Page 1 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch U se r Man ua l M o de l s GS3 0 8 T GS3 1 0 TP January 2019 202-11890-01 350 East Plumeria Drive San Jose, CA 95134...
Page 2 Do not use this device outdoors. If you connect cables or devices that are outdoors to this device, see http://kb.netgear.com/000057103 for safety and warranty information. Trademarks © NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes only. Revision History Publication Part Number...
Page 3: Table Of Contents
Use the NETGEAR Switch Discovery Tool to Access the Switch ... . . 17 Use the NETGEAR Insight Mobile App to Discover the Switch ....18 About the User Interfaces .
Page 4 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the PoE Port Settings........65 Configure SNMP .
Page 5 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure Auto-VoIP OUI-Based Properties ......127 Configure the OUI-Based Port Settings .
Page 6 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure and Display Global DiffServ Settings ..... . 180 Configure a DiffServ Class .
Page 7 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View Switch Statistics ..........280 View Port Statistics.
Page 8 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Appendix B Specifications and Default Settings Switch Default Settings ..........341 General Feature Default Settings .
Page 9: Chapter 1 Get Started
Get Started This user manual describes how you can configure and operate the NETGEAR S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch by using the local browser–based management interface. The manual describes the software configuration procedures and explains the options that are available within those procedures for the following models: •...
Page 10 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In this manual, the local browser–based management interface is referred to as the local browser interface. For more information about the topics covered in this manual, visit the support website at netgear.com/support.
Page 11: Switch Management Interface Overview
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Switch Management Interface Overview The switch provides administrative management options that let you configure, monitor, and control the network. Using the local browser interface, in this manual referred to as the local...
Page 12: Discover A Switch In A Network With A Dhcp Server
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Static assignment by connecting from a local host. If you do not want to use the Smart Control Center to assign a static address, you can connect to the switch from a computer in the 192.168.0.0/24 network and change the settings by using the local...
Page 13: Discover A Switch In A Network Without A Dhcp Server
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select your switch by clicking the line that displays the switch. Click the Web Browser Access button. The Smart Control Center launches a browser that displays the login page of the selected device.
Page 14: Configure The Network Settings On Your Computer
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Type your password to continue with the configuration change. Tip: You must enter the current password each time that you use the Smart Control Center to update the switch settings. The default password is password.
Page 15 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP  To modify the network settings on your computer: Open the Control Panel and click the Network and Sharing Center option. Click the Local Area Connection link.
Page 16 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP WARNING: When you change the IP address of your computer, you lose your connection to the rest of the network. Be sure to write down your current network address settings before you change them.
Page 17: Use The Netgear Switch Discovery Tool To Access The Switch
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Use the NETGEAR Switch Discovery Tool to Access the Switch For easiest access, we recommend that you cable the switch to a network with a router or DHCP server that assigns IP addresses, power on the switch, and then use a computer that is connected to the same network as the switch.
Page 18: Use The Netgear Insight Mobile App To Discover The Switch
The Switch Information page displays. Use the NETGEAR Insight Mobile App to Discover the Switch If the switch is connected to a WiFi router or access point, the NETGEAR Insight mobile app lets you discover the switch in your network. ...
Page 19: Software Requirements To Use The Local Browser Interface
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Software Requirements to Use the Local Browser Interface To access the switch by using a web browser, the browser must meet the following software requirements: • HTML version 4.0, or later •...
Page 20 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. The login window opens.
Page 21: Navigation Tabs, Configuration Menus, And Page Menu
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Navigation tabs Logout button Configuration menus Help page Buttons Page menu Configuration status and options Navigation Tabs, Configuration Menus, and Page Menu The navigation tabs along the top of the local browser interface give you quick access to the various switch functions.
Page 22: Configuration And Status Options
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Link Submenu links Configuration and Status Options The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.
Page 23: User-Defined Fields
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP User-Defined Fields User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page. All characters can be used except for the ones stated in the following table (unless specifically noted in a procedure for a feature).
Page 24: Use The Device View Of The Local Browser Interface
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Use the Device View of the Local Browser Interface The Device View displays the ports on the switch. This graphic tool provides an alternate way to navigate to configuration and monitoring options. The graphic tool also provides information about device ports, configuration and status, tables, and feature components.
Page 25: Power Led In The Device View
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP For model GS310TP, depending on the PoE status of the port, the right port LED and port color in the Device View are either green, yellow, or black: •...
Page 26: Interface Naming Conventions
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Solid yellow. Less than 7W of PoE power is available. • Blinking yellow. At least once during the previous two minutes, less than 7W of PoE power was available.
Page 27 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Use these links as follows: • To display all ports, click the 1 link. • To display all LAGs, click the LAG link. • To display all ports and LAGs, click the All link.
Page 28 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Apply button. Your settings are saved.  To configure a single LAG: Click the LAG link or the All link to display the LAGs. Select the check box next to the LAG number.
Page 29: Context-Sensitive Help And Access To The Support Website
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP  To configure all LAGs: Click the LAG link to display only the LAG interfaces. Select the check box in the heading row. The check box associated with every LAG is selected, and the rows for all LAGs are highlighted.
Page 30: Access The User Guide Online
The Support page displays. To access the NETGEAR support site for the switch, click the Apply button. Access the User Guide Online The user manual (the guide you are now reading) is available at the NETGEAR download center at netgear.com/support/download/. ...
Page 31: Register Your Product
To qualify for product updates and product warranty, we encourage you to register your product. The first time you log in to the switch, you can register with NETGEAR. Registration confirms that your email alerts work, lowers technical support resolution time, and ensures that your shipping address accuracy.
Page 32: Chapter 2 Configure System Information
Configure System Information This chapter covers the following topics: • View and Configure the Switch Management Settings • Use the Device View • Configure PoE • Configure SNMP • Configure LLDP • Configure DHCP Snooping • Set Up PoE Timer Schedules...
Page 33: View And Configure The Switch Management Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View and Configure the Switch Management Settings This section describes how to display the switch status and specify some basic switch information, such as the local browser interface IP address, system clock settings, and DNS information.
Page 34 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. The default is blank. •...
Page 35 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View the Software Versions You can view the software versions that are running on the switch.  To view the software versions: Connect your computer to the same network as the switch.
Page 36: View The System Cpu Status
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View the System CPU Status You can monitor the CPU, memory resources, and utilization patterns across various intervals to assess the performance, load, and stability settings of the switch.
Page 37 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes CPU Memory Status information. Table 6. CPU Memory Status information Field Description Total System Memory The total memory of the switch in KBytes.
Page 38: Configure The Ip Network And Vlan Settings For The Local Browser Interface
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Rising Interval. This utilization monitoring time period can be configured from 5 to 86400 seconds in multiples of 5 seconds. • Falling Threshold. Notification is triggered when the total CPU utilization falls below this level for a configured period of time.
Page 39 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The IP Configuration page displays. Select one of the following radio buttons to specify how the network information for the switch must be configured: • Static IP Address. Specifies that the IP address, subnet mask, and default gateway must be manually configured.
Page 40: Configure The Time Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the Time Settings The switch supports the Simple Network Time Protocol (SNTP). As its name suggests, it is a less complicated version of Network Time Protocol, which is a system for synchronizing the clocks of networked computer systems, primarily when data transfer is handled through the Internet.
Page 41 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Note: If you do not enter a date and time, the switch calculates the date and time using the CPU’s clock cycle. In the Time Zone Name field, specify the acronym for a time zone.
Page 42 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The System Information page displays. Select System > Management > Time > Time Configuration. The Time Configuration page displays. Select the Clock Source SNTP radio button. The local clock can be set to SNTP only if the following two conditions are met: •...
Page 43 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The allowed range is 1025 to 65535 and 123. The default value is 123. When the default value is configured, the actual client port value used in SNTP packets is assigned by the switch.
Page 44 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View the SNTP Global Status When you select the SNTP option as the clock source, you can view the SNTP global status.  To view the SNTP global status: Connect your computer to the same network as the switch.
Page 45 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table displays the nonconfigurable SNTP Global Status information. Table 7. SNTP Global Status information Field Description Version The SNTP version that the client supports. Supported mode The SNTP modes that the client supports.
Page 46 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following is an example of strata: • Stratum 0. A real-time clock is used as the time source, for example, a GPS system. • Stratum 1. A server that is directly linked to a Stratum 0 time source is used. Stratum 1 time servers provide primary network time standards.
Page 47 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > Management > Time > SNTP Server Configuration.
Page 48 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The SNTP Server Status table displays status information about the SNTP servers configured on your switch. The following table describes the SNTP Server Global Status information. Table 8. SNTP Server Status information...
Page 49 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > Management > Time > SNTP Server Configuration.
Page 50 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure Daylight Saving Time Settings You can configure settings for summer time, which is also known as daylight saving time. Used in some countries around the world, summer time is the practice of temporarily advancing clocks during the summer months.
Page 51 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Recurring EU. The system clock uses the standard recurring summer time settings used in countries in the European Union. When this option is selected, the rest of the applicable fields on the page are automatically populated and cannot be edited.
Page 52 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • If you select the DayLight Saving (DST) Non Recurring radio button, the fields in the following table are visible and you must configure them. Table 10. Daylight saving setting is Non Recurring...
Page 53 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The default password is password. The System Information page displays. Select System > Management > Time > DayLight Saving Configuration. To refresh the page, click the Update button.
Page 54: Configure Denial Of Service Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure Denial of Service Settings You can configure the Denial of Service (DoS) settings for the switch. The switch provides support for classifying and blocking specific types of DoS attacks.
Page 55 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure Denial of Service You can select which types of DoS attacks the switch monitors and blocks.  To configure individual DoS settings: Connect your computer to the same network as the switch.
Page 56 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Denial of Service Max ICMPv4 Packet Size. Specify the maximum ICMPv4 packet size allowed. If ICMPv4 DoS prevention is enabled, the switch drops IPv4 ICMP ping packets with a size greater than the configured value.
Page 57: Configure Dns Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure DNS Settings You can configure information about DNS servers that the network uses and how the switch operates as a DNS client. Configure Global DNS Settings and Add a DNS Server You can configure global DNS settings and DNS server information.
Page 58 When the system is performing a lookup on an unqualified host name, this field is provides the domain name (for example, if default domain name is netgear.com and the user enters test, then test is changed to test.netgear.com to resolve the name). The name must not be longer than 255 characters.
Page 59 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select System > Management > DNS > DNS Configuration. In the DNS Server Configuration table, select the check box for the DNS server. Note: If you do not select a DNS server, all the DNS servers are removed after you click the Delete button.
Page 60 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Remove an Entry From the Dynamic Host Mapping Table  To remove an entry from the Dynamic Host Mapping table: Connect your computer to the same network as the switch.
Page 61: Configure Green Ethernet Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > Management > DNS > Host Configuration.
Page 62 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > Management > Green Ethernet > Green Ethernet Configuration.
Page 63 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > Management > Green Ethernet > Green Ethernet Interface Configuration.
Page 64: Use The Device View
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Use the Device View For information about the device view, see Use the Device View of the Local Browser Interface on page 24. Configure PoE On model GS310TP, you can configure the global Power over Ethernet (PoE) configuration settings and the PoE settings for each port.
Page 65: Configure The Poe Port Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the System Usage Threshold field, enter a number from 1 to 99 to set the threshold level at which a trap is sent if the consumed power exceeds the threshold power.
Page 66 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select System > PoE > Advanced > PoE Port Configuration.
Page 67 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • 802.3at. The port is powered in the IEEE 802.3at mode and is backward compatible with IEEE 802.3af. The 802.3at mode is the default mode. In this mode, if the switch detects that the attached PD requests more power than IEEE 802.3af but is not an...
Page 68 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 15. PoE Port Configuration (continued) Field Description Class The class defines the range of power that a powered device (PD) is drawing from the switch. The class definitions are as follows: •...
Page 69: Configure Snmp
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure SNMP You can configure SNMP settings for SNMPv1/v2 and SNMPv3. The switch software supports the configuration of SNMP groups and users that can manage traps that the SNMP agent generates.
Page 70 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the Management Station IP Mask field, specify the subnet mask to associate with the management station IP address. Together, the management station IP address and the management station IP mask denote a range of IP addresses from which SNMP clients can use that community to access this device.
Page 71: Configure Snmpv1/V2 Trap Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select System > SNMP > SNMP V1/V2 > Community Configuration. The Community Configuration page displays. Select the check box next to the community. Update the desired fields.
Page 72 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Add an SNMP Trap Receiver  To add an SNMP trap receiver: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 73 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 74: Configure Snmpv1/V2 Trap Flags
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Delete button. The trap recipient is removed. Configure SNMPv1/v2 Trap Flags You can enable or disable traps that the switch can send to an SNMP manager. When the condition identified by an active trap is encountered by the switch, a trap message is sent to any enabled SNMP trap receivers, and a message is written to the trap log.
Page 75: View The Supported Mibs
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View the Supported MIBs You can view a list of all MIBs that are supported on the switch.  To view the supported MIBs: Connect your computer to the same network as the switch.
Page 76: Configure Snmp V3 Users
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure SNMP V3 Users Any user can connect to the switch using the SNMPv3 protocol, but for authentication and encryption, the switch supports only one user (admin). Therefore, you can create or modify only one profile.
Page 77: Configure Lldp
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. A network manager can view this information to identify system topology and detect bad configurations on the LAN.
Page 78 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 79: Configure Lldp Port Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure LLDP Port Settings You can specify per-interface LLDP settings.  To configure the LLDP interface: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 80: View The Lldp-Med Network Policy
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Use the following menus to configure the LLDP settings for the selected ports: • Admin Status. Select the status for transmitting and receiving LLDP packets: Tx Only. Enable only transmitting LLDP PDUs on the selected ports.
Page 81 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 82: Configure Lldp-Med Port Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure LLDP-MED Port Settings You can enable LLDP-MED mode on an interface and configure its properties.  To configure LLDP-MED settings for a port: Connect your computer to the same network as the switch.
Page 83: View The Local Information Advertised Through Lldp
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View the Local Information Advertised Through LLDP You can view the data that each port advertises through LLDP.  To view local LLDP information: Connect your computer to the same network as the switch.
Page 84 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Field Description Chassis ID The hardware platform identifier for the switch. System Name The user-configured system name for the switch. System Description The switch description, which includes information about the product model and platform.
Page 85: View Lldp Neighbors Information
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Field Description MED Details Capabilities Supported The MED capabilities enabled on the port. Current Capabilities The TLVs advertised by the port. Device Class Network Connectivity indicates that the device is a network connectivity device.
Page 86 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes the information that displays for all LLDP neighbors that were discovered. Field Description MSAP Entry The Media Service Access Point (MSAP) entry number for the remote device.
Page 87 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Field Description Managed Addresses Address SubType The type of the management address. Address The advertised management address of the remote system. Interface SubType The port subtype. Interface Number The port on the remote device that sent the information.
Page 88: Configure Dhcp Snooping
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Field Description Asset ID The asset ID advertised by the remote device. Location Information Civic The physical location, such as the street address, that the remote device advertised in the location TLV, for example, 123 45th St.
Page 89: Configure The Global Dhcp Snooping Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the Global DHCP Snooping Settings You can view and configure the global settings for DHCP snooping.  To configure the global DHCP snooping settings: Connect your computer to the same network as the switch.
Page 90: Enable Dhcp For All Interfaces In A Vlan
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Enable DHCP for All Interfaces in a VLAN  To enable DHCP snooping for all interfaces that are members of a VLAN: Connect your computer to the same network as the switch.
Page 91 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 92: Configure Static Dhcp Bindings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If the incoming rate of DHCP packets per second exceeds the configured burst interval per second, the port shuts down. If the rate limit value is None, he burst interval is also nonapplicable, and rate limiting is disabled.
Page 93: Configure Dhcp Snooping Persistent Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP This is the key to the binding database. From the VLAN ID menu, select the ID of the VLAN that the client is authorized to use. In the IP Address field, specify the IP address of the client.
Page 94: View Or Clear Dhcp Snooping Statistics
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The System Information page displays. Select System> Services > DHCP Snooping > Persistent Configuration. The Persistent Configuration page displays. Specify where the DHCP snooping bindings database is located.
Page 95: Set Up Poe Timer Schedules
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select System> Services > DHCP Snooping > Statistics. The DHCP Snooping Statistics page displays. Click the Clear button to clear all interfaces statistics. The following table describes the DHCP snooping statistics.
Page 96: Specify The Settings For An Absolute Poe Timer Schedule
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 97: Specify The Settings For A Recurring Poe Timer Schedule
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The Timer Schedule Configuration page displays. In the Timer Schedule Selection section, make your selections from the following menus: a. Timer Schedule Name. Select the name of the timer schedule that you want to configure.
Page 98 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 99: Change The Settings For A Recurring Poe Timer Schedule Entry
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the latter case, the schedule is triggered every specified number of days. If the number of days is not specified, or if you enter 0, then the schedule is triggered only once.
Page 100: Delete A Poe Timer Schedule Entry
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the Timer Schedule Name menu, select the schedule name. From the Timer Schedule Type menu, select the schedule type. From the Timer Schedule Entry menu, select the schedule entry.
Page 101: Delete A Poe Timer Schedule
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Delete a PoE Timer Schedule You can delete a PoE timer schedule that you no longer need. All entries that are part of the PoE timer schedule are also deleted.
Page 102: Chapter 3 Configure Switching
Configure Switching This chapter covers the following topics: • Configure the Port Settings and Maximum Frame Size • Configure Link Aggregation Groups • Configure VLANs • Configure Auto-VoIP • Configure Spanning Tree Protocol • Configure Multicast • View, Search, and Manage the MAC Address Table •...
Page 103: Configure The Port Settings And Maximum Frame Size
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the Port Settings and Maximum Frame Size You can view, configure, and monitor the physical port information for the ports (that is, the physical interfaces) on the switch.
Page 104 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the Admin Mode menu, select Enable or Disable. This selection specifies the administrative mode for port control. You must select Enable in order for the port to participate in the network. The default is Enable.
Page 105 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Symmetric. If the port buffers become full, the switch sends pause frames to stop traffic. Flow control helps to prevent data loss when the port cannot keep up with the number of frames being switched.
Page 106: Configure Link Aggregation Groups
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure Link Aggregation Groups Link aggregation groups (LAGs), which are also known as port channels, allow you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, which increases fault tolerance and provides load sharing.
Page 107 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the LAG Name field, enter a name for the LAG. You can enter any string of up to 15 alphanumeric characters. In the Description field, enter the description string to be attached to a LAG.
Page 108: Configure Lag Membership
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes the nonconfigurable information displayed on the page. Table 21. LAG Configuration information Field Description LAG ID Identification of the LAG. Active Ports Indicates the ports that are actively participating in the port channel.
Page 109: Set The Lacp System Priority
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The previous figure shows the LAG Membership page for model GS310TP. From the LAG ID menu, select the LAG ID. In the LAG Name field, enter the name to be assigned to the LAG.
Page 110: Set The Lacp Port Priority Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the LACP System Priority field, specify the switch’s link aggregation priority relative to the devices at the other ends of the links on which link aggregation is enabled.
Page 111: Configure Vlans
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the interface, or type the interface number in the Go To Interface field and click the Go button.
Page 112: Configure Vlan Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP You can define VLAN groups stored in the VLAN membership table. The switch supports up to 64 VLANs. The following VLANs are preconfigured on the switch and you cannot delete them: •...
Page 113 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the VLAN ID field, specify the VLAN identifier for the new VLAN. The range of the VLAN ID can be from 3 to 4093, excluding 4089. (The default VLANs are 1, 2, and 4089).
Page 114 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Delete button. The VLAN is removed. Reset the VLAN Configuration on the Switch to the Default Settings If you reset the VLAN configuration on the switch to the default settings, all VLANs that you added are deleted.
Page 115: Configure Vlan Membership
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure VLAN Membership  To configure VLAN membership: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 116 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the Group Operation menu, select one of the following options, which applies to all ports in the VLAN: • Untag All. For all ports and LAGs that are members of the VLAN, tags are removed from all egress packets.
Page 117: View The Vlan Status
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View the VLAN Status You can view the status of all currently configured VLANs.  To view the VLAN status: Connect your computer to the same network as the switch.
Page 118: Configure Port Pvid Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure Port PVID Settings You can assign a port VLAN ID (PVID) to an interface. The following requirements apply to a PVID: • By default, the PVID for each port is 1.
Page 119 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The default is 1. In the VLAN Member field, specify the VLAN ID or list of VLANs of a member port. VLAN IDs range from 1 to 4093. The default is 1. Use a hyphen (-) to specify a range or a comma (,) to separate VLAN IDs in a list.
Page 120: Configure A Mac-Based Vlan
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 24. Nonconfigurable fields on the PVID Configuration page (continued) Field Description Forbidden VLANs The number of forbidden VLANs for the interface. Dynamic VLANs The number of dynamically added VLANs for the interface.
Page 121 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the MAC Address field, enter a MAC address to be bound to a VLAN ID. This field is configurable only when a MAC-based VLAN is created.
Page 122: Configure Protocol-Based Vlan Groups
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure Protocol-Based VLAN Groups You can use a protocol-based VLAN to define filtering criteria for untagged packets. By default, if you do not configure any port-based (IEEE 802.1Q) or protocol-based VLANs, untagged packets are assigned to VLAN 1.
Page 123: Configure Protocol-Based Vlan Group Membership
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the Group Name field, enter a name for the new group. You can enter up to 16 characters. In the Protocol field, enter one or more protocols that must be associated with the group.
Page 124: Configure A Voice Vlan
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The previous figure shows the Protocol Based VLAN Group Membership page for model GS310TP. From the Group ID menu, select the protocol-based VLAN group ID. The Group Name field shows the name that is associated with the group.
Page 125 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 126: Configure Auto-Voip
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the CoS Override Mode field, select Disable or Enable. The default is Disable. In the Authentication Mode field, select Enable or Disable. The default is Enable. When the authentication mode is enabled, voice traffic is allowed on an unauthorized voice VLAN port.
Page 127: Configure Auto-Voip Oui-Based Properties
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 128: Configure The Oui-Based Port Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 129: Manage The Oui Table
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select Switching > Auto-VoIP > OUI-based > Port Settings. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
Page 130 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the OUI Table  To configure the OUI Table: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 131: Display The Auto-Voip Status
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 132: Configure Spanning Tree Protocol
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes the nonconfigurable Auto-VoIP status information. Table 25. Auto-VoIP status Field Description Auto-VoIP VLAN ID The Auto-VoIP VLAN ID. Maximum Number of Voice The maximum number of voice channels supported.
Page 133: Configure Stp Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure STP Settings The STP Configuration page contains fields for enabling STP on the switch.  To configure STP settings: Connect your computer to the same network as the switch.
Page 134 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The values can be from 0 to 65535. The default value is 0. e. Forward BPDU while STP Disabled. Enable or disable the bridge protocol data unit (BPDU) flood.
Page 135: Configure Cst Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure CST Settings You can configure a Common Spanning Tree (CST) and Internal Spanning Tree on the switch.  To configure CST settings: Connect your computer to the same network as the switch.
Page 136: Configure Cst Port Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP you set the priority to any value between 0 and 4095, the switch automatically sets the value to 0. The default value is 32768. • Bridge Max Age (secs). The bridge maximum age time for the Common and Internal Spanning Tree (CST), which indicates the time in seconds a bridge must wait before implementing a topological change.
Page 137 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP  To configure CST port settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 138: View The Cst Port Status
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The option is Enable or Disable. The default value is Disable. When BPDU forwarding is enabled, the switch forwards the BPDU traffic arriving on the port when STP is disabled on the port.
Page 139 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 140: View Rapid Stp Information
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 29. CST port status (continued) Field Description Designated Bridge The identifier of the bridge with the designated port. It is made up using the bridge priority and the base MAC address of the bridge.
Page 141: Manage Mst Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes the Rapid STP Status information displayed on the page. Table 30. Rapid STP status information Field Description Interface The physical or port channel interfaces associated with VLANs associated with the CST.
Page 142 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the MST values: • MST ID. Specify the ID of the MST to create. The range is from 1 to 4094. This is visible only when the select option of the MST ID select box is selected.
Page 143 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 144: Configure Mst Port Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select the check box for the instance. Click the Delete button. The MST instance is removed. Configure MST Port Settings You can configure and display the Multiple Spanning Tree (MST) settings on a specific port on the switch.
Page 145 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • To configure all interfaces with the same settings, select the check box in the heading row. Configure the MST values for the selected interfaces: • Port Priority. The priority for a particular port within the selected MST instance. The port priority is set in multiples of 16.
Page 146: View Stp Statistics
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 32. MST port status information (continued) Field Description Designated Cost The cost of the port participating in the STP topology. Ports with a lower cost are less likely to be blocked if STP detects loops.
Page 147: Configure Multicast
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes the information available about the STP Statistics page. Table 33. STP Statistics Field Description Interface The physical or LAG on the switch. STP BPDUs Received The number of STP BPDUs received at the selected port.
Page 148: View The Mfdb Statistics
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select Switching > Multicast > MFDB > MFDB Table. In the Search by MAC Address field, enter a MAC address. Enter six two-digit hexadecimal numbers separated by colons, for example 00:01:23:43:45:67.
Page 149: Configure The Auto-Video Multicast Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Switching > Multicast > MFDB > MFDB Statistics.
Page 150: Configure Igmp Snooping
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select one of the following radio buttons: • Select the Disable radio button to globally disable Auto-Video administrative mode for the switch. • Select the Enable radio button to globally enable Auto-Video administrative mode for the switch.
Page 151: Configure Igmp Snooping
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure IGMP Snooping You can configure the settings for IGMP snooping, which is used to build forwarding lists for multicast traffic.  To configure IGMP snooping: Connect your computer to the same network as the switch.
Page 152: Configure Igmp Snooping For Interfaces
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP To refresh the page with the latest information about the switch, click the Update button. The following table displays information about the global IGMP snooping status and statistics on the page.
Page 153 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
Page 154: View The Igmp Snooping Table
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View the IGMP Snooping Table You can view all of the entries in the Multicast Forwarding Database that were created for IGMP snooping.  To view the entries in the IGMP snooping table: Connect your computer to the same network as the switch.
Page 155: Configure Igmp Snooping For Vlans
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 37. IGMP Snooping Table information (continued) Field Description Description The text description of this multicast table entry. The options are Management Configured, Network Configured, and Network Assisted.
Page 156: Modify Igmp Snooping Settings For A Vlan
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Fast Leave Mode. Enable or disable the IGMP snooping fast leave mode for the specified VLAN ID. The default is Disable. • Host Timeout. Set the value for group membership interval of IGMP snooping for the specified VLAN ID.
Page 157: Disable Igmp Snooping On A Vlan
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The System Information page displays. Select Switching> Multicast > IGMP Snooping > IGMP Snooping VLAN Configuration. The IGMP Snooping VLAN Configuration page displays. Select the check box next to the VLAN ID.
Page 158 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP accordingly. This configuration is required only if you want to make sure that the multicast router always receives IGMP packets from the switch in a complex network.
Page 159: Configure A Multicast Router Vlan
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure a Multicast Router VLAN You can configure an interface to forward only snooped IGMP packets from a specific VLAN to the multicast router connected to the interface. This configuration is usually not required because the switch automatically detects a multicast router and forwards the IGMP packets accordingly.
Page 160: Igmp Snooping Querier Overview
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP IGMP Snooping Querier Overview IGMP snooping requires that one central switch or router periodically queries all end-devices on the network to announce their multicast memberships. This central device is the IGMP querier.
Page 161: Configure An Igmp Snooping Querier For Vlans
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the following settings: • Querier Admin Mode. Enable or disable IGMP snooping for the switch. The default is Disable. • Snooping Querier IP Address. Enter the snooping querier IP address to be used as the source address in periodic IGMP queries.
Page 162: Display Igmp Snooping Querier For Vlan Status
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the VLAN ID menu, select New Entry. Configure the following settings: • VLAN ID. The VLAN ID for which the IGMP snooping querier must be enabled. You can select an existing VLAN only.
Page 163: View, Search, And Manage The Mac Address Table
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select Switching> Multicast > IGMP Snooping Querier > Querier VLAN Status. The following table describes the nonconfigurable information displayed on the page. Table 38. Querier VLAN Status information...
Page 164: View And Search The Mac Address Table
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View and Search the MAC Address Table  To view and search the MAC Address Table: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 165: Set The Dynamic Address Aging Interval
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Search VLAN ID. From the Search menu, select VLAN ID, and enter the VLAN ID, for example, 100. Then click the Go button. • Search Interface. From the Search menu, select Interface, and enter the interface ID using the respective interface naming convention (for example, g1 or l1).
Page 166: Add A Static Mac Address To The Mac Address Table
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The System Information page displays. Select Switching > Address Table > Advanced > Dynamic Addresses. In the Address Aging Timeout (seconds) field, specify the time-out period in seconds for aging out dynamically learned forwarding information.
Page 167: Configure Layer 2 Loop Protection
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the Interface menu, select the interface. In the Static MAC Address field, enter the static MAC address that you want to add. From the VLAN ID menu, select the VLAN ID that must be associated with the MAC address.
Page 168: Configure Global Layer 2 Loop Protection
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Loop protection is supported on physical interfaces and static LAG interfaces, but not on dynamic LAG interfaces. Configure Global Layer 2 Loop Protection  To configure L2 loop protection globally: Connect your computer to the same network as the switch.
Page 169: View And Configure Layer 2 Loop Protection On A Port
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The range is from 0 to 604800 seconds. The default is 0 seconds. Click the Apply button. Your settings are saved. View and Configure Layer 2 Loop Protection on a Port ...
Page 170 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the Keep Alive menu, select Enable or Disable to specify whether keep-alives are enabled on an interface. The default is Disable. From the RX Action menu, select the action that occurs when the switch detects a loop on an interface: •...
Page 171: Chapter 4 Configure Quality Of Service
Configure Quality of Service In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria. When a packet is queued for transmission in a port, the rate at which it is serviced depends on how the queue is configured and possibly the amount of traffic present in the other queues of the port.
Page 172: Manage Class Of Service
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Manage Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not required.
Page 173 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select QoS> CoS > Basic > CoS Configuration.
Page 174: Configure Cos Interface Settings For An Interface
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure CoS Interface Settings for an Interface You can configure the trust mode for one or more interfaces and apply an interface shaping rate to all interfaces or to a specific interface.
Page 175: Configure Cos Queue Settings For An Interface
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the Interface Trust Mode menu, select one of the following trust mode options for ingress traffic on the selected interfaces: • Untrusted. Do not trust any CoS packet marking at ingress.
Page 176 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 177: Map 802.1P Priorities To Queues
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The Queue Management Type field displays the queue depth management technique that is used for queues on the interface. By default, this method is Taildrop, irrespective of your selection from the Scheduler Type menu.
Page 178: Map Dscp Values To Queues
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP position. Before traffic in a lower queue is sent, it must wait for traffic in higher queues to be sent. Click the Apply button. Your settings are saved.
Page 179: Manage Differentiated Services
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position. Before traffic in a lower queue is sent, it must wait for traffic in higher queues to be sent.
Page 180: Configure And Display Global Diffserv Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Note the following about the DiffServ process: • Packets are filtered and processed based on defined criteria. The filtering criteria is defined by a class. The processing is defined by a policy's attributes. Policy attributes can be defined on a per-class instance basis, and it is these attributes that are applied when a match occurs.
Page 181: Configure A Diffserv Class
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select the administrative mode for DiffServ: • Enable. Differentiated services are active. This is the default setting. • Disable. The DiffServ configuration is retained and can be changed but is not active.
Page 182 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Add and Configure a DiffServ Class  To add and configure a DiffServ class: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 183 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Define the criteria that must be associated the DiffServ class by selecting one of the following radio buttons: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class.
Page 184 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Source MAC. Select this radio button to require a packet’s source MAC address to match the specified MAC address. After you select this radio button, use the following fields to configure the source MAC address match criteria: Address.
Page 185 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Destination L4 Port. Select this radio button to require a packet’s TCP/UDP destination port to match the specified protocol. You can also select Other from the menu and enter a port number from 0 to 65535.
Page 186 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 187: Configure A Diffserv Policy
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Apply button. Your settings are saved. Delete a DiffServ Class  To delete a DiffServ class: Connect your computer to the same network as the switch.
Page 188 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 189 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the policy attributes by selecting one of the following radio buttons: • Assign Queue. Select this radio button to specify that traffic must be assigned to a queue, which you must select from the menu.
Page 190 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP specify any other action for those packets. You must specify a policy action for packets that conform to the policy. Committed Rate. Enter the committed rate that is applied to conforming packets by specifying a value in the range from 1 to 4294967295 Kbps.
Page 191 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select QoS > DiffServ > Advanced > Policy Configuration. The Policy Configuration page displays. Select the check box next to the policy name. In the Policy Name field, specify the new name.
Page 192 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 193: Configure The Diffserv Service Interface
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select the check box next to the policy name. Click the Delete button. The policy is removed. Configure the DiffServ Service Interface You can activate a policy on an interface.
Page 194 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • To configure all interfaces with the same settings, select the check box in the heading row. From the Policy Name menu, select a policy name. Click the Apply button.
Page 195: View Diffserv Service Statistics
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View DiffServ Service Statistics You can display service-level statistical information about all interfaces to which DiffServ policies are attached.  To view the DiffServ service statistics: Connect your computer to the same network as the switch.
Page 196: Chapter 5 Manage Device Security
Manage Device Security You can configure management security settings for port, user, and server security. This chapter contains the following sections. • Configure the Management Security Settings • Click the Apply button. • Configure Port Authentication • Set Up Traffic Control •...
Page 197: Configure The Management Security Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the Management Security Settings You can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS) settings, and authentication lists.
Page 198: Manage The Radius Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Note: If you forget the password and are unable to log in to the switch local browser interface, press the Factory Defaults button on the front panel of the switch for more than five seconds. The device reboots, and all switch settings, including the password, are reset to the factory default values.
Page 199 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 200 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Apply button. Your settings are saved. The following table describes the nonconfigurable fields displayed on the page. Table 45. RADIUS Configuration information Field Description Current Server IP Address The IP address of the current server.
Page 201 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the Server Address field, specify the IP address of the RADIUS server. In the Authentication Port field, specify the UDP port number that the server uses to verify the RADIUS server authentication.
Page 202 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 46. RADIUS authentication server statistics information (continued) Field Description Access Retransmissions The number of RADIUS access-request packets retransmitted to this server. Access Accepts The number of RADIUS access-accept packets, including both valid and invalid packets, that were received from this server.
Page 203 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The System Information page displays. Select Security > Management Security > RADIUS > Server Configuration. The Server Configuration page displays. Select the check box next to the server IP address.
Page 204 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure a RADIUS Accounting Server You can view and configure various settings for a RADIUS accounting server on the network. Add a RADIUS Accounting Server to the Switch ...
Page 205 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Apply button. Your settings are saved. To reset the accounting server and RADIUS statistics to their default values, click the Clear Counters button. The following table describes the RADIUS server statistics displayed on the page.
Page 206 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 207: Configure Tacacs
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Apply button. Your settings are saved. The RADIUS accounting server is removed. Configure TACACS+ TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes.
Page 208 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the Key String field, specify the authentication and encryption key for TACACS+ communications between the switch and the TACACS+ server. The range is from 0 to 128. The key must match the key configured on the TACACS+ server.
Page 209 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the Port field, specify the authentication port value for TACAS+ server sessions. The value must be in the range from 0 to 65535. If you do not specify a value, the switch uses the standard TCP port 49 for sessions with the server.
Page 210: Configure Authentication Lists
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Remove a TACACS+ Server From the Switch  To a remove a TACACS+ server from the switch: Connect your computer to the same network as the switch.
Page 211 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 212 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the menu in the 4 column, select the method, if any, that must be used fourth in the selected authentication login list. This is the method that is used if all previous methods time out.
Page 213 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP other method is tried, even if you specified more than one method. This is the default selection for Method 1. • RADIUS. The user’s ID and password are authenticated using the RADIUS server. If you select RADIUS or TACACS+ as the first method and an error occurs during the authentication, the switch uses Method 2 to authenticate the user.
Page 214: Manage The Smart Control Center Utility
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select Security > Management Security > Authentication List > Dot1x Authentication List. The Dot1x Authentication List page displays. Select the check box next to dot1xList. From the menu in the 1 column, select the method that must be used first in the selected authentication login list.
Page 215: Configure Management Access
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Note: Because the switch administrator password is contained in each NETGEAR Switch Discovery Protocol (NSDP) packet, disabling SCC increases the switch security. Click the Apply button. Your settings are saved.
Page 216: Configure Https Access Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The value must be in the range from 0 to 60 minutes. The default value is 5 minutes. After the session is inactive for the configured time, you are automatically logged out and must reenter the password to access the local browser interface A value of zero means that the session does not time out.
Page 217: Manage Certificates For Https Access
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select the Admin Mode Enable or Disable radio button. This selection enables or disables secure HTTP (HTTPS). The default value is Enable. You can download SSL certificates only when HTTPS is disabled. You can enable HTTPS only if a certificate is present on the device.
Page 218 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 219: Transfer An Existing Certificate To The Switch
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The login window opens. Enter the switch’s password in the Password field. The default password is password. The System Information page displays. Select Security > Access > HTTPS > Certificate Management.
Page 220 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 221: Manage Access Control To The Switch
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The file transfer starts. A status message displays during the transfer and upon successful completion of the transfer. Manage Access Control to the Switch Access control allows you to configure a profile and set rules for access to the local browser interface, access by SNMP stations, and client access to a TFTP server.
Page 222: Configure Access Rule Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select one of the following check boxes: • Activate Profile. Activate an access profile. • Deactivate Profile. Deactivate an access profile. • Remove Profile. Remove an access profile. You must deactivate the access profile before you can remove the access profile.
Page 223: Configure Port Authentication
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The default password is password. The System Information page displays. Select Security > Access > Access Control > Access Rule Configuration. From the Rule Type menu, select Permit or Deny to permit or deny access when the selected rules are matched.
Page 224: Configure Global 802.1X Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Authentication Server. The external server, for example, the RADIUS server that performs the authentication on behalf of the authenticator, and indicates whether the supplicant is authorized to access system services.
Page 225: Manage Port Authentication On Individual Ports
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • VLAN Assignment Mode. This selection specifies whether a port can be placed in a particular VLAN. The default value is Disable. When enabled, this feature allows a port to be placed into a particular VLAN based on the result of the authentication or type of 802.1X authentication a client uses when it...
Page 226 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select Security > Port Authentication > Advanced > Port Authentication. The previous figure shows only part of the page. Use the horizontal scroll bar at the bottom of the page to view all the fields.
Page 227 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Reauthentication Period. Specify the time in seconds after which reauthentication of the supplicant occurs. The reauthentication period must be a value in the range from 1 to 65535. The default value is 3600. If this field is disabled, connected clients are not forced to reauthenticate periodically.
Page 228 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 49. Port authentication status information (continued) Field Description Authenticator PAE State The current state of the authenticator PAE state machine. The options are as follows: •...
Page 229 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The Port Authentication page displays. Select the check box associated with the port to initialize. Click the Initialize button. 802.1X on the selected interface is reset to the initialization state. Traffic sent to and from the port is blocked during the authentication process.
Page 230: View The Port Summary
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View the Port Summary You can view summary information about the port-based authentication settings for each port.  To view the port summary: Connect your computer to the same network as the switch.
Page 231: View The Client Summary
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes the fields on the Port Summary page. Table 50. Port summary Field Description Port The port whose settings are displayed in the current table row.
Page 232 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 233: Set Up Traffic Control
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Set Up Traffic Control You can configure MAC filters, storm control, port security, and protected port settings. Manage MAC Filtering You can create MAC filters that limit the traffic allowed into and out of specified ports on the switch.
Page 234 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The previous figure shows the MAC Filter Configuration page for model GS310TP. From the MAC Filter menu, select Create Filter. If you did not configure any filters, this is the only option available.
Page 235: Mac Filter Summary
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Note: Destination ports can be included only in a multicast filter. A multicast filter is determined by the MAC address that you enter in the MAC Address field.
Page 236: Configure Storm Control Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 237 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP  To configure global storm control settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 238 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If the selection from the Ingress Control Mode menu is not Disabled, specify whether the ingress control mode is enabled by selecting Enable or Disable from the Status menu.
Page 239 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The default settings in the Port Settings section depends on the global storm control settings (see Configure Global Storm Control Settings on page 236), which apply to all ports.
Page 240: Manage Port Security
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Manage Port Security Port security lets you lock one or more ports on the switch. When a port is locked, the port can only forward packets with a source MAC addresses that you specifically allowed. The port discards all other packets.
Page 241 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes the fields in the Port Security Violations table. Table 53. Port Security Violations information Field Description Port The physical interface. Last Violation MAC The source MAC address of the last packet that was discarded at a locked port.
Page 242 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
Page 243 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP  To view learned MAC addresses for an individual interface or LAG and convert these MAC addresses to static MAC addresses: Connect your computer to the same network as the switch.
Page 244: Configure Protected Ports
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The dynamic MAC address entries are converted to static MAC address entries in a numerically ascending order until the static limit is reached. The Number of Dynamic MAC Addresses Learned field displays the number of dynamically learned MAC addresses on a specific port.
Page 245: Configure Access Control Lists
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Apply button. Your settings are saved. Configure Access Control Lists Access control lists (ACLs) ensure that only authorized users can access specific resources while blocking any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents, decide which types of traffic are forwarded or blocked, and provide security for the network.
Page 246 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 247 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • ACL Based on Destination IPv4 L4 Port. Creates an ACL based on the destination IPv4 Layer 4 port number. • ACL Based on Source IPv4 L4 Port. Creates an ACL based on the source IPv4 Layer 4 port number.
Page 248 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP ACL Based On Fields Destination IPv4 L4 Port • Destination L4 port (protocol). Specify the destination IPv4 L4 port protocol. • Destination L4 port (value). Specify the destination IPv4 L4 port value.
Page 249 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 250: Configure A Basic Mac Acl
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP ACL Wizard Example In the following figure, the ACL rule is configured to check for packet matches on ports 4, 5, and 9 and on LAG 1. Only the Inbound option is valid. Packets that include a source address in the 192.168.4.0/16 network are permitted to be forwarded by the interfaces.
Page 251 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Add a MAC ACL  To add a MAC ACL: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 252 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Change the Name of a MAC ACL  To change the name of a MAC ACL: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 253: Configure Mac Acl Rules
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The default password is password. The System Information page displays. Select Security > ACL > Basic > MAC ACL. The MAC ACL page displays. Select check box that is associated with the MAC ACL.
Page 254 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The previous figure does not show all columns. From the ACL Name menu, select the MAC ACL. In the Sequence Number field, enter a whole number in the range from 1 to 2147483647 to identify the rule.
Page 255 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The values are as follows: • Apple Talk • IBM SNA • IPv4 • • MPLS Multicast • MPLS Unicast • NetBios • Novell • PPPOE •...
Page 256 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 257: Configure Mac Bindings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select the check box that is associated with the rule. Click the Delete button. The rule is removed. Configure MAC Bindings When an ACL is bound to an interface, all the rules that are defined are applied to the selected interface.
Page 258: View Or Delete Mac Acl Bindings In The Mac Binding Table
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the ACL ID menu, select an ACL. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface.
Page 259: Configure A Basic Or Extended Ip Acl
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 260 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Multiple steps are involved in defining an IP ACL and applying it to the switch: Add an IP ACL ID (see Add an IP ACL on page 260).
Page 261 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The IP ACL page shows the current size of the ACL table compared to the maximum size of the ACL table. The current size is equal to the number of configured IPv4 ACLs plus the number of configured MAC ACLs.
Page 262 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 263: Configure Rules For A Basic Ip Acl
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select the check box that is associated with the IP ACL. Click the Delete button. The IP ACL is removed. Configure Rules for a Basic IP ACL You can define rules for IP-based standard ACLs (basic ACLs).
Page 264 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If no rules exist, the Basic ACL Rule Table shows the message No rules have been configured for this ACL. If one or more rules exist for the ACL, the rules display in the Basic ACL Rule Table.
Page 265 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Match Every. Select one of the radio buttons to specify whether all packets must match the selected IP ACL rule: Enable. All packets must match the selected IP ACL rule and are either permitted or denied.
Page 266: Configure Rules For An Extended Ip Acl
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the ACL ID menu, select the ACL that includes the rule that you want to modify. In the Basic ACL Rule Table, click the rule. The rule is a hyperlink. The Standard ACL Rule Configuration page displays.
Page 267 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Note: An implicit deny all rule is included at the end of an ACL list. This means that if an ACL is applied to a packet and if none of the explicit rules match, then the final implicit deny all rule applies and the packet is dropped.
Page 268 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Configure the following match criteria for the rule: • Sequence Number. Enter a number in the range from 1 to 2147483647 that is used to identify the rule. An extended IP ACL can contain up to 50 rules.
Page 269 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP True. All packets must match the selected IP ACL rule and are either permitted or denied. In this case, you cannot configure other match criteria on the page.
Page 270 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP You can either enter the port range yourself or select one of the following protocols from the menu: • The destination IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp.
Page 271 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you select the Range radio button, the IP ACL rule matches only if the Layer 4 destination port number is within the specified port range. The starting port, ending port, and all ports in between are a part of the Layer 4 port range.
Page 272 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Fragments. Either select the Enable radio button to allow initial fragments (that is, the fragment bit is asserted) or leave the default Disable radio button selected to prevent initial fragments from being used.
Page 273 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 274: Configure Ip Acl Interface Bindings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Delete button. The rule is removed. Configure IP ACL Interface Bindings When you bind an IP ACL to an interface, all the rules that you defined for the IP ACL are applied to the selected interface.
Page 275 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The previous figure shows the IP Binding Configuration page for model GS310TP. From the ACL ID menu, select the existing IP ACL for you which you want to add an IP ACL interface binding.
Page 276: View Or Delete Ip Acl Bindings In The Ip Acl Binding Table
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View or Delete IP ACL Bindings in the IP ACL Binding Table You can view or delete IP ACL bindings.  To view or delete IP ACL bindings: Connect your computer to the same network as the switch.
Page 277: Configure Vlan Acl Bindings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 57. IP ACL Binding Table (continued) Field Description ACL ID The ACL number (for an IP ACL) or ACL name (for a named IP ACL) identifying the ACL assigned to the selected interface and direction.
Page 278 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP direction. A lower number indicates a higher precedence order. If a sequence number is already in use for the VLAN ID and selected direction, the specified access list replaces the currently attached ACL using that sequence number.
Page 279 Monitor the System You can view a variety of information about the switch and its ports and configure how the switch monitors events. This chapter contains the following sections. • Monitor the Switch and the Ports • Configure and View Logs •...
Page 280: Chapter 6 Monitor The System
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Monitor the Switch and the Ports The following sections describe how you can view a variety of information about the amount and type of traffic that is transmitted from and received on the switch: •...
Page 281 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Update button to refresh the page with the latest information about the switch. Click the Clear button to clear all the statistics counters, resetting all switch summary and detailed statistics to default values.
Page 282 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 58. Switch statistics (continued) Field Description Broadcast Packets Received The total number of packets received that were directed to the broadcast address. This does not include multicast packets.
Page 283: View Port Statistics
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View Port Statistics You can view a summary of per-port traffic statistics on the switch.  To view port statistics: Connect your computer to the same network as the switch.
Page 284 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes the per-port statistics displayed on the page. Table 59. Port statistics Field Description Interface The interface or LAG. Total Packets Received The total number of packets received that were without errors.
Page 285 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The Port Statistics page displays. Select the check box in the heading of the table. Click the Clear button. All counters are reset to 0. Reset Counters for a Specific Interface ...
Page 286: View And Manage Detailed Port Statistics
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View and Manage Detailed Port Statistics You can view a variety of per-port traffic statistics.  To view and manage detailed port statistics: Connect your computer to the same network as the switch.
Page 287 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The previous figure does not show all fields on the Port Detailed Statistics page. From the Interface menu, select the interface for which you want to view the statistics.
Page 288 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 60. Detailed port statistics (continued) Field Description Physical Status Indicates the port speed and duplex mode for physical interfaces. Link Status Indicates whether the link is up or down.
Page 289 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 60. Detailed port statistics (continued) Field Description Packets Received 1024-1518 The total number of packets (including bad packets) received that were between Octets 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).
Page 290 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 60. Detailed port statistics (continued) Field Description 802.3x Pause Frames The number of MAC control frames received on the interface with an opcode Received indicating the PAUSE operation. This counter does not increment when the interface is operating in half-duplex mode.
Page 291 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 60. Detailed port statistics (continued) Field Description Transmit Packets Discarded The number of outbound packets which were chosen to be discarded even though no errors were detected to prevent them from being delivered to a higher-layer protocol.
Page 292: View Eap And Eapol Statistics
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP View EAP and EAPoL Statistics You can view information about Extensible Authentication Protocol (EAP) and EAP over LAN (EAPoL) packets that are received on physical ports. ...
Page 293: Perform A Cable Test
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The following table describes the EAP statistics displayed on the page. Table 61. EAP statistics Field Description Port The port number. EAPOL Frames Received The number of valid EAPoL frames of any type that were received by this authenticator.
Page 294 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Your web browser might display a security message, which you can ignore. For more information, see Access the Local Browser Interface on page 19. The login window opens.
Page 295: Configure And View Logs
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 62. Cable Test information (continued) Field Description Failure Location The estimated distance in meters from the end of the cable to the failure location. The failure location is displayed only if the cable status is Open or Short.
Page 296 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Disable. Prevent the system from logging messages. From the Behavior menu, specify the behavior of the log when it is full. • Wrap. When the buffer is full, the oldest log messages are deleted as the system logs new messages.
Page 297: Manage The Flash Log
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Manage the Flash Log The flash log is a persistent log, that is, is a log that is stored in persistent storage. Persistent storage survives across platform reboots. The first log type is the system startup log. The system startup log stores the first 32 messages received after system reboot.
Page 298: Manage The Server Log
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Critical (2). The third-highest warning level. A critical log message is saved if a critical device malfunction occurs, for example, two device ports are not functioning, while the rest of the device ports remain functional.
Page 299 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 300 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Informational (6). Provides device information. Debug (7). Provides detailed information about the log. Click the Add button. The remote syslog host is added. The Status field in the Server Configuration table shows whether the remote logging host is currently active.
Page 301: View The Trap Logs
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see...
Page 302: Configure Port Mirroring
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP To clear all counters, click the Clear button. All statistics for the trap logs are reset to their default values. The following table describes the Trap Log information that is displayed on the page.
Page 303 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP transmitted packet, the copied packet is VLAN-tagged or untagged as it is being transmitted on the source port.  To globally enable port mirroring, specify the destination port, and specify one or more source ports: Connect your computer to the same network as the switch.
Page 304 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP You can configure one destination port only. The port functions as a probe port and receives traffic from all configured source ports. If no port is configured, None is displayed.
Page 305: Chapter 7 Maintenance
Maintenance This chapter covers the following topics: • Reboot the Switch • Reset the Switch to Its Factory Default Settings • Export a File From the Switch • Download a File to the Switch or Update the Firmware • Manage Software Images •...
Page 306: Reboot The Switch
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Reboot the Switch You can reboot the switch from the local browser interface.  To reboot the switch: Connect your computer to the same network as the switch.
Page 307: Export A File From The Switch
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP  To reset the switch to the factory default settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 308: Use Tftp To Export A File From The Switch To A Tftp Server
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Use TFTP to Export a File From the Switch to a TFTP Server You can upload (export) configuration (ASCII or log ASCII) files from the switch to a TFTP server on the network.
Page 309: Use Http To Export A File From The Switch To A Computer
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Crash Logs. Specify the crash logs to retrieve them. From the Server Address Type menu, select the format for the Server Address field: • IPv4. Indicates that the TFTP server address is an IP address in dotted-decimal format.
Page 310: Download A File To The Switch Or Update The Firmware
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The default password is password. The System Information page displays. Select Maintenance > Export > HTTP File Export. The HTTP File Export page displays. From the File Type menu, select the type of file: •...
Page 311 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP You can also download files by using HTTP. See Use HTTP to Download a File to the Switch or Update the Software Image on page 313 for additional information.
Page 312 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP offline to personalize it for another similar device (for example, change the device name or IP address), and download it to that device. • SSL Trusted Root Certificate PEM File. SSL Trusted Root Certificate File (PEM Encoded).
Page 313: Software Image
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Note: After a software image file is downloaded, you might need to select the new software image file (see Change the Software Image That Loads When the Switch Starts or Reboots on page 316) and reboot the switch.
Page 314 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP image. This is a safety feature for faults occurring during the boot upgrade process. This the default setting. • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed.
Page 315: Manage Software Images
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Manage Software Images The switch maintains two versions of the switch software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded when the switch starts or reboots.
Page 316: Configure Dual Image Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select the Source Image image1 or image2 radio button to specify the image to be copied. Select the Destination Image image1 or image2 radio button to specify the destination image.
Page 317 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP From the Image Name menu, select the image that is not the image displayed in the Current-active field but that is the image that you want the switch to run after it reboots.
Page 318: View The Dual Image Status
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select Maintenance > File Management > Dual Image Configuration. The Dual Image Configuration page displays. From the Image Name menu, select the image that is not the image displayed in the Current-active field.
Page 319: Perform Diagnostics And Troubleshooting
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 64. Dual Image Status information (continued) Field Description Next-active The image to be used after the switch reboots. Image1 Description The description associated with the image1 file.
Page 320 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP If you do not know the IP address of the switch, see Change the Default IP Address of the Switch on page 11. Your web browser might display a security message, which you can ignore. For more...
Page 321: Send An Ipv4 Traceroute
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Send an IPv4 Traceroute You can configure the switch to send a traceroute request to a specified IP address or host name. You can use this to discover the paths that packets take to a remote destination.
Page 322 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP In the IP Address/Hostname field, enter the IP address or host name of the device for which the path must be discovered. In the Probes Per Hop field, enter the number of probes per hop.
Page 323: Enable Remote Diagnostics
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Enable Remote Diagnostics You can enable or disable the option to access the switch remotely. When remote access is enabled, you or technical support can perform remote diagnostics services.
Page 324 Configuration Examples This appendix contains information about how to configure the following features. The appendix covers the following topics: • Virtual Local Area Networks (VLANs) • Access Control Lists (ACLs) • Differentiated Services (DiffServ) • 802.1X Access Control • Multiple Spanning Tree Protocol...
Page 325: Appendix A Configuration Examples
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router.
Page 326: Vlan Configuration Examples
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a port means that packets leaving the switch from that port are untagged.
Page 327: Access Control Lists (Acls)
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Access Control Lists (ACLs) ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents of routing updates, decide which types of traffic are forwarded or blocked, and provide security for the network.
Page 328: Standard Ip Acl Sample Configuration
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Destination MAC Mask. 00:00:00:00:FF:FF • EtherType. User Value. • Source MAC. 02:02:1A:BC:DE:EF • Source MAC Mask. 00:00:00:00:FF:FF • VLAN ID. 2 For more information about MAC ACL rules, see Configure MAC ACL Rules page 253.
Page 329: Differentiated Services (Diffserv)
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Click the Add button. On the IP Rules page, create a second rule for IP ACL 1 with the following settings: • Sequence Number. 2 • Action. Permit •...
Page 330: Class
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The switch supports DiffServ. The DiffServ feature contains a number of conceptual QoS building blocks that you can use to construct a differentiated service network. Use these same blocks in different ways to build other types of QoS architectures.
Page 331: Creating Policies
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP defined class type. Only classes of the same type can be nested; class nesting does not allow for the negation (exclude option) of the referenced class. To configure DiffServ, you must define service levels, namely the forwarding classes/PHBs identified by a DSCP value, on the egress interface.
Page 332: Diffserv Example Configuration
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP • Redirecting. Forces a classified traffic stream to a specified egress port (physical or LAG). This can occur in addition to any marking or policing action. It can also be specified along with a QoS queue assignment.
Page 333: 802.1X Access Control
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP For more information, see Configure a DiffServ Policy on page 187. On the Service Configuration page, select the check box next to interfaces g7 and g8 to attach the policy to these interfaces, and then click the Apply button.
Page 334 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP The ports of an 802.1X authenticator switch provide the means by which it can offer services to other systems reachable through the LAN. Port-based network access control allows the operation of a switch’s ports to be controlled to ensure that access to its services is permitted...
Page 335: 802.1X Example Configuration
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP 802.1X Example Configuration This example shows how to configure the switch so that 802.1X-based authentication is required on the ports in a corporate conference room (1/0/5–1/0/8). These ports are available to visitors and must be authenticated before access is granted to the network.
Page 336: Multiple Spanning Tree Protocol
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Multiple Spanning Tree Protocol Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) supports multiple instances of spanning tree to efficiently channel VLAN traffic over different interfaces.
Page 337: Mstp Example Configuration
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP An MST region comprises of one or more MSTP bridges with the same MST configuration identifier, using the same MSTIs, and without any bridges attached that cannot receive and transmit MSTP BPDUs.
Page 338 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Figure 2. MSTP sample configuration Perform the following procedures on each switch to configure MSTP: On the VLAN Configuration page, create VLANs 300 and 500 (see Configure VLAN Settings on page 112).
Page 339 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Select ports 1/0/1–1/0/5 (edge ports), and select Enable from the Fast Link menu. Since the edge ports are not at risk for network loops, ports with Fast Link enabled transition directly to the forwarding state.
Page 340 Specifications and Default Settings This appendix describes the default settings for the switch and for its software features. The appendix covers the following topics: • Switch Default Settings • General Feature Default Settings • System Setup and Maintenance Settings • Port Characteristics •...
Page 341: Switch Default Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Switch Default Settings The following table describes the switch default settings. Table 65. Switch default settings Feature Default IP address 192.168.0.239 Subnet mask 255.255.255.0 Default gateway 192.168.0.254...
Page 342: General Feature Default Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 65. Switch default settings (continued) Feature Default RADIUS-assigned VLANs Disabled Multiple Spanning Tree Disabled Link aggregation No link aggregation groups (LAGs) configured LACP system priority 32768...
Page 343 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 66. General feature default settings (continued) Feature Name/Setting Default Port Control Auto Unauthenticated VLAN ID 0 (none) Periodic Reauthentication Disabled Reauthentication Period 3600 Quiet Period Resending EAP...
Page 344 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 66. General feature default settings (continued) Feature Name/Setting Default CST Priority CST External Path Cost Link Aggregation Lag Name ch<n> where n is 1 to 8...
Page 345 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 66. General feature default settings (continued) Feature Name/Setting Default Persistent Configuration Store Local Write Delay Class of Service (CoS), Global Trust Mode 802.1p 802.1p to Queue Mapping (802.1p -> Queue) 0 ->...
Page 346 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 66. General feature default settings (continued) Feature Name/Setting Default DSCP to Queue Mapping (DSCP -> Queue) (AF 33) 011110 -> 1 (continued) (AF 41) 100010 -> 1 (AF 42) 100100 ->...
Page 347 S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Table 66. General feature default settings (continued) Feature Name/Setting Default DSCP to Queue Mapping (DSCP -> Queue) (60) 111100 -> 3 (continued) (61) 111101 -> 3 (62) 111110 -> 3 (63) 111111 ->...
Page 348: System Setup And Maintenance Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP System Setup and Maintenance Settings The following table describes the system setup and maintenance settings. Table 67. System setup and maintenance settings Feature Sets Supported Default Boot code update DHCP/manual IP DHCP enabled/192.168.0.239...
Page 349: Traffic Control Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Traffic Control Settings The following table describes the traffic control settings. Table 69. Traffic control settings Feature Sets Supported Default Storm control All ports Disabled Jumbo frame...
Page 350: System Management Settings
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP System Management Settings The following table describes the system management settings. Table 72. System management settings Feature Sets Supported Default Multi-session web connections Enabled SNMPv1/v2 Max 5 community entries...
Page 351: Hardware Technical Specifications
S350 Series 8-Port Gigabit Ethernet Smart Managed Pro Switch Models GS308T and GS310TP Hardware Technical Specifications The following table describes the hardware technical specifications. Table 74. Hardware technical specifications Feature Model GS308T Model GS310TP Network interfaces Eight 10/100/1000BASE-T RJ-45 •...

This manual is also suitable for:

Gs308t Gs310tp

NETGEAR S350 Series User Manual

Chapter 1 Get Started

Chapter 2 Configure System Information

Chapter 3 Configure Switching

Chapter 4 Configure Quality of Service

Chapter 5 Manage Device Security

Chapter 6 Monitor the System

Chapter 7 Maintenance

Appendix A Configuration Examples

Appendix B Specifications and Default Settings

Quick Links

Related Manuals for NETGEAR S350 Series

Summary of Contents for NETGEAR S350 Series