Page 1 GS716T and GS724T Smart Switches Software Administration Manual 350 East Plumeria Drive San Jose, CA 95134 February 2012 202-10484-04 v1.0...
Page 2: Technical Support
NETGEAR, Inc. Technical Support Thank you for choosing NETGEAR. To register your product, get the latest product updates, or get support online, visit us at http://support.netgear.com.
Page 3: Table Of Contents
Chapter 1 Getting Started Getting Started with the GS716T and GS724T Gigabit Smart Switches . . 10 Switch Management Interface ........11 Connecting the Switch to the Network.
Page 4 GS716Tv2 and GS724Tv3 Software Administration Manual Services — DHCP Filtering ........65 DHCP Filtering Configuration .
Page 5 GS716Tv2 and GS724Tv3 Software Administration Manual DSCP to Queue Mapping ........133 Differentiated Services .
Page 6 GS716T and GS724T Gigabit Smart Switches Specifications ..244 GS716T Specifications ........244 GS724T Specifications .
Page 7 GS716Tv2 and GS724Tv3 Software Administration Manual Security..........246 System Setup .
Page 8 GS716Tv2 and GS724Tv3 Software Administration Manual Table of Contents...
Page 9: Chapter 1 Getting Started
The NETGEAR GS716T and GS724T Smart Switch Software Administration Manual describes how to configure and operate the GS716T and GS724T Gigabit Smart Switches by using the Web-based graphical user interface (GUI). This manual describes the software configuration procedures and explains the options available within those procedures.
Page 10: Getting Started With The Gs716T And Gs724T Gigabit Smart Switches
Getting Started with the GS716T and GS724T Gigabit Smart Switches This chapter provides an overview of starting your NETGEAR GS716T or GS724T Smart Switch and accessing the user interface. It also leads you through the steps to use the Smart Control Center utility.
Page 11: Switch Management Interface
In addition to enabling NETGEAR switch discovery, the Smart Control Center provides several utilities to help you maintain the NETGEAR switches on your network, such as password management, firmware upgrade, and configuration file backup. For more...
Page 12: Connecting The Switch To The Network
GS716Tv2 and GS724Tv3 Software Administration Manual Connecting the Switch to the Network To enable remote management of the switch through a Web browser or SNMP, you must connect the switch to the network and configure it with network information (an IP address, subnet mask, and default gateway).
Page 13: Switch Discovery In A Network With A Dhcp Server
GS716Tv2 and GS724Tv3 Software Administration Manual Switch Discovery in a Network with a DHCP Server This section describes how to set up your switch in a network that has a DHCP server. The DHCP client on the switch is enabled by default. When you connect it to your network, the DHCP server will automatically assign an IP address to your switch.
Page 14 GS716Tv2 and GS724Tv3 Software Administration Manual Use your Web browser to manage your switch. The default password is password. Then use this page to proceed to management of the switch covered in Using the Web Interface on page 24. 14 | Chapter 1: Getting Started...
Page 15: Switch Discovery In A Network Without A Dhcp Server
Install the Smart Control Center on your computer. Start the Smart Control Center. Click Discover for the Smart Control Center to find your GS716T and GS724T switch. The utility broadcasts Layer 2 discovery packets within the broadcast domain to discover the switch.
Page 16: Configuring The Network Settings On The Administrative System
GS716Tv2 and GS724Tv3 Software Administration Manual Click Apply to configure the switch with the network settings. Please ensure that your PC and the switch are in the same subnet. Make a note of these settings for later use. Configuring the Network Settings on the Administrative System If you choose not to use the Smart Control Center to configure the network information on the switch, you can connect directly to the switch from an administrative system, such as a PC or...
Page 17 To configure a static address on the switch: Use a straight-through cable to connect the Ethernet port on the administrative system directly to any port on the GS716T and GS724T. Open a Web browser on your PC and connect to the management interface as described in Web Access on page 18.
Page 18: Web Access
Open a Web browser and enter the IP address of the switch in the address field. You must be able to ping the IP address of the GS716T or GS724T management interface from your administrative system for Web access to be available. If you used the Smart Control Center to set up the IP address and subnet mask, either with or without a DHCP server, use that IP address in the address field of your Web browser.
Page 19: Smart Control Center Utilities
GS716Tv2 and GS724Tv3 Software Administration Manual Smart Control Center Utilities In addition to device discovery and network address assignment, the Smart Control Center includes several maintenance features. This section describes the following Smart Control Center utilities: • Network Utilities on page 19 •...
Page 20 GS716Tv2 and GS724Tv3 Software Administration Manual Click OK. Enter the switch password and click Apply. The file is uploaded to the administrative computer as a *.cfg file. You can open it and view the contents with a text editor. To restore the configuration to a previously saved version: Click the Maintenance tab and select the device with the configuration to restore.
Page 21: Firmware Upgrade
GS716Tv2 and GS724Tv3 Software Administration Manual Firmware Upgrade The application software for the GS716T and GS724T Smart Switches is upgradeable, enabling your switch to take advantage of improvements and additional features as they become available. The upgrade procedure and the required equipment are described in this section.
Page 22 GS716Tv2 and GS724Tv3 Software Administration Manual When the process is complete, the switch automatically reboots. Note: Click the Tasks tab to view status information about the firmware upgrade. WARNING! It is important that you do not power-off the administrative system or the switch while the firmware upgrade is in progress.
Page 23: Viewing And Managing Tasks
GS716Tv2 and GS724Tv3 Software Administration Manual Viewing and Managing Tasks From the Tasks tab, you can view information about configuration downloads and firmware upgrades that have already occurred, are in progress, or are scheduled to take place at a later time. You can also delete or reschedule selected tasks. The following figure shows the Tasks page.
Page 24: Understanding The User Interfaces
GS716Tv2 and GS724Tv3 Software Administration Manual Understanding the User Interfaces The switch software includes a set of comprehensive management functions for configuring and monitoring the system by using one of the following methods: • Web user interface • Simple Network Management Protocol (SNMP) Each of the standards-based management methods allows you to configure and monitor the components of the switch software.
Page 25: Gs716Tv2 And Gs724Tv3 Software Administration Manual
GS716Tv2 and GS724Tv3 Software Administration Manual Figure 1. Administrative Page Layout Navigation Tabs, Feature Links, and Page Menu The navigation tabs along the top of the Web interface give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which feature you configure.
Page 26: Device View
The following image shows the Device View of the GS716T and GS724T. Click the port you want to view or configure to see a menu that displays statistics and configuration options.
Page 27 GS716Tv2 and GS724Tv3 Software Administration Manual If you click the graphic, but do not click a specific port, the main menu appears, as the following figure shows. This menu contains the same option as the navigation tabs at the top of the page.
Page 28: Using Snmp
GS716Tv2 and GS724Tv3 Software Administration Manual Help Page Access Every page contains a link to the online help , which contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Addressing page is open, the help topic for that page displays if you click Help.
Page 29: Interface Naming Convention
GS716Tv2 and GS724Tv3 Software Administration Manual Interface Naming Convention The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are gigabit interfaces and are numbered on the front panel. You configure the logical interfaces by using the software. The following table describes the naming convention for all interfaces available on the switch.
Page 30 GS716Tv2 and GS724Tv3 Software Administration Manual 30 | Chapter 1: Getting Started...
Page 31: Chapter 2 Configuring System Information
Configuring System Information Use the features in the System tab to define the switch’s relationship to its environment. The System tab contains links to the following features: • Management on page 32 • License Key on page 47 • SNMP on page 47 •...
Page 32: Management
GS716Tv2 and GS724Tv3 Software Administration Manual Management This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information. From the Management link, you can access the following pages: •...
Page 33: Ip Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual To define system information: Open the System Information page. Define the following fields: • System Name. Enter the name you want to use to identify this switch. You may use up to 31 alphanumeric characters. The factory default is blank. •...
Page 34 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the network information for the management interface: Select the appropriate radio button to determine how to configure the network information for the switch management interface: • Dynamic IP Address (DHCP). Specifies that the switch must obtain the IP address through a DHCP server.
Page 35: Time
GS716Tv2 and GS724Tv3 Software Administration Manual port VLAN ID (PVID) of the port to be connected in that management VLAN be the same as the management VLAN ID. The management VLAN has the following requirements: • Only one management VLAN can be active at a time. •...
Page 36: Time Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual SNTP time definitions are assessed and determined by the following time levels: • T1: Time at which the original request was sent by the client. • T2: Time at which the original request was received by the server. •...
Page 37 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the time by using the CPU clock cycle as the source: From the Clock Source field, select Local. In the Date field, enter the date in the DD/MM/YYYY format. In the Time field, enter the time in HH:MM:SS format. Note: If you do not enter a date and time, the switch will calculate the date and time using the CPU’s clock cycle.
Page 38 GS716Tv2 and GS724Tv3 Software Administration Manual Use the menu to select the Coordinated Universal Time (UTC) time zone in which the switch is located, expressed as the number of hours. Click Apply to send the updated configuration to the switch. Configuration changes take effect immediately.
Page 39: Sntp Server Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Reference Clock Id Specifies the reference clock identifier of the server for the last received valid packet. Server Mode Specifies the mode of the server for the last received valid packet. Unicast Sever Max Entries Specifies the maximum number of unicast server entries that can be configured on this client.
Page 40 GS716Tv2 and GS724Tv3 Software Administration Manual • Priority . Specifies the priority of this server entry in determining the sequence of servers to which SNTP requests are sent. Enter a priority from 1–3, with 1 being the default and the highest priority. Servers with lowest numbers have priority. •...
Page 41: Denial Of Service
GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. Denial of Service Use the Denial of Service (DoS) page to configure DoS control. The switch software provides support for classifying and blocking specific types of DoS attacks. You can configure your system to monitor and block six types of attacks: •...
Page 42 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the Auto-DoS feature: Select a radio button to enable or disable Auto-DoS: • Disable. Auto-DoS is disabled (default). • Enable. Auto-DoS is enabled. Click Apply to send the updated configuration to the switch. Configuration changes occur immediately.
Page 43: Dns
GS716Tv2 and GS724Tv3 Software Administration Manual to drop packets that have a TCP header smaller than the configured Min TCP Hdr Size. The factory default is Disable. • Denial of Service Min TCP Hdr Size. Specify the Min TCP Hdr Size allowed. If First Fragment DoS prevention is enabled, the switch will drop packets that have a TCP header smaller than this configured Min TCP Hdr Size.
Page 44: Host Configuration
Enter the DNS default domain name to include in DNS queries. When the system is performing a lookup on an unqualified hostname, this field is provided as the domain name (for example, if default domain name is netgear.com and the user enters test, then test is changed to test.netgear.com to resolve the name).
Page 45 GS716Tv2 and GS724Tv3 Software Administration Manual To add a static entry to the local DNS table: Specify the static host name to add. Enter up to 158 characters. Specify the IP address in standard IPv4 dot notation to associate with the hostname. Click Add.
Page 46: Green Ethernet Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Green Ethernet Configuration Use this page to configure Green Ethernet features. Using the Green Ethernet features allows for power consumption savings. To access this page, click System  Management  Green Ethernet Configuration. To configure the Green Ethernet feature: Enable or disable the Short Cable Mode.
Page 47: License Key
GS716Tv2 and GS724Tv3 Software Administration Manual License Key This page provides information about available License Keys for various features. By default those License Keys are not available. If License Key for feature is not available, the user will not be allowed to configure this functionality. Available License Key allows the user to configure functionality.
Page 48: Community Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Community Configuration To display this page, click System  SNMP  SNMP V1/V2  Community Configuration. By default, two SNMP Communities exist: • Private, with Read/Write privileges and status set to Enable. • Public, with Read Only privileges and status set to Enable. These are well-known communities.
Page 49: Trap Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • Community String. Specify a community name. A valid entry is a case-sensitive string of up to 16 characters. • Access Mode. Specify the access level for this community by selecting Read/Write or Read Only from the menu. •...
Page 50: Trap Flags
GS716Tv2 and GS724Tv3 Software Administration Manual To modify information about an existing SNMP recipient, select the check box next to the recipient, change the desired fields, and then click Apply. Configuration changes take effect immediately. To delete a recipient, select the check box next to the recipient and click Delete. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Page 51: Snmp V3 User Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual SNMP v3 User Configuration This is the configuration for SNMP v3. To access this page, click System  SNMP  SNMP V3  User Configuration. The SNMPv3 Access Mode is a read-only field that shows the access privileges for the user account.
Page 52: Lldp
GS716Tv2 and GS724Tv3 Software Administration Manual LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN.
Page 53: Lldp Port Settings
GS716Tv2 and GS724Tv3 Software Administration Manual To configure global LLDP settings: Configure the following LLDP properties. • TLV Advertised Interval. Specify the interval at which frames are transmitted. The default is 30 seconds, and the valid range is 1–32768 seconds. •...
Page 54 GS716Tv2 and GS724Tv3 Software Administration Manual To configure LLDP port settings: Change the LLDP port settings described below: • Interface. Specifies the port to be affected by these parameters. • Admin Status. Select the status for transmitting and receiving LLDP packets: •...
Page 55: Lldp-Med Network Policy
GS716Tv2 and GS724Tv3 Software Administration Manual • Tx and Rx: Enable both transmitting and receiving LLDP PDUs on the selected ports. • Disabled: Do not transmit or receive LLDP PDUs on the selected ports. • Management IP Address. Choose whether to advertise the management IP address from the interface.
Page 56: Lldp-Med Port Settings
GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Network Policy Number Specifies the policy number. Application Specifies the media application type associated with the policy. Only the Voice application type is supported. The application type that is received on the interface has the VLAN ID, priority, DSCP, tagged bit status and unknown bit status.
Page 57: Local Information
GS716Tv2 and GS724Tv3 Software Administration Manual From the Notification field, specify whether the port should send a topology change notification if a device is connected or removed. From the Transmit Optional TLVs field, specify whether the port should transmit optional type length values (TLVs) in the LLDP PDU frames.
Page 58 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the LLDP local information that displays for each port. Field Description Interface Select the interface with the information to display. Port ID Subtype Identifies the type of data displayed in the Port ID field. Port ID Identifies the physical address of the port.
Page 59 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. To view additional details about a port, click the name of the port in the Interface column of the Port Information table. A popup window displays information for the selected port.
Page 60: Neighbors Information
GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Auto-Negotiation Enabled Displays the port speed auto-negotiation support status. The possible values are True (enabled) or False (disabled). Auto Negotiation Advertised Displays the port speed auto-negotiation capabilities such as 1000BASE-T Capabilities half-duplex mode or 100BASE-TX full-duplex mode. Operational MAU Type Displays the Medium Attachment Unit (MAU) type.
Page 61 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information that displays for all LLDP neighbors that have been discovered. Field Description MSAP Entry Displays the Media Service Access Point (MSAP) entry number for the remote device. Local Port Displays the interface on the local system that received LLDP information from a remote system.
Page 62 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Port Details Local Port Displays the interface on the local system that received LLDP information from a remote system. MSAP Entry Displays the Media Service Access Point (MSAP) entry number for the remote device.
Page 63 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Address Specifies the advertised management address of the remote system. Interface SubType Specifies the port subtype. Interface Number Identifies the port on the remote device that sent the information. MAC/PHY Details Auto-Negotiation Supported Specifies whether the remote device supports port-speed auto-negotiation. The possible values are True or False Auto-Negotiation Enabled Displays the port speed auto-negotiation support status.
Page 64 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Asset ID Displays the asset ID advertised by the remote device. Location Information Civic Displays the physical location, such as the street address, the remote device has advertised in the location TLV. For example, 123 45th St. E. The field value length range is 6–160 characters.
Page 65: Services - Dhcp Filtering
GS716Tv2 and GS724Tv3 Software Administration Manual Services — DHCP Filtering DHCP Filtering is a useful feature that can be employed as a security measure against unauthorized DHCP servers. A known attack is when an unauthorized DHCP server responds to a client that is requesting an IP address. The server configures the gateway for the client to be equal to the IP address of the server.
Page 66: Interface Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Interface Configuration Use the DHCP Filtering Interface Configuration page to view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded. If a port is configured as untrusted, any DHCP (or BootP) responses received on that port are discarded.
Page 67 GS716Tv2 and GS724Tv3 Software Administration Manual To configure DHCP filtering settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces.
Page 68 GS716Tv2 and GS724Tv3 Software Administration Manual 68 | Chapter 2: Configuring System Information...
Page 69: Chapter 3 Configuring Switching Information
Configuring Switching Information Use the features in the Switching tab to define Layer 2 features. The Switching tab contains links to the following features: • Ports on page 70 • Link Aggregation Groups on page 74 • VLANs on page 80 •...
Page 70: Ports
GS716Tv2 and GS724Tv3 Software Administration Manual Ports The pages on the Ports tab allow you to view and monitor the physical port information for the ports available on the switch. From the Ports link, you can access the following pages: •...
Page 71 GS716Tv2 and GS724Tv3 Software Administration Manual To configure port settings: To configure settings for a physical port, click PORTS. To configure settings for a Link Aggregation Group (LAG), click LAGS. Chapter 3: Configuring Switching Information | 71...
Page 72 GS716Tv2 and GS724Tv3 Software Administration Manual To configure settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces.
Page 73: Flow Control
GS716Tv2 and GS724Tv3 Software Administration Manual Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. If you make any changes to the page, click Apply to apply the changes to the system. Flow Control IEEE 802.3x flow control works by pausing a port when the port becomes oversubscribed and dropping all traffic for small bursts of time during the congestion condition.
Page 74: Link Aggregation Groups
LACP PDUs. The GS510TP and GS110T Smart Switches each support four LAGs. Static LAGs are supported. When a port is added to a LAG as a static member, it neither transmits nor receives LACP PDUs. GS716T supports 2 LAGs and the GS724T supports 4 LAGs.
Page 75: Lag Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual LAG Configuration Use the LAG (Port Channel) Configuration page to group one or more full-duplex Ethernet links to be aggregated together to form a link aggregation group, which is also known as a port-channel. The switch treats the LAG as if it were a single link. To access the LAG Configuration page, click Switching...
Page 76: Lag Membership
GS716Tv2 and GS724Tv3 Software Administration Manual • Active Ports. A listing of the ports that are actively participating members of this Port Channel. A maximum of 4 ports can be assigned to a port channel. • LAG State. Indicates whether the link is Up or Down. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Page 77: Lacp Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Click the box below each port to include in the LAG. The following figure shows an example of how to configure LAG1 with ports e1–e4 as members. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Page 78: Lacp Port Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. If you make any changes to this page, click Apply to send the updated configuration to the switch.
Page 79 GS716Tv2 and GS724Tv3 Software Administration Manual Note: You cannot select ports that are not participating in a LAG Configure the LACP Priority value for the selected port. The field range is 0–255. The default value is 128. Configure the administrative LACP Timeout value. •...
Page 80: Vlans
VLAN Configuration Use the VLAN Configuration page to define VLAN groups stored in the VLAN membership table. The GS716T and GS724T support up to 64 VLANs. VLAN 1 is created by default, and all ports are untagged members. To display the VLAN Configuration page, lick Switching VLAN  Basic  VLAN Configuration.
Page 81: Vlan Membership Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual To configure VLANs: To add a VLAN, configure the VLAN ID, name, and type, and then click Add. • VLAN ID. Specify the VLAN Identifier for the new VLAN. (You can enter data in this field only when you are creating a new VLAN.) The range of the VLAN ID is 1–4093.
Page 82 GS716Tv2 and GS724Tv3 Software Administration Manual To display the VLAN Membership Configuration page, click Switching VLAN  Advanced  VLAN Membership. To configure VLAN membership: From the VLAN ID field, select the VLAN to which you want to add ports. Click the orange bar below the VLAN Type field to display the physical ports on the switch.
Page 83: Port Vlan Id Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • Tag All: Select the ports on which all frames transmitted for this VLAN will be tagged. All the ports will be included in the VLAN. • Remove All: This selection has the effect of excluding all ports from the selected VLAN.
Page 84 GS716Tv2 and GS724Tv3 Software Administration Manual To configure PVID information: To configure PVID settings for a physical port, click PORTS. To configure PVID settings for a Link Aggregation Group (LAG), click LAGS. To configure PVID settings for both physical ports and LAGs, click ALL. Select the check box next to the interfaces to configure.
Page 85 GS716Tv2 and GS724Tv3 Software Administration Manual Specify how you want the port to handle untagged and priority tagged frames. Whichever you select, VLAN tagged frames will be forwarded in accordance with the IEEE 802.1Q VLAN standard. The factory default is Admit All. •...
Page 86: Voice Vlan
GS716Tv2 and GS724Tv3 Software Administration Manual Voice VLAN Configure the Voice VLAN settings for ports that carry traffic from IP phones. The Voice VLAN feature can help ensure that the sound quality of an IP phone is safeguarded from deteriorating when the data traffic on the port is high. From the VLAN link, you can access the following pages: •...
Page 87: Voice Vlan Port Setting
GS716Tv2 and GS724Tv3 Software Administration Manual From the Voice VLAN Aging Time field, specify the amount of time after the last IP phone’s OUI is aged out for a specific port. The port will age out after the bridge and voice aging time.
Page 88: Voice Vlan Oui
GS716Tv2 and GS724Tv3 Software Administration Manual To configure Voice VLAN port settings: Select the check box next to the port to configure. You can select multiple check boxes to apply the same setting to all selected ports. From the Voice VLAN Mode menu, specify whether to enable or disable Voice VLAN on the selected port.
Page 89 GS716Tv2 and GS724Tv3 Software Administration Manual Chapter 3: Configuring Switching Information | 89...
Page 90: Auto-Voip
GS716Tv2 and GS724Tv3 Software Administration Manual Auto-VoIP The Auto-VoIP automatically makes sure that time-sensitive voice traffic is given priority over data traffic on ports that have this feature enabled. Auto-VoIP checks for packets carrying the following VoIP protocols: • Session Initiation Protocol (SIP) •...
Page 91 GS716Tv2 and GS724Tv3 Software Administration Manual To configure Auto-VoIP settings: Select the check box next to the port to configure. You can select multiple check boxes to apply the same setting to all selected ports. From the Auto-VoIP Mode menu, specify whether to enable or disable Auto-VoIP on the selected port.
Page 92 GS716Tv2 and GS724Tv3 Software Administration Manual To configure OUI settings: To add a new OUI prefix, type the VOIP OUI prefix in the Telephony OUI(s) field, provide a description of the prefix, and click Add. The OUI prefix must be in the format AA:BB:CC.
Page 93: Spanning Tree Protocol
GS716Tv2 and GS724Tv3 Software Administration Manual Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops. Spanning tree versions supported include Common STP, Multiple STP, and Rapid STP. Classic STP provides a single path between end stations, avoiding and eliminating loops.
Page 94 GS716Tv2 and GS724Tv3 Software Administration Manual To configure STP settings on the switch: From the Spanning Tree State field, specify whether to enable or disable Spanning Tree operation on the switch. From the STP Operation Mode field, Specifies the Force Protocol Version parameter for the switch.
Page 95: Cst Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual If you make any configuration changes, click Apply to send the updated configuration to the switch. Configuration changes occur immediately. The following table describes the STP Status information displayed on the screen. Field Description Bridge Identifier The bridge identifier for the CST.
Page 96 GS716Tv2 and GS724Tv3 Software Administration Manual To configure CST settings: Specify values for CST in the appropriate fields: • Bridge Priority. When switches or bridges are running STP, each is assigned a priority. After exchanging BPDUs, the switch with the lowest priority value becomes the root bridge.
Page 97: Cst Port Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual If you make any configuration changes, click Apply to send the updated configuration to the switch. Configuration changes take place immediately. The following table describes the MSTP status information displayed on the Spanning Tree CST Configuration page.
Page 98 GS716Tv2 and GS724Tv3 Software Administration Manual To configure CST port settings: To configure CST settings for a physical port, click PORTS. To configure CST settings for a Link Aggregation Group (LAG), click LAGS. To configure CST settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure.
Page 99: Cst Port Status
GS716Tv2 and GS724Tv3 Software Administration Manual • Fast Link. Specifies if the specified port is an Edge Port with the CST. Possible values are Enable or Disable. The default is Disable. • Port State. The Forwarding state of this port. This field is read-only. •...
Page 100 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the CST Status information displayed on the screen. 100 | Chapter 3: Configuring Switching Information...
Page 101 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Interface Select a physical or port channel interface to configure. The port is associated with the VLAN(s) associated with the CST. Port Role Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree.
Page 102: Rapid Stp
GS716Tv2 and GS724Tv3 Software Administration Manual Rapid STP Use the Rapid STP page to view information about Rapid Spanning Tree (RSTP) port status. To display the Rapid STP page, click Switching > STP > Advanced  RSTP. The following table describes the Rapid STP Status information displayed on the screen. Field Description Interface...
Page 103: Mst Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Fast Link Indicates whether the port is enabled as an edge port. Status The Forwarding State of this port. Click Refresh to update the information on the screen with the most current data. MST Configuration Use the Spanning Tree MST Configuration page to configure Multiple Spanning Tree (MST) on the switch.
Page 104: Mst Port Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • VLAN ID. The menu contains all VLANs configured on the switch. Select a VLAN to associate with the MST instance. To delete an MST instance, select the check box next to the instance and click Delete. To modify an MST instance, select the check box next to the instance to configure, update the values, and click Apply.
Page 105 GS716Tv2 and GS724Tv3 Software Administration Manual Chapter 3: Configuring Switching Information | 105...
Page 106 GS716Tv2 and GS724Tv3 Software Administration Manual Note: If no MST instances have been configured on the switch, the page displays a “No MSTs Available” message. To configure MST port settings: To configure MST settings for a physical port, click PORTS. To configure MST settings for a Link Aggregation Group (LAG), click LAGS.
Page 107: Stp Statistics
GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Port Mode Spanning Tree Protocol Administrative Mode associated with the port or port channel. Possible values are Enable or Disable. Port Forwarding State Indicates the current STP state of a port. If enabled, the port state determines what forwarding action is taken on traffic.
Page 108 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available on the STP Statistics page. Field Description Interface Select a physical or port channel interface to view its statistics. STP BPDUs Received Number of STP BPDUs received at the selected port. STP BPDUs Transmitted Number of STP BPDUs transmitted from the selected port.
Page 109: Multicast
GS716Tv2 and GS724Tv3 Software Administration Manual Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255. From the Multicast link, you can access the following pages: •...
Page 110: Igmp Snooping
GS716Tv2 and GS724Tv3 Software Administration Manual IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch. Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255.
Page 111 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP Snooping: Enable or disable IGMP Snooping on the switch. • Enable. The switch snoops all IGMP packets it receives to determine which segments should receive packets directed to the group address. •...
Page 112: Igmp Snooping Interface Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual The following table displays information about the global IGMP snooping status and statistics on the page. Field Description Multicast Control Frame Displays the number of multicast control frames that have been processed Count by the CPU. Interfaces Enabled for IGMP Lists the interfaces currently enabled for IGMP Snooping.
Page 113 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP Snooping interface settings: To configure IGMP Snooping settings for a physical port, click PORTS. To configure IGMP Snooping settings for a Link Aggregation Group (LAG), click LAGS. To configure IGMP Snooping settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure.
Page 114: Igmp Snooping Table
GS716Tv2 and GS724Tv3 Software Administration Manual • Fast Leave Admin Mode. Select the Fast Leave mode for a particular interface from the menu. The default is Disable. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Page 115 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Description The text description of this multicast table entry. Possible values are Management Configured, Network Configured, and Network Assisted. Interface The list of interfaces that are designated for forwarding (Fwd) and filtering (Flt) for the associated address.
Page 116: Mfdb Statistics
GS716Tv2 and GS724Tv3 Software Administration Manual Field Description MAC Address The MAC Address to which the multicast MAC address is related. To search by MAC address, enter the address with the MFDB table entry you want displayed. Enter six two-digit hexadecimal numbers separated by colons, for example 00:0f:43:67:89:AB, and then click Go.
Page 117: Igmp Snooping Vlan Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available on the MFDB Statistics page: Field Description Max MFDB Table Displays the maximum number of entries that the Multicast Forwarding Database Entries table can hold. Most MFDB Entries The largest number of entries that have been present in the Multicast Forwarding Since Last Reset Database table since the system was last reset.
Page 118 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP snooping settings for VLANs: To enable IGMP snooping on a VLAN, enter the VLAN ID in the appropriate field and configure the IGMP Snooping values: • Fast Leave Admin Mode. Enable or disable the IGMP Snooping Fast Leave Mode for the specified VLAN ID.
Page 119: Igmp Snooping Querier
GS716Tv2 and GS724Tv3 Software Administration Manual To disable IGMP snooping on a VLAN and remove it from the list, select the check box next to the VLAN ID and click Delete. To modify IGMP snooping settings for a VLAN, select the check box next to the VLAN ID, update the desired values, and click Apply.
Page 120: Igmp Snooping Querier Vlan Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual From the Querier Admin Mode field, enable or disable the administrative mode for IGMP Snooping Querier. In the Snooping Querier Address field, specify the IP address to be used as source address in periodic IGMP queries. This address is used when no address is configured on the VLAN on which the query is being sent.
Page 121: Igmp Snooping Querier Vlan Status
GS716Tv2 and GS724Tv3 Software Administration Manual • Disabled. Upon seeing another querier of the same version in the VLAN, the snooping querier moves to the non-querier state. • Enabled. The snooping querier participates in querier election, in which the least IP address operates as the querier in that VLAN.
Page 122: Forwarding Database
GS716Tv2 and GS724Tv3 Software Administration Manual Field Description VLAN ID Specifies the VLAN ID on which the IGMP Snooping Querier is administratively enabled and for which VLAN exists in the VLAN database. Operational State Specifies the operational state of the IGMP Snooping Querier on a VLAN: •...
Page 123 GS716Tv2 and GS724Tv3 Software Administration Manual To access this page, click Switching Address Table  Basic  Address Table. To search for an entry in the MAC Address Table: Use the Search By field to search for MAC Addresses by MAC Address, VLAN ID, or Interface.
Page 124: Dynamic Address Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available for each entry in the address table. Field Description VLAN ID Specifies the VLAN ID on which the IGMP Snooping Querier is administratively enabled and for which VLAN exists in the VLAN database. MAC Address A unicast MAC address for which the switch has forwarding and/or filtering information.
Page 125: Static Mac Address
GS716Tv2 and GS724Tv3 Software Administration Manual Note: IEEE 802.1D recommends a default of 300 seconds, which is the factory default. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. Click Apply to apply to send the updated configuration to the switch.
Page 126 GS716Tv2 and GS724Tv3 Software Administration Manual 126 | Chapter 3: Configuring Switching Information...
Page 127: Chapter 4 Configuring Quality Of Service
Configuring Quality of Service Use the features in the QoS tab to configure Quality of Service (QoS) settings on the switch. The QoS tab contains links to the following features: • Class of Service on page 128 • Differentiated Services on page 135 In a typical switch, each physical port consists of one or more queues for transmitting packets on the attached network.
Page 128: Class Of Service
GS716Tv2 and GS724Tv3 Software Administration Manual Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not required. The priority of a packet arriving at an interface can be used to steer the packet to the appropriate outbound CoS queue through a mapping table.
Page 129: Cos Interface Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual To configure global CoS settings: Select the Global radio button to configure the trust mode settings that apply to all interfaces. Alternatively, you can select the Interface radio button to apply trust mode settings to individual interfaces.
Page 130 GS716Tv2 and GS724Tv3 Software Administration Manual To configure CoS settings for an interface: To configure CoS settings for a physical port, click PORTS. To configure CoS settings for a Link Aggregation Group (LAG), click LAGS. To configure CoS settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure.
Page 131: Interface Queue Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Interface Queue Configuration Use the Interface Queue Configuration page to define what a particular queue does by configuring switch egress queues. User-configurable parameters control the amount of bandwidth used by the queue, the queue depth during times of congestion, and the scheduling of packet transmission from the set of all queues on a port.
Page 132: 802.1P To Queue Mapping
GS716Tv2 and GS724Tv3 Software Administration Manual • Queue ID. Use the menu to select the queue to be configured. • Minimum Bandwidth. Enter a percentage of the maximum negotiated bandwidth for the selected queue on the interface. Specify a percentage from 0–100, in increments of 1.
Page 133: Dscp To Queue Mapping
GS716Tv2 and GS724Tv3 Software Administration Manual If you map 802.1p priorities to individual interfaces, select the Interface radio button and then select the interface from the drop-down menu. The interface settings override the global settings for 802.1p priority mapping. Select the queue to map to the predefined 802.1p priority values. The 802.1p Priority row contains traffic class selectors for each of the eight 802.1p priorities to be mapped.
Page 134 GS716Tv2 and GS724Tv3 Software Administration Manual To map DSCP values to queues: For each DSCP value, select a hardware queue to associate with the value. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position.
Page 135: Differentiated Services
GS716Tv2 and GS724Tv3 Software Administration Manual Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-based networks are designed to provide “best effort” data delivery service. “Best effort”...
Page 136: Diffserv Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Diffserv Configuration Use the Diffserv Configuration page to display DiffServ General Status Group information, which includes the current administrative mode setting as well as the current and maximum number of rows in each of the main DiffServ private MIB tables. To display the page, click QoS ...
Page 137: Class Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Policy Attributes Table Displays the current and maximum number of rows of the policy attributes table. Service Table Displays the current and maximum number of rows of the service table. Class Configuration Use the Class Configuration page to add a new DiffServ class name, or to rename or delete an existing class.
Page 138 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the class match criteria: Click the class name for an existing class. The class name is a hyperlink. The following figure shows the configuration fields for the class. 138 | Chapter 4: Configuring Quality of Service...
Page 139 GS716Tv2 and GS724Tv3 Software Administration Manual Define the criteria to associate with a DiffServ class: • Reference Class. Selects a class to start referencing for criteria. A specified class can reference at most one other class of the same type. •...
Page 140: Policy Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • Destination IP Address. Requires a packet’s destination port IP address to match the address listed here. In the IP Address field, enter a valid destination IP address in dotted decimal format. • Destination Mask. Enter a valid subnet mask to determine which bits in the IP address are significant.
Page 141 GS716Tv2 and GS724Tv3 Software Administration Manual To configure a DiffServ policy: To create a new policy, enter a policy name in the Policy Selector field, select the existing DiffServ class to associate with the policy, and click Add. The available policy type is In, which indicates the type is specific to inbound traffic. This field is not configurable.
Page 142 GS716Tv2 and GS724Tv3 Software Administration Manual The policy name is a hyperlink. The following figure shows the configuration fields for the policy. 142 | Chapter 4: Configuring Quality of Service...
Page 143 GS716Tv2 and GS724Tv3 Software Administration Manual Select the queue to which packets will of this policy-class will be assigned. Configure the policy attributes:. • Drop. Select this option to drop packets for this policy-class. • Mark CoS. Enter the specified Class of Service queue number to mark all packets for the associated traffic stream with the specified class of service value in the priority field of the 802.1p header.
Page 144 GS716Tv2 and GS724Tv3 Software Administration Manual • Simple Policy. Use this attribute to establish the traffic policing style for the specified class. The simple form of the policy command uses a single data rate and burst size, resulting in two outcomes: confirm and violate. If you select the Simple Policy attribute, you can configure the following fields: •...
Page 145: Service Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • Mark IP DSCP. These packets are marked by DiffServ with the specified DSCP value before being presented to the system forwarding element. This selection requires that the DSCP value field be set. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Page 146: Service Statistics
GS716Tv2 and GS724Tv3 Software Administration Manual Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces.
Page 147 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Discarded Packets Displays the total number of packets discarded for all class instances in this service policy for any reason due to DiffServ treatment. This is the overall count per-interface, per-direction. Member Classes Selects the member class for which octet statistics are to display.
Page 148 GS716Tv2 and GS724Tv3 Software Administration Manual 148 | Chapter 4: Configuring Quality of Service...
Page 149: Chapter 5 Managing Device Security
Managing Device Security Use the features available from the Security tab to configure management security settings for port, user, and server security. The Security tab contains links to the following features: • Management Security Settings on page 150 • Configuring Management Access on page 161 •...
Page 150: Management Security Settings
GS716Tv2 and GS724Tv3 Software Administration Manual Management Security Settings From the Management Security Settings page, you can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS+) settings, and authentication lists. To display the page, click the Security  Management Security tab. The Management Security folder contains links to the following features: •...
Page 151: Radius Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Note: In the case of a lost password, press the Factory Default Reset button on the front panel for more than one second to restore the factory default. The reset button will only reboot the device. RADIUS Configuration RADIUS servers provide additional security for networks.
Page 152: Radius Server Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual configured as the primary server. If no servers are configured as the primary server, the current server is the most recently added RADIUS server. To configure global RADIUS server settings: In the Max Number of Retransmits field, specify the value of the maximum number of times a request packet is retransmitted to the RADIUS server.
Page 153 GS716Tv2 and GS724Tv3 Software Administration Manual To configure a RADIUS server: To add a RADIUS server, specify the settings the following list describes, and click Add. • In the Server Address field, specify the IP address of the RADIUS server to add. •...
Page 154 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Access Requests The number of RADIUS Access-Request packets sent to this server. This number does not include retransmissions. Access Retransmissions The number of RADIUS Access-Request packets retransmitted to this server. Access Accepts The number of RADIUS Access-Accept packets, including both valid and invalid packets, that were received from this server.
Page 155 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the RADIUS accounting server: In the Accounting Server Address field, specify the IP address of the RADIUS accounting server to add. In the Port field, specify the UDP port number the server uses to verify the RADIUS accounting server authentication.
Page 156: Configuring Tacacs
GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes RADIUS accounting server statistics available on the page. Field Description Accounting Server Address Displays the IP address of the supported RADIUS accounting server. Round Trip Time (secs) Displays the time interval, in hundredths of a second, between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.
Page 157 In the Connection Timeout field, specify the maximum number of seconds allowed to establish a TCP connection between the GS716T or GS724T and the TACACS+ server. The valid range is 1–30 seconds. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Page 158 In the Key String field, specify the authentication and encryption key for TACACS+ communications between the GS716T or GS724T and the TACACS+ server. This key must match the encryption used on the TACACS+ server. The valid range is 0–128 characters.
Page 159: Authentication List Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Authentication List Configuration Use the Authentication List page to configure the default login list. A login list specifies one or more authentication methods to validate switch or port access for the admin user. Note: Admin is the only user on the system and is assigned to a preconfigured list named defaultList, which you cannot delete.
Page 160 GS716Tv2 and GS724Tv3 Software Administration Manual Use the menu in the 2 column to select the authentication method, if any, that should appear second in the selected authentication login list. This is the method that will be used if the first method times out.
Page 161: Configuring Management Access
GS716Tv2 and GS724Tv3 Software Administration Manual Configuring Management Access From the Access page, you can configure HTTP and Secure HTTP access to the GS716T or GS724T management interface. You can also configure Access Control Profiles and Access Rules. The Security  Access tab contains the following folders: •...
Page 162: Secure Http Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual This timeout is unaffected by the activity level of the session. The value must be in the range of (0–168) hours. A value of zero corresponds to an infinite timeout. The default value is 24 hours. The currently configured value is shown when the Web page is displayed.
Page 163: Certificate Download
GS716Tv2 and GS724Tv3 Software Administration Manual The currently configured value is shown when the Web page is displayed. The default value is Disable. You can only download SSL certificates when the HTTPS Admin mode is disabled. Use the radio buttons in the SSL Version 3 field to enable or disable Secure Sockets Layer Version 3.0.
Page 164 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the certificate download settings for HTTPS sessions: From the File Type menu, select the type of SSL certificate to download, which can be one of the following: • SSL Trusted Root Certificate PEM File. SSL Trusted Root Certificate File (PEM Encoded).
Page 165: Access Profile Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual Access Profile Configuration Use the Access Profile Configuration page to configure settings that control management access to the switch. Access profile configuration requires three steps: Use the Access Profile Configuration page to create an access profile. To add rules to the profile, the access profile must be deactivated, which is the default setting.
Page 166: Access Rule Configuration
Use the Access Rule Configuration page to configure the rules about what systems can access the GS716T or GS724T Web interface and what protocols are allowed. To access the Access Rule Configuration page, click Security  Access, and then click the Access Control ...
Page 167 To configure access profile rules: To add an access profile rule, configure the following settings and click Add. • Rule Type: Specify whether the rule permits or denies access to the GS716T or GS724T management interface. • Select Permit to allow access to the management interface for traffic that meets the criteria you configure for the rule.
Page 168: Port Authentication
GS716Tv2 and GS724Tv3 Software Administration Manual Port Authentication In port-based authentication mode, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions. At any given time, only one supplicant is allowed to attempt authentication on a port in this mode.
Page 169: Port Authentication
GS716Tv2 and GS724Tv3 Software Administration Manual To configure global 802.1X settings: Select the appropriate radio button in the Port Based Authentication State field to enable or disable 802.1X administrative mode on the switch. • Enable. Port-based authentication is permitted on the switch. Note: If 802.1X is enabled, authentication is performed by a RADIUS server.
Page 170 GS716Tv2 and GS724Tv3 Software Administration Manual To configure 802.1X settings for the port: 170 | Chapter 5: Managing Device Security...
Page 171 GS716Tv2 and GS724Tv3 Software Administration Manual Select the check box next to the port to configure. You can also select multiple check boxes to apply the same settings to the select ports, or select the check box in the heading row to apply the same settings to all ports. For the selected port(s), specify the following settings: •...
Page 172 GS716Tv2 and GS724Tv3 Software Administration Manual • Supplicant Timeout. Defines the amount of time that lapses before EAP requests are resent to the user. The field value is in seconds. The field default is 30 seconds. • Server Timeout. Defines the amount of time that lapses before the switch resends a request to the authentication server.
Page 173: Port Summary
GS716Tv2 and GS724Tv3 Software Administration Manual Click Initialize to begin the initialization sequence on the selected port(s). This button is only selectable if the control mode is auto. If the button is not selectable, it will be grayed out. When this button is clicked, the action is immediate. It is not required to click Apply for the action to occur.
Page 174: Traffic Control
GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the fields on the Port Summary page. Field Description Port The port whose settings are displayed in the current table row. Control Mode Defines the port authorization state. The control mode is only set if the link status of the port is link up.
Page 175: Mac Filter Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • Security MAC Address on page 181 • Protected Ports Membership on page 181 MAC Filter Configuration Use the MAC Filter Configuration page to create MAC filters that limit the traffic allowed into and out of specified ports on the system. To display the MAC Filter Configuration page, click Security ...
Page 176: Mac Filter Summary
GS716Tv2 and GS724Tv3 Software Administration Manual e. Click the orange bar under the Destination Port Members heading to display the available ports. Select the port(s) to include in the outbound filter. Packets with the MAC address and VLAN ID you selected will be transmitted only out of ports that are in the list.
Page 177: Storm Control
GS716Tv2 and GS724Tv3 Software Administration Manual Storm Control A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses can overload network resources and/or cause the network to time out. The switch measures the incoming broadcast/multicast/unknown unicast packet rate per port and discards packets when the rate exceeds the defined value.
Page 178: Port Security Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • Disable. Do not use storm control. • Unknown Unicast. If the rate of unknown L2 unicast (destination lookup failure) traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped. •...
Page 179: Port Security Interface Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual If you change the mode, click Apply to apply the change to the system. The Port Security Violation table shows information about violations that occurred on ports that are enabled for port security. The following table describes the fields in the Port Security Violation table.
Page 180 GS716Tv2 and GS724Tv3 Software Administration Manual To configure port security settings: To configure port security settings for a physical port, click PORTS. To configure port security settings for a Link Aggregation Group (LAG), click LAGS. To configure port security settings for both physical ports and LAGs, click ALL. Select the check box next to the port or LAG to configure.
Page 181: Security Mac Address
GS716Tv2 and GS724Tv3 Software Administration Manual If you make changes to the page, click Apply to apply the changes to the system. Security MAC Address Use the Security MAC Address page to convert a dynamically learned MAC address to a statically locked address.
Page 182 GS716Tv2 and GS724Tv3 Software Administration Manual To display the Protected Ports Membership page, click the Security  Traffic Control  Protected Ports link. To configure protected ports: Click the orange bar to display the available ports. Click the box below each port to configure as a protected port. Protected ports are marked with an X.
Page 183: Configuring Access Control Lists
GS716Tv2 and GS724Tv3 Software Administration Manual Configuring Access Control Lists Access Control Lists (ACLs) ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents of routing updates, decide which types of traffic are forwarded or blocked, and above all provide security for the network.
Page 184: Mac Acl
GS716Tv2 and GS724Tv3 Software Administration Manual To use the ACL Wizard: Determine the type of ACL to configure and create a MAC ACL, standard IP ACL, or extended IP ACL. • To permit or deny traffic based on the Source MAC Address, create a MAC ACL. •...
Page 185 GS716Tv2 and GS724Tv3 Software Administration Manual Use the MAC ACL page to create the ACL ID. Use the MAC Rules page to create rules for the ACL. Use the MAC Binding Configuration page to assign the ACL by its ID number to a port. Optionally, use the MAC Binding Table page to view the configurations.
Page 186: Mac Rules
GS716Tv2 and GS724Tv3 Software Administration Manual MAC Rules Use the MAC Rules page to define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. A default 'deny all' rule is the last rule of every list. To display the MAC Rules page, click Security ...
Page 187 GS716Tv2 and GS724Tv3 Software Administration Manual • Deny: Drops packets that meet the ACL criteria. • Assign Queue. Specifies the hardware egress queue identifier used to handle all packets matching this ACL rule. Enter an identifying number from 0–3 in this field. •...
Page 188: Mac Binding Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual the value given for that bit. The valid format is xx:xx:xx:xx:xx:xx. A MAC mask of 00:00:00:00:00:00 matches a single MAC address. • VLAN. Requires a packet’s VLAN ID to match the ID listed here. Enter the VLAN ID to apply this criteria.
Page 189: Mac Binding Table
GS716Tv2 and GS724Tv3 Software Administration Manual A low number indicates high precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached access list using that sequence number. If the sequence number is not specified by the user, a sequence number that is one greater than the highest sequence number currently in use for this interface and direction will be used.
Page 190: Ip Acl
GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information displayed in the MAC Binding Table. Field Description Interface Displays the interface to which the MAC ACL is bound. Direction Specifies the packet filtering direction for ACL. The only valid direction is Inbound, which means the MAC ACL rules are applied to traffic entering the port.
Page 191: Ip Rules
GS716Tv2 and GS724Tv3 Software Administration Manual The IP ACL area shows the current size of the ACL table versus the maximum size of the ACL table. The current size is equal to the number of configured IPv4 plus the number of configured MAC ACLs.
Page 192 GS716Tv2 and GS724Tv3 Software Administration Manual To configure rules for an IP ACL: To add an IP ACL rule, select the ACL ID to add the rule to, complete the fields described in the following list, and click Add. • Rule ID.
Page 193: Ip Extended Rule
GS716Tv2 and GS724Tv3 Software Administration Manual subnet mask. A wildcard mask is in essence the inverse of a subnet mask. For example, to apply the rule to all hosts in the 192.168.1.0/24 subnet, you type 0.0.0.255 in the Source IP Mask field. This field is required when you configure a source IP address.
Page 194 GS716Tv2 and GS724Tv3 Software Administration Manual To configure rules for an IP ACL: To add an IP ACL rule to an extended IP ACL, select the ACL ID to add the rule to, select the check box in the Extended ACL Rule table, and click Add. Note: The ACL you select must have an ACL ID between 100 and 199.
Page 195 GS716Tv2 and GS724Tv3 Software Administration Manual • Protocol Type. Requires a packet’s protocol to match the protocol listed here. Select a type from the drop down menu or enter the protocol number in the available field. • Src IP Address. Requires a packet’s source IP address to match the address listed here.
Page 196: Ip Binding Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual DSCP value from the menu. To specify a numeric value in the available field, select Other from the menu and type an integer from 0 to 63 in the field. • IP Precedence: The IP Precedence field in a packet is defined as the high-order three bits of the Service Type octet in the IP header.
Page 197 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IP ACL interface bindings: Select an existing IP ACL from the ACL ID menu. The packet filtering direction for ACL is Inbound, which means the IP ACL rules are applied to traffic entering the port. Specify an optional sequence number to indicate the order of this access list relative to other access lists already assigned to this interface and direction.
Page 198: Ip Binding Table
GS716Tv2 and GS724Tv3 Software Administration Manual IP Binding Table Use the IP Binding Table page to view or delete the IP ACL bindings. To display the IP Binding Table, click Security  ACL, then click the Advanced  Binding Table link. The following table describes the information displayed in the MAC Binding Table.
Page 199: Chapter 6 Monitoring The System
Monitoring the System Use the features available from the Monitoring tab to view a variety of information about the switch and its ports and to configure how the switch monitors events. The Monitoring tab contains links to the following features: •...
Page 200: Ports
GS716Tv2 and GS724Tv3 Software Administration Manual Ports The pages available from the Ports link contain a variety of information about the number and type of traffic transmitted from and received on the switch. From the Ports link, you can access the following pages: •...
Page 201: Switch Statistics
GS716Tv2 and GS724Tv3 Software Administration Manual Switch Statistics The Switch Statistics page displays detailed statistical information about the traffic the switch handles. To access the Switch Statistics page, click Monitoring  Ports  Switch Statistics. The following table describes the Switch Statistics displayed on the screen. Field Description ifIndex...
Page 202 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Multicast Packets Received The total number of packets received that were directed to a multicast address. This number does not include packets directed to the broadcast address. Broadcast Packets Received The total number of packets received that were directed to the broadcast address.
Page 203: Port Statistics
GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear all the statistics counters, resetting all switch summary and detailed statistics to default values. The discarded packets count cannot be cleared. •...
Page 204 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Broadcast Packets Received The total number of good packets received that were directed to the broadcast address. This does not include multicast packets. Packets Transmitted Without The number of frames that have been transmitted by this port to its segment. Errors Transmit Packet Errors The number of outbound packets that could not be transmitted because of...
Page 205: Port Detailed Statistics
GS716Tv2 and GS724Tv3 Software Administration Manual Port Detailed Statistics The Port Detailed Statistics page displays a variety of per-port traffic statistics. To access the Port Detailed page, click the Monitoring  Ports tab, and then click Port Detailed Statistics. (The Port Detailed Statistics figure shows some, but not all, of the fields on the page.) The following table describes the detailed port information displayed on the screen.
Page 206 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Port Channel ID If the port is a member of a port channel, the port channel's interface ID and name are shown. Otherwise, Disable is shown. Port Role Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree.
Page 207 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Packets RX and TX The total number of packets (including bad packets) received or transmitted 128-255 Octets that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets). Packets RX and TX The total number of packets (including bad packets) received or transmitted 256-511 Octets...
Page 208 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Unicast Packets Received The number of subnetwork-unicast packets delivered to a higher-layer protocol. Multicast Packets Received The total number of good packets received that were directed to a multicast address. This number does not include packets directed to the broadcast address.
Page 209 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Reserved Address Discards The number of frames discarded that are destined to an IEEE 802.1 reserved address and are not supported by the system. Broadcast Storm Recovery The number of frames discarded that are destined for FF:FF:FF:FF:FF:FF when Broadcast Storm Recovery is enabled.
Page 210 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Broadcast Packets The total number of packets that higher-level protocols requested be Transmitted transmitted to the Broadcast address, including those that were discarded or not sent. Total Transmit Errors The sum of Single, Multiple, and Excessive Collisions. Tx FCS Errors The total number of packets transmitted that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but...
Page 211: Eap Statistics
GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear all the counters. This resets all statistics for this port to the default values. • Click Refresh to refresh the data on the screen and display the most current statistics.
Page 212 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the EAP statistics displayed on the screen. Field Description Ports Specifies the interface which is polled for statistics. Frames Received Displays the number of valid EAPOL frames received on the port. Frames Transmitted Displays the number of EAPOL frames transmitted through the port.
Page 213: System Logs
GS716Tv2 and GS724Tv3 Software Administration Manual System Logs The switch may generate messages in response to events, faults, or errors occurring on the platform as well as changes in configuration or other occurrences. These messages are stored locally and can be forwarded to one or more centralized points of collection for monitoring purposes or long term archival storage.
Page 214: Memory Logs
GS716Tv2 and GS724Tv3 Software Administration Manual Memory Logs The in-memory log stores messages in memory based upon the settings for message component and severity. Use the Memory Logs page to set the administrative status and behavior of logs in the system buffer. These log messages are cleared when the switch reboots.
Page 215: Flash Log Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual The Memory Log table also appears on the Memory Log page. Field Description Total Number of Messages Displays the number of messages the system has logged in memory. Only the 64 most recent entries are displayed on the page. The rest of the page displays the Memory Log messages.
Page 216 GS716Tv2 and GS724Tv3 Software Administration Manual • The second log type is the system operation log. The system operation log stores the last N messages received during system operation. This log always has the log full operation attribute set to overwrite. This log can store up to 1000 messages. Either the system startup log or the system operation log stores a message received by the log subsystem that meets the storage criteria, but not both.
Page 217: Server Log Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • Critical (2): The third highest warning level. A critical log is saved if a critical device malfunction occurs, for example, two device ports are not functioning, while the rest of the device ports remain functional. •...
Page 218 GS716Tv2 and GS724Tv3 Software Administration Manual To configure local log server settings: Use the radio buttons in the Admin Status field to determine whether to send log messages to the remote syslog hosts configured on the switch. • Enable: Messages will be sent to all configured hosts (syslog collectors or relays) using the values configured for each host.
Page 219: Trap Logs
GS716Tv2 and GS724Tv3 Software Administration Manual To modify the settings for an existing host, select the check box next to the host, change the desired information, and click Apply. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Page 220: Event Logs
The number of the entry within the event log. The most recent entry is first. Type Specifies the type of entry. Filename The GS716T or GS724T source code filename identifying the code that detected the event. Line The line number within the source file of the code that detected the event.
Page 221 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Code The event code passed to the event log handler by the code reporting the event. Time The time the event occurred, measured from the previous reset. Use the buttons at the bottom of the page to perform the following actions: •...
Page 222: Port Mirroring
GS716Tv2 and GS724Tv3 Software Administration Manual Port Mirroring The page under the Mirroring link allows you to view and configure port mirroring on the system. Multiple Port Mirroring Port mirroring selects the network traffic for analysis by a network analyzer. This is done for specific ports of the switch.
Page 223 GS716Tv2 and GS724Tv3 Software Administration Manual To configure Port Mirroring: Select the check box next to a port to configure it as a source port. In the Destination Port field, specify the port to which port traffic is be copied. Use the e1, e2,...format to specify the port.
Page 224 GS716Tv2 and GS724Tv3 Software Administration Manual 224 | Chapter 6: Monitoring the System...
Page 225 Maintenance Use the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains links to the following features: • Reset on page 226 • Upload File From Switch on page 228 • Download File To Switch on page 230 •...
Page 226: Chapter 7 Maintenance
Factory Default on page 226 Device Reboot Use the Device Reboot page to reboot the GS716T or GS724T. To access the Device Reboot page, click Maintenance  Reset  Device Reboot. To reboot the switch: Select the check box on the page.
Page 227 GS716Tv2 and GS724Tv3 Software Administration Manual To reset the switch to the factory default settings: Select the check box on the page. Click Apply. The switch resets immediately. Chapter 7: Maintenance | 227...
Page 228: Upload File From Switch
GS716Tv2 and GS724Tv3 Software Administration Manual Upload File From Switch The switch supports system file uploads from the switch to a remote system by using TFTP. Use the File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to an TFTP server on the network.
Page 229 GS716Tv2 and GS724Tv3 Software Administration Manual In the Transfer File Path field, specify the path on the TFTP server where you want to put the file. You may enter up to 32 characters. Include the backslash at the end of the path. A path name with a space is not accepted.
Page 230: Download File To Switch
GS716Tv2 and GS724Tv3 Software Administration Manual Download File To Switch The switch supports system file downloads from a remote system to the switch by using either TFTP or HTTP. The Download menu contains links to the following options: • TFTP File Download on page 230 •...
Page 231 SSL DH Strong Encryption Parameter PEM File: SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded). If you are downloading an GS716T or GS724T image (Code), select the image on the switch to overwrite. This field is visible only when Code is selected as the File Type.
Page 232: Http File Download
GS716Tv2 and GS724Tv3 Software Administration Manual To activate a software image that you download to the switch, see File Management page 234. HTTP File Download Use the HTTP File Download page to download files of various types to the switch using an HTTP session (for example, via your Web browser).
Page 233 SSL DH Strong Encryption Parameter PEM File: SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded). If you are downloading an GS716T or GS724T image (Code), select the image on the switch to overwrite. This field is only visible when Code is selected as the File Type.
Page 234: File Management
GS716Tv2 and GS724Tv3 Software Administration Manual File Management The system maintains two versions of the GS716T or GS724T software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded during subsequent switch restarts. This feature reduces switch down time when upgrading or downgrading the GS716T or GS724T software.
Page 235: Dual Image Status
GS716Tv2 and GS724Tv3 Software Administration Manual Note: After activating an image, you must perform a system reset of the switch in order to run the new code. To remove the selected image from permanent storage on the switch, select the Delete Image check box.
Page 236 GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Current-active Displays the currently active image on this switch. Next-active Displays the image to be used on the next restart of this switch. Image1 Description Displays the description associated with the image1 code file. Image2 Description Displays the description associated with the image2 code file.
Page 237: Troubleshooting
GS716Tv2 and GS724Tv3 Software Administration Manual Troubleshooting The Troubleshooting menu contains links to the following options: • Ping on page 237 • Traceroute on page 238 Ping Use the Ping page to tell the switch to send a Ping request to a specified IP address. You can use this feature to check whether the switch can communicate with a particular network host.
Page 238: Traceroute
GS716Tv2 and GS724Tv3 Software Administration Manual • If successful, you will see “Reply From IP/Host: icmp_seq = 0. time = xx usec. Tx = x, Rx = x Min/Max/Avg RTT = x/x/x msec.” • If a reply to the ping is not received, you will see “Reply From IP/Host: Destination Unreachable.
Page 239 GS716Tv2 and GS724Tv3 Software Administration Manual • MaxFail. Specify the maximum number of failures allowed in the session. The valid range is 0–255. • Interval. Specify the time between probes in seconds. The valid range is 1–60. • Port. Specify the UDP destination port in probe packets. The valid range is 1–65535. •...
Page 240 GS716Tv2 and GS724Tv3 Software Administration Manual 240 | Chapter 7: Maintenance...
Page 241: Chapter 8 Help
Use the Support page to connect to the Online Support site at netgear.com. To access the Support page, click Help  Support. To connect to the NETGEAR support site for the GS716T or GS724T, click Apply. Chapter 8: Help | 241...
Page 242: User Guide
User Guide Use the User Guide page to access the GS716Tv2 and GS724Tv3 Software Administration Manual (the guide you are now reading) that is available on the NETGEAR Website. To access the User Guide page, click Help  User Guide.
Page 243 GS716Tv2 and GS724Tv3 Software Administration Manual Chapter 8: Help | 243...
Page 244: Appendix A Hardware Specifications And Default Values
Hardware Specifications and Default Values GS716T and GS724T Gigabit Smart Switches Specifications The GS716T and GS724T Gigabit Smart Switches conform to the TCP/IP, UDP, HTTP, ICMP, TFTP, DHCP, IEEE 802.1D, IEEE 802.1p, and IEEE 802.1Q standards. GS716T Specifications Feature Value...
Page 245: Gs716T And Gs724T Switch Performance
100M:148,810 pps/ 1G:1,488,000 pps MAC addresses Green Ethernet Power consumption savings by cable length (<10m) Automatic power down on port when link is down GS716T and GS724T Switch Features and Defaults Port Characteristics Feature Sets Supported Default Auto negotiation/static All ports...
Page 246: Traffic Control
GS716Tv2 and GS724Tv3 Software Administration Manual Traffic Control Feature Sets Supported Default Storm control All ports Disabled Jumbo frame All ports Disabled Max = 9216 bytes Quality Of Service Feature Sets Supported Default Number of queues Port based 802.1p Enabled DSCP Disabled Rate limiting...
Page 247: System Setup
GS716Tv2 and GS724Tv3 Software Administration Manual System Setup Feature Sets Supported Default Boot code update DHCP/manual IP DHCP enabled/192.168.0.239 Default gateway 192.168.0.254 System name configuration NULL Configuration save/restore Firmware upgrade Restore defaults 1 (Web and front-panel button) Dual image support Enabled Factory reset Management...
Page 248: Other Features
GS716Tv2 and GS724Tv3 Software Administration Manual Other Features Feature Sets Supported Default IGMP snooping v1/v2 All ports Disabled Configurations upload/download EAPoL flooding All ports Disabled BPDU flooding All ports Disabled Static multicast groups Disabled Filter multicast control Disabled 248 | Appendix A: Hardware Specifications and Default Values...
Page 249: Configuration Examples
Configuration Examples This chapter contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) on page 250 • Access Control Lists (ACLs) on page 252 • Differentiated Services (DiffServ) on page 255 • 802.1X on page 260 •...
Page 250: Appendix B Configuration Examples
GS716Tv2 and GS724Tv3 Software Administration Manual Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router.
Page 251: Vlan Example Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged. Inversely, a T for a given port means that packets leaving the switch from that port are tagged with the VLAN ID that is associated with the port.
Page 252: Access Control Lists (Acls)
Apply the access list to an interface in the inbound direction. The GS716T and GS724T Smart Switches allow ACLs to be bound to physical ports and LAGs.The switch software supports MAC ACLs and IP ACLs.
Page 253: Standard Ip Acl Example Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual • Destination MAC Mask: 00:00:00:00:FF:FF • Source MAC: 02:02:1A:BC:DE:EF • Source MAC Mask: 00:00:00:00:FF:FF • VLAN ID: 2 For more information about MAC ACL rules, see MAC Rules on page 186. From the MAC Binding Configuration screen, assign the Sales_ACL to Ethernet ports 6, 7, and 8, and then click Apply (See MAC Binding Configuration on page 188).
Page 254 GS716Tv2 and GS724Tv3 Software Administration Manual departments. Traffic from the Finance department is identified by each packet’s network IP address. From the IP ACL screen, create a new IP ACL with an IP ACL ID of 1 (See IP ACL page 190).
Page 255: Differentiated Services (Diffserv)
GS716Tv2 and GS724Tv3 Software Administration Manual Differentiated Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network deliver the data in a timely fashion, although there is no guarantee that it will. During times of congestion, packets may be delayed, sent sporadically, or dropped.
Page 256: Diffserv Traffic Classes
GS716Tv2 and GS724Tv3 Software Administration Manual • IP Service Type octet (also known as: ToS bits, Precedence value, DSCP value) • Layer 4 protocol (TCP, UDP etc.) • Layer 4 source/destination ports • Source/destination IP address From a DiffServ point of view, there are two types of classes: •...
Page 257 GS716Tv2 and GS724Tv3 Software Administration Manual • Dropping: drop a packet upon arrival. This is useful for emulating access control list operation using DiffServ, especially when DiffServ and ACL cannot co-exist on the same interface. • Marking IP DSCP or IP Precedence: marking/re-marking the DiffServ code point in a packet with the DSCP value representing the service level associated with a particular DiffServ traffic class.
Page 258: Diffserv Example Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual DiffServ Example Configuration To create a DiffServ Class/Policy and attach it to a switch interface, follow these steps: From the QoS Class Configuration screen, create a new class with the following settings: • Class Name: Class1 •...
Page 259 GS716Tv2 and GS724Tv3 Software Administration Manual All UDP packet flows destined to the 192.12.2.0 network with an IP source address from the 192.12.1.0 network that have a Layer 4 Source port of 4567 and Destination port of 4568 from this switch on ports 7 and 8 are assigned to hardware queue 3. On this network, traffic from streaming applications uses UDP port 4567 as the source and 4568 as the destination.
Page 260: 260
GS716Tv2 and GS724Tv3 Software Administration Manual 802.1X Local Area Networks (LANs) are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure, or permit unauthorized users to attempt to access the LAN through equipment already attached. In such environments, it may be desirable to restrict access to the services offered by the LAN to those users and devices that are permitted to use those services.
Page 261: 802.1X Example Configuration
GS716Tv2 and GS724Tv3 Software Administration Manual A Port Access Entity (PAE) is able to adopt one of two distinct roles within an access control interaction: Authenticator: A Port that enforces authentication before allowing access to services available via that Port. Supplicant: A Port that attempts to access services offered by the Authenticator.
Page 262 Authentication List Configuration on page 159). This example enables 802.1X-based port security on the GS716T or GS724T switch and prompts the hosts connected on ports e1–e8 for an 802.1X-based authentication. The switch passes the authentication information to the configured RADIUS server.
Page 263: Mstp
GS716Tv2 and GS724Tv3 Software Administration Manual MSTP Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) supports multiple instances of Spanning Tree to efficiently channel VLAN traffic over different interfaces.
Page 264: Mstp Example Configuration
MSTP Example Configuration This example shows how to create an MSTP instance from the GS716T or GS724T switch. The example network has three different GS716T or GS724T switches that serve different locations in the network. In this example, ports e1–e5 are connected to host stations, so those links are not subject to network loops.
Page 265 GS716Tv2 and GS724Tv3 Software Administration Manual Ports e1-e5 Ports e1-e5 Connected to Hosts Connected to Hosts Ports e6-e8 Connected to Switch 2 and 3 Switch 1 Root Bridge Switch 2 Ports e6-e8 Connected to Switch 1 and 2 Switch 3 Ports e1-e5 Connected to Hosts Perform the following procedures on each switch to configure MSTP:...
Page 266 GS716Tv2 and GS724Tv3 Software Administration Manual Since the edge ports are not at risk for network loops, ports with Fast Link enabled transition directly to the Forwarding state. Click Apply. You can use the CST Port Status screen to view spanning tree information about each port.
Page 267 GS716Tv2 and GS724Tv3 Software Administration Manual Appendix B: Configuration Examples | 267...
Page 268: Appendix C Notification Of Compliance
NETGEAR Wired Products Certificate of the Manufacturer/Importer It is hereby certified that the ProSafe™ GS716T and 724T Gigabit Smart Switches has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions.
Page 269 Hereby, NETGEAR Inc., declares that this Radiolan is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Español Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los [Spanish] requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.
Page 270 We, NETGEAR, Inc., 350 East Plumeria Drive, Santa Clara, CA 95134, declare under our sole responsibility that the ProSafe™ GS716T and 724T Gigabit Smart Switches complies with Part 15 of FCC Rules. Operation is subject to the following two conditions: •...
Page 271: Canadian Department Of Communications Radio Interference Regulations
Canadian Department of Communications Radio Interference Regulations This digital apparatus, (ProSafe™ GS716T and 724T Gigabit Smart Switches), does not exceed the Class B limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
Page 272: Index
Index Numerics LLDP 802.1X MAC Filter example configuration Management Access MST Port Network Settings on the Administrative System password access control Policy ACL example configuration Port Security ACLs Port VLAN ID management interface RADIUS authentication Global 802.1X Secure HTTP enable SNMP v3 User list SNTP Server...
Page 273 GS716Tv2 and GS724Tv3 Software Administration Manual LACP port configuration EAPOL LAG VLAN LAGPDUs LAGs Membership file management Static firmware LLDP firmware download Local Information neighbors information packets port settings getting started LLDP-MED Green Ethernet guest VLAN configuration bridge identifier help, HTML-based CPU Management Interface HTTP dynamic address...
Page 274 GS716Tv2 and GS724Tv3 Software Administration Manual clock source levels RADIUS local server zone statistics TraceRoute reboot trademarks reset traffic control button trap configuration to defaults flags switch manager RSTP Unicast Security MAC Address upload configuration server, HTTP severity, log message Simple Network Time Protocol SNMP VLAN...
Page 275 GS716Tv2 and GS724Tv3 Software Administration Manual Index | 275...

This manual is also suitable for:

Gs724t Gs716tv2 Gs724tv3

NETGEAR GS716T Software Administration Manual

Chapter 1 Getting Started

Switch Management Interface

Connecting the Switch to the Network

Switch Discovery in a Network with a DHCP Server

Switch Discovery in a Network Without a DHCP Server

Configuring the Network Settings on the Administrative System

Web Access

Smart Control Center Utilities

Understanding the User Interfaces

Chapter 2 Configuring System Information

Management

License Key

Snmp

Lldp

Services - DHCP Filtering

Chapter 3 Configuring Switching Information

Ports

Link Aggregation Groups

Vlans

Voice VLAN

Auto-Voip

STP Switch Configuration

CST Configuration

CST Port Configuration

CST Port Status

Rapid STP

MST Configuration

MST Port Configuration

STP Statistics

Chapter 4 Configuring Quality of Service

Chapter 5 Managing Device Security

Mac Acl

MAC Rules

MAC Binding Configuration

MAC Binding Table

Ip Acl

IP Rules

IP Extended Rule

IP Binding Configuration

IP Binding Table

Chapter 6 Monitoring the System

Chapter 7 Maintenance

Chapter 8 Help

Appendix A Hardware Specifications and Default Values

Appendix B Configuration Examples

Appendix C Notification of Compliance

Index

Quick Links

Need help?

Questions and answers

Related Manuals for NETGEAR GS716T

Summary of Contents for NETGEAR GS716T