NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0. NETGEAR, Inc Great America Parkway Santa Clara, CA USA

Pages 147
Views 42

Please download to get full document.

View again

of 147
All materials on our website are shared by users. If you have any questions about copyright issues, please report us to resolve them. We are always happy to assist you.
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0 NETGEAR, Inc Great America Parkway Santa Clara, CA USA Jan by NETGEAR, Inc. All rights reserved. FullManual.
NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0 NETGEAR, Inc Great America Parkway Santa Clara, CA USA Jan 2007 2007 by NETGEAR, Inc. All rights reserved. FullManual. Trademarks NETGEAR and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc.. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this document are copyright Intoto, Inc. Jan 2007 Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein. Netgear's 7000 Series Managed Switch is compliant with the following EU Council Directives: 89/336/EEC and LVD 73/23/EEC. Compliance is verified by testing to the following standards: EN55022 Class A, EN55024 and EN Certificate of the Manufacturer/Importer It is hereby certified that the 7000 Series Managed Switch has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating instructions. The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the series for compliance with the regulations. Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das7000 Series Managed Switch gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg 46/ 1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.b. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung. Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen. Voluntary Control Council for Interference (VCCI) Statement This equipment is in the Class A category (information equipment to be used in a residential area or an adjacent area thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling. ii FCC Information to User Declaration Of Conformity We NETGEAR, Inc., 4500 Great America Parkway, Santa Clara, CA 95054, declare under our sole responsibility that the model 7000 Series Managed Switch complies with Part 15 of FCC Rules. Operation is subject to the following two conditions: This device may not cause harmful interference, and This device must accept any interference received, including interference that may cause undesired operation. FCC Requirements for Operation in the United States Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following methods: Reorient or relocate the receiving antenna Increase the separation between the equipment and the receiver Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected Consult the dealer or an experienced radio/tv technician for help Series Managed Switch Tested to Comply with FCC Standards FOR HOME OR OFFICE USE Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate the equipment. Canadian Department of Communications Radio Interference Regulations This digital apparatus (7000 Series Managed Switch) does not exceed the Class A limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications. iii Product and Publication Details Model Number: 7xxx Publication Date: Jan 2007 Product Family: Managed Switch Product Name: 7000 Series Managed Switch Home or Business Product: Business Language: English Publication Part Number: Publication Version Number: 1.0 iv Contents NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0 About This Manual...xiii Chapter 1 Introduction Document Organization Audience CLI Documentation Related Documentation Chapter 2 Getting Started In-band and Out-of-band Connectivity Configuring for In-band Connectivity Using BootP or DHCP Using the EIA-232 Port Configuring for Out-Of-Band Connectivity Starting the Switch Initial Configuration Initial Configuration Procedure Software Installation Quick Starting the Networking Device System Information and System Setup Chapter 3 Using Ezconfig for Switch Setup Changing the Password Setting Up the Switch IP Address Assigning Switch Name and Location Information Saving the Configuration v Chapter 4 Using the Web Interface Configuring for Web Access Starting the Web Interface Web Page Layout Configuring an SNMP V3 User Profile Command Buttons Chapter 5 Virtual LANs VLAN Configuration Example CLI Examples Example #1: Create Two VLANs Example #2: Assign Ports to VLAN Example #3: Assign Ports to VLAN Example #4: Assign VLAN3 as the Default VLAN Graphical User Interface Chapter 6 Link Aggregation CLI Example Example 1: Create two LAGS: Example 2: Add the ports to the LAGs: Example 3: Enable both LAGs Chapter 7 IP Routing Services Port Routing Port Routing Configuration CLI Examples Example 1. Enabling routing for the Switch Example 2. Enabling Routing for Ports on the Switch VLAN Routing VLAN Routing Configuration CLI Examples Example 1: Create Two VLANs Example 2: Set Up VLAN Routing for the VLANs and the Switch VLAN Routing RIP Configuration CLI Example vi VLAN Routing OSPF Configuration CLI Example Routing Information Protocol RIP Configuration CLI Example Example #1: Enable Routing for the Switch: Example #2: Enable Routing for Ports Example #3. Enable RIP for the Switch Example #4. Enable RIP for ports 1/0/2 and 1/0/ OSPF CLI Examples Example #1 Configuring an Inter-Area Router Example #2 - Configuring OSPF on a Border Router Proxy Address Resolution Protocol (ARP) Overview CLI Examples Example #1: show ip interface Example #2: ip proxy-arp Chapter 8 Virtual Router Redundancy Protocol CLI Examples Chapter 9 Access Control Lists (ACLs) Overview Limitations MAC ACLs Configuring IP ACLs Process IP ACL CLI Example MAC ACL CLI Examples Example #1: mac access list Example #2: permit any Example #3 Configure mac access-group Example #4 permit vii Example #5: show mac access-lists Chapter 10 Class of Service (CoS) Queuing Overview CoS Queue Mapping Trusted Ports Untrusted Ports CoS Queue Configuration Port Egress Queue Configuration Drop Precedence Configuration (per Queue) Per Interface Basis CLI Examples Example #1: show classofservice trust Example #2: set classofservice trust mode Example #3: show classofservice ip-precedence mapping Example #4: Config Cos-queue Min-bandwidth and Strict Priority Scheduler Mode 10-5 Example #5: Set CoS Trust Mode of an Interface Traffic Shaping CLI Example Example #1 traffic-shape Chapter 11 Differentiated Services CLI Example DiffServ for VoIP Configuration Example Chapter 12 IGMP Snooping Overview CLI Examples Example #1: Enable IGMP Snooping Example #2: show igmpsnooping Example #3: show mac-address-table igmpsnooping Chapter 13 Port Security Overview Operation viii CLI Examples Example #1: show port security Example #2: show port security on a specific interface Example #3: (Config) port security Chapter 14 Traceroute CLI Example Chapter 15 Configuration Scripting Overview Considerations CLI Examples Example #1: script Example #2: script list and script delete Example #3: script apply running-config.scr Example #4: Creating a Configuration Script Example #5: Upload a Configuration Script Chapter 16 Outbound Telnet Overview CLI Examples Example #1: show network Example #2: show telnet Example #3: transport output telnet Example #4: session-limit and session-timeout Chapter 17 Port Mirroring Overview CLI Examples Example #1: show monitor session Example #2: show port all Example #3: show port interface Example #4: (Config) monitor session 1 mode Example #5: (Config) monitor session 1 source interface Example #6: (Interface) port security ix Chapter 18 Simple Network Time Protocol (SNTP) Overview CLI Examples Example #1: show sntp Example #2: show sntp client Example #3: show sntp server Example #4: Configure SNTP Example #5: Setting Time Zone Example #6: Setting Named SNTP Server Chapter 19 Managing Switch Stacks Understanding Switch Stacks Switch Stack Membership Switch Stack Cabling (FSM73xxS) Stack Master Election and Re-Election Stack Member Numbers Stack Member Priority Values Switch Stack Offline Configuration Effects of Adding a Preconfigured Switch to a Switched Stack Effects of Replacing a Preconfigured Switch in a Switch Stack Effects of Removing a Preconfigured Switch from a Switch Stack Switch Stack Software Compatibility Recommendations Incompatible Software and Stack Member Image Upgrades Switch Stack Configuration Files Switch Stack Management Connectivity Connectivity to the Switch Stack Through Console Ports Connectivity to the Switch Stack Through Telnet Switch Stack Configuration Scenarios Stacking Recommendations General Practices Initial installation and Power-up of a Stack Removing a Unit from the Stack Adding a Unit to an Operating Stack Replacing a Stack Member with a New Unit x Renumbering Stack Members Moving a Master to a Different Unit in the Stack Removing a Master Unit from an Operating Stack Merging Two Operational Stacks Preconfiguration Upgrading Firmware Migration of Configuration With a Firmware Upgrade Code Mismatch Chapter 20 Pre-Login Banner Overview CLI Example Chapter 21 Syslog Overview Persistent Log Files Interpreting Log Files CLI Examples Example #1: show logging Example #2: show logging buffered Example #3: show logging traplogs Example 4: show logging hosts Example #5: logging port configuration Chapter 22 IGMP Querier CLI Examples Example 1: Enable IGMP Querier Example 2 Show IGMP Querier Status xi xii About This Manual The NETGEAR FVX538 ProSafe VPN Firewall 200 Reference Manual describes how to install, configure and troubleshoot the 7000 Series Managed Switch. The information in this manual is intended for readers with intermediate computer and Internet skills. Conventions, Formats and Scope The conventions, formats, and scope of this manual are described in the following paragraphs: Typographical Conventions. This manual uses the following typographical conventions: Italics Bold Fixed Emphasis, books, CDs, URL names User input Screen text, file and server names, extensions, commands, IP addresses Formats. This manual uses the following formats to highlight special messages: Note: This format is used to highlight information of importance or special interest. Tip: This format is used to highlight a procedure that will save time or resources. Warning: Ignoring this type of note may result in a malfunction or damage to the equipment. Danger: This is a safety warning. Failure to take heed of this notice may result in personal injury or death. xiii . NETGEAR 7000 Series Managed Switch Administration Guide Version 6.0 Scope. This manual is written for the 7000 Series Managed Switch according to these specifications: Product Version 7000 Series Managed Switch Manual Publication Date Jan 2007 Note: Product updates are available on the NETGEAR, Inc. website at How to Use This Manual The HTML version of this manual, if provided, includes the following: Buttons, and, for browsing forwards or backwards through the manual one page at a time A button that displays the table of contents and an button. Double-click on a link in the table of contents or index to navigate directly to where the topic is described in the manual. A button to access the full NETGEAR, Inc. online knowledge base for the product model. Links to PDF versions of the full manual and individual chapters. How to Print this Manual To print this manual, you can choose one of the following options, according to your needs. Printing a Page from HTML. Each page in the HTML version of the manual is dedicated to a major topic. Select File Print from the browser menu to print the page contents. Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at Printing a PDF Chapter. Use the PDF of This Chapter link at the top left of any page. xiv Click the PDF of This Chapter link at the top left of any page in the chapter you want to print. The PDF version of the chapter you were viewing opens in a browser window. Click the print icon in the upper left of your browser window. Printing a PDF version of the Complete Manual. Use the Complete PDF Manual link at the top left of any page. Click the Complete PDF Manual link at the top left of any page in the manual. The PDF version of the complete manual opens in a browser window. Click the print icon in the upper left of your browser window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature. Revision History Part Number Version Number Description Product update: New firmware and new user Interface xv xvi Chapter 1 Introduction This document provides an understanding of the CLI and Web configuration options for software Release 6.0 features. Document Organization This document provides examples of the use of the switch software in a typical network. It describes the use and advantages of specific functions provided by the 7000 Series Managed Switch, and includes information on configuring those functions using the Command Line Interface and Web Interface. The switch software can operate as a Layer 2 switch, a Layer 3 router or a combination switch/ router. The switch also includes support for network management and Quality of Service functions such as Access Control Lists and Differentiated Services. Which functions you choose to activate will depend on the size and complexity of your network: this document describes configuration for some of the most-used functions. This document contains configuration information about the following: Layer 2 VLANs Layer 3 Port routing VLAN Routing Virtual Router Redundancy Protocol (VRRP) RIP OSPF Proxy ARP Quality of Service (QoS) Access Control Lists (ACLs) 1-1 Class of Service (CoS) Differentiated Services Multicast IGMP Snooping Security Denial of Service Port Security Operating System Dual Configuration Tools Alarm Manager Traceroute Configuration Scripting Advance Keying Prelogin Banner Port Mirroring SNTP Syslog Data Migration Audience Use this guide if you are a(n): Experienced system administrator who is responsible for configuring and operating a network using switch software Level 1 and Level 2 Support provider To obtain the greatest benefit from this guide, you should have an understanding of the switch software base and should have read the specification for your networking device platform. You should also have a basic knowledge of Ethernet and networking concepts. 1-2 Introduction CLI Documentation The Command Line Reference provides information about the CLI commands used to configure the switch and the stack. The document provides CLI descriptions, syntax, and default values. Refer to the Command Line Reference for information for the command structure Related Documentation Before proceeding, read the Release Notes for this switch product. The Release Notes detail the platform specific functionality of the Switching, Routing, SNMP, Config, Management, and other packages. In addition, see the following publications: Netgear Quick Installation Guide, 7000 Series Managed Switch Netgear CLI Reference for the Prosafe 7X00 Series Managed Switch. There are three documents in this series; choose the appropriate one for your product. Netgear Hardware Installation Guide for your switch These documents may be found at Introduction 1-3 1-4 Introduction Chapter 2 Getting Started Connect a terminal to the switch to begin configuration. In-band and Out-of-band Connectivity Ask the system administrator to determine whether you will configure the switch for in-band or out-of-band connectivity. Configuring for In-band Connectivity In-band connectivity allows you to access the switch from a remote workstation using the Ethernet network. To use in-band connectivity, you must configure the switch with IP information (IP address, subnet mask, and default gateway). Configure for In-band connectivity using one of the following methods: BootP or DHCP EIA-232 port Using BootP or DHCP You can assign IP information initially over the network or over the Ethernet service port through BootP or DHCP. Check with your system administrator to determine whether BootP or DHCP is enabled. You need to configure the BootP or DHCP server with information about the switch obtain this information through the serial port connection using the show network command. Set up the server with the following values: IP Address Subnet gateway Unique IP address for the switch. Each IP parameter is made up of four decimal numbers, ranging from 0 to 255. The default for all IP parameters is zeroes ( ). Subnet mask for the LAN IP address of the default router, if the switch is a node outside the IP range of the LAN 2-5 MAC Address MAC address of the switch When you connect the switch to the network for the first time after setting up the BootP or DHCP server, it is configured with the information supplied above. The switch is ready for in-band connectivity over the network. If you do not use BootP or DHCP, access the switch through the EIA-232 port, and configure the network information as described below. Using the EIA-232 Port You can use a locally or remotely attached terminal to configure in-band management through the EIA-232 port. 1. To use a locally attached terminal, attach one end of a null-modem serial cable to the EIA-232 port of the switch and the other end to the COM port of the terminal or workstation. For remote attachment, attach one end of the serial cable to the EIA-232 port of the switch and the other end to the modem. 2. Set up the terminal for VT100 terminal emulation. a. Set the terminal ON. b. Launch the VT100 application. 3. Configure the COM port as follows: a. Set the data rate to 115,200 baud. b. Set the data format to 8 data bits, 1 stop bit, and no parity. c. Set the flow control to none. d. Select the proper mode under Properties. e. Select Terminal keys. The Log-in User prompt displays when the terminal interface initializes. 4. Enter an approved user name and password. The default is admin for the user name and the password is blank. The switch
Related Documents
View more...
We Need Your Support
Thank you for visiting our website and your interest in our free products and services. We are nonprofit website to share and download documents. To the running of this website, we need your help to support us.

Thanks to everyone for your continued support.

No, Thanks

We need your sign to support Project to invent "SMART AND CONTROLLABLE REFLECTIVE BALLOONS" to cover the Sun and Save Our Earth.

More details...

Sign Now!

We are very appreciated for your Prompt Action!