Hardware Installation Guide
Page 32
M4100 Series switch default settings (Continued) Feature GMRP IP routing MAC address aging SNMP community DHCP Server VLAN Ingress filtering IP multicast filtering 802.1x Port Security Auto Install LLDP LLDP-MED ISDP Default Setting Disabled Disabled 300 seconds public (read-only access), private (read/write access) Disabled Enabled Disabled Disabled Disabled Enabled Enabled Enabled Enabled Default Configuration Settings 32 NETGEAR Managed Switch Table 8.
M4100 Series switch default settings (Continued) Feature GMRP IP routing MAC address aging SNMP community DHCP Server VLAN Ingress filtering IP multicast filtering 802.1x Port Security Auto Install LLDP LLDP-MED ISDP Default Setting Disabled Disabled 300 seconds public (read-only access), private (read/write access) Disabled Enabled Disabled Disabled Disabled Enabled Enabled Enabled Enabled Default Configuration Settings 32 NETGEAR Managed Switch Table 8.
Installation Guide
Page 1
...5e (Cat5e) for copper ports at 1000 Mbps. • Use NETGEAR AGM731F or AGM732F for fiber ports at 1000 Mbps. • Use NETGEAR AFM735 for your switch on the resource CD. 1. none 4. At... power cable is plugged in correctly and that the power source is present, the switch assumes a default IP address of 169.254.100.100 and a subnet mask of 255.255.0.0. This guide describes the web.... 2. M4100_IG 7Nov2012.fm Page 1 Friday, November 9, 2012 3:34 PM Installation Guide ProSafe M4100 Managed Switches Start Here Before you begin installation of your switch, check the package contents listed...
...5e (Cat5e) for copper ports at 1000 Mbps. • Use NETGEAR AGM731F or AGM732F for fiber ports at 1000 Mbps. • Use NETGEAR AFM735 for your switch on the resource CD. 1. none 4. At... power cable is plugged in correctly and that the power source is present, the switch assumes a default IP address of 169.254.100.100 and a subnet mask of 255.255.0.0. This guide describes the web.... 2. M4100_IG 7Nov2012.fm Page 1 Friday, November 9, 2012 3:34 PM Installation Guide ProSafe M4100 Managed Switches Start Here Before you begin installation of your switch, check the package contents listed...
Installation Guide
Page 2
...NETGEAR telephone support. WARNING!! Information is not assigned. All rights reserved. n Assigning an IP address to assign the admin password (password length should vary in DHCP Client Mode with the laws of the procedure Computer with Static IP Address. N - c IP Address: 10.10.10.1 Network mask: 255.255.255.0 Default Router IP... your switch through its IP address from this point to configure your switch management Current IP Address Configuration IP Address Assignment Mode: None IP Address: 0.0.0.0 Subnet mask: 0.0.0.0 Default Router IP: 0.0.0.0 IP address is subject to ...
...NETGEAR telephone support. WARNING!! Information is not assigned. All rights reserved. n Assigning an IP address to assign the admin password (password length should vary in DHCP Client Mode with the laws of the procedure Computer with Static IP Address. N - c IP Address: 10.10.10.1 Network mask: 255.255.255.0 Default Router IP... your switch through its IP address from this point to configure your switch management Current IP Address Configuration IP Address Assignment Mode: None IP Address: 0.0.0.0 Subnet mask: 0.0.0.0 Default Router IP: 0.0.0.0 IP address is subject to ...
CLI Manual
Page 18
... Configure Network Parameters of the switch. You cannot access the system remotely until the system has an IP address, subnet mask, and default gateway. Telnet to a specified IP address. Enter the IP address. If the help output shows a parameter in the output: Press Enter to execute the command... 18 mac-addr-table mac-address-table monitor Accessing the CLI You can configure the system to the console port. ProSafe M4100 and M7100 Managed Switches enable help for various special keys. Display help logout ping quit show m? Configure the Management VLAN ID...
... Configure Network Parameters of the switch. You cannot access the system remotely until the system has an IP address, subnet mask, and default gateway. Telnet to a specified IP address. Enter the IP address. If the help output shows a parameter in the output: Press Enter to execute the command... 18 mac-addr-table mac-address-table monitor Accessing the CLI You can configure the system to the console port. ProSafe M4100 and M7100 Managed Switches enable help for various special keys. Display help logout ping quit show m? Configure the Management VLAN ID...
CLI Manual
Page 21
...virtual interface, which allows certain port configurations to be put under a VLAN group and an IP address assigned to the LAG interface. The interface must be applied to the VLAN group. Default Format Mode enabled auto-negotiate Interface Config Switching Commands 21 Format Mode interface lag Global Config... to see the available options. Type a question mark (?) after entering the interface configuration mode to see the available options. ProSafe M4100 and M7100 Managed Switches Port Configuration Commands This section describes the commands you use to the VLAN interface.
...virtual interface, which allows certain port configurations to be put under a VLAN group and an IP address assigned to the LAG interface. The interface must be applied to the VLAN group. Default Format Mode enabled auto-negotiate Interface Config Switching Commands 21 Format Mode interface lag Global Config... to see the available options. Type a question mark (?) after entering the interface configuration mode to see the available options. ProSafe M4100 and M7100 Managed Switches Port Configuration Commands This section describes the commands you use to the VLAN interface.
CLI Manual
Page 22
.... Note: To receive and process packets, the Ethernet MTU must include any extra bytes that ingress or egress the interface. Default Format Mode enabled auto-negotiate all Global Config no auto-negotiate all This command disables automatic negotiation on all Global Config description ... (IP Header + IP payload), see ip mtu on a port. Note: Automatic sensing is disabled when automatic negotiation is the maximum size of the port. Switching Commands 22 ProSafe M4100 and M7100 Managed Switches no auto-negotiate This command disables automatic negotiation on page 233. You can use...
.... Note: To receive and process packets, the Ethernet MTU must include any extra bytes that ingress or egress the interface. Default Format Mode enabled auto-negotiate all Global Config no auto-negotiate all This command disables automatic negotiation on all Global Config description ... (IP Header + IP payload), see ip mtu on a port. Note: Automatic sensing is disabled when automatic negotiation is the maximum size of the port. Switching Commands 22 ProSafe M4100 and M7100 Managed Switches no auto-negotiate This command disables automatic negotiation on page 233. You can use...
CLI Manual
Page 54
...protocol associated with one VLAN at a time, however the VLAN association can be associated with it. Default Format Mode none vlan protocol group add protocol ethertype {|arp|ip|ipx} Global Config no vlan protocol group add protocol This command removes the from this protocol-based ...protocol list can only be changed. The possible values for protocol-list includes the keywords ip, arp, and ipx and hexadecimal or decimal values ranging from a protocol-based VLAN group. ProSafe M4100 and M7100 Managed Switches no vlan protocol group name This command removes the name from 0x0600...
...protocol associated with one VLAN at a time, however the VLAN association can be associated with it. Default Format Mode none vlan protocol group add protocol ethertype {|arp|ip|ipx} Global Config no vlan protocol group add protocol This command removes the from this protocol-based ...protocol list can only be changed. The possible values for protocol-list includes the keywords ip, arp, and ipx and hexadecimal or decimal values ranging from a protocol-based VLAN group. ProSafe M4100 and M7100 Managed Switches no vlan protocol group name This command removes the name from 0x0600...
CLI Manual
Page 57
...1-4093. VLAN ID 1 always has a name of a MAC address to a VLAN. Switching Commands 57 ProSafe M4100 and M7100 Managed Switches vlan association subnet This command associates a VLAN to a VLAN. It can be up to a VLAN. The default is optional. Type of the VLAN ID is associated with this VLAN as a convenience. This... association mac This command associates a MAC address to 32 alphanumeric characters long, including blanks. Format Mode show vlan This command displays a list of a specific IP-subnet to a specific IP-subnet. A string associated with each VLAN.
...1-4093. VLAN ID 1 always has a name of a MAC address to a VLAN. Switching Commands 57 ProSafe M4100 and M7100 Managed Switches vlan association subnet This command associates a VLAN to a VLAN. It can be up to a VLAN. The default is optional. Type of the VLAN ID is associated with this VLAN as a convenience. This... association mac This command associates a MAC address to 32 alphanumeric characters long, including blanks. Format Mode show vlan This command displays a list of a specific IP-subnet to a specific IP-subnet. A string associated with each VLAN.
CLI Manual
Page 63
...value, representing any value in a predictable manner. The system uses the source MAC of an IP phone could be safeguarded from the switch in the range of the DVLAN tunnel. Default disabled Switching Commands 63 A 2-byte hex EtherType to be enabled or disabled. Voice VLAN Commands...on the interface. attached clients cannot initiate a direct attack on the switch. ProSafe M4100 and M7100 Managed Switches Term Mode EtherType Definition The administrative mode through the port to identify the IP phone data flow. There are three different EtherType tags. Format Mode no voice ...
...value, representing any value in a predictable manner. The system uses the source MAC of an IP phone could be safeguarded from the switch in the range of the DVLAN tunnel. Default disabled Switching Commands 63 A 2-byte hex EtherType to be enabled or disabled. Voice VLAN Commands...on the interface. attached clients cannot initiate a direct attack on the switch. ProSafe M4100 and M7100 Managed Switches Term Mode EtherType Definition The administrative mode through the port to identify the IP phone data flow. There are three different EtherType tags. Format Mode no voice ...
CLI Manual
Page 64
Allow the IP phone to use the default native VLAN (VLAN 0) to carry all traffic. Switching Commands 64 no voice vlan Interface Config voice vlan data priority Use this command to send untagged voice traffic. ProSafe M4100 and M7100 Managed Switches Format Mode voice vlan { | dot1p | none...none untagged Description Configure the IP phone to forward all }] Privileged EXEC When the interface parameter is not specified, only the global mode of the Voice VLAN is 0-7. Configure the phone to 4093 (the maximum supported by the platform). Default Format Mode trust voice vlan...
Allow the IP phone to use the default native VLAN (VLAN 0) to carry all traffic. Switching Commands 64 no voice vlan Interface Config voice vlan data priority Use this command to send untagged voice traffic. ProSafe M4100 and M7100 Managed Switches Format Mode voice vlan { | dot1p | none...none untagged Description Configure the IP phone to forward all }] Privileged EXEC When the interface parameter is not specified, only the global mode of the Voice VLAN is 0-7. Configure the phone to 4093 (the maximum supported by the platform). Default Format Mode trust voice vlan...
CLI Manual
Page 117
...IP address, TCP/UDP ports are used . • Non-Unicast traffic and unicast traffic is the number of ports in the channel over which has the following advantages: • MODULO-N (where N is hashed using a common hash algorithm • Excellent load balancing performance. ProSafe M4100...linktrap This command disables link trap notifications for a configured port-channel. Default Format Mode 3 port-channel load-balance { 1 | 2 | 3 | 4 | 5 | 6 | 7} { |} Interface Config Global Config Switching Commands 117 Default Format Mode enabled port-channel linktrap { | lag | all the ...
...IP address, TCP/UDP ports are used . • Non-Unicast traffic and unicast traffic is the number of ports in the channel over which has the following advantages: • MODULO-N (where N is hashed using a common hash algorithm • Excellent load balancing performance. ProSafe M4100...linktrap This command disables link trap notifications for a configured port-channel. Default Format Mode 3 port-channel load-balance { 1 | 2 | 3 | 4 | 5 | 6 | 7} { |} Interface Config Global Config Switching Commands 117 Default Format Mode enabled port-channel linktrap { | lag | all the ...
CLI Manual
Page 118
... VLAN, EtherType, and incoming port associated with the packet Source IP and Source TCP/UDP fields of the packet Destination IP and Destination TCP/UDP Port fields of the packet Source/Destination IP and source/destination TCP/UDP Port fields of the packet Enhanced Hashing.... Format Mode port-channel name { | } Global Config port-channel system priority Use this command to the default load balancing configuration. The interface is a logical slot/port for the port-channel (LAG). ProSafe M4100 and M7100 Managed Switches Term 1 2 3 4 5 6 7 | all Definition Global Config Mode only: ...
... VLAN, EtherType, and incoming port associated with the packet Source IP and Source TCP/UDP fields of the packet Destination IP and Destination TCP/UDP Port fields of the packet Source/Destination IP and source/destination TCP/UDP Port fields of the packet Enhanced Hashing.... Format Mode port-channel name { | } Global Config port-channel system priority Use this command to the default load balancing configuration. The interface is a logical slot/port for the port-channel (LAG). ProSafe M4100 and M7100 Managed Switches Term 1 2 3 4 5 6 7 | all Definition Global Config Mode only: ...
CLI Manual
Page 132
...M4100 and M7100 Managed Switches show dhcp client vendor-id-option DHCP Client Vendor Identifier Option Enabled DHCP Client Vendor Identifier Option string .... Client. DHCP Snooping Configuration Commands This section describes commands you use to enable DHCP Snooping globally. ip dhcp snooping Use this command to disable DHCP Snooping globally. Default...the configured administration mode of comma-separated VLAN ranges. Default Format Mode disabled ip dhcp snooping Global Config no ip dhcp snooping Global Config ip dhcp snooping vlan Use this command to be included...
...M4100 and M7100 Managed Switches show dhcp client vendor-id-option DHCP Client Vendor Identifier Option Enabled DHCP Client Vendor Identifier Option string .... Client. DHCP Snooping Configuration Commands This section describes commands you use to enable DHCP Snooping globally. ip dhcp snooping Use this command to disable DHCP Snooping globally. Default...the configured administration mode of comma-separated VLAN ranges. Default Format Mode disabled ip dhcp snooping Global Config no ip dhcp snooping Global Config ip dhcp snooping vlan Use this command to be included...
CLI Manual
Page 133
...M4100 and M7100 Managed Switches no ip dhcp snooping vlan Use this command to 86,400 seconds. Format Mode no ip dhcp snooping vlan Global Config ip dhcp snooping verify mac-address Use this command to enable verification of the source MAC address with the client hardware address. Default Format Mode local ip... dhcp snooping database {local|tftp://hostIP/filename} Global Config ip dhcp snooping database write-delay Use this command to configure the interval in the...
...M4100 and M7100 Managed Switches no ip dhcp snooping vlan Use this command to 86,400 seconds. Format Mode no ip dhcp snooping vlan Global Config ip dhcp snooping verify mac-address Use this command to enable verification of the source MAC address with the client hardware address. Default Format Mode local ip... dhcp snooping database {local|tftp://hostIP/filename} Global Config ip dhcp snooping database write-delay Use this command to configure the interval in the...
CLI Manual
Page 134
... binding Use this command to set the write delay value to the default value. Default 15 pps for rate limiting and 1 sec for burst interval Switching Commands 134 ProSafe M4100 and M7100 Managed Switches no ip dhcp snooping database write-delay Use this command to remove the IPSG static entry from the IPSG database...
... binding Use this command to set the write delay value to the default value. Default 15 pps for rate limiting and 1 sec for burst interval Switching Commands 134 ProSafe M4100 and M7100 Managed Switches no ip dhcp snooping database write-delay Use this command to remove the IPSG static entry from the IPSG database...
CLI Manual
Page 135
...control the logging DHCP messages filtration by the DHCP Snooping application. ProSafe M4100 and M7100 Managed Switches Format Mode ip dhcp snooping limit {rate pps [burst interval seconds]} Interface Config no ip dhcp snooping log-invalid Use this command to disable the logging DHCP ... by the DHCP Snooping application. Default Format Mode disabled ip dhcp snooping trust Interface Config no ip dhcp snooping log-invalid Interface Config ip dhcp snooping trust Use this command to configure the port as untrusted. Format Mode no ip dhcp snooping trust Use this command...
...control the logging DHCP messages filtration by the DHCP Snooping application. ProSafe M4100 and M7100 Managed Switches Format Mode ip dhcp snooping limit {rate pps [burst interval seconds]} Interface Config no ip dhcp snooping log-invalid Use this command to disable the logging DHCP ... by the DHCP Snooping application. Default Format Mode disabled ip dhcp snooping trust Interface Config no ip dhcp snooping log-invalid Interface Config ip dhcp snooping trust Use this command to configure the port as untrusted. Format Mode no ip dhcp snooping trust Use this command...
CLI Manual
Page 136
...hardware. Example: The following VLANs: 11 - 30, 40 Interface Trusted Log Invalid Pkts Switching Commands 136 ProSafe M4100 and M7100 Managed Switches ip verify source Use this command to configure the IPSG source ID attribute to disable the IPSG configuration in the hardware.... port configurations. Source ID is enabled on the specified interface. The factory default is the IP address ip verify source {port-security} Interface Config no ip verify source Interface Config show ip dhcp snooping DHCP snooping is Disabled DHCP snooping source MAC verification is enabled ...
...hardware. Example: The following VLANs: 11 - 30, 40 Interface Trusted Log Invalid Pkts Switching Commands 136 ProSafe M4100 and M7100 Managed Switches ip verify source Use this command to configure the IPSG source ID attribute to disable the IPSG configuration in the hardware.... port configurations. Source ID is enabled on the specified interface. The factory default is the IP address ip verify source {port-security} Interface Config no ip verify source Interface Config show ip dhcp snooping DHCP snooping is Disabled DHCP snooping source MAC verification is enabled ...
CLI Manual
Page 141
...The following shows sample CLI display output for the entry. Default Format Mode disabled ip arp inspection vlan vlan-list Global Config no ip arp inspection vlan vlan-list Global Config Switching Commands 141 IP address of the interface in -the-middle attacks, where an...its unsuspecting neighbors. You can optionally configure additional ARP packet validation. ProSafe M4100 and M7100 Managed Switches Term VLAN Interface Definition VLAN for the command. (switch) #show ip source binding MAC Address IP Address Type Vlan Interface 00:00:00:00:00:08 1.2.3.4 dhcp-snooping...
...The following shows sample CLI display output for the entry. Default Format Mode disabled ip arp inspection vlan vlan-list Global Config no ip arp inspection vlan vlan-list Global Config Switching Commands 141 IP address of the interface in -the-middle attacks, where an...its unsuspecting neighbors. You can optionally configure additional ARP packet validation. ProSafe M4100 and M7100 Managed Switches Term VLAN Interface Definition VLAN for the command. (switch) #show ip source binding MAC Address IP Address Type Vlan Interface 00:00:00:00:00:08 1.2.3.4 dhcp-snooping...
CLI Manual
Page 142
...validations are disabled as trusted for Dynamic ARP Inspection. Default Format Mode disabled ip arp inspection validate {[src-mac] [dst-mac] [ip]} Global Config no ip arp inspection validate {[src-mac] [dst-mac] [ip]} Global Config ip arp inspection vlan logging Use this command to enable... of invalid ARP packets on a list of comma-separated VLAN ranges. Default Format Mode enabled ip arp inspection trust Interface Config Switching Commands 142 ProSafe M4100 and M7100 Managed Switches ip arp inspection validate Use this command to enable additional validation checks like source...
...validations are disabled as trusted for Dynamic ARP Inspection. Default Format Mode disabled ip arp inspection validate {[src-mac] [dst-mac] [ip]} Global Config no ip arp inspection validate {[src-mac] [dst-mac] [ip]} Global Config ip arp inspection vlan logging Use this command to enable... of invalid ARP packets on a list of comma-separated VLAN ranges. Default Format Mode enabled ip arp inspection trust Interface Config Switching Commands 142 ProSafe M4100 and M7100 Managed Switches ip arp inspection validate Use this command to enable additional validation checks like source...
CLI Manual
Page 233
... network-directed broadcasts. Default Format Mode disabled ip netdirbcast Interface Config no ip netdirbcast Interface Config ip mtu This command sets the IP maximum transmission unit (MTU) on the interface without fragmentation. It does not include any extra bytes that can be required for Layer-2 headers. Default 1500 bytes Routing Commands 233 ProSafe M4100 and M7100 Managed...
... network-directed broadcasts. Default Format Mode disabled ip netdirbcast Interface Config no ip netdirbcast Interface Config ip mtu This command sets the IP maximum transmission unit (MTU) on the interface without fragmentation. It does not include any extra bytes that can be required for Layer-2 headers. Default 1500 bytes Routing Commands 233 ProSafe M4100 and M7100 Managed...