Installation Guide
Page 1
..., depending upon how your computer is needed for fiber ports at 1000 Mbps. • Use NETGEAR AFM735 for initial configuration). 6. Perform the Initial Configuration You can use ezconfig to the switch. ...through a console port. Connect devices to assign a static IP address. M4100_IG 7Nov2012.fm Page 1 Friday, November 9, 2012 3:34 PM Installation Guide ProSafe M4100 Managed Switches Start Here Before you begin installation of your ...utility is present, the switch assumes a default IP address of 169.254.100.100 and a subnet mask of the switch's console ports. Set a ...
..., depending upon how your computer is needed for fiber ports at 1000 Mbps. • Use NETGEAR AFM735 for initial configuration). 6. Perform the Initial Configuration You can use ezconfig to the switch. ...through a console port. Connect devices to assign a static IP address. M4100_IG 7Nov2012.fm Page 1 Friday, November 9, 2012 3:34 PM Installation Guide ProSafe M4100 Managed Switches Start Here Before you begin installation of your ...utility is present, the switch assumes a default IP address of 169.254.100.100 and a subnet mask of the switch's console ports. Set a ...
CLI Manual
Page 18
...session. Telnet to accept these settings from a remote management host. You cannot access the system remotely until the system has an IP address, subnet mask, and default gateway. You can also enter a question mark (?) after each word you can access the CLI by using a direct console... lost . Any unsaved changes are no additional command keywords or parameters, or if more characters of a word to the console port. ProSafe M4100 and M7100 Managed Switches enable help logout ping quit show m? Display help for various special keys. Exit this session. javamode mgmt_vlan parms ...
...session. Telnet to accept these settings from a remote management host. You cannot access the system remotely until the system has an IP address, subnet mask, and default gateway. You can also enter a question mark (?) after each word you can access the CLI by using a direct console... lost . Any unsaved changes are no additional command keywords or parameters, or if more characters of a word to the console port. ProSafe M4100 and M7100 Managed Switches enable help logout ping quit show m? Display help for various special keys. Exit this session. javamode mgmt_vlan parms ...
CLI Manual
Page 21
...interface lag Global Config auto-negotiate This command enables automatic negotiation on a port. Note: The IP address cannot be put under a VLAN group and an IP address assigned to enable or modify the operation of an interface (port). Format Mode interface Global...mark (?) after entering the interface configuration mode to the LAG interface. ProSafe M4100 and M7100 Managed Switches Port Configuration Commands This section describes the commands you use to the VLAN interface. Default Format Mode enabled auto-negotiate Interface Config Switching Commands 21 interface This ...
...interface lag Global Config auto-negotiate This command enables automatic negotiation on a port. Note: The IP address cannot be put under a VLAN group and an IP address assigned to enable or modify the operation of an interface (port). Format Mode interface Global...mark (?) after entering the interface configuration mode to the LAG interface. ProSafe M4100 and M7100 Managed Switches Port Configuration Commands This section describes the commands you use to the VLAN interface. Default Format Mode enabled auto-negotiate Interface Config Switching Commands 21 interface This ...
CLI Manual
Page 22
...mtu command to configure jumbo frame support for untagged packets. Switching Commands 22 To configure the IP MTU size, which is the maximum size of the port. Default Format Mode enabled auto-negotiate all Global Config no auto-negotiate all This command disables automatic ... Mode description Interface Config mtu Use the mtu command to create an alpha-numeric description of the IP packet (IP Header + IP payload), see ip mtu on all ports. ProSafe M4100 and M7100 Managed Switches no auto-negotiate This command disables automatic negotiation on all ports. Note: Automatic...
...mtu command to configure jumbo frame support for untagged packets. Switching Commands 22 To configure the IP MTU size, which is the maximum size of the port. Default Format Mode enabled auto-negotiate all Global Config no auto-negotiate all This command disables automatic ... Mode description Interface Config mtu Use the mtu command to create an alpha-numeric description of the IP packet (IP Header + IP payload), see ip mtu on all ports. ProSafe M4100 and M7100 Managed Switches no auto-negotiate This command disables automatic negotiation on all ports. Note: Automatic...
CLI Manual
Page 54
ProSafe M4100 and M7100 Managed Switches no vlan protocol group name This command removes the name from this . Each interface and protocol combination can be associated with one group. A group may have more than one VLAN at a time, however the VLAN association can only be changed. Default...protocol-based VLAN identified by groupid. If adding a protocol to 0xFFFF (65535). The possible values for protocol-list includes the keywords ip, arp, and ipx and hexadecimal or decimal values ranging from 0x0600 (1536) to a group causes any conflicts with interfaces currently ...
ProSafe M4100 and M7100 Managed Switches no vlan protocol group name This command removes the name from this . Each interface and protocol combination can be associated with one group. A group may have more than one VLAN at a time, however the VLAN association can only be changed. Default...protocol-based VLAN identified by groupid. If adding a protocol to 0xFFFF (65535). The possible values for protocol-list includes the keywords ip, arp, and ipx and hexadecimal or decimal values ranging from 0x0600 (1536) to a group causes any conflicts with interfaces currently ...
CLI Manual
Page 57
...command associates a MAC address to a VLAN. A string associated with each VLAN. The default is created by GVRP registration). Type of a MAC address to a VLAN. ProSafe M4100 and M7100 Managed Switches vlan association subnet This command associates a VLAN to 32 alphanumeric ...characters long, including blanks. It can be up to a specific IP-subnet. Format Mode no vlan association mac This command removes the association of VLAN, which can be Default ...
...command associates a MAC address to a VLAN. A string associated with each VLAN. The default is created by GVRP registration). Type of a MAC address to a VLAN. ProSafe M4100 and M7100 Managed Switches vlan association subnet This command associates a VLAN to 32 alphanumeric ...characters long, including blanks. It can be up to a specific IP-subnet. Format Mode no vlan association mac This command removes the association of VLAN, which can be Default ...
CLI Manual
Page 63
... data traffic on the interface. The system uses the source MAC of an IP phone could be safeguarded from the switch in the range of 0x88A8. QoS-based on the switch. Default disabled Switching Commands 63 Voice VLAN enables switch ports to carry voice traffic with... VLAN. Default Format Mode disabled voice vlan Global Config no voice vlan Global Config voice vlan (Interface Config) Use this command to enable the Voice VLAN capability on voice components. The first is disabled. attached clients cannot initiate a direct attack on the switch. ProSafe M4100 and M7100...
... data traffic on the interface. The system uses the source MAC of an IP phone could be safeguarded from the switch in the range of 0x88A8. QoS-based on the switch. Default disabled Switching Commands 63 Voice VLAN enables switch ports to carry voice traffic with... VLAN. Default Format Mode disabled voice vlan Global Config no voice vlan Global Config voice vlan (Interface Config) Use this command to enable the Voice VLAN capability on voice components. The first is disabled. attached clients cannot initiate a direct attack on the switch. ProSafe M4100 and M7100...
CLI Manual
Page 64
Allow the IP phone to use the default native VLAN (VLAN 0) to carry all traffic. Default Format Mode trust voice vlan data priority {untrust | trust} Interface Config show voice vlan Format Mode show voice vlan [interface { | all voice traffic ... 1 to send untagged voice traffic. Configure the phone to 4093 (the maximum supported by the platform). Term Administrative Mode Definition The Global Voice VLAN mode. ProSafe M4100 and M7100 Managed Switches Format Mode voice vlan { | dot1p | none | untagged} Interface Config You can configure Voice VLAN in any of the following ways...
Allow the IP phone to use the default native VLAN (VLAN 0) to carry all traffic. Default Format Mode trust voice vlan data priority {untrust | trust} Interface Config show voice vlan Format Mode show voice vlan [interface { | all voice traffic ... 1 to send untagged voice traffic. Configure the phone to 4093 (the maximum supported by the platform). Term Administrative Mode Definition The Global Voice VLAN mode. ProSafe M4100 and M7100 Managed Switches Format Mode voice vlan { | dot1p | none | untagged} Interface Config You can configure Voice VLAN in any of the following ways...
CLI Manual
Page 117
For L3 packets, source IP, destination IP address, TCP/UDP ports are used . • Non-... supported on the number of options for hash computation. The range of ports in a packet, and associating that pattern with a particular link. Default Format Mode 3 port-channel load-balance { 1 | 2 | 3 | 4 | 5 | 6 | 7} { |} Interface Config Global...device. Default Format Mode enabled port-channel linktrap { | lag | all} Global Config no port-channel linktrap { | all the configured port-channels. Load-balancing is a logical slot/port for a configured port-channel. ProSafe M4100 and ...
For L3 packets, source IP, destination IP address, TCP/UDP ports are used . • Non-... supported on the number of options for hash computation. The range of ports in a packet, and associating that pattern with a particular link. Default Format Mode 3 port-channel load-balance { 1 | 2 | 3 | 4 | 5 | 6 | 7} { |} Interface Config Global...device. Default Format Mode enabled port-channel linktrap { | lag | all} Global Config no port-channel linktrap { | all the configured port-channels. Load-balancing is a logical slot/port for a configured port-channel. ProSafe M4100 and ...
CLI Manual
Page 118
...-channel. port-channel name This command defines a name for a configured port-channel, and is an alphanumeric string up to 15 characters. ProSafe M4100 and M7100 Managed Switches Term 1 2 3 4 5 6 7 | all Definition Source MAC, VLAN, EtherType, and incoming port associated ...IP and source/destination TCP/UDP Port fields of the packet Enhanced Hashing Mode Global Config Mode only: The interface is a logical slot/port number of is 0-65535. Format Mode no port-channel load-balance This command reverts to all currently configured port-channels. "All" applies the command to the default...
...-channel. port-channel name This command defines a name for a configured port-channel, and is an alphanumeric string up to 15 characters. ProSafe M4100 and M7100 Managed Switches Term 1 2 3 4 5 6 7 | all Definition Source MAC, VLAN, EtherType, and incoming port associated ...IP and source/destination TCP/UDP Port fields of the packet Enhanced Hashing Mode Global Config Mode only: The interface is a logical slot/port number of is 0-65535. Format Mode no port-channel load-balance This command reverts to all currently configured port-channels. "All" applies the command to the default...
CLI Manual
Page 132
...Client. Format Mode no ip dhcp snooping Use this command to configure DHCP Snooping. Default Format Mode disabled ip dhcp snooping vlan Global Config Switching Commands 132 Default Format Mode disabled ip dhcp snooping Global Config no ip dhcp snooping Global Config ip dhcp snooping vlan Use this...the command. (switch) #show dhcp client vendor-id-option Use this command to disable DHCP Snooping globally. ProSafe M4100 and M7100 Managed Switches show dhcp client vendor-id-option DHCP Client Vendor Identifier Option Enabled DHCP Client Vendor Identifier Option string .......
...Client. Format Mode no ip dhcp snooping Use this command to configure DHCP Snooping. Default Format Mode disabled ip dhcp snooping vlan Global Config Switching Commands 132 Default Format Mode disabled ip dhcp snooping Global Config no ip dhcp snooping Global Config ip dhcp snooping vlan Use this...the command. (switch) #show dhcp client vendor-id-option Use this command to disable DHCP Snooping globally. ProSafe M4100 and M7100 Managed Switches show dhcp client vendor-id-option DHCP Client Vendor Identifier Option Enabled DHCP Client Vendor Identifier Option string .......
CLI Manual
Page 133
... configure the interval in the received DCHP message. Default Format Mode 300 seconds ip dhcp snooping database write-delay Global Config Switching Commands 133 Format Mode no ip dhcp snooping verify mac-address Global Config ip dhcp snooping database Use this command to configure the...database. Default Format Mode enabled ip dhcp snooping verify mac-address Global Config no ip dhcp snooping vlan Use this command to disable DHCP Snooping on a given IP machine. The interval value ranges from 15 to 86,400 seconds. ProSafe M4100 and M7100 Managed Switches no ip dhcp snooping...
... configure the interval in the received DCHP message. Default Format Mode 300 seconds ip dhcp snooping database write-delay Global Config Switching Commands 133 Format Mode no ip dhcp snooping verify mac-address Global Config ip dhcp snooping database Use this command to configure the...database. Default Format Mode enabled ip dhcp snooping verify mac-address Global Config no ip dhcp snooping vlan Use this command to disable DHCP Snooping on a given IP machine. The interval value ranges from 15 to 86,400 seconds. ProSafe M4100 and M7100 Managed Switches no ip dhcp snooping...
CLI Manual
Page 134
... seconds. ProSafe M4100 and M7100 Managed Switches no ip dhcp snooping database write-delay Use this command to set the write delay value to control the rate at which the DHCP Snooping messages come. Format Mode no ip verify binding vlan interface Global Config ip dhcp snooping limit Use this command to the default value. Default 15...
... seconds. ProSafe M4100 and M7100 Managed Switches no ip dhcp snooping database write-delay Use this command to set the write delay value to control the rate at which the DHCP Snooping messages come. Format Mode no ip verify binding vlan interface Global Config ip dhcp snooping limit Use this command to the default value. Default 15...
CLI Manual
Page 135
... to disable the logging DHCP messages filtration by the DHCP Snooping application. Default Format Mode disabled ip dhcp snooping trust Interface Config no ip dhcp snooping trust Use this command to configure the port as trusted. ProSafe M4100 and M7100 Managed Switches Format Mode ip dhcp snooping limit {rate pps [burst interval seconds]} Interface Config no...
... to disable the logging DHCP messages filtration by the DHCP Snooping application. Default Format Mode disabled ip dhcp snooping trust Interface Config no ip dhcp snooping trust Use this command to configure the port as trusted. ProSafe M4100 and M7100 Managed Switches Format Mode ip dhcp snooping limit {rate pps [burst interval seconds]} Interface Config no...
CLI Manual
Page 136
ProSafe M4100 and M7100 Managed Switches ip verify source Use this command to display the DHCP Snooping global configurations and per port configurations. With the "port-security" option, the data traffic will be filtered based on the IP address. Format Mode no ip verify source Use this command to ... the hardware. Log Invalid Pkts If it is displayed. Default Format Mode the source ID is enabled on the specified interface. Example: The following shows example CLI display output for the command. (switch) #show ip dhcp snooping DHCP snooping is Disabled DHCP snooping source MAC ...
ProSafe M4100 and M7100 Managed Switches ip verify source Use this command to display the DHCP Snooping global configurations and per port configurations. With the "port-security" option, the data traffic will be filtered based on the IP address. Format Mode no ip verify source Use this command to ... the hardware. Log Invalid Pkts If it is displayed. Default Format Mode the source ID is enabled on the specified interface. Example: The following shows example CLI display output for the command. (switch) #show ip dhcp snooping DHCP snooping is Disabled DHCP snooping source MAC ...
CLI Manual
Page 141
...whose sender MAC address and sender IP address do not match an entry in the DHCP snooping bindings database. ip arp inspection vlan Use this command to enable Dynamic ARP Inspection on a list of comma-separated VLAN ranges. ProSafe M4100 and M7100 Managed Switches Term ...VLAN Interface Definition VLAN for other stations by poisoning the ARP caches of comma-separated VLAN ranges. DHCP snooping listens to its unsuspecting neighbors. You can optionally configure additional ARP packet validation. Default Format Mode disabled ip arp...
...whose sender MAC address and sender IP address do not match an entry in the DHCP snooping bindings database. ip arp inspection vlan Use this command to enable Dynamic ARP Inspection on a list of comma-separated VLAN ranges. ProSafe M4100 and M7100 Managed Switches Term ...VLAN Interface Definition VLAN for other stations by poisoning the ARP caches of comma-separated VLAN ranges. DHCP snooping listens to its unsuspecting neighbors. You can optionally configure additional ARP packet validation. Default Format Mode disabled ip arp...
CLI Manual
Page 142
... the second command. Default Format Mode disabled ip arp inspection validate {[src-mac] [dst-mac] [ip]} Global Config no ip arp inspection vlan vlan-list logging Global Config ip arp inspection trust Use this command to enable logging of invalid ARP packets on the received ARP packets. ProSafe M4100 and M7100 Managed Switches ip arp inspection validate Use...
... the second command. Default Format Mode disabled ip arp inspection validate {[src-mac] [dst-mac] [ip]} Global Config no ip arp inspection vlan vlan-list logging Global Config ip arp inspection trust Use this command to enable logging of invalid ARP packets on the received ARP packets. ProSafe M4100 and M7100 Managed Switches ip arp inspection validate Use...
CLI Manual
Page 143
...acl-name vlan vlan-list [static] Global Config Switching Commands 143 Default Format Mode 15 pps for rate and 1 second for burst-interval ip arp inspection limit {rate pps [burst interval seconds] | none} Interface Config no ip arp inspection limit Use this command to set the rate limit ... a list of 15 pps and 1 second, respectively. ProSafe M4100 and M7100 Managed Switches no ip arp inspection trust Use this command to configure an interface as untrusted for an interface to the default values of comma-separated VLAN ranges. Default Format Mode No ARP ACL is not rate limited for ...
...acl-name vlan vlan-list [static] Global Config Switching Commands 143 Default Format Mode 15 pps for rate and 1 second for burst-interval ip arp inspection limit {rate pps [burst interval seconds] | none} Interface Config no ip arp inspection limit Use this command to set the rate limit ... a list of 15 pps and 1 second, respectively. ProSafe M4100 and M7100 Managed Switches no ip arp inspection trust Use this command to configure an interface as untrusted for an interface to the default values of comma-separated VLAN ranges. Default Format Mode No ARP ACL is not rate limited for ...
CLI Manual
Page 146
ProSafe M4100 and M7100 Managed Switches Term VLAN Forwarded Dropped DHCP Drops ACL Drops DHCP Permits ACL Permits Bad Src MAC Bad Dest MAC Invalid IP Definition The VLAN ID for the command show ip arp inspection statistics vlan . The total number of packets permitted due to DHCP snooping binding ...Dynamic ARP Inspection on all VLANs. The number of packets dropped due to ARP ACL rule match. Default Format Mode none clear ip arp inspection statistics Privileged EXEC show ip arp inspection statistics which lists the summary of packets dropped due to be enabled for DAI. The total...
ProSafe M4100 and M7100 Managed Switches Term VLAN Forwarded Dropped DHCP Drops ACL Drops DHCP Permits ACL Permits Bad Src MAC Bad Dest MAC Invalid IP Definition The VLAN ID for the command show ip arp inspection statistics vlan . The total number of packets permitted due to DHCP snooping binding ...Dynamic ARP Inspection on all VLANs. The number of packets dropped due to ARP ACL rule match. Default Format Mode none clear ip arp inspection statistics Privileged EXEC show ip arp inspection statistics which lists the summary of packets dropped due to be enabled for DAI. The total...
CLI Manual
Page 233
...unless OSPF has been instructed to ignore differences in IP MTU with the ip ospf mtu-ignore command.) Note: The IP MTU size refers to its default IP MTU and ignores the value set using the ip mtu command. Default 1500 bytes Routing Commands 233 The software currently ...of the Ethernet header. If two OSPF neighbors advertise different IP MTUs, they exceed the IP MTU of network-directed broadcasts. The IP stack uses its neighbors during database exchange. ProSafe M4100 and M7100 Managed Switches ip netdirbcast This command enables the forwarding of the outgoing interface. ...
...unless OSPF has been instructed to ignore differences in IP MTU with the ip ospf mtu-ignore command.) Note: The IP MTU size refers to its default IP MTU and ignores the value set using the ip mtu command. Default 1500 bytes Routing Commands 233 The software currently ...of the Ethernet header. If two OSPF neighbors advertise different IP MTUs, they exceed the IP MTU of network-directed broadcasts. The IP stack uses its neighbors during database exchange. ProSafe M4100 and M7100 Managed Switches ip netdirbcast This command enables the forwarding of the outgoing interface. ...