software image. The device boots and runs from the active image. If the active image is corrupted, the system automatically boots from the nonactive image.
Page 340: Download A File From A Usb Device
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Download a File From a USB Device Use the USB File Download page to download a file to the switch from a USB device.  To download a file from a USB device: Connect your computer to the same network as the switch.
Page 341: Manage Files
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the File Path field, enter the path for the file to be downloaded. You can enter up to 32 characters. Include the slash or backslash at the end of the path. A path name with a space is not accepted.
Page 342: View The Dual Image Status
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10. The login window opens. Enter the switch’s password in the Password field. The default password is password.
Page 343 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 344: Troubleshooting
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Troubleshooting You can use a ping or a traceroute, and you can perform a memory dump. The Maintenance > Troubleshooting menu contains links to the features described in the following sections. •...
Page 345: Ping An Ipv6 Address
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual In the IP Address/Host Name field, enter the IP address or host name of the device that must be pinged. The maximum number of characters in a name is 160. In the Count field, enter the number of echo requests that must be sent.
Page 346 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 10.
Page 347: Send An Ipv4 Traceroute
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Send an IPv4 Traceroute Use this page to tell the switch to send a traceroute request to a specified IP address or host name. You can use this to discover the paths that packets take to a remote destination. Once you click the Apply button, the switch sends a traceroute and the results are displayed below the configurable data.
Page 348: Send An Ipv6 Traceroute
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The range is 1 to 255. The default value is 30. In the Init TTL field, enter the initial TTL to be used. The range is 1 to 255. The default value is 1. In the MaxFail field, enter the maximum number of failures allowed in the session.
Page 349 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The default password is password. The System Information page displays. Select Maintenance > Troubleshooting > Traceroute IPv6. In the IPv6 Address/Host Name field, enter the IPv6 address or host name of the device for which the path must be discovered.
Page 350: Generate Technical Support Information
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If a reply to the traceroute is received, a message similar to the following one is displayed: 1 a:b:c:d:e:f:g 9869 usec 9775 usec 10584 usec 2 0:0:0:0:0:0:0:0 0 usec * 0 usec * 0 usec * Hop Count = p Last TTL = q Test attempt = r Test Success = s.
Page 351: Enable Remote Diagnostics
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Enable Remote Diagnostics Use the Remote Diagnostics page to enable or disable the option to access the switch remotely to perform diagnostics services, for example, through a Telnet connection.  To enable remote diagnostics: Connect your computer to the same network as the switch.
Page 352: Appendix A Configuration Examples
Configuration Examples This appendix contains information about how to configure the following features. The appendix covers the following topics: • Virtual Local Area Networks (VLANs) • Access Control Lists (ACLs) • Differentiated Services (DiffServ) • 802.1X • MSTP • VLAN Routing Interface Configuration Example...
Page 353: Virtual Local Area Networks (Vlans)
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router.
Page 354: Vlan Configuration Examples
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged.
Page 355: Access Control Lists (Acls)
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20. Access Control Lists (ACLs) ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources.
Page 356: Sample Standard Ip Acl Configuration
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • CoS. 0 • Destination MAC. 01:02:1A:BC:DE:EF • Destination MAC Mask. 00:00:00:00:FF:FF • Source MAC. 02:02:1A:BC:DE:EF • Source MAC Mask. 00:00:00:00:FF:FF • VLAN ID. 2 For more information about MAC ACL rules, see Configure MAC ACL Rules page 280.
Page 357: Differentiated Services (Diffserv)
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual On the IP Rules page, create a second rule for IP ACL 1 with the following settings: • Rule ID. 2 • Action. Permit • Match Every. True Click the Add button. On the IP Binding Configuration page, assign ACL ID 1 to ports 2, 3, and 4, and assign a sequence number of 1.
Page 358: Class
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual The DiffServ feature contains a number of conceptual QoS building blocks that you can use to construct a differentiated service network. Use these same blocks in different ways to build other types of QoS architectures.
Page 359: Creating Policies
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Creating Policies Use DiffServ policies to associate a collection of classes that you configure with one or more QoS policy statements. The result of this association is referred to as a policy. From a DiffServ perspective, two types of policies exist: •...
Page 360: Diffserv Example Configuration
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual user, but are designed into the system based on the DiffServ policy being created. For more information, see Monitor the Switch and the Ports on page 307. • Assigning QoS Queue. Directs a traffic stream to the specified QoS queue. This allows a traffic classifier to specify which one of the supported hardware queues are used for handling packets belonging to the class.
Page 361: 361
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Committed Burst Size. 128 KB • Confirm Action. Send • Violate Action. Drop For more information about this page, see Configure a DiffServ Policy on page 216. On the Service Configuration page, select the check box next to interfaces xg7 and xg8 to attach the policy to these interfaces, and then click the Apply button.
Page 362 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Note: You can use QoS features to provide rate limiting on the guest VLAN to limit the network resources that the guest VLAN provides. Another 802.1X feature is the ability to configure a port to enable or disable EAPoL packet forwarding support.
Page 363: 802.1X Example Configuration
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual Figure 1. 802.1X authentication roles 802.1X Example Configuration This example shows how to configure the switch so that 802.1X-based authentication is required on the ports in a corporate conference room (xg1–xg8). These ports are available to visitors and must be authenticated before access is granted to the network.
Page 364: Mstp
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual • Secret. secret123 • Active. Primary For more information, see Configure RADIUS Servers on page 228. Click the Add button. On the Authentication List page, configure the default list to use RADIUS as the first authentication method.
Page 365 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual LAN with respect to frames consistently classified as belonging to any given VLAN thus simply and fully connects all LANs and networking devices throughout the network, though frames belonging to different VLANs can take different paths within any region, per IEEE DRAFT P802.1s/D13.
Page 366: Mstp Example Configuration
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual MSTP Example Configuration This example shows how to create an MSTP instance from the switch. The example network includes three different switches that serve different locations in the network. In this example, ports xg1–xg5 are connected to host stations, so those links are not subject to network loops.
Page 367: Vlan Routing Interface Configuration Example
ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual If you do not specify a root bridge and all switches are assigned the same bridge priority value, the switch with the lowest MAC address is elected as the root bridge (see Configure CST Settings on page 120).
Page 368 ProSAFE 10-Gigabit Smart Managed Switch XS728T and XS748T User Manual When a port is enabled for bridging (the default) rather than routing, all normal bridge processing is performed for an inbound packet, which is then associated with a VLAN. Its MAC destination address (MAC DA) and VLAN ID are used to search the MAC address table.
Page 369: Appendix B Hardware Specifications And Default Settings
Hardware Specifications and Default Settings This appendix describes the hardware specifications and default settings for the switch and for its software features. The appendix covers the following topics: • Hardware Specifications and Switch Characteristics • Switch Features and Default Settings...
Page 370: Hardware Specifications And Switch Characteristics
ProSAFE 28-Port and 48-Port 10-Gigabit Smart Managed Switch Models XS728T and XS748T Hardware Specifications and Switch Characteristics Table 72. Hardware specifications and switch characteristics Feature Description XS728T interfaces 28 1000/10000 Mbps switching ports: • Ports xg1–xg24 are copper ports (RJ45). •...
Page 371: Switch Features And Default Settings
ProSAFE 28-Port and 48-Port 10-Gigabit Smart Managed Switch Models XS728T and XS748T Switch Features and Default Settings Table 73. Switch features and default settings Feature Sets Supported Default Setting Auto negotiation/static All ports Auto-negotiation speed/duplex Auto MDI/MDIX Enabled 802.3x flow control/back pressure 1 (per system) Disabled Port mirroring...
Page 372 ProSAFE 28-Port and 48-Port 10-Gigabit Smart Managed Switch Models XS728T and XS748T Table 73. Switch features and default settings (continued) Feature Sets Supported Default Setting Password control access Idle time-out is 10 minutes The password is password Management security 1 profile with 20 rules for All IP addresses allowed HTTP/HTTPS/SNMP access to allow or deny an IP address or...
Page 373 ProSAFE 28-Port and 48-Port 10-Gigabit Smart Managed Switch Models XS728T and XS748T Table 73. Switch features and default settings (continued) Feature Sets Supported Default Setting Filter multicast control Disabled Number of static routes 64 for IPv4 and IPv6, respectively Number of routed VLANs 32 for IPv4 and IPv6, respectively Number of ARP cache entries 1024...

This manual is also suitable for:

Prosafe xs748t

NETGEAR ProSafe XS728T User Manual

Chapter 1 Get Started

Chapter 2 Configure System Information

Chapter 3 Configure Switching

View the MFDB Statistics

Configure Auto-Video

IGMP Snooping Overview

Configure the Global IGMP Snooping Settings

Configure IGMP Snooping for Vlans

View the IGMP Snooping Table

Modify IGMP Snooping Settings for a VLAN

IGMP Snooping Querier Overview

Configure IGMP Snooping Querier

Configure IGMP Snooping Querier for Vlans

Display the IGMP Snooping Querier for VLAN Status

MLD Snooping Overview

Configure the Global MLD Snooping Settings

Configure MLD Snooping for a VLAN

Configure a Multicast Router Interface on a VLAN

Configure MLD Snooping Querier

Configure MLD Snooping Querier VLAN Settings

Description

Configure a Multicast Group

Chapter 4 Configure Routing

Chapter 5 Configure Quality of Service

Chapter 6 Manage Device Security

Configure the Global RADIUS Server Settings

Configure a RADIUS Authentication Server on the Switch

Add a Primary or Secondary RADIUS Authentication Server to the Switch

Modify the Settings for a RADIUS Authentication Server on the Switch

Remove a RADIUS Authentication Server from the Switch

Configure a RADIUS Accounting Server

Add a RADIUS Accounting Server to the Switch

Modify the Settings for a RADIUS Accounting Server on the Switch

Remove a RADIUS Accounting Server from the Switch

Chapter 7 Monitor the System

Chapter 8 Maintenance

Appendix A Configuration Examples

Appendix B Hardware Specifications and Default Settings

Quick Links

Related Manuals for NETGEAR ProSafe XS728T

Summary of Contents for NETGEAR ProSafe XS728T