NETGEAR GS110TP - ProSafe Gigabit Smart Switch Software Administration Manual

NETGEAR GS110TP - ProSafe Gigabit Smart Switch Software Administration Manual

Smart switch
Hide thumbs Also See for GS110TP - ProSafe Gigabit Smart Switch:
Table of Contents

Advertisement

350 East Plumeria Drive
San Jose, CA 95134
USA
November 2010
202-10603-03
v2.0
GS108T and GS110TP
Smart Switch
Software Administration Manual

Advertisement

Table of Contents
loading

Summary of Contents for NETGEAR GS110TP - ProSafe Gigabit Smart Switch

  • Page 1 GS108T and GS110TP Smart Switch Software Administration Manual 350 East Plumeria Drive San Jose, CA 95134 November 2010 202-10603-03 v2.0...
  • Page 2: Gs108T And Gs110Tp Smart Switch Software Administration Manual

    NETGEAR, Inc. Technical Support Thank you for choosing NETGEAR. To register your product, get the latest product updates, or get support online, visit us at http://support.netgear.com.
  • Page 3: Table Of Contents

    Table of Contents Chapter 1 Getting Started Getting Started with the GS108T and GS110TP Gigabit Smart Switches . 9 Switch Management Interface ........10 Connecting the Switch to the Network.
  • Page 4 GS108T and GS110TP Smart Switch Software Administration Manual LLDP-MED Port Settings ........64 Local Information .
  • Page 5 GS108T and GS110TP Smart Switch Software Administration Manual Chapter 4 Configuring Quality of Service Class of Service ..........126 Basic CoS Configuration .
  • Page 6 GS108T and GS110TP Smart Switch Software Administration Manual MAC Binding Configuration ....... . .184 MAC Binding Table.
  • Page 7 GS108T and GS110TP Smart Switch Software Administration Manual Appendix A Hardware Specifications and Default Values GS108T and GS110TP Gigabit Smart Switches Specifications..238 GS108 Specifications ........238 GS110 Specifications .
  • Page 8: Chapter 1 Getting Started

    Getting Started ® The NETGEAR GS108T and GS110TP Smart Switch Software Administration Manual describes how to configure and operate the GS108T and GS110TP Gigabit Smart Switches by using the Web-based graphical user interface (GUI). This manual describes the software configuration procedures and explains the options available within those procedures.
  • Page 9: Getting Started With The Gs108T And Gs110Tp Gigabit Smart Switches

    Getting Started with the GS108T and GS110TP Gigabit Smart Switches This chapter provides an overview of starting your NETGEAR GS108T or GS110TP Smart Switch and accessing the user interface. It also leads you through the steps to use the Smart Control Center utility.
  • Page 10: Switch Management Interface

    In addition to enabling NETGEAR switch discovery, the Smart Control Center provides several utilities to help you maintain the NETGEAR switches on your network, such as password management, firmware upgrade, and configuration file backup. For more information, see on page 18.
  • Page 11: Connecting The Switch To The Network

    GS108T and GS110TP Smart Switch Software Administration Manual Connecting the Switch to the Network To enable remote management of the switch through a Web browser or SNMP, you must connect the switch to the network and configure it with network information (an IP address, subnet mask, and default gateway).
  • Page 12: Switch Discovery In A Network With A Dhcp Server

    GS108T and GS110TP Smart Switch Software Administration Manual Switch Discovery in a Network with a DHCP Server This section describes how to set up your switch in a network that has a DHCP server. The DHCP client on the switch is enabled by default. When you connect it to your network, the DHCP server will automatically assign an IP address to your switch.
  • Page 13 GS108T and GS110TP Smart Switch Software Administration Manual Make a note of the displayed IP address assigned by the DHCP server. You will need this value to access the switch directly from a Web browser (without using the Smart Control Center).
  • Page 14: Switch Discovery In A Network Without A Dhcp Server

    GS108T and GS110TP Smart Switch Software Administration Manual Switch Discovery in a Network without a DHCP Server This section describes how to use the Smart Control Center to set up your switch in a network without a DHCP server. If your network has no DHCP service, you must assign a static IP address to your switch.
  • Page 15: Configuring The Network Settings On The Administrative System

    GS108T and GS110TP Smart Switch Software Administration Manual You must enter the current password every time you use the Smart Tip: Control Center to update the switch setting. The default password is password. Please ensure that your PC and the switch are in the same subnet. Make a note of these settings for later use.
  • Page 16 GS108T and GS110TP Smart Switch Software Administration Manual WARNING! When you change the IP address of your administrative system, you will loose your connection to the rest of the network. Be sure to write down your current network address settings before you change them.
  • Page 17: Web Access

    GS108T and GS110TP Smart Switch Software Administration Manual Web Access To access the GS108T or GS110TP management interface, use one of the following methods: From the Smart Control Center, select the switch and click Web Browser Access. • Open a Web browser and enter the IP address of the switch in the address field. •...
  • Page 18: Smart Control Center Utilities

    GS108T and GS110TP Smart Switch Software Administration Manual Smart Control Center Utilities In addition to device discovery and network address assignment, the Smart Control Center includes several maintenance features. This section describes the following Smart Control Center utilities: on page 18 •...
  • Page 19: Configuration Upload And Download

    GS108T and GS110TP Smart Switch Software Administration Manual Changing the Switch Password Select the switch. Click Change Password. Additional fields appear on the screen. Type the switch password in the Current Password field. The default password for the switch is password. Type the new password in the New Password and Confirm Password fields.
  • Page 20 GS108T and GS110TP Smart Switch Software Administration Manual Click OK. Enter the switch password and click Apply. The file is uploaded to the administrative computer as a *.cfg file. You can open it and view the contents with a text editor. To restore the configuration to a previously saved version: Click the Maintenance tab and select the device with the configuration to restore.
  • Page 21: Firmware Upgrade

    GS108T and GS110TP Smart Switch Software Administration Manual Firmware Upgrade The application software for the GS108T and GS110TP Smart Switches is upgradeable, enabling your switch to take advantage of improvements and additional features as they become available. The upgrade procedure and the required equipment are described in this section.
  • Page 22: Viewing And Managing Tasks

    Secondary Storage option. To prevent the switch from using the downloaded firmware as the active image, make sure the Run this FW after download option is clear. NETGEAR recommends that you download the same image as the Note: primary and secondary image for redundancy.
  • Page 23 GS108T and GS110TP Smart Switch Software Administration Manual The following list describes the command buttons that are specific to the Tasks page: Delete Task—Remove a completed or schedule task from the list. • Reschedule—Change the scheduled date and time for a pending firmware upgrade or •...
  • Page 24: Understanding The User Interfaces

    GS108T and GS110TP Smart Switch Software Administration Manual Understanding the User Interfaces The switch software includes a set of comprehensive management functions for configuring and monitoring the system by using one of the following methods: Web user interface • Simple Network Management Protocol (SNMP) •...
  • Page 25 GS108T and GS110TP Smart Switch Software Administration Manual Navigation Tab Feature Link Help LInk Logout Button Help Page Page Menu Configuration Status and Options Figure 3. Administrative Page Layout Navigation Tabs, Feature Links, and Page Menu The navigation tabs along the top of the Web interface give you quick access to the various switch functions.
  • Page 26: Configuration And Monitoring Options

    GS108T and GS110TP Smart Switch Software Administration Manual Page Link Configuration Pages Figure 4. Menu Hierarchy Configuration and Monitoring Options The area directly under the feature links and to the right of the page menu displays the configuration information or status for the page you select. On pages that contain configuration options, you can input information into fields or select options from drop-down menus.
  • Page 27 GS108T and GS110TP Smart Switch Software Administration Manual The following figure shows the Device View of the GS108T. The following figure shows the Device View of the GS110TP. Click the port you want to view or configure to see a menu that displays statistics and configuration options.
  • Page 28 GS108T and GS110TP Smart Switch Software Administration Manual If you click the graphic, but do not click a specific port, the main menu appears, as the following figure shows. This menu contains the same option as the navigation tabs at the top of the page.
  • Page 29: Using Snmp

    GS108T and GS110TP Smart Switch Software Administration Manual Using SNMP The switch software supports the configuration of SNMP groups and users that can manage traps that the SNMP agent generates. switch switches use both standard public MIBs for standard functionality and private MIBs that support additional switch functionality.
  • Page 30: Interface Naming Convention

    GS108T and GS110TP Smart Switch Software Administration Manual Interface Naming Convention The switch support physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are gigabit interfaces and are numbered on the front panel.
  • Page 31 GS108T and GS110TP Smart Switch Software Administration Manual Chapter 1: Getting Started | 31...
  • Page 32: Chapter 2 Configuring System Information

    Configuring System Information Use the features in the System tab to define the switch’s relationship to its environment. The System tab contains links to the following features: on page 33 • Management on page 48 • PoE (GS110TP Only) on page 54 •...
  • Page 33: Management

    GS108T and GS110TP Smart Switch Software Administration Manual Management This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information. From the Management link, you can access the following pages: on page 33 •...
  • Page 34: Ip Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual System Location. Enter the location of this switch. You may use up to 31 • alphanumeric characters. The factory default is blank. System Contact. Enter the contact person for this switch. You may use up to 31 •...
  • Page 35 GS108T and GS110TP Smart Switch Software Administration Manual To configure the network information for the management interface: Select the appropriate radio button to determine how to configure the network information for the switch management interface: Dynamic IP Address (DHCP). Specifies that the switch must obtain the IP address •...
  • Page 36: Time

    GS108T and GS110TP Smart Switch Software Administration Manual port VLAN ID (PVID) of the port to be connected in that management VLAN be the same as the management VLAN ID. The management VLAN has the following requirements: Only one management VLAN can be active at a time. •...
  • Page 37: Time Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual SNTP time definitions are assessed and determined by the following time levels: T1: Time at which the original request was sent by the client. • T2: Time at which the original request was received by the server. •...
  • Page 38 GS108T and GS110TP Smart Switch Software Administration Manual To configure the time by using the CPU clock cycle as the source: From the Clock Source field, select Local. In the Date field, enter the date in the DD/MM/YYYY format. In the Time field, enter the time in HH:MM:SS format. If you do not enter a date and time, the switch will calculate the date Note: and time using the CPU’s clock cycle.
  • Page 39: Sntp Server Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Field Description Last Attempt Status Specifies the status of the last SNTP request or unsolicited message for both unicast mode. If no message has been received from a server, a status of Other is displayed.
  • Page 40 GS108T and GS110TP Smart Switch Software Administration Manual To configure a new SNTP Server: Enter the appropriate SNTP server information in the available fields: Server Type. Specifies whether the address for the SNTP server is an IP address • (IPv4) or hostname (DNS). Address.
  • Page 41 GS108T and GS110TP Smart Switch Software Administration Manual The SNTP Server Status table displays status information about the SNTP servers configured on your switch. The following table describes the SNTP Global Status fields. Field Description Address Specifies all the existing Server Addresses. If no Server configuration exists, a message saying “No SNTP server exists”...
  • Page 42: Denial Of Service

    GS108T and GS110TP Smart Switch Software Administration Manual Denial of Service Use the Denial of Service (DoS) page to configure DoS control. The switch software provides support for classifying and blocking specific types of DoS attacks. You can configure your system to monitor and block six types of attacks: SIP=DIP: Source IP address = Destination IP address.
  • Page 43 GS108T and GS110TP Smart Switch Software Administration Manual DoS Configuration The DoS Configuration page lets you to select which types of DoS attacks for the switch to monitor and block. To access the DoS Configuration page, click System  Management  Denial of Service > DoS Configuration.
  • Page 44: Dns

    GS108T and GS110TP Smart Switch Software Administration Manual drop packets that have TCP flag SYN set and TCP source port less than 1024 or TCP control flags set to 0 and TCP sequence number set to 0 or TCP flags FIN, URG, and PSH set and TCP sequence number set to 0 or both TCP flags SYN and FIN set.
  • Page 45: Host Configuration

    Enter the DNS default domain name to include in DNS queries. When the system is performing a lookup on an unqualified hostname, this field is provided as the domain name (for example, if default domain name is netgear.com and the user enters test, then test is changed to test.netgear.com to resolve the name).
  • Page 46 GS108T and GS110TP Smart Switch Software Administration Manual To add a static entry to the local DNS table: Specify the static host name to add. Enter up to 158 characters. Specify the IP address in standard IPv4 dot notation to associate with the hostname. Click Add.
  • Page 47: Green Ethernet Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Green Ethernet Configuration Use this page to configure Green Ethernet features. Using the Green Ethernet features allows for power consumption savings. To access this page, click System  Management  Green Ethernet Configuration. To configure the Green Ethernet feature: Enable or disable the Short Cable Mode.
  • Page 48: Poe (Gs110Tp Only)

    GS108T and GS110TP Smart Switch Software Administration Manual PoE (GS110TP Only) Ports g1–g8 on the GS110TP are IEEE802.3af-compliant ports. Each port is capable of delivering up to 15.4W of reliable, uninterrupted power to connected PoE-powered devices (PD). The GS110TP can provide a total of 46W of power to all connected devices. You can configure per-port priority settings, timers, and power limits to manage the power supplied to the connected PDs and to ensure that the GS110TP power budget is used effectively.
  • Page 49: Poe Port Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual To configure PoE trap settings: Select the appropriate radio button to enable or disable SNMP traps. Click Apply to apply the new settings to the system. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
  • Page 50 GS108T and GS110TP Smart Switch Software Administration Manual To configure settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces.
  • Page 51: Timer Global Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual User: Select this option to base the power limit on the value configured in the • Power Limit field. Power Limit. Set the maximum amount of power that can be delivered by a port. •...
  • Page 52: Timer Schedule Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual To configure global timer settings: To add a timer, enter a name in the Timer Schedule Name field, and click Add. To remove a timer, select the check box associated with the timer and click Delete. To enable or disable the timer feature, select the appropriate radio button and click Apply.
  • Page 53 GS108T and GS110TP Smart Switch Software Administration Manual To configure timer schedules: Select the name of the schedule created on the Timer Global Configuration page. Specify the time to turn off power. The time range is from 00:00 to 23:59. Specify the day to turn off power by clicking the calendar icon and selecting the date.
  • Page 54: Snmp

    GS108T and GS110TP Smart Switch Software Administration Manual SNMP From SNMP link under the System tab, you can configure SNMP settings for SNMP V1/V2 and SNMPv3. From the SNMP link, you can access the following pages: on page 54 • SNMPV1/V2 on page 57 •...
  • Page 55: Trap Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual To configure SNMP communities: To add a new SNMP community, enter community information in the available fields described below, and then click Add. Management Station IP. Specify the IP address of the management station.Together, •...
  • Page 56 GS108T and GS110TP Smart Switch Software Administration Manual To configure SNMP trap settings: To add a host that will receive SNMP traps, enter trap configuration information in the available fields described below, and then click Add. Recipients IP. The address in x.x.x.x format to receive SNMP traps from this device. •...
  • Page 57: Trap Flags

    GS108T and GS110TP Smart Switch Software Administration Manual Trap Flags The pages in the Trap Manager folder allow you to view and configure information about SNMP traps the system generates. Use the Trap Flags page to enable or disable traps the switch can send to an SNMP manager.
  • Page 58: Snmp V3 User Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual SNMP v3 User Configuration This is the configuration for SNMP v3. To access this page, click System  SNMP  SNMP V3  User Configuration. The SNMPv3 Access Mode is a read-only field that shows the access privileges for the user account.
  • Page 59: Lldp

    GS108T and GS110TP Smart Switch Software Administration Manual LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN.
  • Page 60 GS108T and GS110TP Smart Switch Software Administration Manual To configure global LLDP settings: Configure the following LLDP properties. TLV Advertised Interval. Specify the interval at which frames are transmitted. The • default is 30 seconds, and the valid range is 1–32768 seconds. Hold Multiplier.
  • Page 61: Lldp Port Settings

    GS108T and GS110TP Smart Switch Software Administration Manual LLDP Port Settings Use the LLDP Port Settings page to specify LLDP parameters that are applied to a specific interface. To display the LLDP Port Settings page, click SystemLLDP Advanced  LLDPPort Settings.
  • Page 62: Lldp-Med Network Policy

    GS108T and GS110TP Smart Switch Software Administration Manual Optional TLV(s). Enable or disable the transmission of optional type-length value • (TLV) information from the interface. The TLV information includes the system name, system description, system capabilities, and port description. To configure the System Name, see on page 33.
  • Page 63 GS108T and GS110TP Smart Switch Software Administration Manual From the Interface menu, select the interface with the information to view. The following table describes the LLDP-MED network policy information that displays on the screen. Field Description Network Policy Number Specifies the policy number. Application Specifies the media application type associated with the policy, which can be one of the following:...
  • Page 64: Lldp-Med Port Settings

    GS108T and GS110TP Smart Switch Software Administration Manual LLDP-MED Port Settings Use this page to enable LLDP-MED mode on an interface and configure its properties. To display this page, click System  LLDP  Advanced  LLDP-MED Port Settings. To configure LLDP-MED settings for a port: From the Port field, select the port to configure.
  • Page 65: Local Information

    GS108T and GS110TP Smart Switch Software Administration Manual Local Information Use the LLDP Local Information page to view the data that each port advertises through LLDP. To display the LLDP Local Device Information page, click SystemAdvanced LLDP Local Information. The following table describes the LLDP local information that displays for each port. Field Description Interface...
  • Page 66 GS108T and GS110TP Smart Switch Software Administration Manual A popup window displays information for the selected port. The following table describes the detailed local information that displays for the selected port. Field Description Managed Address Address SubType Displays the type of address the management interface uses, such as an IPv4 address.
  • Page 67: Neighbors Information

    GS108T and GS110TP Smart Switch Software Administration Manual Field Description MED Details Capabilities Supported Displays the MED capabilities enabled on the port. Current Capabilities Displays the TLVs advertised by the port. Device Class Network Connectivity indicates the device is a network connectivity device. Network Policies Application Type Specifies the media application type associated with the policy.
  • Page 68 GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the information that displays for all LLDP neighbors that have been discovered. Field Description MSAP Entry Displays the Media Service Access Point (MSAP) entry number for the remote device. Local Port Displays the interface on the local system that received LLDP information from a remote system.
  • Page 69 GS108T and GS110TP Smart Switch Software Administration Manual Field Description Port Details Local Port Displays the interface on the local system that received LLDP information from a remote system. MSAP Entry Displays the Media Service Access Point (MSAP) entry number for the remote device.
  • Page 70 GS108T and GS110TP Smart Switch Software Administration Manual Field Description MED Details Capabilities Supported Specifies the supported capabilities that were received in MED TLV from the device. Current Capabilities Specifies the advertised capabilities that were received in MED TLV from the device.
  • Page 71 GS108T and GS110TP Smart Switch Software Administration Manual Field Description Network Policies Application Type Specifies the media application type associated with the policy advertised by the remote device. VLAN ID Specifies the VLAN ID associated with the policy. VLAN Type Specifies whether the VLAN associated with the policy is tagged or untagged.
  • Page 72: Services - Dhcp Filtering

    GS108T and GS110TP Smart Switch Software Administration Manual Services — DHCP Filtering DHCP Filtering is a useful feature that can be employed as a security measure against unauthorized DHCP servers. A known attack is when an unauthorized DHCP server responds to a client that is requesting an IP address. The server configures the gateway for the client to be equal to the IP address of the server.
  • Page 73: Interface Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Interface Configuration Use the DHCP Filtering Interface Configuration page to view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded. If a port is configured as untrusted, any DHCP (or BootP) responses received on that port are discarded.
  • Page 74 GS108T and GS110TP Smart Switch Software Administration Manual 74 | Chapter 2: Configuring System Information...
  • Page 75: Configuring Switching Information

    Configuring Switching Information Use the features in the Switching tab to define Layer 2 features. The Switching tab contains links to the following features: on page 9 • Ports on page 12 • Link Aggregation Groups on page 17 • VLANs on page 22 •...
  • Page 76: Ports

    GS108T and GS110TP Smart Switch Software Administration Manual Ports The pages on the Ports tab allow you to view and monitor the physical port information for the ports available on the switch. From the Ports link, you can access the following pages: on page 9 •...
  • Page 77 GS108T and GS110TP Smart Switch Software Administration Manual Port Speed. Use the menu to select the port’s speed and duplex mode. If you select • Auto, the duplex mode and speed will be set by the auto-negotiation process. The port’s maximum capability (full duplex and 1000 Mbps) will be advertised. Otherwise, your selection will determine the port’s duplex mode and transmission rate.
  • Page 78: Flow Control

    GS108T and GS110TP Smart Switch Software Administration Manual Flow Control IEEE 802.3x flow control works by pausing a port when the port becomes oversubscribed and dropping all traffic for small bursts of time during the congestion condition. This can lead to high-priority and/or network control traffic loss.
  • Page 79: Link Aggregation Groups

    GS108T and GS110TP Smart Switch Software Administration Manual Link Aggregation Groups Link aggregation groups (LAGs), which are also known as port-channels, allow you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, which increases fault tolerance and provides load sharing.
  • Page 80 GS108T and GS110TP Smart Switch Software Administration Manual Select the check box next to the LAG to configure. You can select multiple LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces. Configure or view the following settings: LAG Name.
  • Page 81: Lag Membership

    GS108T and GS110TP Smart Switch Software Administration Manual LAG Membership Use the LAG Membership page to select two or more full-duplex Ethernet links to be aggregated together to form a link aggregation group (LAG), which is also known as a port-channel.
  • Page 82: Lacp Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual LACP Configuration To display the LACP Configuration page, click Switching LAG  Advanced  LACP Configuration. To configure LACP: From the LACP System Priority field, specify the device’s link aggregation priority relative to the devices at the other ends of the links on which link aggregation is enabled.
  • Page 83: Lacp Port Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual LACP Port Configuration To display the LACP Port Configuration page, click Switching LAG  Advanced  LACP Port Configuration. To configure LACP port priority settings: Select the check box next to the port to configure. You can select multiple ports to apply the same setting to all selected ports.
  • Page 84: Vlans

    GS108T and GS110TP Smart Switch Software Administration Manual VLANs Adding Virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a VLAN switch forwards traffic based on the Layer 2 header, which is fast, and like a router, it partitions the network into logical segments, which provides better administration, security and management of multicast traffic.
  • Page 85 GS108T and GS110TP Smart Switch Software Administration Manual To configure VLANs: To add a VLAN, configure the VLAN ID, name, and type, and then click Add. VLAN ID. Specify the VLAN Identifier for the new VLAN. (You can only enter data in •...
  • Page 86: Vlan Membership Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual VLAN Membership Configuration Use this page to configure VLAN Port Membership for a particular VLAN. You can select the Group operation through this page. To display the VLAN Membership Configuration page, click Switching VLAN  Advanced  VLAN Membership.
  • Page 87: Port Vlan Id Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Use the Group Operations field to select all the ports and configure them. Possible values are: Untag All: Select all the ports on which all frames transmitted from this VLAN will be •...
  • Page 88 GS108T and GS110TP Smart Switch Software Administration Manual To configure PVID information: To configure PVID settings for a physical port, click PORTS. To configure PVID settings for a Link Aggregation Group (LAG), click LAGS. To configure PVID settings for both physical ports and LAGs, click ALL. Select the check box next to the interfaces to configure.
  • Page 89: Voice Vlan

    GS108T and GS110TP Smart Switch Software Administration Manual Voice VLAN Configure the Voice VLAN settings for ports that carry traffic from IP phones. The Voice VLAN feature can help ensure that the sound quality of an IP phone is safeguarded from deteriorating when the data traffic on the port is high.
  • Page 90: Voice Vlan Port Setting

    GS108T and GS110TP Smart Switch Software Administration Manual Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. If you make any changes to this page, click Apply to send the updated configuration to the switch.
  • Page 91: Voice Vlan Oui

    GS108T and GS110TP Smart Switch Software Administration Manual Voice VLAN OUI The Organizational Unique Identifier (OUI) identifies the IP phone manufacturer. The switch comes preconfigured with the following OUIs: 00:01:E3: SIEMENS • 00:03:6B: CISCO1 • 00:12:43: CISCO2 • 00:0F:E2: H3C •...
  • Page 92 GS108T and GS110TP Smart Switch Software Administration Manual To modify information for an entry in the OUI list, select the check box next to the OUI prefix, update the OUI prefix or description, and then click Apply. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
  • Page 93: Auto-Voip

    GS108T and GS110TP Smart Switch Software Administration Manual Auto-VoIP The Auto-VoIP automatically makes sure that time-sensitive voice traffic is given priority over data traffic on ports that have this feature enabled. Auto-VoIP checks for packets carrying the following VoIP protocols: Session Initiation Protocol (SIP) •...
  • Page 94: Spanning Tree Protocol

    GS108T and GS110TP Smart Switch Software Administration Manual Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops. Spanning tree versions supported include Common STP, Multiple STP, and Rapid STP. Classic STP provides a single path between end stations, avoiding and eliminating loops.
  • Page 95: Stp Switch Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual STP Switch Configuration The Spanning Tree Switch Configuration/Status page contains fields for enabling STP on the switch. To display the Spanning Tree Switch Configuration/Status page, click Switching > STP > Basic  STP Configuration. To configure STP settings on the switch: From the Spanning Tree State field, specify whether to enable or disable Spanning Tree operation on the switch.
  • Page 96 GS108T and GS110TP Smart Switch Software Administration Manual Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch If you make any configuration changes, click Apply to send the updated configuration to the switch.
  • Page 97: Cst Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual CST Configuration Use the Spanning Tree CST Configuration page to configure Common Spanning Tree (CST) and Internal Spanning Tree on the switch. To display the Spanning Tree CST Configuration page, click Switching > STP > Advanced  CST Configuration.
  • Page 98: Cst Port Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual state before forwarding packets. The value must be greater or equal to (Bridge Max Age / 2) + 1. The time range is from 4 seconds to 30 seconds. The default value is 15. Spanning Tree Maximum Hops.
  • Page 99 GS108T and GS110TP Smart Switch Software Administration Manual To configure CST port settings: To configure CST settings for a physical port, click PORTS. To configure CST settings for a Link Aggregation Group (LAG), click LAGS. To configure CST settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure.
  • Page 100: Cst Port Status

    GS108T and GS110TP Smart Switch Software Administration Manual Hello Timer. Specifies the switch Hello time, which indicates the amount of time in • seconds a port waits between configuration messages. The value is fixed at 2 seconds. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
  • Page 101: Rapid Stp

    GS108T and GS110TP Smart Switch Software Administration Manual Field Description Designated Cost Displays cost of the port participating in the STP topology. Ports with a lower cost are less likely to be blocked if STP detects loops. Designated Bridge Bridge Identifier of the bridge with the Designated Port. It is made up using the bridge priority and the base MAC address of the bridge.
  • Page 102: Mst Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the Rapid STP Status information displayed on the screen. Field Description Interface The physical or port channel interfaces associated with VLANs associated with the CST. Role Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree. The port role will be one of the following values: Root Port, Designated Port, Alternate Port, Backup Port, Master Port, or Disabled Port.
  • Page 103 GS108T and GS110TP Smart Switch Software Administration Manual lowest priority value becomes the root bridge. The bridge priority is a multiple of 4096. If you specify a priority that is not a multiple of 4096, the priority is automatically set to the next lowest priority that is a multiple of 4096.
  • Page 104: Mst Port Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual MST Port Configuration Use the Spanning Tree MST Port Configuration page to configure and display Multiple Spanning Tree (MST) settings on a specific port on the switch. To display the Spanning Tree MST Port Status page, click Switching  STP  Advanced  MST Port Configuration.
  • Page 105 GS108T and GS110TP Smart Switch Software Administration Manual To configure MST settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces.
  • Page 106: Stp Statistics

    GS108T and GS110TP Smart Switch Software Administration Manual Field Description Port Role Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree. The port role will be one of the following values: Root Port, Designated Port, Alternate Port, Backup Port, Master Port, or Disabled Port.
  • Page 107 GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the information available on the STP Statistics page. Field Description Interface Select a physical or port channel interface to view its statistics. STP BPDUs Received Number of STP BPDUs received at the selected port. STP BPDUs Transmitted Number of STP BPDUs transmitted from the selected port.
  • Page 108: Multicast

    GS108T and GS110TP Smart Switch Software Administration Manual Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255. From the Multicast link, you can access the following pages: on page 41 •...
  • Page 109: Igmp Snooping

    GS108T and GS110TP Smart Switch Software Administration Manual IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch. Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255.
  • Page 110 GS108T and GS110TP Smart Switch Software Administration Manual To configure IGMP Snooping: Enable or disable IGMP Snooping on the switch. Enable. The switch snoops all IGMP packets it receives to determine which • segments should receive packets directed to the group address. Disable.
  • Page 111: Igmp Snooping Interface Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual The following table displays information about the global IGMP snooping status and statistics on the page. Field Description Multicast Control Frame Displays the number of multicast control frames that have been processed Count by the CPU.
  • Page 112: Igmp Snooping Table

    GS108T and GS110TP Smart Switch Software Administration Manual To configure IGMP Snooping interface settings: To configure IGMP Snooping settings for a physical port, click PORTS. To configure IGMP Snooping settings for a Link Aggregation Group (LAG), click LAGS. To configure IGMP Snooping settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure.
  • Page 113 GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the fields in the IGMP Snooping Table. Field Description MAC Address A multicast MAC address for which the switch has forwarding and/or filtering information. The format is 6 two-digit hexadecimal numbers that are separated by colons, for example, 01:00:5e:45:67:89.
  • Page 114 GS108T and GS110TP Smart Switch Software Administration Manual When a packet enters the switch, the destination MAC address is combined with the VLAN ID and a search is performed in the Layer 2 Multicast Forwarding Database. If no match is found, then the packet is either flooded to all ports in the VLAN or discarded, depending on the switch configuration.
  • Page 115: Mfdb Statistics

    GS108T and GS110TP Smart Switch Software Administration Manual Field Description Description The text description of this multicast table entry. Possible values are Management Configured, Network Configured, and Network Assisted. Interface The list of interfaces that are designated for forwarding (Fwd) and filtering (Flt) for the selected address.
  • Page 116: Igmp Snooping Vlan Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the information available on the MFDB Statistics page: Field Description Max MFDB Table Entries Displays the maximum number of entries that the Multicast Forwarding Database table can hold. Most MFDB Entries Since The largest number of entries that have been present in the Multicast Last Reset...
  • Page 117: Igmp Snooping Querier

    GS108T and GS110TP Smart Switch Software Administration Manual inadvertent dropping of the other hosts that were connected to the same layer 2 LAN port but were still interested in receiving multicast traffic directed to that group. Also, fast-leave processing is supported only with IGMP version 2 hosts. Host Timeout.
  • Page 118: Igmp Snooping Querier Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual IGMP Snooping Querier Configuration Use this page to enable or disable the IGMP Snooping Querier feature, specify the IP address of the router to perform the querying, and configure the related parameters. To access this page, click Switching...
  • Page 119: Igmp Snooping Querier Vlan Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual IGMP Snooping Querier VLAN Configuration Use this page to configure IGMP queriers for use with VLANs on the network. To access this page, click Switching Multicast  IGMP Snooping Querier  Querier VLAN Configuration.
  • Page 120: Igmp Snooping Querier Vlan Status

    GS108T and GS110TP Smart Switch Software Administration Manual IGMP Snooping Querier VLAN Status Use this page to view the operational state and other information for IGMP snooping queriers for VLANs on the network. To access this page, click Switching Multicast  IGMP Snooping Querier  Querier VLAN Status.
  • Page 121: Forwarding Database

    GS108T and GS110TP Smart Switch Software Administration Manual Forwarding Database The forwarding database maintains a list of MAC addresses after having received a packet from this MAC address. The transparent bridging function uses the forwarding database entries to determine how to forward a received frame. The Address Table folder contains links to the following features: on page 54 •...
  • Page 122 GS108T and GS110TP Smart Switch Software Administration Manual MAC Address: Select MAC Address from the menu and enter a six-byte • hexadecimal MAC address in two-digit groups separated by colons, then click Go. If the address exists, that entry will be displayed. An exact match is required. VLAN ID: Select VLAN ID from the menu, enter the VLAN ID, for example, 100.
  • Page 123: Dynamic Address Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Dynamic Address Configuration Use the Dynamic Addresses page to set the amount of time to keep a learned MAC address entry in the forwarding database. The forwarding database contains static entries, which are never aged out, and dynamically learned entries, which are removed if they are not updated within a given time.
  • Page 124: Static Mac Address

    GS108T and GS110TP Smart Switch Software Administration Manual Static MAC Address Use the Static MAC Address Configuration page to configure and view static MAC addresses on an interface. To access the Static MAC Address Configuration page, click Switching Address Table  Advanced ...
  • Page 125: Configuring Quality Of Service

    Configuring Quality of Service Use the features in the QoS tab to configure Quality of Service (QoS) settings on the switch. The QoS tab contains links to the following features: on page 126 • Class of Service on page 133 •...
  • Page 126: Class Of Service

    GS108T and GS110TP Smart Switch Software Administration Manual Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not required. The priority of a packet arriving at an interface can be used to steer the packet to the appropriate outbound CoS queue through a mapping table.
  • Page 127 GS108T and GS110TP Smart Switch Software Administration Manual To configure global CoS settings: Select the Global radio button to configure the trust mode settings that apply to all interfaces. Alternatively, you can select the Interface radio button to apply trust mode settings to individual interfaces.
  • Page 128: Cos Interface Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual CoS Interface Configuration Use the CoS Interface Configuration page to apply an interface shaping rate to all interfaces or to a specific interface. To display the CoS Interface Configuration page, click the QoS  CoS tab, and then click the Advanced ...
  • Page 129: Interface Queue Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual From the Interface Shaping Rate field, specify the maximum bandwidth allowed on the selected interface(s). This setting is typically used to shape the outbound transmission rate in increments of 64 kbps. This value is controlled independently of any per-queue maximum bandwidth configuration.
  • Page 130: 802.1P To Queue Mapping

    GS108T and GS110TP Smart Switch Software Administration Manual To configure CoS queue settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply a trust mode or rate to all interfaces.
  • Page 131: Dscp To Queue Mapping

    GS108T and GS110TP Smart Switch Software Administration Manual To map 802.1p priorities to queues: Select the Global radio button to apply the same 802.1p priority mapping to all CoS configurable interfaces or select the Interface radio button to apply 802.1p priority mapping to on a per-interface basis.
  • Page 132 GS108T and GS110TP Smart Switch Software Administration Manual To map DSCP values to queues: For each DSCP value, select a hardware queue to associate with the value. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position.
  • Page 133: Differentiated Services

    GS108T and GS110TP Smart Switch Software Administration Manual Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-based networks are designed to provide “best effort” data delivery service. “Best effort”...
  • Page 134: Diffserv Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Diffserv Configuration Use the Diffserv Configuration page to display DiffServ General Status Group information, which includes the current administrative mode setting as well as the current and maximum number of rows in each of the main DiffServ private MIB tables. To display the page, click QoS ...
  • Page 135: Class Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Field Description Policy Instance Table Displays the current and maximum number of rows of the policy instance table. Policy Attributes Table Displays the current and maximum number of rows of the policy attributes table.
  • Page 136 GS108T and GS110TP Smart Switch Software Administration Manual Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. After creating a Class, click the class link to the Class page. To configure the class match criteria: Click the class name for an existing class.
  • Page 137 GS108T and GS110TP Smart Switch Software Administration Manual Define the criteria to associate with a DiffServ class: Reference Class. Selects a class to start referencing for criteria. A specified class • can reference at most one other class of the same type. Class of Service.
  • Page 138: Policy Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual based. If you select Other, the screen refreshes and a Port ID field appears. Enter a user-defined Port ID by which packets are matched to the rule. IP DSCP. Matches the packet’s DSCP to the class criteria’s when selected. Select the •...
  • Page 139 GS108T and GS110TP Smart Switch Software Administration Manual The available policy type is In, which indicates the type is specific to inbound traffic. This field is not configurable. To rename an existing policy or add a new member class to the policy, select the check box next to the configured class, update the fields, and click Apply.
  • Page 140 GS108T and GS110TP Smart Switch Software Administration Manual The policy name is a hyperlink. The following figure shows the configuration fields for the policy. Select the queue to which packets will of this policy-class will be assigned . Configure the policy attributes:. Drop.
  • Page 141 GS108T and GS110TP Smart Switch Software Administration Manual Simple Policy. Use this attribute to establish the traffic policing style for the specified • class. The simple form of the policy command uses a single data rate and burst size, resulting in two outcomes: confirm and violate. If you select the Simple Policy attribute, you can configure the following fields: Color Mode.
  • Page 142: Service Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. If you change any of the settings on the page, click Apply to send the updated configuration to the switch.
  • Page 143: Service Statistics

    GS108T and GS110TP Smart Switch Software Administration Manual Service Statistics Use the Service Statistics page to display service-level statistical information about all interfaces that have DiffServ policies attached. To display the page, click the QoS  DiffServ tab and then click the Advanced  Service Statistics link.
  • Page 144 GS108T and GS110TP Smart Switch Software Administration Manual 144 | Chapter 4: Configuring Quality of Service...
  • Page 145: Managing Device Security

    Managing Device Security Use the features available from the Security tab to configure management security settings for port, user, and server security.The Security tab contains links to the following features: on page 146 • Management Security Settings on page 157 •...
  • Page 146: Management Security Settings

    GS108T and GS110TP Smart Switch Software Administration Manual Management Security Settings From the Management Security Settings page, you can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS+) settings, and authentication lists. To display the page, click the Security ...
  • Page 147: Radius Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual If you make changes to the page, click Apply to apply the changes to the system. In the case of a lost password, press the Factory Default Reset Note: button on the front panel for more than one second to restore the factory default.
  • Page 148: Radius Server Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual The Current Server IP Address field is blank if no servers are configured (see RADIUS on page 148). The switch supports up to three configured RADIUS Server Configuration servers. If more than one RADIUS servers are configured, the current server is the server configured as the primary server.
  • Page 149 GS108T and GS110TP Smart Switch Software Administration Manual To configure a RADIUS server: To add a RADIUS server, specify the settings the following list describes, and click Add. In the Server Address field, specify the IP address of the RADIUS server to add. •...
  • Page 150 GS108T and GS110TP Smart Switch Software Administration Manual Field Description Access Requests The number of RADIUS Access-Request packets sent to this server. This number does not include retransmissions. Access Retransmissions The number of RADIUS Access-Request packets retransmitted to this server. Access Accepts The number of RADIUS Access-Accept packets, including both valid and invalid packets, that were received from this server.
  • Page 151 GS108T and GS110TP Smart Switch Software Administration Manual To configure the RADIUS accounting server: In the Accounting Server Address field, specify the IP address of the RADIUS accounting server to add. In the Port field, specify the UDP port number the server uses to verify the RADIUS accounting server authentication.
  • Page 152 GS108T and GS110TP Smart Switch Software Administration Manual The following table describes RADIUS accounting server statistics available on the page. Field Description Accounting Server Address Displays the IP address of the supported RADIUS accounting server. Round Trip Time (secs) Displays the time interval, in hundredths of a second, between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.
  • Page 153: Configuring Tacacs

    GS108T and GS110TP Smart Switch Software Administration Manual Configuring TACACS+ TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. TACACS+ provides the following services: Authentication: Provides authentication during login and via user names and •...
  • Page 154 GS108T and GS110TP Smart Switch Software Administration Manual Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. If you make any changes to the page, click Apply to apply the new settings to the system. TACACS+ Server Configuration Use the TACACS+ Server Configuration page to configure up to five TACACS+ servers with which the switch can communicate.
  • Page 155: Authentication List Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual In the Priority field, specify the order in which the TACACS+ servers are used. A value of 0 is the highest priority. In the Port field, specify the authentication port number through which the TACACS+ session occurs.
  • Page 156 GS108T and GS110TP Smart Switch Software Administration Manual Use the drop down menu in the 1 column to select the authentication method that should appear first in the selected authentication login list. If you select a method that does not time out as the first method, such as ‘local’, no other method will be tried, even if you have specified more than one method.
  • Page 157: Configuring Management Access

    GS108T and GS110TP Smart Switch Software Administration Manual Configuring Management Access From the Access page, you can configure HTTP and Secure HTTP access to the GS108T or GS110TP management interface. You can also configure Access Control Profiles and Access Rules. The Security ...
  • Page 158: Secure Http Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual In the HTTP Session Hard Timeout field, specify the hard timeout for HTTP sessions. This timeout is unaffected by the activity level of the session. The value must be in the range of (0–168) hours. A value of zero corresponds to an infinite timeout. The default value is 24 hours.
  • Page 159: Certificate Download

    GS108T and GS110TP Smart Switch Software Administration Manual The currently configured value is shown when the Web page is displayed. The default value is Disable. You can only download SSL certificates when the HTTPS Admin mode is disabled. Use the radio buttons in the SSL Version 3 field to enable or disable Secure Sockets Layer Version 3.0.
  • Page 160 GS108T and GS110TP Smart Switch Software Administration Manual To configure the certificate download settings for HTTPS sessions: From the File Type menu, select the type of SSL certificate to download, which can be one of the following: SSL Trusted Root Certificate PEM File. SSL Trusted Root Certificate File (PEM •...
  • Page 161: Access Profile Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Access Profile Configuration Use the Access Profile Configuration page to configure settings that control management access to the switch. Access profile configuration requires three steps: Use the Access Profile Configuration page to create an access profile. To add rules to the profile, the access profile must be deactivated, which is the default setting.
  • Page 162: Access Rule Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual The Profile Summary table shows the rules that are configured for the profile, as the following table describes. Field Description Rule Type Identifies the action the rule takes, which is either Permit or Deny. Service Type Displays the type of service to allow or prohibit from accessing the switch management interface:...
  • Page 163 GS108T and GS110TP Smart Switch Software Administration Manual Before you create access rules, make sure: An access profile exists. • The access profile is deactivated. • To configure access profile rules: To add an access profile rule, configure the following settings and click Add. Rule Type: Specify whether the rule permits or denies access to the GS108T or •...
  • Page 164: Port Authentication

    GS108T and GS110TP Smart Switch Software Administration Manual Port Authentication In port-based authentication mode, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions. At any given time, only one supplicant is allowed to attempt authentication on a port in this mode.
  • Page 165: Port Authentication

    GS108T and GS110TP Smart Switch Software Administration Manual To configure global 802.1X settings: Select the appropriate radio button in the Port Based Authentication State field to enable or disable 802.1X administrative mode on the switch. Enable. Port-based authentication is permitted on the switch. •...
  • Page 166 GS108T and GS110TP Smart Switch Software Administration Manual To configure 802.1X settings for the port: Select the check box next to the port to configure. You can also select multiple check boxes to apply the same settings to the select ports, or select the check box in the heading row to apply the same settings to all ports.
  • Page 167 GS108T and GS110TP Smart Switch Software Administration Manual For the selected port(s), specify the following settings: Port Control. Defines the port authorization state. The control mode is only set if the • link status of the port is link up. The possible field values are: Auto: Automatically detects the mode of the interface.
  • Page 168 GS108T and GS110TP Smart Switch Software Administration Manual Server Timeout. Defines the amount of time that lapses before the switch resends a • request to the authentication server. The field value is in seconds. The range is 1–65535, and the field default is 30 seconds. Control Direction.
  • Page 169: Port Summary

    GS108T and GS110TP Smart Switch Software Administration Manual Click Initialize to begin the initialization sequence on the selected port(s). This button is only selectable if the control mode is auto. If the button is not selectable, it will be grayed out. When this button is clicked, the action is immediate.
  • Page 170 GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the fields on the Port Summary page. Field Description Port The port whose settings are displayed in the current table row. Control Mode Defines the port authorization state. The control mode is only set if the link status of the port is link up.
  • Page 171: Traffic Control

    GS108T and GS110TP Smart Switch Software Administration Manual Traffic Control From the Traffic Control link, you can configure MAC Filters, Storm Control, Port Security, and Protected Port settings. To display the page, click the Security  Traffic Control tab. The Traffic Control folder contains links to the following features: MAC Filter: •...
  • Page 172 GS108T and GS110TP Smart Switch Software Administration Manual To configure MAC filter settings: To configure a new MAC filter: a. Select Create Filter from the MAC Filter menu. If no filters have been configured, this is the only option available. b.
  • Page 173: Mac Filter Summary

    GS108T and GS110TP Smart Switch Software Administration Manual MAC Filter Summary Use the MAC Filter Summary page to view the MAC filters that are configured on the system. To display the MAC Filter Summary page, click Security  Traffic Control, and then click the MAC Filter ...
  • Page 174: Storm Control

    GS108T and GS110TP Smart Switch Software Administration Manual Storm Control A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses can overload network resources and/or cause the network to time out. The switch measures the incoming broadcast/multicast/unknown unicast packet rate per port and discards packets when the rate exceeds the defined value.
  • Page 175: Port Security Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Unknown Unicast. If the rate of unknown L2 unicast (destination lookup failure) • traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped. Multicast. If the rate of L2 multicast traffic ingressing on an interface increases •...
  • Page 176: Port Security Interface Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual The Port Security Violation table shows information about violations that occurred on ports that are enabled for port security. The following table describes the fields in the Port Security Violation table. Field Description Port Identifies the port where a violation occurred.
  • Page 177 GS108T and GS110TP Smart Switch Software Administration Manual To configure port security settings: To configure port security settings for a physical port, click PORTS. To configure port security settings for a Link Aggregation Group (LAG), click LAGS. To configure port security settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure.
  • Page 178: Security Mac Address

    GS108T and GS110TP Smart Switch Software Administration Manual Security MAC Address Use the Security MAC Address page to convert a dynamically learned MAC address to a statically locked address. To display the Security MAC Address page, click Security  Traffic Control, and then click the Port Security ...
  • Page 179: Protected Ports Membership

    GS108T and GS110TP Smart Switch Software Administration Manual Protected Ports Membership If a port is configured as protected, it does not forward traffic to any other protected port on the switch, but it will forward traffic to unprotected ports. Use the Protected Ports Membership page to configure the ports as protected or unprotected.
  • Page 180: Configuring Access Control Lists

    GS108T and GS110TP Smart Switch Software Administration Manual Configuring Access Control Lists Access Control Lists (ACLs) ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents of routing updates, decide which types of traffic are forwarded or blocked, and above all provide security for the network.
  • Page 181: Acl Wizard

    GS108T and GS110TP Smart Switch Software Administration Manual To use the ACL Wizard: Determine the type of ACL to configure and create a MAC ACL, standard IP ACL, or extended IP ACL. To permit or deny traffic based on the Source MAC Address, create a MAC ACL. •...
  • Page 182: Mac Acl

    GS108T and GS110TP Smart Switch Software Administration Manual MAC ACL A MAC ACL consists of a set of rules which are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken and the additional rules are not checked for a match.
  • Page 183: Mac Rules

    GS108T and GS110TP Smart Switch Software Administration Manual Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. MAC Rules Use the MAC Rules page to define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded.
  • Page 184: Mac Binding Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual example, if the MAC address is aa:bb:cc:dd:ee:ff, and the mask is 00:00:ff:ff:ff:ff, all MAC addresses with aa:bb:xx:xx:xx:xx result in a match (where x is any hexadecimal number). A MAC mask of 00:00:00:00:00:00 matches a single MAC address. EtherType Key.
  • Page 185 GS108T and GS110TP Smart Switch Software Administration Manual To configure MAC ACL interface bindings: Select an existing MAC ACL from the ACL ID menu. The packet filtering direction for ACL is Inbound, which means the MAC ACL rules are applied to traffic entering the port. Specify an optional sequence number to indicate the order of this access list relative to other access lists already assigned to this interface and direction.
  • Page 186: Mac Binding Table

    GS108T and GS110TP Smart Switch Software Administration Manual MAC Binding Table Use the MAC Binding Table page to view or delete the MAC ACL bindings. To display the MAC Binding Table, click Security  ACL, then click the Basic  Binding Table link.
  • Page 187: Ip Acl

    GS108T and GS110TP Smart Switch Software Administration Manual IP ACL IP ACLs allow network managers to define classification actions and rules for specific ingress ports. Packets can be filtered on ingress (inbound) ports only. If the filter rules match, then some actions can be taken, including dropping the packet or disabling the port.
  • Page 188: Ip Rules

    GS108T and GS110TP Smart Switch Software Administration Manual To delete an IP ACL, select the check box next to the IP ACL ID field, then click Delete. To change the name of an IP ACL, select the check box next to the IP ACL ID field, update the name, then click Apply.
  • Page 189: Ip Extended Rule

    GS108T and GS110TP Smart Switch Software Administration Manual Assign Queue ID. Specifies the hardware egress queue identifier used to handle all • packets matching this ACL rule. Enter an identifying number from 0–3 in the appropriate field. Match Every. Requires a packet to match the criteria of this ACL. Select True or •...
  • Page 190 GS108T and GS110TP Smart Switch Software Administration Manual To configure rules for an IP ACL: To add an IP ACL rule, select the ACL ID to add the rule to, select the check box in the Extended ACL Rule table, and click Add. The page displays the extended ACL Rule Configuration fields, as the following figure shows.
  • Page 191 GS108T and GS110TP Smart Switch Software Administration Manual Action. Selects the ACL forwarding action, which is one of the following: • Permit. Forwards packets which meet the ACL criteria. • Deny. Drops packets which meet the ACL criteria. • Egress Queue. Specifies the hardware egress queue identifier used to handle all •...
  • Page 192 GS108T and GS110TP Smart Switch Software Administration Manual Destination L4 Port Number: If the destination L4 keyword is Other, enter a • user-defined Port ID by which packets are matched to the rule. Service Type. Choose one of the Service Type match conditions for the extended IP •...
  • Page 193: Ip Binding Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual IP Binding Configuration When an ACL is bound to an interface, all the rules that have been defined are applied to the selected interface. Use the IP Binding Configuration page to assign ACL lists to ACL Priorities and Interfaces.
  • Page 194: Ip Binding Table

    GS108T and GS110TP Smart Switch Software Administration Manual IP Binding Table Use the IP Binding Table page to view or delete the IP ACL bindings. To display the IP Binding Table, click Security  ACL, then click the Advanced  Binding Table link The following table describes the information displayed in the MAC Binding Table.
  • Page 195: Monitoring The System

    Monitoring the System Use the features available from the Monitoring tab to view a variety of information about the switch and its ports and to configure how the switch monitors events. The Monitoring tab contains links to the following features: on page 196 •...
  • Page 196: Ports

    GS108T and GS110TP Smart Switch Software Administration Manual Ports The pages available from the Ports link contain a variety of information about the number and type of traffic transmitted from and received on the switch. From the Ports link, you can access the following pages: on page 196 •...
  • Page 197 GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the Switch Statistics displayed on the screen. Field Description ifIndex This object indicates the ifIndex of the interface table entry associated with the processor of this switch. Octets Received The total number of octets of data received by the processor (excluding framing bits, but including FCS octets).
  • Page 198: Port Statistics

    GS108T and GS110TP Smart Switch Software Administration Manual Field Description Most VLAN Entries Ever The largest number of VLANs that have been active on this switch since the Used last reboot. Static VLAN Entries The number of presently active VLAN entries on this switch that have been created statically.
  • Page 199: Port Detailed Statistics

    GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the per-port statistics displayed on the screen. Field Description Interface Lists the ports on the system. Total Packets Received The total number of packets received that were without errors. Without Errors Packets Received With Error The number of inbound packets that contained errors preventing them from being deliverable to a higher layer protocol.
  • Page 200 GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the detailed port information displayed on the screen. To view information about a different port, select the port number from the Interface menu. Field Description Interface Use the drop down menu to select the interface for which data is to be displayed or configured.
  • Page 201 GS108T and GS110TP Smart Switch Software Administration Manual Field Description Port Type For most ports this field is blank. Otherwise the possible values are: Mirrored: Indicates that the port has been configured as a monitoring port • and is the source port in a port mirroring session. For additional information about port monitoring and probe ports, see Multiple Port on page 216.
  • Page 202 GS108T and GS110TP Smart Switch Software Administration Manual Field Description Link Trap This object determines whether or not to send a trap when link status changes. The factory default is Enable. Enable: Specifies that the system sends a trap when the link status •...
  • Page 203 GS108T and GS110TP Smart Switch Software Administration Manual Field Description Packets Received The total number of packets (including bad packets) received that were 512-1023 Octets between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets). Packets Received The total number of packets (including bad packets) received that were 1024-1518 Octets...
  • Page 204 GS108T and GS110TP Smart Switch Software Administration Manual Field Description Local Traffic Frames The total number of frames dropped in the forwarding process because the destination address was located off of this port. 802.3x Pause Frames A count of MAC Control frames received on this interface with an opcode Received indicating the PAUSE operation.
  • Page 205 GS108T and GS110TP Smart Switch Software Administration Manual Field Description Packets Transmitted The total number of packets (including bad packets) transmitted that were 1519-1522 Octets between 1519 and 1522 octets in length inclusive (excluding framing bits but including FCS octets). Total Packets Transmitted The number of frames that have been transmitted by this port to its segment.
  • Page 206: Eap Statistics

    GS108T and GS110TP Smart Switch Software Administration Manual Field Description 802.3x Pause Frames A count of MAC Control frames transmitted on this interface with an opcode Transmitted indicating the PAUSE operation. This counter does not increment when the interface is operating in half-duplex mode. EAPOL Frames Received The number of valid EAPOL frames of any type that have been received by this authenticator.
  • Page 207 GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the EAP statistics displayed on the screen. Field Description Ports Specifies the interface which is polled for statistics. Frames Received Displays the number of valid EAPOL frames received on the port. Frames Transmitted Displays the number of EAPOL frames transmitted through the port.
  • Page 208: System Logs

    GS108T and GS110TP Smart Switch Software Administration Manual System Logs The switch may generate messages in response to events, faults, or errors occurring on the platform as well as changes in configuration or other occurrences. These messages are stored locally and can be forwarded to one or more centralized points of collection for monitoring purposes or long term archival storage.
  • Page 209 GS108T and GS110TP Smart Switch Software Administration Manual To configure the Memory Log settings: Use the radio buttons in the Admin Status field to determine whether to log messages. Enable: Enables system logging. • Disable: Prevents the system from logging messages. •...
  • Page 210: Flash Log Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: Click Clear to clear the messages out of the buffered log in the memory. • Click Refresh to update the page with the latest messages in the log. •...
  • Page 211 GS108T and GS110TP Smart Switch Software Administration Manual To configure the FLASH Log settings: Use the radio buttons in the Admin Status field to determine whether to log messages to persistent storage. Enable: Enables persistent logging. • Disable: Prevents the system from logging messages in persistent storage. •...
  • Page 212: Server Log Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Server Log Configuration Use the Server Log Configuration page to allow the switch to send log messages to the remote logging hosts configured on the system. To access the Server Log Configuration page, click the Monitoring  Logs tab, and then click the Server Log link.
  • Page 213 GS108T and GS110TP Smart Switch Software Administration Manual To configure a remote log server To add a remote syslog host (log server), specify the settings in the following list and click Add. Host Address. Specify the IP address or hostname of the host configured for syslog. •...
  • Page 214: Trap Logs

    GS108T and GS110TP Smart Switch Software Administration Manual Trap Logs Use the Trap Logs page to view information about the SNMP traps generated on the switch. To access the Trap Logs page, click the Monitoring  Logs tab, and then click the Trap Logs link.
  • Page 215: Event Logs

    GS108T and GS110TP Smart Switch Software Administration Manual Click Clear Counters to clear all the counters. This resets all statistics for the trap logs to the default values. Event Logs Use the Event Log page to display the event log, which is used to hold error messages for catastrophic events.
  • Page 216: Port Mirroring

    GS108T and GS110TP Smart Switch Software Administration Manual Port Mirroring The page under the Mirroring link allows you to view and configure port mirroring on the system. Multiple Port Mirroring Port mirroring selects the network traffic for analysis by a network analyzer. This is done for specific ports of the switch.
  • Page 217 GS108T and GS110TP Smart Switch Software Administration Manual From the Session Mode menu, select the mode for port mirroring on the selected port: Enable. Multiple Port Mirroring is active on the selected port. • Disable. Port mirroring is not active on the selected port, but the mirroring information •...
  • Page 218 GS108T and GS110TP Smart Switch Software Administration Manual 218 | Chapter 6: Monitoring the System...
  • Page 219: Maintaining The System

    Maintaining the System Use the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains links to the following features: on page 220 • Reset on page 222 • Upload File From Switch on page 223 •...
  • Page 220: Reset

    GS108T and GS110TP Smart Switch Software Administration Manual Reset The Reset menu contains links to the following options: on page 220 • Device Reboot on page 221 • Factory Default Device Reboot Use the Device Reboot page to reboot the GS108T or GS110TP. To access the Device Reboot page, click Maintenance ...
  • Page 221: Factory Default

    GS108T and GS110TP Smart Switch Software Administration Manual Factory Default Use the Factory Default page to reset the system configuration to the factory default values. If you reset the switch to the default configuration, the IP address is Note: reset to 192.168.0.239, and the DHCP client is enabled. If you loose network connectivity after you reset the switch to the factory defaults, see on page 11 .
  • Page 222: Upload File From Switch

    GS108T and GS110TP Smart Switch Software Administration Manual Upload File From Switch Use the File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to the TFTP server. To display the File Upload page, click Maintenance  Upload  File Upload. To upload a file from the switch to the TFTP server: Use the File Type menu to specify the type of file you want to upload: Code: Uploads a stored code image.
  • Page 223: Download File To Switch

    GS108T and GS110TP Smart Switch Software Administration Manual In the Transfer File Name field, specify a destination file name for the file to upload. You may enter up to 32 characters. The transfer fails if you do not specify a file name. For a code transfer, use an .stk file extension.
  • Page 224 GS108T and GS110TP Smart Switch Software Administration Manual Before you download a file to the switch, the following conditions must be true: The file to download from the TFTP server is on the server in the appropriate directory. • The file is in the correct format. •...
  • Page 225: Http File Download

    GS108T and GS110TP Smart Switch Software Administration Manual active image. From the Server Address Type filed, specify the format for the address you type in the TFTP Server Address field IPv4. Indicates the TFTP server address is an IP address in dotted-decimal format. •...
  • Page 226 GS108T and GS110TP Smart Switch Software Administration Manual To download a file to the switch from by using HTTP: From the File Type menu, Specify what type of file you want to download to the switch: Code: The code is the system software image, which is saved in one of two flash •...
  • Page 227 GS108T and GS110TP Smart Switch Software Administration Manual Click the Apply button to initiate the file download. After a file transfer is started, please wait until the page refreshes. Note: When the page refreshes, the Select File option will be blanked out. This indicates that the file transfer is done.
  • Page 228: File Management

    GS108T and GS110TP Smart Switch Software Administration Manual File Management The system maintains two versions of the GS108T or GS110TP software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded during subsequent switch restarts. This feature reduces switch down time when upgrading or downgrading the GS108T or GS110TP software.
  • Page 229: Dual Image Status

    GS108T and GS110TP Smart Switch Software Administration Manual To set the selected image as the active image, select the Active Image check box. After activating an image, you must perform a system reset of the Note: switch in order to run the new code. To remove the selected image from permanent storage on the switch, select the Delete Image check box.
  • Page 230 GS108T and GS110TP Smart Switch Software Administration Manual The following table describes the information on the Dual Image Status page. Field Description Unit The unit ID of the switch is always 1. Image1 Ver Displays the version of the image1 code file. Image2 Ver Displays the version of the image2 code file.
  • Page 231: Troubleshooting

    GS108T and GS110TP Smart Switch Software Administration Manual Troubleshooting The Troubleshooting menu contains links to the following options: on page 231 • Ping on page 232 • Traceroute Ping Use the Ping page to tell the switch to send a Ping request to a specified IP address. You can use this feature to check whether the switch can communicate with a particular network host.
  • Page 232: Traceroute

    GS108T and GS110TP Smart Switch Software Administration Manual Click Apply to send the ping. The switch sends the number of pings specified in the Count field, and the results are displayed below the configurable data in the Ping area. If successful, you will see “Reply From IP/Host: icmp_seq = 0. time = xx usec. Tx = x, •...
  • Page 233 GS108T and GS110TP Smart Switch Software Administration Manual MaxFail. Specify the maximum number of failures allowed in the session. The valid • range is 0–255. Interval. Specify the time between probes in seconds. The valid range is 1–60. • Port. Specify the UDP destination port in probe packets. The valid range is 1–65535. •...
  • Page 234 GS108T and GS110TP Smart Switch Software Administration Manual 234 | Chapter 7: Maintaining the System...
  • Page 235: Accessing Help

    Use the Support page to connect to the Online Support site at netgear.com. To access the Support page, click Help  Support. To connect to the NETGEAR support site for the GS108T or GS110TP, click Apply. Chapter 8: Accessing Help...
  • Page 236: User Guide

    User Guide Use the User Guide page to access the GS108T and GS110TP Smart Switch Software Administration Manual (the guide you are now reading) that is available on the NETGEAR Website. To access the User Guide page, click Help  User Guide.
  • Page 237 GS108T and GS110TP Smart Switch Software Administration Manual Chapter 8: Accessing Help | 237...
  • Page 238: Appendix A Hardware Specifications And Default Values

    Hardware Specifications and Default Values GS108T and GS110TP Gigabit Smart Switches Specifications The GS108T and GS110TP Gigabit Smart Switches conform to the TCP/IP, UDP, HTTP, ICMP, TFTP, DHCP, IEEE 802.1D, IEEE 802.1p, and IEEE 802.1Q standards. GS108 Specifications Feature Value Interfaces Eight 10/100/1000 Ethernet ports PoE-Powered Device...
  • Page 239: Gs108T And Gs110Tp Switch Performance

    GS108T and GS110TP Smart Switch Software Administration Manual GS108T and GS110TP Switch Performance Feature Value Switching capacity Non-Blocking Full WireSpeed on all packet sizes Forwarding method Store and Forward Packet forwarding rate 10M:14,880 pps/ 100M:148,810 pps/ 1G:1,488,000 pps MAC addresses Green Ethernet Power consumption savings by cable length (<10m) Automatic power down on port when link is down (GS110TP only)
  • Page 240: Traffic Control

    GS108T and GS110TP Smart Switch Software Administration Manual Traffic Control Feature Sets Supported Default Storm control All ports Disabled Jumbo frame All ports Disabled Max = 9216 bytes Quality Of Service Feature Sets Supported Default Number of queues Port based 802.1p Enabled DSCP...
  • Page 241: System Setup

    GS108T and GS110TP Smart Switch Software Administration Manual System Setup Feature Sets Supported Default Boot code update DHCP/manual IP DHCP enabled/192.168.0.239 Default gateway 192.168.0.254 System name configuration NULL Configuration save/restore Firmware upgrade Restore defaults 1 (Web and front-panel button) Dual image support Enabled Factory reset Management...
  • Page 242: Other Features

    GS108T and GS110TP Smart Switch Software Administration Manual Other Features Feature Sets Supported Default IGMP snooping v1/v2 All ports Disabled Configurations upload/download EAPoL flooding All ports Disabled BPDU flooding All ports Disabled Static multicast groups Disabled Filter multicast control Disabled 242 | Appendix A: Hardware Specifications and Default Values...
  • Page 243: Appendix B Configuration Examples

    Configuration Examples This chapter contains information about how to configure the following features: on page 244 • Virtual Local Area Networks (VLANs) on page 246 • Access Control Lists (ACLs) on page 249 • Differentiated Services (DiffServ) on page 254 •...
  • Page 244: Virtual Local Area Networks (Vlans)

    GS108T and GS110TP Smart Switch Software Administration Manual Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router.
  • Page 245: Vlan Example Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Packets leaving the switch are either tagged or untagged, depending on the setting for • that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged. Inversely, a T for a given port means that packets leaving the switch from that port are tagged with the VLAN ID that is associated with the port.
  • Page 246: Access Control Lists (Acls)

    GS108T and GS110TP Smart Switch Software Administration Manual Access Control Lists (ACLs) ACLs ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents of routing updates, decide which types of traffic are forwarded or blocked, and provide security for the network.
  • Page 247 GS108T and GS110TP Smart Switch Software Administration Manual Destination MAC Mask: 00:00:00:00:FF:FF • Source MAC: 02:02:1A:BC:DE:EF • Source MAC Mask: 00:00:00:00:FF:FF • VLAN ID: 2 • For more information about MAC ACL rules, see on page 183. MAC Rules From the MAC Binding Configuration screen, assign the Sales_ACL to the interface gigabit ports 6, 7, and 8, and then click Apply (See on page 184).
  • Page 248: Standard Ip Acl Example Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual Standard IP ACL Example Configuration The following example shows how to create an IP-based ACL that prevents any IP traffic from the Finance department from being allowed on the ports that are associated with other departments.
  • Page 249: Differentiated Services (Diffserv)

    GS108T and GS110TP Smart Switch Software Administration Manual Differentiated Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network deliver the data in a timely fashion, although there is no guarantee that it will.
  • Page 250: Diffserv Traffic Classes

    GS108T and GS110TP Smart Switch Software Administration Manual IP Service Type octet (also known as: ToS bits, Precedence value, DSCP value) • Layer 4 protocol (TCP, UDP etc.) • Layer 4 source/destination ports • Source/destination IP address • From a DiffServ point of view, there are two types of classes: DiffServ traffic classes •...
  • Page 251 GS108T and GS110TP Smart Switch Software Administration Manual Traffic Conditioning Policy Traffic conditioning pertains to actions performed on incoming traffic. There are several distinct QoS actions associated with traffic conditioning: Dropping: drop a packet upon arrival. This is useful for emulating access control list •...
  • Page 252: Diffserv Example Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual DiffServ Example Configuration To create a DiffServ Class/Policy and attach it to a switch interface, follow these steps: From the QoS Class Configuration screen, create a new class with the following settings: Class Name: Class1 •...
  • Page 253 GS108T and GS110TP Smart Switch Software Administration Manual All UDP packet flows destined to the 192.12.2.0 network with an IP source address from the 192.12.1.0 network that have a Layer 4 Source port of 4567 and Destination port of 4568 from this switch on ports 7 and 8 are assigned to hardware queue 3.
  • Page 254: 254

    GS108T and GS110TP Smart Switch Software Administration Manual 802.1X Local Area Networks (LANs) are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure, or permit unauthorized users to attempt to access the LAN through equipment already attached. In such environments, it may be desirable to restrict access to the services offered by the LAN to those users and devices that are permitted to use those services.
  • Page 255: 802.1X Example Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual A Port Access Entity (PAE) is able to adopt one of two distinct roles within an access control interaction: Authenticator: A Port that enforces authentication before allowing access to services available via that Port. Supplicant: A Port that attempts to access services offered by the Authenticator.
  • Page 256 GS108T and GS110TP Smart Switch Software Administration Manual In the Guest VLAN field for ports g5–g8, enter 150 to assign these ports to the guest VLAN. You can configure additional settings to control access to the network through the ports. on page 176 for information about the settings.
  • Page 257: Mstp

    GS108T and GS110TP Smart Switch Software Administration Manual MSTP Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) supports multiple instances of Spanning Tree to efficiently channel VLAN traffic over different interfaces.
  • Page 258: Mstp Example Configuration

    GS108T and GS110TP Smart Switch Software Administration Manual An MST Region comprises of one or more MSTP Bridges with the same MST Configuration Identifier, using the same MSTIs, and which have no Bridges attached that cannot receive and transmit MSTP BPDUs. The MST Configuration Identifier has the following components: Configuration Identifier Format Selector Configuration Name Configuration Revision Level...
  • Page 259 GS108T and GS110TP Smart Switch Software Administration Manual Ports g1-g5 Ports g1-g5 Connected to Hosts Connected to Hosts Ports g6-g8 Connected to Switch 2 and 3 Ports g6-g8 Switch 1 Connected to Root Bridge Switch 1 and 3 Switch 2 Ports g6-g8 Connected to Switch 1 and 2 Switch 3...
  • Page 260 GS108T and GS110TP Smart Switch Software Administration Manual Since the edge ports are not at risk for network loops, ports with Fast Link enabled transition directly to the Forwarding state. Click Apply. You can use the CST Port Status screen to view spanning tree information about each port.
  • Page 261 GS108T and GS110TP Smart Switch Software Administration Manual Appendix B: Configuration Examples | 261...
  • Page 262: Appendix C Notification Of Compliance

    Certificate of the Manufacturer/Importer ® It is hereby certified that the NETGEAR GS108T and GS110TP Smart Switches has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions.
  • Page 263 Hereby, NETGEAR Inc., declares that this Radiolan is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Español Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los [Spanish] requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.
  • Page 264 This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. FCC Declaration Of Conformity We, NETGEAR, Inc., 350 East Plumeria Drive, Santa Clara, CA 95134, declare under our sole responsibility that ® the NETGEAR GS108T and GS110TP Smart Switches complies with Part 15 of FCC Rules.
  • Page 265: Canadian Department Of Communications Radio Interference Regulations

    Tested to Comply with FCC Standards FOR HOME OR OFFICE USE PY306100037 Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate the equipment. Canadian Department of Communications Radio Interference Regulations ®...
  • Page 266: Index

    Index Numerics LLDP 802.1X MAC Filter example configuration Management Access MST Port Network Settings on the Administrative System password access control Policy ACL example configuration Port Security ACLs Port VLAN ID management interface RADIUS authentication Global 802.1X Secure HTTP enable SNMP v3 User list SNTP Server...
  • Page 267 GS108T and GS110TP Smart Switch Software Administration Manual LACP port configuration EAPOL LAG VLAN LAGPDUs LAGs Membership file management Static firmware LLDP firmware download Local Information neighbors information packets port settings Green Ethernet LLDP-MED guest VLAN configuration help, HTML-based bridge identifier HTTP CPU Management Interface management interface access...
  • Page 268 GS108T and GS110TP Smart Switch Software Administration Manual technical support Time configure through SNTP 802.1p to Queue Mapping time clock source levels RADIUS local server zone statistics TraceRoute reboot trademarks reset traffic control button trap configuration to defaults flags switch manager RSTP Unicast...
  • Page 269 GS108T and GS110TP Smart Switch Software Administration Manual Index | 269...

Table of Contents