GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 2
...transcribed, stored in a retrieval system, or translated into any means without notice. Statement of Conditions To improve internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in any form or by any language in this document without the written permission of... June 2010 Add MVR feature. Software release 8.0.2: new firmware with DHCP L3 Relay, color conform policy, DHCP server in dynamic mode, and configuring a stacking port as an Ethernet port. Original publication. 2 | ProSafe Managed Switch ©2011...
...transcribed, stored in a retrieval system, or translated into any means without notice. Statement of Conditions To improve internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in any form or by any language in this document without the written permission of... June 2010 Add MVR feature. Software release 8.0.2: new firmware with DHCP L3 Relay, color conform policy, DHCP server in dynamic mode, and configuring a stacking port as an Ethernet port. Original publication. 2 | ProSafe Managed Switch ©2011...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 3
... VLAN 21 Voice VLANs 24 Chapter 3 LAGs Create Two LAGs 35 Add Ports to LAGs 36 Enable Both LAGs 38 Chapter 4 Port Routing Port Routing Configuration 40 Enable Routing for the Switch 41 Enable Routing for Ports on the Switch 41 Add a Default Route 44 Add a Static Route 45 Chapter 5 VLAN...
... VLAN 21 Voice VLANs 24 Chapter 3 LAGs Create Two LAGs 35 Add Ports to LAGs 36 Enable Both LAGs 38 Chapter 4 Port Routing Port Routing Configuration 40 Enable Routing for the Switch 41 Enable Routing for Ports on the Switch 41 Add a Default Route 44 Add a Static Route 45 Chapter 5 VLAN...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 4
... Chapter 10 ACLs Set Up an IP ACL with Two Rules 113 One-Way Access Using a TCP Flag in an ACL 117 Use ACLs to Configure Isolated VLANs on a Layer 3 Switch 132 Set up a MAC ACL with Two Rules 144 ACL Mirroring 147 ACL Redirect 152... Show classofservice Trust 166 Set classofservice Trust Mode 167 Show classofservice IP-Precedence Mapping 168 Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode169 Set CoS Trust Mode for an Interface 170 Configure Traffic Shaping 171 Chapter 12 DiffServ DiffServ 174 DiffServ for VoIP 190 Auto VoIP 197 DiffServ for IPv6...
... Chapter 10 ACLs Set Up an IP ACL with Two Rules 113 One-Way Access Using a TCP Flag in an ACL 117 Use ACLs to Configure Isolated VLANs on a Layer 3 Switch 132 Set up a MAC ACL with Two Rules 144 ACL Mirroring 147 ACL Redirect 152... Show classofservice Trust 166 Set classofservice Trust Mode 167 Show classofservice IP-Precedence Mapping 168 Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode169 Set CoS Trust Mode for an Interface 170 Configure Traffic Shaping 171 Chapter 12 DiffServ DiffServ 174 DiffServ for VoIP 190 Auto VoIP 197 DiffServ for IPv6...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 5
ProSafe Managed Switch IGMP Querier 221 Enable IGMP Querier 222 Show IGMP Querier Status 225 Chapter 14 MVR (Multicast VLAN Registration) Configure MVR in Compatible Mode 227 Configure MVR in Dynamic Mode 234 239 Chapter 15 Security Management Port Security 240 Set the Dynamic and Static Limit on Port 1/0/1 241 Convert the Dynamic... Static Binding into the Binding Database 279 Maximum Rate of DHCP Messages 280 IP Source Guard 282 Chapter 16 SNTP Show SNTP (CLI Only 287 Configure SNTP 289 Set the Time Zone (CLI Only 291 Set the Named SNTP Server 291 Chapter 17 Tools Traceroute 294...
ProSafe Managed Switch IGMP Querier 221 Enable IGMP Querier 222 Show IGMP Querier Status 225 Chapter 14 MVR (Multicast VLAN Registration) Configure MVR in Compatible Mode 227 Configure MVR in Dynamic Mode 234 239 Chapter 15 Security Management Port Security 240 Set the Dynamic and Static Limit on Port 1/0/1 241 Convert the Dynamic... Static Binding into the Binding Database 279 Maximum Rate of DHCP Messages 280 IP Source Guard 282 Chapter 16 SNTP Show SNTP (CLI Only 287 Configure SNTP 289 Set the Time Zone (CLI Only 291 Set the Named SNTP Server 291 Chapter 17 Tools Traceroute 294...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 6
...Stack Management and Connectivity 318 The Stack Master and Stack Members 319 Install and Power-up a Stack 321 Switch Firmware 322 Configure a Stacking Port as an Ethernet Port 324 Stack Switches Using 10G Fiber 327 Add, Remove, or Replace a Stack Member 330 Switch ... Host Name and an IP Address 347 Chapter 22 DHCP Server Configure a DHCP Server in Dynamic Mode 349 Configure a DHCP Reservation 352 Chapter 23 DHCPv6 Server CLI: Configure DHCPv6 357 Web Interface: Configure an Inter-area Router 358 Configure Stateless DHCPv6 Server 362 Chapter 24 Double VLANs and Private VLAN Groups...
...Stack Management and Connectivity 318 The Stack Master and Stack Members 319 Install and Power-up a Stack 321 Switch Firmware 322 Configure a Stacking Port as an Ethernet Port 324 Stack Switches Using 10G Fiber 327 Add, Remove, or Replace a Stack Member 330 Switch ... Host Name and an IP Address 347 Chapter 22 DHCP Server Configure a DHCP Server in Dynamic Mode 349 Configure a DHCP Reservation 352 Chapter 23 DHCPv6 Server CLI: Configure DHCPv6 357 Web Interface: Configure an Inter-area Router 358 Configure Stateless DHCPv6 Server 362 Chapter 24 Double VLANs and Private VLAN Groups...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 7
...Create a Tunnel 383 Web Interface: Create a Tunnel 385 Chapter 27 IPv6 Interface Configuration Create an IPv6 Routing Interface 390 Create an IPv6 Network Interface 393 Create an IPv6 Routing VLAN 395 Configure DHCPv6 Mode on the Routing Interface 400 Chapter 28 PIM PIM-DM 403 PIM-... Relay DHCP L2 Relay 454 DHCP L3 Relay 460 Chapter 30 MLD Configure MLD 471 MLD Snooping 484 Chapter 31 DVMRP CLI: Configure DVMRP 490 Web Interface: Configure DVMRP 496 Chapter 32 Captive Portal Captive Portal Configuration 508 Enable Captive Portal 508 Client Access, Authentication, and Control 510 ...
...Create a Tunnel 383 Web Interface: Create a Tunnel 385 Chapter 27 IPv6 Interface Configuration Create an IPv6 Routing Interface 390 Create an IPv6 Network Interface 393 Create an IPv6 Routing VLAN 395 Configure DHCPv6 Mode on the Routing Interface 400 Chapter 28 PIM PIM-DM 403 PIM-... Relay DHCP L2 Relay 454 DHCP L3 Relay 460 Chapter 30 MLD Configure MLD 471 MLD Snooping 484 Chapter 31 DVMRP CLI: Configure DVMRP 490 Web Interface: Configure DVMRP 496 Chapter 32 Captive Portal Captive Portal Configuration 508 Enable Captive Portal 508 Client Access, Authentication, and Control 510 ...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 8
... one for your switch • Hardware Installation Guide • Software Setup Guide • NETGEAR CLI Reference for information about the CLI commands used to configure the switch. The document provides CLI descriptions, syntax, and default values. - There are different...provides CLI descriptions, syntax, and default values. The Release Notes detail the platform-specific functionality of the switching, routing, SNMP, configuration, management, and other packages. Chapter 1. Refer to the Command Line Reference for the Prosafe 7X00 Series Managed Switch. Documentation ...
... one for your switch • Hardware Installation Guide • Software Setup Guide • NETGEAR CLI Reference for information about the CLI commands used to configure the switch. The document provides CLI descriptions, syntax, and default values. - There are different...provides CLI descriptions, syntax, and default values. The Release Notes detail the platform-specific functionality of the switching, routing, SNMP, configuration, management, and other packages. Chapter 1. Refer to the Command Line Reference for the Prosafe 7X00 Series Managed Switch. Documentation ...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 9
... Layer 2 header, which appears in the IEEE 802.1Q tag in the Layer 2 header of the tag, in this section shows a switch with four ports configured to receive the packet can either reject it partitions the network into logical segments, which case the first switch port to handle the traffic for...
... Layer 2 header, which appears in the IEEE 802.1Q tag in the Layer 2 header of the tag, in this section shows a switch with four ports configured to receive the packet can either reject it partitions the network into logical segments, which case the first switch port to handle the traffic for...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 10
VLANs Switch with 4 ports configured for traffic from 2 VLANs The following examples show how to create VLANs, assign ports to a port. Layer 3 switch Port 1/0/2 VLAN Router Port 1/3/1 192.150.3.1 Port 1/0/3 ... assign the VLAN IDs while leaving the names blank. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 2 (Netgear Switch) (Vlan)#vlan 3 (Netgear Switch) (Vlan)#exit Web Interface: Create Two VLANS 1. Create VLAN2. 10 | Chapter 2. The script following commands to create two VLANs and to configure the switch as shown in the diagram. ProSafe Managed Switch...
VLANs Switch with 4 ports configured for traffic from 2 VLANs The following examples show how to create VLANs, assign ports to a port. Layer 3 switch Port 1/0/2 VLAN Router Port 1/3/1 192.150.3.1 Port 1/0/3 ... assign the VLAN IDs while leaving the names blank. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 2 (Netgear Switch) (Vlan)#vlan 3 (Netgear Switch) (Vlan)#exit Web Interface: Create Two VLANS 1. Create VLAN2. 10 | Chapter 2. The script following commands to create two VLANs and to configure the switch as shown in the diagram. ProSafe Managed Switch...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 11
... VLAN ID field, enter 2. • In the VLAN Name field, enter VLAN2. • In the VLAN Type list, select Static. b. Select Switching > VLAN > Basic > VLAN Configuration. b. Select Switching > VLAN > Basic > VLAN Configuration. Enter the following displays.
... VLAN ID field, enter 2. • In the VLAN Name field, enter VLAN2. • In the VLAN Type list, select Static. b. Select Switching > VLAN > Basic > VLAN Configuration. b. Select Switching > VLAN > Basic > VLAN Configuration. Enter the following displays.
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 13
...Configuration, scroll down and select the Interface 1/0/2 check box. CLI: Assign Ports to VLAN 3. Note that port 1/0/2 belongs to both VLANs and that port 1/0/1 can never belong to VLAN3 (Netgear Switch) (Config)#interface range 1/0/2-1/0/4 (Netgear Switch) (conf-if-range-1/0/2-1/0/4)#vlan participation include 3 (Netgear Switch) (conf-if-range-1/0/2-1/0/4)#exit (Netgear Switch) (Config)#interface 1/0/4 (Netgear...13 ProSafe Managed Switch a. Select Switching > VLAN > Advanced > Port PVID Configuration. A screen similar to 4093) field, enter 2. Enter the following information:...
...Configuration, scroll down and select the Interface 1/0/2 check box. CLI: Assign Ports to VLAN 3. Note that port 1/0/2 belongs to both VLANs and that port 1/0/1 can never belong to VLAN3 (Netgear Switch) (Config)#interface range 1/0/2-1/0/4 (Netgear Switch) (conf-if-range-1/0/2-1/0/4)#vlan participation include 3 (Netgear Switch) (conf-if-range-1/0/2-1/0/4)#exit (Netgear Switch) (Config)#interface 1/0/4 (Netgear...13 ProSafe Managed Switch a. Select Switching > VLAN > Advanced > Port PVID Configuration. A screen similar to 4093) field, enter 2. Enter the following information:...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 14
... ports. a. ProSafe Managed Switch Web Interface: Assign Ports to VLAN3. Select Switching > VLAN > Advanced > VLAN Membership. d. The ports display. Select Switching > VLAN > Advanced > Port PVID Configuration. d.
... ports. a. ProSafe Managed Switch Web Interface: Assign Ports to VLAN3. Select Switching > VLAN > Advanced > VLAN Membership. d. The ports display. Select Switching > VLAN > Advanced > Port PVID Configuration. d.
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 15
A screen similar to save the settings. b. Under PVID Configuration, scroll down and select the Interface 1/0/2 check box. Now 1/0/2 appears in the Interface field at the top. Click... as the Default VLAN for Port 1/0/2 (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#vlan pvid 3 (Netgear Switch) (Interface 1/0/2)#exit (Netgear Switch) (Config)#exit Web Interface: Assign VLAN3 as the default VLAN for port 1/0/2. Chapter 2. c. Select Switching > VLAN > Advanced > Port PVID Configuration. d. Assign VLAN3 as the Default VLAN ...
A screen similar to save the settings. b. Under PVID Configuration, scroll down and select the Interface 1/0/2 check box. Now 1/0/2 appears in the Interface field at the top. Click... as the Default VLAN for Port 1/0/2 (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#vlan pvid 3 (Netgear Switch) (Interface 1/0/2)#exit (Netgear Switch) (Config)#exit Web Interface: Assign VLAN3 as the default VLAN for port 1/0/2. Chapter 2. c. Select Switching > VLAN > Advanced > Port PVID Configuration. d. Assign VLAN3 as the Default VLAN ...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 16
... address mapping to a VLAN that has MAC address to VLAN configurations are shared across all ports of the packet is assigned to VLAN3. (Netgear Switch)#config (Netgear Switch)(Config)#interface 1/0/23 (Netgear Switch)(Interface 1/0/23)#vlan participation include 3 (Netgear Switch)(Interface 1/0/23)#vlan pvid 3 (Netgear Switch)(Interface 1/0/23)#exit 16 | Chapter 2. VLANs Add port 1/0/23 to...
... address mapping to a VLAN that has MAC address to VLAN configurations are shared across all ports of the packet is assigned to VLAN3. (Netgear Switch)#config (Netgear Switch)(Config)#interface 1/0/23 (Netgear Switch)(Interface 1/0/23)#vlan participation include 3 (Netgear Switch)(Interface 1/0/23)#vlan pvid 3 (Netgear Switch)(Interface 1/0/23)#exit 16 | Chapter 2. VLANs Add port 1/0/23 to...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 17
... Web Interface: Assign a MAC-Based VLAN 1. c. VLANs | 17 Select Switching > VLAN > Basic > VLAN Configuration. b. Click Add. 2. Assign ports to VLAN3. (Netgear Switch)(Config)#exit (Netgear Switch)#vlan data (Netgear Switch)(Vlan)#vlan association mac 00:00:00A:00:00:02 3 (Netgear Switch)(Vlan)#exit 4. ProSafe Managed Switch 3. Add all the ports to the following information...
... Web Interface: Assign a MAC-Based VLAN 1. c. VLANs | 17 Select Switching > VLAN > Basic > VLAN Configuration. b. Click Add. 2. Assign ports to VLAN3. (Netgear Switch)(Config)#exit (Netgear Switch)#vlan data (Netgear Switch)(Vlan)#vlan association mac 00:00:00A:00:00:02 3 (Netgear Switch)(Vlan)#exit 4. ProSafe Managed Switch 3. Add all the ports to the following information...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 18
... to the following displays. VLANs Select Switching > VLAN > Advanced > VLAN Membership. b. In the VLAN ID list, select 3. Click Apply. 3. Select Switching > VLAN > Advanced > Port PVID Configuration. Scroll down and select the 1/0/23 check box. c. Select Switching > VLAN > Advanced > MAC based VLAN. A screen similar to VLAN3. Click Unit 1. Click Apply to the...
... to the following displays. VLANs Select Switching > VLAN > Advanced > VLAN Membership. b. In the VLAN ID list, select 3. Click Apply. 3. Select Switching > VLAN > Advanced > Port PVID Configuration. Scroll down and select the 1/0/23 check box. c. Select Switching > VLAN > Advanced > MAC based VLAN. A screen similar to VLAN3. Click Unit 1. Click Apply to the...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 20
a. Select Switching > VLAN > Advanced > Protocol Based VLAN Group Configuration. b. A screen similar to the following information: • In the Group Name field, enter vlan_ipx. • In the Protocol ...ProSafe Managed Switch 5. Enable protocol VLAN group 1 and 2 on the interface. (Netgear Switch)(Vlan)#exit (Netgear Switch)#config (Netgear Switch)(Config)#interface 1/0/11 (Netgear Switch)(Interface 1/0/11)#protocol vlan group 1 (Netgear Switch)(Interface 1/0/11)#protocol vlan group 2 (Netgear Switch)(Interface 1/0/11)#exit Web Interface: Create a Protocol-Based VLAN 1. Select ...
a. Select Switching > VLAN > Advanced > Protocol Based VLAN Group Configuration. b. A screen similar to the following information: • In the Group Name field, enter vlan_ipx. • In the Protocol ...ProSafe Managed Switch 5. Enable protocol VLAN group 1 and 2 on the interface. (Netgear Switch)(Vlan)#exit (Netgear Switch)#config (Netgear Switch)(Config)#interface 1/0/11 (Netgear Switch)(Interface 1/0/11)#protocol vlan group 1 (Netgear Switch)(Interface 1/0/11)#protocol vlan group 2 (Netgear Switch)(Interface 1/0/11)#exit Web Interface: Create a Protocol-Based VLAN 1. Select ...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 22
...-range-1/0/1-1/0/24)# vlan participation include 2000 (Netgear Switch) (conf-if-range-1/0/1-1/0/24)#exit (Netgear Switch) (Config)# Assign all the ports to the normal VLAN classification rules of a packet. The IP subnet classification feature affects only the VLAN assignment of the switch. Appropriate 802.1Q VLAN configuration must exist in order for the packet...
...-range-1/0/1-1/0/24)# vlan participation include 2000 (Netgear Switch) (conf-if-range-1/0/1-1/0/24)#exit (Netgear Switch) (Config)# Assign all the ports to the normal VLAN classification rules of a packet. The IP subnet classification feature affects only the VLAN assignment of the switch. Appropriate 802.1Q VLAN configuration must exist in order for the packet...
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 23
... all the ports to the following displays. Click Apply. 3. Click Add. 2. Select Switching > VLAN > Advanced > VLAN Membership. Create VLAN 2000. Select Switching > VLAN > Basic > VLAN Configuration. Click the gray box before Unit 1 until U displays. ProSafe Managed Switch Web Interface: Create an IP Subnet-Based VLAN 1. A screen similar to VLAN 2000. b. c. b. Chapter 2.
... all the ports to the following displays. Click Apply. 3. Click Add. 2. Select Switching > VLAN > Advanced > VLAN Membership. Create VLAN 2000. Select Switching > VLAN > Basic > VLAN Configuration. Click the gray box before Unit 1 until U displays. ProSafe Managed Switch Web Interface: Create an IP Subnet-Based VLAN 1. A screen similar to VLAN 2000. b. c. b. Chapter 2.
GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual
Page 25
VLANs | 25 Here the Voice VLAN mode is in this section shows how to the network cannot initiate a direct attack on voice components. ProSafe Managed Switch management control and that clients attached to configure Voice VLAN and prioritize the voice traffic. Voice VLAN The script in VLAN ID 10. Create VLAN 10. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 10 (Netgear Switch) (Vlan)#exit Chapter 2. PBX 1/0/1 GSM73xxS 1/0/2 1/0/3 VoIP phone VoIP phone PC PC Voice traffic Data traffic Figure 3. CLI: Configure Voice VLAN and Prioritize Voice Traffic 1.
VLANs | 25 Here the Voice VLAN mode is in this section shows how to the network cannot initiate a direct attack on voice components. ProSafe Managed Switch management control and that clients attached to configure Voice VLAN and prioritize the voice traffic. Voice VLAN The script in VLAN ID 10. Create VLAN 10. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 10 (Netgear Switch) (Vlan)#exit Chapter 2. PBX 1/0/1 GSM73xxS 1/0/2 1/0/3 VoIP phone VoIP phone PC PC Voice traffic Data traffic Figure 3. CLI: Configure Voice VLAN and Prioritize Voice Traffic 1.