Manuals / NETGEAR / Computer Equipment / Switch

NETGEAR M4100, M7100 manual Now the unit ID of the stacking member is

Models: M4100 M7100

1 559

Download 559 pages 29.25 Kb

Page 367

ProSafe M4100 and M7100 Managed Switches

e.Now the unit ID of the stacking member is 2.

Chapter 19. Switch Stacks 367

Image 367

NETGEAR M4100, M7100 manual Now the unit ID of the stacking member is

Contents

ProSafe M4100 and M7100 Managed Switches Trademarks SupportRevision History Table of Contents LAGs Ospf ACLs DiffServ Security Management Sntp Switch Stacks Snmp Spanning Tree Protocol Dvmrp Index Documentation Resources Virtual LANs VLANsThis chapter provides the following examples CLI Create Two Vlans Create Two VLANsWeb Interface Create Two Vlans Web Interface Assign Ports to VLAN2 Select Switching Vlan Advanced Port Pvid ConfigurationAssign Ports to VLAN2 CLI Assign Ports to VLAN2Web Interface Create Three Vlans Select Switching Vlan Basic Vlan ConfigurationCreate Three VLANs CLI Create Three VlansProSafe M4100 and M7100 Managed Switches CLI Assign Ports to VLAN3 Assign Ports to VLAN3Acceptable Frame Types list, select Admit All Web Interface Assign Ports to VLAN3CLI Assign VLAN3 as the Default Vlan for Port 1/0/2 Assign VLAN3 as the Default Vlan for Port 1/0/2CLI Create a MAC-Based Vlan Create a MAC-Based VlanAdd port 1/0/23 to VLAN3 Add all the ports to VLAN3 Select Switching Vlan Advanced Vlan MembershipWeb Interface Assign a MAC-Based Vlan Map MAC 00000A000002 to VLAN3ProSafe M4100 and M7100 Managed Switches CLI Create a Protocol-Based Vlan Create a Protocol-Based VlanMAC Address field, enter 00000A000002 Screen similar to the following displays Enable protocol Vlan group 1 and 2 on the interfaceWeb Interface Create a Protocol-Based Vlan Create the protocol-based Vlan group vlanipxProSafe M4100 and M7100 Managed Switches CLI Create an IP Subnet-Based Vlan Virtual VLANs Create an IP Subnet-Based VlanCreate an IP subnet-based Vlan Assign all the ports to Vlan Web Interface Create an IP Subnet-Based VlanSubnet Mask field, enter Voice VLANsVlan 1 to 4093 field, enter Click Add Create Vlan CLI Configure Voice Vlan and Prioritize Voice TrafficInclude the ports 1/0/1 and 1/0/2 in Vlan Configure Voice Vlan globallyConfigure Voice Vlan mode in the interface 1/0/2 Configure Vlan 10 as the matching criteria for the classProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches Select the 1/0/2 check box Select Switching Vlan Advanced Voice Vlan ConfigurationInterface Mode list, select Vlan ID Select QoS Advanced DiffServ Class ConfigurationClass Name field, enter ClassVoiceVLAN Select QoS DiffServ Advanced Policy Configuration Policy Name field, enter PolicyVoiceVLAN Set the Policy Name field as PolicyVoiceVLAN Click the Policy PolicyVoiceVLANScreen similar to the following displays Click Apply Private VLANs Private VLANsPacket flow within a Private Vlan domain VLANs CLI Assign Private-VLAN Type Primary, Isolated, Community Assign Private-VLAN Types Primary, Isolated, CommunityAssign Vlan 101 as an isolated Vlan CLI Configure Private-VLAN Association Configure Private-VLAN AssociationWeb Interface Configure Private-VLAN Association CLI Configure Private-VLAN Port Mode Promiscuous, Host Configure Private-VLAN Port Mode Promiscuous, HostConfigure port 1/0/1 to promiscuous port mode CLI Configure Private-VLAN Host Ports Configure Private-VLAN Host PortsWeb Interface Assign Private-VLAN Port Host Ports CLI Map Private-VLAN Promiscuous Port Map Private-VLAN Promiscuous PortWeb Interface Map Private-VLAN Promiscuous Port Promiscuous Primary Vlan field, enter Link Aggregation Groups LAGsWeb Interface Create Two LAGs Select Switching LAG LAG ConfigurationCreate Two LAGs CLI Create Two LAGsAdd Ports to LAGs CLI Add Ports to the LAGs Web Interface Add Ports to LAGs By default, the system enables link trap notification Enable Both LAGsCLI Enable Both LAGs Web Interface Enable Both LAGsThis chapter provides the following sections Port RoutingLayer 3 switch configured for port routing Port Routing Port Routing ConfigurationWeb Interface Enable Routing for the Switch Enable Routing for the SwitchEnable Routing for Ports on the Switch CLI Enable Routing for the SwitchIP Address field, enter Subnet Mask field, enter CLI Enable Routing for Ports on the SwitchWeb Interface Enable Routing for Ports on the Switch Routing Mode field, select EnableIP Address field, enter Subnet Mask field, enter Select Routing Routing Table Basic Route Configuration Add a Default RouteCLI Add a Default Route Web Interface Add a Default RouteCLI Add a Static Route Route Configuration screen displaysRoute Type list, select DefaultRoute Add a Static RouteWeb Interface Add a Static Route Vlan Routing Layer 3 switch configured for port routing Web Interface Create Two VLANs Select Switching Vlan Advanced Port Pvid Configuraton Scroll down and select 1/0/1 and 1/0/2 check boxes CLI Set Up Vlan Routing for the VLANs and the Switch Set Up Vlan Routing for the VLANs and the SwitchSelect Routing Vlan Vlan Routing Click Add to save the settings Routing Information Protocol Network with RIP on ports 1/0/2 and 1/0/3 Routing for the SwitchRouting for Ports Web Interface Enable Routing for the PortsRIP for the Switch Web Interface Enable RIP on the Switch CLI Enable RIP on the SwitchRIP for Ports 1/0/2 and 1/0/3 Web Interface Enable RIP for Ports 1/0/2 and 1/0/3 CLI Enable RIP for Ports 1/0/2 and 1/0/3ProSafe M4100 and M7100 Managed Switches Vlan Routing with RIP CLI Configure Vlan Routing with RIP SupportNetgear Switch Config#ip routing Enable RIP for the switch Route preference defaults toIP Address field, enter Network Mask field, enter Web Interface Configure Vlan Routing with RIP SupportNetwork Mask field, enter Open Shortest Path First OspfInter-area Router CLI Configure an Inter-area RouterAssign IP addresses to ports Select Routing IP Advanced IP Interface Configuration Web Interface Configure an Inter-area RouterProSafe M4100 and M7100 Managed Switches RFC 1583 Compatibility field, select Disable Ospf on a Border Router CLI Configure Ospf on a Border RouterSelect Routing IP Basic IP Configuration Web Interface Configure Ospf on a Border RouterSet disable 1583compatibility to prevent a routing loop Enable IP routing on the switchIP Address field, enter Network Mask field, enter Admin Mode field, select Enable ProSafe M4100 and M7100 Managed Switches Router Priority 0 to 255 field, enter Select Routing Ospf Advanced Interface ConfigurationEnable routing on the switch CLI Configure Area 1 as a Stub Area on A1Stub Areas Enable Ospf area 0.0.0.1 on 2/0/19 Configure area 0.0.0.1 as a stub areaSwitch a injects a default route only to area Enable Ospf area 0 on ports 2/0/11Web Interface Configure Area 1 as a Stub Area on A1 IP Address field, enter Network Mask field, enter Select Routing Ospf Advanced Interface Configuration Import Summary LSAs field, select Disable CLI Configure Area 1 as a Stub Area on A2Enable Ospf area 0.0.0.1 on the 1/0/15 Web Interface Configure Area 1 as a Stub Area on A2Set the router ID to IP Address field, enter Network Mask field, enter ProSafe M4100 and M7100 Managed Switches Stop importing summary LSAs to area CLI Configure Area 1 as an nssa AreaConfigure area 0.0.0.1 as an nssa area Nssa AreasEnable area 0.0.0.1 on port 2/0/19 Web Interface Configure Area 1 as an nssa Area on A1IP Address field, enter Network Mask field, enter Subnet Mask field, enter Import Summary LSA’s field, select Disable CLI Configure Area 1 as an nssa Area on A2Enable Ospf area 0.0.0.1 on port 1/0/15 Configure the area 0.0.0.1 as an nssa areaRedistribute the RIP routes into the Ospf Web Interface Configure Area 1 as an nssa Area on A2 Select Routing RIP Advanced Interface Configuration Select Routing Ospf Advanced Nssa Area Configuration Vlan Routing Ospf ProSafe M4100 and M7100 Managed Switches Specify the router ID and enable Ospf for the switch CLI Configure Vlan Routing OspfEnable Ospf for the Vlan and physical router ports Web Interface Configure Vlan Routing OspfIP Address field, enter Network Mask field, enter ProSafe M4100 and M7100 Managed Switches On A1, enable IPv6 unitcast routing on the switch CLI Configure OSPFv3OSPFv3 On A2, enable IPv6 unitcast routing on the switch Enable OSPFv3, and assign 1.1.1.1 to router IDEnable OSPFv3, and assign 2.2.2.2 as the router ID Enable IPv6 unicast routing on the switch Web Interface Configure OSPFv3Select Routing IPv6 Basic IPv6 Global Configuration Click Add to save the settings Enable OSPFv3 on port 1/0/1 Autonomous Flag field, select DisableProSafe M4100 and M7100 Managed Switches Proxy ARP Examples Proxy Address Resolution ProtocolCLI show ip interface CLI ip proxy-arp Web Interface Configure Proxy ARP on a PortVirtual Router Redundancy Protocol VrrpVrrp on a Master Router CLI Configure Vrrp on a Master RouterEnable Vrrp for the switch Enable Vrrp on the portSelect Routing Vrrp Advanced Vrrp Configuration Web Interface Configure Vrrp on a Master RouterPrimary IP Address field, enter Vrrp on a Backup RouterCLI Configure Vrrp on a Backup Router Mode field, select Active Click Apply to save the settingsSet the priority for the port. The default priority is Web Interface Configure Vrrp on a Backup RouterStatus list, select Active Priority 1 to 255, enter Primary IP Address field, enterClick Add to save the settings Access Control Lists MAC ACLs ACL ConfigurationIP ACLs CLI Set Up an IP ACL with Two Rules Set Up an IP ACL with Two RulesApply the ACL to one or more interfaces Select Security ACL IP ACL IP Extended Rules Web Interface Set Up an IP ACL with Two RulesProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches This is a two-step process One-Way Access Using a TCP Flag in an ACLCLIConfigure One-Way Access Using a TCP Flag in an ACL Configure the SwitchProSafe M4100 and M7100 Managed Switches Enter the following commands Configure the GSM7352SCreate an ACL that permits all the IP packets ProSafe M4100 and M7100 Managed Switches Select Routing Vlan Vlan Routing Wizard Configuring the SwitchThis is a two-part process Create Vlan 30 with IP address 192.168.30.1/24IP Address field, enter Network Mask field, enter Select Routing IP Basic IP Configuration Select Routing Routing Table Basic Route Configuration Select Security ACL Advanced IP ACL ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches Create Vlan 40 with IP address 192.168.40.1/24 Configuring the GSM7342S SwitchIP Address field, enter Network Mask field, enter Select Routing Routing Table Basic Route Configuration ProSafe M4100 and M7100 Managed Switches Using ACLs to isolate VLANs on a Layer 3 switch Use ACLs to Configure Isolated VLANs on a Layer 3 SwitchEnter the following CLI commands Create ACL 103 to permit all other traffic IP Address field, enter Network Mask field, enter IP Address field, enter Select Security ACL Advanced IP ACL Select Security ACL Advanced IP Extended Rules Select Security ACL Advanced IP Extended Rules Select Security ACL Advanced IP Extended Rules Select Security ACL Advanced IP Binding Configuration ProSafe M4100 and M7100 Managed Switches Set up a MAC ACL with Two Rules Select Security ACL MAC ACL MAC Rules CLI Set up a MAC ACL with Two RulesWeb Interface Set up a MAC ACL with Two Rules Select Security ACL MAC ACLSelect Security ACL MAC ACL MAC Binding Configuration ACL Mirroring ACL mirroring CLI Configure ACL MirroringView the configuration Web Interface Configure ACL MirroringBind the ACL with interface 1/0/1 ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches CLI Redirect a Traffic Stream ACL RedirectWeb Interface Redirect a Traffic Stream Create an IP access control list with the name redirectHTTPProSafe M4100 and M7100 Managed Switches Redirect Interface list, select 1/0/19 ProSafe M4100 and M7100 Managed Switches Configure IPv6 ACLs Create the access control list with the name ipv6-acl CLI Configure an IPv6 ACLNetgear Switch #show ipv6 access-lists Select Security ACL Advanced IPv6 ACL Web Interface Configure an IPv6 ACLProSafe M4100 and M7100 Managed Switches Select Security ACL Advanced IP Binding Configuration ProSafe M4100 and M7100 Managed Switches CoS Queuing Class of Service QueuingCoS queue mapping uses trusted and untrusted ports CoS Queue MappingTrusted Ports Untrusted PortsTo use the CLI to show CoS trust mode, use these commands CoS Queue ConfigurationShow classofservice Trust CLI Show classofservice TrustWeb Interface Set classofservice Trust Mode Set classofservice Trust ModeWeb Interface Show classofservice Trust CLI Set classofservice Trust ModeGlobal Trust Mode list, select trust dot1p Show classofservice IP-Precedence MappingCLI Show classofservice IP-Precedence Mapping Web Interface Show classofservice ip-precedence MappingIP precedence to queue mapping of the interface is displayed Scheduler Type list, select Weighted Set CoS Trust Mode for an InterfaceInterface Trust Mode list, select trust dot1p Configure Traffic ShapingCLI Set CoS Trust Mode for an Interface Web Interface Set CoS Trust Mode for an InterfaceWeb Interface Configure Traffic Shaping CLI Configure traffic-shapeInterface Shaping Rate 0 to 100 field, enter Click Apply to save the settings Auto VoIP on Differentiated ServicesDiffServ This chapter provides the following examples DiffServ onDiffServ Class B subnet with differentiated servicesEnsure that the DiffServ operation is enabled for the switch CLI Configure DiffServNetgear Switch Config policy-map#exit Class Name field, enter financedept Web Interface Configure DiffServClass Name field, enter marketingdept Source IP Address field, enter Source Mask field, enterSource IP Address field, enter Source Mask field, enter Class Name field, enter developmentdept Policy Selector field, enter internetaccess Member Class list, select testdept Member Class list, select marketingdeptMember Class list, select developmentdept ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches Select QoS CoS Advanced Interface Queue Configuration Policy In list, select internetaccessProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches DiffServ for VoIP CLI Configure DiffServ for VoIPAttach the defined policy to an inbound service interface Web Interface Diffserv for VoIP Select QoS DiffServ Advanced DiffServ ConfigurationClick classvoip Click classef Screen similar to the following displays Select QoS DiffServ Advanced Service Configuration Auto VoIP Auto VoIP CLI Configure Auto VoIPView the auto VoIP information Web Interface Configure Auto-VoIP DiffServ for IPv6 DiffServ for IPv6Associate the previously created class classicmpv6 CLI Configure DiffServ for IPv6Define matching criteria as protocol ICMPv6 Create the policy policyicmpv6Select QoS DiffServ Advanced IPv6 Class Configuration Web Interface Configure DiffServ for IPv6Class Name field, enter classicmpv6 ProSafe M4100 and M7100 Managed Switches Policy Name field, enter policyicmpv6 ProSafe M4100 and M7100 Managed Switches Select the Interface 1/0/1, 1/0/2, and 1/0/3 check boxes Policy Name list, select policyicmpv6Screen similar to the following displays Click Apply Color Conform Policy CLI Configure a Color Conform PolicyCreate classes classvlan and classcolor Apply this policy to port 1/0/13 Web Interface Configure a Color Conform PolicyProSafe M4100 and M7100 Managed Switches Select QoS DiffServ Advanced Class Configuration Class Name field, enter classcolor Policy Name field, enter policyvlan For Conform Action, select the Send radio button Member Class field, enter classvlanCommitted Rates field, enter Committed Burst Size field, enterPolicy Name list, select policyvlan Igmp Igmp Snooping and QuerierIgmp Snooping CLI Enable Igmp SnoopingWeb Interface Enable Igmp Snooping Following example shows how to enable Igmp snoopingCLI Show igmpsnooping Show mac-address-table igmpsnoopingWeb Interface Show igmpsnooping Web Interface Show mac-address-table igmpsnooping CLI Configure the Switch with an External Multicast RouterExternal Multicast Router CLI Show mac-address-table igmpsnoopingCLI Configure the Switch with a Multicast Router Using Vlan Multicast Router Using VlanIgmp Querier Multicast Router field, select EnableCLI Enable Igmp Querier Enable Igmp QuerierWeb Interface Enable Igmp Querier Querier IP Address field, enter Web Interface Show Igmp Querier Status To see the Igmp querier status, use the following commandShow Igmp Querier Status CLI Show Igmp Querier StatusMVR Multicast Vlan Registration MVR switch GSM7212P in this case Configure MVR in Compatible ModeCreate MVlan, VLAN1, VLAN2, and VLAN3 CLI Configure MVR in Compatible ModeConfigure multicast Vlan on the source port Configure the receive portsProSafe M4100 and M7100 Managed Switches Show mvr status Web Interface Configure MVR in Compatible ModeProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches CLI Configure MVR in Dynamic Mode Configure MVR in Dynamic ModeConfigure MVR in dynamic mode Configure the receive ports Show the MVR status Web Interface Configure MVR in Dynamic ModeProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches Port Security Security ManagementCLI Set the Dynamic and Static Limit on Port 1/0/1 Set the Dynamic and Static Limit on Port 1/0/1Click Apply to save the settings Select the Convert Dynamic Address to Static check box Create a Static AddressStatic MAC Address field, enter Protected PortsCLI Create a Static Address Web Interface Create a Static AddressProtected ports Create one Vlan 192 including PC 1 and PCCreate a Dhcp pool to allocated IP addresses to PCs Enable IP routing and configure a default routeEnable a protected port on 1/0/23 and 1/0/24 Create one Vlan 202 connected to the InternetProSafe M4100 and M7100 Managed Switches IP Address field, enter Network Mask field, enter IP Address field, enter Network Mask field, enter Next Hop IP Address field, enter 802.1x Port Security CLI Authenticating dot1x Users by a Radius ServerSelect Routing Basic IP Configuration Web Interface Authenticating dot1x Users by a Radius ServerSelect Routing Advanced IP Interface Configuration IP Address field, enter Subnet Mask field, enter Control Mode list, select Force Authorized Accounting Server Address field, enter Message Authenticator field, select EnableAccounting Mode field, select Enable Click Apply Server Address field, enterGuest Vlan Create a Guest VlanCLI Create a Guest Vlan Enable dot1x and Radius on the switchWeb Interface Create a Guest Vlan Enable the guest Vlan on ports 1/0/1 and 1/0/24Click Apply to save settings Enable dot1x on the switch ProSafe M4100 and M7100 Managed Switches Radius Server IP Address field, enter Assign VLANs Using RadiusNetgear Switch #network protocol none CLI Assign Vlans Using RadiusSet the NAS-IP address for the Radius server Enable dot1x authentication on the switchUse the Radius as the authenticator Set the Radius server IP addressShow the dot1x detail for 1/0/5 Web Interface Assign Vlans Using RadiusAssign the IP address for the Web Management Interface IP Address field, enter Subnet Mask field, enter Control Mode list, select Force Authorized Dynamic ARP Inspection Enable Dhcp snooping globally CLI Configure Dynamic ARP InspectionEnable Dhcp snooping in a Vlan View the Dhcp Snooping Binding table Web Interface Configure Dynamic ARP InspectionEnable ARP inspection in Vlan Select Security Control Dhcp Snooping Global ConfigurationProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches Create an ARP ACL CLI Configure Static MappingConfigure the rule to allow the static client Static MappingConfigure ARP ACL used for Vlan Web Interface Configure Static MappingACL Name list, select ArpFilter Click Apply Screen similar to the following displays Dhcp SnoopingDhcp Snooping CLI Configure Dhcp SnoopingWeb Interface Configure Dhcp Snooping ProSafe M4100 and M7100 Managed Switches CLI Enter Static Binding into the Binding Database Enter Static Binding into the Binding DatabaseEnter the Dhcp snooping static binding Maximum Rate of Dhcp Messages Select Security Control Dhcp Snooping Binding ConfigurationControl the maximum rate of Dhcp messages CLI Configure the Maximum Rate of Dhcp MessagesWeb Interface Configure the Maximum Rate of Dhcp Messages View the rate configuredIP Source Guard IP Source GuardEnable IP Source Guard in interface 1/0/2 ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches MAC Address field, enter Select the Interface 1/0/2 check boxSimple Network Time Protocol Show Sntp CLI OnlyShow sntp Show sntp server Show sntp clientCLI Configure Sntp Configure SntpWeb Interface Configure Sntp Set the Named Sntp Server Set the Time Zone CLI OnlyWeb Interface Set the Named Sntp Server CLI Set the Named Sntp ServerAddress field, enter time-f.netgear.com DNS Server field, enter Traceroute ToolsCLI Traceroute Select Maintenance Troubleshooting TracerouteWeb Interface Traceroute This section provides the following examples Script on Configuration ScriptingScript list and script delete ScriptCreate a Configuration Script Script apply running-config.scrUpload a Configuration Script Create a Pre-Login Banner CLI Only Pre-Login BannerTransfer the file from the PC to the switch using Tftp CLI Specify the Source Mirrored Ports and Destination Probe Port MirroringSelect Monitoring Mirroring Port Mirroring Dual Image Session Mode field, select Enable Click ApplyDestination Port field, enter 1/0/3 CLI Download a Backup Image and Make It Active Remote File Name, enter gsm73xxse-r8v0m0b3.stk Web Interface Download a Backup Image and Make It ActiveSelect Maintenance File Management Dual Image Configuration Server Address Type list, select IPv4This section, the following examples are provided Outbound TelnetCLI show telnet CLI show networkSelect Security Access Telnet Web Interface Configure TelnetCLI transport output telnet Web Interface Configure the Session Timeout CLI Configure the session-limit and session-timeoutMaximum number of sessions field, enter Log Files Syslog SyslogWeb Interface Show Logging Configure the syslogShow Logging CLI Show LoggingSelect Monitoring Logs Console Log Select Monitoring Logs Command LogSelect Monitoring Logs Buffer Logs CLI Show Logging Buffered Show Logging BufferedWeb Interface Show Logging Trap Logs Show Logging TraplogsWeb Interface Show Logging Buffered CLI Show Logging TraplogsCLI Show Logging Hosts Show Logging HostsCLI Configure Logging for the Port Configure Logging for a PortWeb Interface Show Logging Hosts Severity Filter list, select Alert Web Interface Configure Logging for the PortFor Position Only FPO Email AlertingNetgear Switch Config#logging traps Switch Stack Management and Connectivity Switch StacksStack Master Stack Master and Stack MembersStack Member Numbers Stack MembersCompatible Switch Models Install and Power-up a StackStack Member Priority Values Install a Switch Stack Switch FirmwareMigrate Configuration with a Firmware Upgrade Upgrade the FirmwareCode Mismatch Copy Master Firmware to Unit list, select Configure a Stacking Port as an Ethernet PortContinue with the boot of operational code Copy Master Firmware to a Stack Member Web InterfaceOn Switch A, Configure the Stack Port and Reboot CLI Configure a Stacking Port as an Ethernet PortAfter Switch a reboots Configured Stack Mode list, select Ethernet Web Interface Configure a Stacking Port as an Ethernet PortOn Switch B, Configure the stack port and reboot After Switch B rebootsProSafe M4100 and M7100 Managed Switches CLI Stack Switches Using 10G Fiber Stack Switches Using 10G FiberOn Switch A, show the port information Select System Stacking Advanced Stack Port Configuration Web Interface Stack Switches Using 10G FiberReboot Switch B On Switch A, you see the followingAdd, Remove, or Replace a Stack Member Add Switches to an Operating StackConfigured Stack Mode list, select Stack Reboot Unit No. list, select Click ApplyRemove a Switch from the Stack Replace a Stack Member Switch Stack Configuration FilesSwitch Stack Master Scenarios Preconfigure a SwitchRenumber Stack Members Preconfigured Switches Compared to Stack ConfigurationWeb Interface Renumber Stack Members CLI Renumber Stack MembersNow the unit ID of the stacking member is CLI Move the Stack Master to a Different Unit Move the Stack Master to a Different UnitWeb Interface Move the Stack Master to a Different Unit CLI Add a New Community Add a New CommunitySnmp V3 on SFlow on Web Interface Add a New Community Enable Snmp TrapCLI Enable Snmp Trap This example shows how to send Snmp trap to the Snmp serverSnmp Web Interface Enable Snmp TrapClick Apply to save the settings Configure the Snmp V3 user CLI Configure SnmpWeb Interface Configure Snmp Confirm Password field, enterEncryption Key field, enter SFlowSFlow Configure the sFlow receiver IP address View the sampling port configurationsSelect the 1 check box ProSafe M4100 and M7100 Managed Switches View the polling port configurations CLI Configure Time-Based Sampling of Counters with sFlowTime-Based Sampling of Counters with sFlow CLI Specify Two DNS Servers Select System Management DNS DNS ConfigurationSpecify Two DNS Servers Domain Name SystemWeb Interface Manually Add a Host Name and an IP Address Select System Management DNS Host ConfigurationManually Add a Host Name and an IP Address CLI Manually Add a Host Name and an IP AddressIP Address field, enter CLI Configure a Dhcp Server in Dynamic Mode Configure a Dhcp Server in Dynamic ModeDhcp Server Web Interface Configure a Dhcp Server in Dynamic Mode Select System Services Dhcp Server Dhcp Pool Configuration Configure a Dhcp Reservation Web Interface Configure a Dhcp Reservation CLI Configure a Dhcp ReservationProSafe M4100 and M7100 Managed Switches DHCPv6 Server DHCPv6 stateful IPv6 address assignment DHCPv6 Server Enable DHCPv6 service on port 1/0/9 CLI Configure DHCPv6Enable IPv6 routing Create a DHCPv6 pool and enable Dhcp serviceSelect Routing IPv6 Advanced Interface Configuration Web Interface Configure an Inter-area RouterProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches Prefix field, enter 000100011540144f0000004daad0 CLI Configure Stateless DNS Server Configure Stateless DHCPv6 ServerEnable IPv6 Dhcp server on interface 2/0/21 Web Interface Configure Stateless DHCPv6 Server Select System Services Dhcp Server DHCPv6 Pool Configuration ProSafe M4100 and M7100 Managed Switches Double VLANs Double VLANs and Private Vlan GroupsThis chapter includes the following examples Web Interface Enable a Double Vlan CLI Enable a Double VlanCreate static Vlan ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches Private Vlan Groups Create a private group in isolated mode Create a private group in community modeCLI Create a Private Vlan Group Add 1/0/16 and 1/0/7 to the private group Web Interface Create a Private Vlan GroupAcceptable Frame Type list, select Admit All ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches CLI Configure Classic STP 802.1d Configure Classic STP 802.1dSpanning Tree Protocol Web Interface Configure Classic STP 802.1d Select Switching STP CST Port Configuration Configure Rapid STP 802.1wCLI Configure Rapid STP 802.1w Web Interface Configure Rapid STP 802.1wCLI Configure Multiple STP 802.1s Configure Multiple STP 802.1sWeb Interface Configure Multiple STP 802.1s ProSafe M4100 and M7100 Managed Switches Tunnel In4 tuennel between two switches TunnelCLI Create a Tunnel Configure Switch GSM7328S1Configure Switch GSM7328S2 Web Interface Create a Tunnel Click Apply Assign an IPv6 address to the tunnel Source Address field, enter Destination Address field, enterConfigure Switch GSM7328S2 IP Address field, enter Subnet Mask field, enter ProSafe M4100 and M7100 Managed Switches Create an IPv6 Routing Interface IPv6 Interface ConfigurationCLI Create an IPv6 Routing Interface Assign an IPv6 address to interface 1/0/1 Web Interface Create an IPv6 Routing Interface Select Routing IPv6 Advanced Prefix ConfigurationCreate an IPv6 Network Interface EUI64 field, select False Click Add CLI Configure the IPv6 Network InterfaceWeb Interface Configure the IPv6 Network Interface IPv6 Prefix/Prefix Length field, enter 200111/64CLI Create an IPv6 Routing Vlan Create an IPv6 Routing VlanIPv6 Gateway field, enter Netgear Switch Config#ipv6 forwarding Web Interface Create an IPv6 Vlan Routing Interface Select Routing IPv6 Advanced Interface Configuration ProSafe M4100 and M7100 Managed Switches CLI Configure DHCPv6 mode on routing interface Configure DHCPv6 Mode on the Routing InterfaceEnable DHCPv6 on the interface 1/0/23 Show the ipv6 address assigned from 1/0/23 Web Interface Configure DHCPv6 mode on routing interfaceProSafe M4100 and M7100 Managed Switches Protocol-Independent-Multicast PIM-Dense Mode PIM-DM PIM-Sparse Mode PIM-SMPIM-SMon Configuring and Using PIM-DM Enable IP multicast forwarding on the switch CLI Configure PIM-DMPIM-DM on Switch a Enable pimdm on the switchEnable PIM-DM on the interface PIM-DM on Switch BPIM-DM on Switch D PIM-DM on Switch CEnable Igmp on the switch PIM-DM builds the multicast routes table on each switch Enable Igmp on 1/0/24Web Interface Configure PIM-DM IP Address field, enter Subnet Mask field, enter Select Routing RIP Advanced Interface Configuration ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches PIM-DM on Switch B Select Routing RIP Advanced Interface Configuration Select Routing Multicast PIM Global Configuration PIM-DM on Switch C IP Address field, enter Subnet Mask field, enter Select Routing RIP Advanced Interface Configuration Select Routing Multicast PIM Global Configuration PIM-DM on Switch D IP Address field, enter Subnet Mask field, enter IP Address field, enter Subnet Mask field, enter ProSafe M4100 and M7100 Managed Switches Select Routing Multicast PIM Interface Configuration Select Routing Multicast Igmp Interface Configuration ProSafe M4100 and M7100 Managed Switches PIM-SM Enable RIP to build a unicast IP routing table CLI Configure PIM-SMPIM-SM on Switch a Enable PIM-SM on the switchNetgear Switch#configure PIM-SM on Switch BPIM-SM on Switch C PIM-SM on Switch D Pimsm Web Interface Configure PIM-SMIP Address field, enter Subnet Mask field, enter IP Address field, enter Subnet Mask field, enter Select Routing RIP Advanced Interface Configuration ProSafe M4100 and M7100 Managed Switches PIM-SM on Switch B IP Address field, enter Subnet Mask field, enter Select Routing Multicast Global Configuration Select Routing Multicast PIM Interface Configuration Group Mask field, enter Click Add Set up the BSR candidate configurationPIM-SM on Switch C IP address, enter Subnet Mask field, enter Select Routing Multicast Global Configuration Select Routing Multicast PIM Interface Configuration Select Routing Multicast PIM BSR Candidate Configuration Click Add BSR Candidate ConfigurationPIM-SM on Switch D IP Address field, enter Subnet Mask field, enter Select Routing RIP Advanced Interface Configuration Select Routing Multicast Global Configuration Select Routing Multicast PIM Interface Configuration Click Add Set up BSR Candidate configuration Select Routing Multicast Igmp Interface Configuration ProSafe M4100 and M7100 Managed Switches Dhcp L2 Relay Dhcp L2 Relay and L3 RelayThis chapter includes the following sections Enable the Option 82 Remote ID field CLI Enable Dhcp L2 RelayEnable the Dhcp L2 relay on the switch Enable the Option 82 Circuit ID fieldTrust packets with option 82 received on port 1/0/6 Web Interface Enable Dhcp L2 RelayEnable Dhcp L2 relay on port 1/0/5 Enable Dhcp L2 relay on port 1/0/6ProSafe M4100 and M7100 Managed Switches Remote ID String field, enter rmtid 82 Option Trust Mode field, select Enable CLI Configure a Dhcp Server Configure the Dhcp Server SwitchDhcp L3 Relay Create a Dhcp pool Web Interface Configure a Dhcp ServerSelect System Services Dhcp Server Dhcp Server Configuration IP Range From field, enter IP Range To field, enter Select System Services Dhcp Server Dhcp Pool Configuration CLI Configure a Dhcp L3 Relay Configure a Dhcp L3 SwitchCreate a routing interface and enable RIP on it Create a routing interface connecting to the client Web Interface Configure a Dhcp L3 RelaySubnet Mask field, enter Select Routing RIP Advanced Route Redistribution IP Address Configuration Method field, enter ManualRedistribute Mode field, select Enable UDP Port field, enter dhcp Click Add to save the settings Multicast Listener Discovery Configure MLD on MLD Snooping onCLI Configure MLD Configure MLDMLD on Switch a Enable IPV6 PIM-DM on the switch MLD on Switch BEnable OSPFv3 to build a unicast route table Enable IPV6 MLD on the switchEnable MLD on interface 1/0/24 Web Interface Configure MLDSelect Routing IPv6 Advanced Interface Configuration ProSafe M4100 and M7100 Managed Switches Select Routing OSPFv3 Advanced Interface Configuration Select Routing IPv6 Multicast IPv6 PIM Global Configuration MLD on Switch B Select Routing IPv6 Advanced Interface Configuration ProSafe M4100 and M7100 Managed Switches Select Routing OSPFv3 Advanced Interface Configuration Select Routing IPv6 Multicast IPv6PIM Global Configuration Select Routing IPv6 Multicast MLD Global Configuration MLD Snooping Enable MLD snooping on Vlan CLI Configure MLD SnoopingWeb Interface Configure MLD Snooping ProSafe M4100 and M7100 Managed Switches ProSafe M4100 and M7100 Managed Switches Distance Vector Multicast Routing Protocol DvmrpDvrmp on Switch a CLI Configure DvmrpCreate routing interfaces 1/0/1, 1/0/13, and 1/0/21 255 Enable Dvmrp protocol on the switchEnable Dvmrp mode on interfaceS 1/0/13 and 1/0/20 Dvrmp on Switch BCreate routing ports 1/0/13 and 1/0/20 192.168.2.1 Enable Igmp protocol on the switch Dvrmp on Switch CEnable IP Dvmrp protocol on the switch Enable Dvmrp mode on interfaces 1/0/3, 1/0/11, and 1/0/24Enable Igmp mode on the interface 1/0/24 Dvmrp on Switch a Web Interface Configure DvmrpRouting Mode field, select Enable Select Routing Multicast Dvmrp Interface Configuration Dvmrp on Switch B IP Address field, enter Subnet Mask field, enter Select Routing Multicast Dvmrp Interface Configuration Dvmrp on Switch C IP Address field, enter Subnet Mask field, enter Select Routing Multicast Dvmrp Global Configuration Click Apply to save the settings Enable Igmp on the switch Select Enable in the Interface Mode fieldSelect Routing Multicast Igmp Global Configuration ProSafe M4100 and M7100 Managed Switches Captive Portal Enable captive portal on the switch Captive Portal ConfigurationEnable Captive Portal CLI Enable Captive PortalSelect Security Control Captive Portal CP Configuration Web Interface Enable Captive PortalEnable captive portal instance Enable captive portal instance 1 on port 1/0/1Client Access, Authentication, and Control Web Interface Block a Captive Portal Instance Local Authorization, Create Users and GroupsBlock a Captive Portal Instance CLI Block a Captive Portal InstanceWeb Interface Create Users and Groups CLI Create Users and GroupsGroup field, select Click Add Remote Authorization Radius User ConfigurationWeb Interface Configure Radius as the Verification Mode CLI Configure Radius as the Verification ModeSSL Certificates Default-RADIUS-ServerShows an example of iSCSI implementation ISCSICLI Enable iSCSI Awareness with Vlan Priority Tag Enable iSCSI Awareness with Vlan Priority TagWeb Interface Enable iSCSI Awareness with Vlan Priority Tag Select Switching iSCSI Basic Enable iSCSI Awareness with DscpCLI Enable iSCSI Awareness with Dscp Web Interface Enable iSCSI Awareness with DscpIP Address, enter Set the iSCSI Target PortCLI Set iSCSI Target Port Web Interface Set iSCSI Target PortCLI Show iSCSI Sessions Show iSCSI SessionsWeb Interface Show iSCSI Sessions ProSafe M4100 and M7100 Managed Switches Numerics IndexIndex SFlow 373, 374