P240 - Security Camera BirdDog - Free user manual and instructions

Product Type	Security Camera
Brand	BirdDog
Model	P240
Power Supply	Power over Ethernet (PoE) IEEE 802.3at/af
Network Interface	10/100/1000 Mbps Ethernet with AV profile support
Resolution	Up to 4K (3840x2160) at 30fps
Lens	Fixed focal length, 2.8mm or 4mm optional
Field of View	Horizontal: 103° (2.8mm), 78° (4mm)
Night Vision	Up to 30m with IR LEDs
Compression	H.265, H.264, MJPEG
Dimensions (W x H x D)	Approx. 105 x 85 x 85 mm
Weight	Approx. 0.45 kg
Operating Temperature	-20°C to 50°C
Storage Temperature	-30°C to 60°C
Protection Rating	IP67 (outdoor rated)
Audio Support	Built-in microphone and speaker, two-way audio
Storage	MicroSD card slot (up to 256GB), NVR or cloud
Video Analytics	Motion detection, line crossing, intrusion detection
Compliance	CE, FCC, RoHS
Guarantee	3 years

Frequently Asked Questions - P240 BirdDog

What is the power requirement for the BirdDog P240 camera?

The BirdDog P240 supports Power over Ethernet (PoE) IEEE 802.3af/at, so it can be powered directly through the Ethernet cable without a separate power adapter.

Can the P240 camera be used outdoors?

Yes, the camera has an IP67 protection rating, making it dust-tight and protected against water immersion, suitable for outdoor use.

What is the maximum resolution of the P240?

The camera supports up to 4K resolution (3840x2160) at 30 frames per second, delivering high-definition video.

Does the P240 have night vision capability?

Yes, it is equipped with IR LEDs providing night vision up to 30 meters in complete darkness.

How do I connect the camera to my network?

Connect the camera using a standard Ethernet cable (Cat5e or better) to a PoE switch or injector. The camera supports VLAN and AV profile configurations for optimized streaming.

What video compression formats does the P240 support?

It supports H.265, H.264, and MJPEG compression, allowing efficient bandwidth usage and storage.

Can I store video locally on the camera?

Yes, the camera has a MicroSD card slot supporting up to 256GB for local recording. It also supports NVR and cloud storage.

Does the camera support two-way audio?

Yes, it includes a built-in microphone and speaker for two-way audio communication, useful for intercom or security scenarios.

What video analytics features are available?

The P240 offers built-in analytics such as motion detection, line crossing, and intrusion detection to enhance security monitoring.

How do I factory reset the BirdDog P240?

To reset, press and hold the reset button (usually inside a pinhole) for about 10 seconds while the camera is powered on. The camera will restore to factory defaults and reboot.

USER MANUAL P240 BirdDog

AV Line of Fully Managed Switches M4250 Series

NETGEAR, Inc.

350 E. Plumeria Drive October 2022

San Jose, CA 95134, USA202-12148

Support and Community

Visit_netgear.com/support to get your questions answered and access the latest downloads.

You can also check out our NETGEAR Community for helpful advice at community.netgear.com.

Regulatory and Legal

(If this product is sold in Canada, you can access this document in Canadian https://www.netgear.com/support/download/)

For regulatory compliance information including the EU Declaration of Conformity, https://www.netgear.com/about/regulatory/.

See the regulatory compliance document before connecting the power supply.

For NETGEAR's Privacy Policy, visit https://www.netgear.com/about/privacy-policy.

By using this device, you are agreeing to NETGEAR's Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.

Do not use this device outdoors. The PoE source is intended for intra building only.

Applicable to 6 GHz devices only: Only use the device indoors. The operation devices is prohibited on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while ying above 10,000. Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control communications with unmanned aircraft systems.

Trademarks

© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEA. Any non-NETGEAR trademarks are used for reference purposes only.

Revision History

Number		CommentsPublish DatePublication Part
	October 2022202	We added new templates for Shure, and support for Extron NAV and Wyrestorm products to Overview of precongured AV prole templates on page 15.
		We changed Supported Switches on page 9.May 2022202-12148-05
	December 2021	We added the following chapters:Multicast on page 41Port Conguration on page 56
		We added the following sections in existing chapters:Log in to the AV UI using the management interface default IP address on page 10Log in to the AV UI over the OOB port on page 11About audio video bridging on page 16About PTP residency time stamping on page 17Congure PTP residency time stamping on page 29Congure the IGMP querier for a network prole on page 30Display the total PoE consumption for the switch on page 55Management interface IP address on page 78, including Set a xed IP address for the management interface on page 78and Enable the DHCP client for the management interface on page 79OOB port IP address on page 80, including Set a xed IP address for the OOB port on page 80 and Enable the DHCP client for the OOB port on page 81Display or clear the port statistics on page 94Access the CLI through the terminal in the AV UI on page 99
		We changed the following sections:Overview of precongured AV prole templates on page 15Set the STP network redundancy for the switch on page 82
		We made other minor changes throughout the manual.
	March 2021202-1	We added the following chapters:Security on page 62Diagnostics and Troubleshooting on page 91
		We added the following sections to existing chapters:Auto-Trunk overview on page 27Enable or disable Auto-Trunks on page 29Auto-LAG overview on page 34Enable or disable Auto-LAGs on page 35Congure the hash mode for Auto-LAGs on page 36Save the running conguration on page 73Download the running conguration on page 74Restore the conguration on page 75.Set the STP network redundancy for the switch on page 82Display the status of the ports and switch on page 86Display the neighboring devices on page 90
		We changed the following sections:Supported Switches on page 9Use an AV prole template to conjure and assign a network prole on page 19Create a custom AV prole template on page 23Manage PoE interface settings on page 47Save the running conguration on page 73
	November 2020	We added a DHCP server option to Use an AV prole template to conjure and assign a network prole on page 19.
		First publication.September 2020202-12148-01

Contents

Chapter 1 Getting Started with the AV UI

Supported Switches....9

Available publications....9

AV local browser UI overview....9

Use a web browser to log in to the AV UI....10

Log in to the AV UI using the management interface default IP address....10

Log in to the AV UI over the OOB port....11

Log in to the AV UI with a known IP address....12

Save the running conguration to the startup conguration......12

Register your switch....12

Chapter 2 Audio-Video Prole Templates and Network Proles

Overview of precongured AV prole templates....15

About audio video bridging....16

About PTP residency time stamping....17

Network proles....18

Change the Default VLAN prole....18

Use an AV prole template to congregate and assign a network profile....19

Change a network prole....21

Remove a network prole....22

Custom AV prole templates....23

Create a custom AV prole template....23

Change a custom AV prole template....25

Remove a custom AV prole template....27

Auto-Trunk overview....27

Enable or disable Auto-Trunks....29

Congure PTP residency time stamping....29

Congure the IGMP querier for a network prole....30

Chapter 3 Link Aggregation

Auto-LAG overview....34

Enable or disable Auto-LAGs....35

Congure the hash mode for Auto-LAGs....36

Create a LAG....37

AV Line of Fully Managed Switches M4250 Series

Change a LAG....38

Remove a LAG....39

Chapter 4 Multicast

Congure the multicast mode for one or more ports....42

Add or remove blocked multicast address ranges......43

Display the multicast groups in your network....44

Chapter 5 Power over Ethernet

Manage PoE interface settings....47

Disable PoE for one or more interfaces....50

PoE schedules....51

Create a PoE schedule....51

Change a PoE schedule....54

Remove a PoE schedule....54

Display the total PoE consumption for the switch....55

Chapter 6 Port Conguration

Administratively enable or disable one or more interfaces......57

Add a description to one or more interfaces....58

Set the frame size for one or more interfaces....58

Congure ow control for one or more interfaces....59

Display detailed information about the physical ports and LAGs.61

Chapter 7 Security

Port authentication....63

Manage port authentication for individual ports....63

Manage 802.1X authentication....64

Remove port authentication from individual ports......65

RADIUS servers....66

Congure the basic settings for a RADIUS server....66

Remove a RADIUS server....67

Chapter 8 Manage and monitor the switch

Licenses....70

Add a license online....70

Add a license ofine....71

Delete a license....72

Update the rmware....72

Startup conguration....73

Save the running conguration....73

Download the running conguration....74

Restore the conguration....75

Date and time settings....75

AV Line of Fully Managed Switches M4250 Series

Manually set the date and time....76

Congure one or more SNTP servers....76

Add a system name....77

Management interface IP address....78

Set a xed IP address for the management interface....78

Enable the DHCP client for the management interface.....79

OOB port IP address....80

Set a xed IP address for the OOB port....80

Enable the DHCP client for the OOB port....81

Set the STP network redundancy for the switch....82

Restart the switch from the AV UI....84

Reset the switch to factory default settings....84

Manually control the fans....85

Display the status of the ports and switch....86

Display the neighboring devices....90

Chapter 9 Diagnostics and Troubleshooting

Manage the switch log, console log, and command log....92

Display or download the message log....93

Display or clear the port statistics....94

Send a ping, traceroute, or DNS lookup request to an IP address o

host name....96

Perform a cable test....97

Congure port mirroring....98

Access the CLI through the terminal in the AV UI....99

Download diagnostics les for technical support....100

1

Getting Started with the AV UI

This user manual is for the AV Line of Fully Managed Switches M4250 Series all M4250 switch models.

This chapter provides an overview of how you can use your switch and access audio-video (AV) local browser user interface (UI), in short AV UI.

The chapter contains the following sections:

• Supported Switches
• Available publications
• AV local browser UI overview
• Use a web browser to log in to the AV UI
- Save the running conguration to the startup conguration
- Register your switch

Note: For more information about the topics that are covered in this manual, support website at netgear.com/support/.

Note: Firmware updates with new features and bug xes are made available from to time at netgear.com/support/download/. You can check for and download new rmware manually. If the features or behavior of your product does not match v described in this guide, you might need to update your rmware.

Supported Switches

This AV user manual is for the NETGEAR AV Line of Fully Managed Switches Series models. For a list of M4250 switch models, visit kb.netgear.com/000064904

Available publications

You can download the following publications for the AV Line of Fully Managed M4250 Series by visiting_netgear.com/support/download.

• Installation guide
  • Hardware installation guide
• Main user manual
  • Audio-video user manual (this manual)
• Software administration manual
• CLI command reference manual

AV local browser UI overview

Your switch contains an embedded web server and management software for mar and monitoring the switch. The switch functions as a simple switch without the management software. However, you can use the management software to concur many advanced features that can improve AV flows, switch efficiency, and overall performance.

The switch software includes a set of comprehensive management features for conguring and monitoring the switch through one of the following methods:

• Audio-video local browser user interface (AV UI), either over an Ethernet network port or over the out-of-band (OOB) port (also referred to as the service point).
• Main local browser user interface (main UI), either over an Ethernet network over the OOB port.
• Simple Network Management Protocol (SNMP)
• Command-line interface (CLI)

Each of the standards-based management methods allows you to configure and in the components of the switch. The method you use to manage the system dep your network size and requirements, and on your preference.

This manual describes how to use the audio-video (AV) local browser user inter to manage and monitor the switch. We abbreviate the audio-video local browser the AV UI.

The AV UI is a web-based management tool that lets you conjure and manage audio-video and other types of network profiles remotely using a standard web book.

Note: To congregate all available switch features, including VLANs, QoS, and ACLs, use the main UI.

Use a web browser to log in to the

If this is the rst time that you log in to the switch and you must use the of the switch, see the information in the installation guide. You can use a web to access the switch and log in. You must be able to ping the IP address or management interface or out-of-band (OOB) port from your computer for web access to be available.

Note: The rst time that you log in as an admin user to either the AV UI or no password is required (that is, the password is blank). After you log in for you are required to specify a local device password that you must use each s time that you log in to either the AV UI or the main UI. (Using the main U the password again.)

Log in to the AV UI using the management interface IP address

Any Ethernet interface can function as the management interface.

To use the default IP address of the management interface to access the s over the AV UI:

1. Prepare your computer with a static IP address in the 169.254.0.0 subnet with mask 255.255.0.0.

For example, use 169.254.100.201 for your computer.

1. Connect an Ethernet cable from an Ethernet port on your computer to an E network port on the switch.

2. Launch a web browser.

3. Enter http://169.254.100.100 in the web browser address eld:

The login page displays.

1. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

Log in to the AV UI over the OOB port

You can congregate network information on the IPv4 service port, also referred to out-of-band (OOB) port. The OOB port is a dedicated Ethernet port for out-of-band management of the switch. Trafc on this port is segregated from operational netrafc on the switch ports and cannot be switched or routed to the operational by default, no IP address is set for the OOB port, but its DHCP client is either the port can receive an IP address from a DHCP server in your network.

If the OOB port does not receive an IP address from a DHCP server in your the IP address for the port is set to 192.168.0.239 with 255.255.255.0 as the mask. The same occurs if you connect the OOB port directly to a computer at the switch.

For information about setting a xed IP address for the OOB port, see Set a address for the OOB port on page 80.

To use IP address 192.168.0.239 of the OOB port to access the switch ov UI:

1. Prepare your computer with a static IP address in the 192.168.0.0 subnet with mask 255.255.0.0.
   For example, use 192.168.0.201 and 255.255.255.0 for your computer.
2. Connect an Ethernet cable from an Ethernet port on your computer to the on the switch.
3. Reboot the switch so that the OOB port is set to its default IP address.
4. Launch a web browser.
5. Enter http://192.168.0.239 in the web browser address eld:

The login page displays.

1. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

Log in to the AV UI with a known IP address

If you did not assign a static IP address to the switch but let a DHCP serve network assign an IP address to switch, determine the IP address by accessing server or by using an IP scanner utility.

The procedures in this manual assume that you know the IP address of your

To use a known IP address to access the switch over the AV UI:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

Save the running configuration to the sta conguration

After you make changes on a page of the AV UI and click the Apply button (windows, the Save button), your changes are saved for the current session but retained when you restart the switch. That is, your running conguration is not so the startup conguration (the startup-cong le), which means that it is not yet permanently saved.

For information about saving your current changes (your running conguration) to startup conguration, see Save the running conguration on page 73.

Register your switch

To qualify for product updates and product warranty, we encourage you to register your product.

Registration conrms that your email alerts work, lowers technical support resolution time, and ensures your shipping address accuracy. We would also like to incorporate your feedback into future product development. We never sell or rent your email and you can opt out of communications.

To register your switch with NETGEAR:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. At the top of page, from the Question/Help menu, select Register.

The NETGEAR Account Login page displays. If the page does not display, vi following website:

my.netgear.com/registration/login.aspx

1. Enter your NETGEAR account email address and password and click the NET Sign In button.

If you did not yet create a NETGEAR account, click the Create an account the directions onscreen to create an account, and then register the switch with NETGEAR email address and password.

2

Audio-Video Profile Templates and Network Proles

The switch provides precongured audio-video (AV) prole templates that you can congregate and assign to switch ports and VLANs, thereby creating network proles.

You can also set up your own AV prole templates.

These are the essential differences between an AV prole template and a network prole:

• AV prole template: A precongured or custom template with QoS, multicast, PTP settings, or a combination of these settings, that you can apply to multi-network proles.
• Network prole: An AV prole template that you congured and assigned to or more switch ports, to a VLAN, and as an option, to a specific IP address

The chapter contains the following sections:

• Overview of precongured AV prole templates
- About audio video bridging
- About PTP residency time stamping
• Network proles
- Custom AV prole templates
• Auto-Trunk overview
- Enable or disable Auto-Trunks
• Congure PTP residency time stamping
- Congure the IGMP querier for a network prole

Overview of precongured AV prole templates

An AV prole template integrates NETGEAR proprietary settings, allowing you to optimize specific audio and video environments. You can use an AV prole template to create one or multiple network proles. For example, you could use the same prole template to set up three network proles based on a location within a bone network prole for the lobby, one for the theater, and one for the patio.

The switch provides the following precongured AV prole templates:

• Audio AES67: Use this template to connect the switch to AES67 audio IP and their controller.
• Audio Video AVB: Use this template to connect the switch to IP audio dev support Audio Video Bridging (AVB).
• Audio Dante: Use this template to connect the switch to Dante audio device their controller.
• Audio Q-SYS: Use this template to connect the switch to IP audio Q-SYS d and their controller.
• Data: Use this template to connect the switch to streaming ACN (sACN), Art mobile ad hoc network (MANET), and other network devices as well as to co
• Lighting: Use this template to connect the switch to streaming ACN (sACN), and MANET lighting devices.
• Shure Converged Audio and Control Network: Use this template to connect switch to Shure devices requiring audio and control traffic on a single VLAN. Compatible with Dante, AES67, QSYS, and Biamp Dante devices.
• Shure Split Audio and Control Network: Use this template to connect the to Shure devices requiring separation of audio and control traffic into different Compatible with Dante, AES67, QSYS, and Biamp Dante devices.

• Video: Use this template to connect the switch to IP video devices and their when audio can be sent and received using another VLAN tag in another p simultaneously.
  This template can support devices such as Crestron DM NVX systems, AMX products, ZeeVee products, Aurora Multimedia products, Kramer products, Atlona products, products that support Libav, Visionary Solutions products, Wyrestorm products, Extron NAV products, Dante video products, and products that comp with standardization by the SDVoE Alliance.

• Video NDI4: Use this template to connect the switch to video devices and that support Network Device Interface (NDI) version 4 with multi-TCP (mTCP) transport.

• Video NDI5 with Dante, Q-Sys or AES67 audio: Use this template to connect switch to video devices and cameras that support NDI version 5 with Reliable Datagram Protocol (RUDP). Audio Dante, Q-SYS, or AES67 is supported at the time in the same VLAN.
• Video with AES67 audio: Use this template to connect the switch to IP video and their controllers when AES67 audio is supported in the same VLAN. This template can support devices such as Crestron DM NVX systems, AMX products, ZeeVee products, Aurora Multimedia products, Kramer products, Atlona products, products that support Libav, Visionary Solutions products, Wyrestorm products, Extron NAV products, Dante video products, and products that comp with standardization by the SDVoE Alliance.
• Video with Dante audio: Use this template to connect the switch to IP video and their controllers when Dante audio is supported in the same VLAN. This template can support devices such as Crestron DM NVX systems, AMX products, ZeeVee products, Aurora Multimedia products, Kramer products, Atlona products, products that support Libav, Visionary Solutions products, Wyrestorm products, Extron NAV products, Dante video products, and products that comp with standardization by the SDVoE Alliance.
• Video with Q-SYS audio: Use this template to connect the switch to IP video and their controllers when Q-SYS audio is supported in the same VLAN. This template can support devices such as Crestron DM NVX systems, AMX products, ZeeVee products, Aurora Multimedia products, Kramer products, Atlona products, products that support Libav, Visionary Solutions products, Wyrestorm products, Extron NAV products, Dante video products, and products that comp with standardization by the SDVoE Alliance.

About audio video bridging

802.1AS timing and synchronization is an audio video bridging (AVB) feature. AV referred to as 802.1AS) requires a license. For information about purchasing a I contact NETGEAR or your local NETGEAR reseller.

The IEEE 802.1AS standard species the protocol and procedures used to ensure the QoS requirements are guaranteed for time-sensitive applications, such as audio and video.

The IEEE 1588 Precision Time Protocol (PTP) forms the basis of the IEEE 802.1 standard. PTP species a precise clock synchronization protocol that relies on time-stamped packets.

Note: Another PTP feature that the switch supports, PTP residency time stamping, is incompatible with 802.1AS on the same switch. For more information, see About residency time stamping on page 17. If you must support both AVB and PTP time stamping in your network, we recommend that you use two separate switc

About PTP residency time stamping

Precision Time Protocol (PTP, IEEE 1588) is a protocol that enables precise synchronization of clocks with a sub-microsecond accuracy across a packet-based network. PTP lets network devices of different precision and resolution synchronize a grandmaster clock through an exchange of packets across the network.

The switch supports a PTP end-to-end transparent clock that is used in the PTP time stamping feature, which, by default, is enabled globally on the switch. You congure PTP residency time stamping globally only (see Congure PTP residency stamping on page 29).

Note: Another feature that the switch supports, 802.1AS (audio video bridging, c AVB), is incompatible with PTP residency time stamping on the same switch. Fo information, see About audio video bridging on page 16 and the information by you must support both PTP residency time stamping and AVB in your network, recommend that you use two separate switches.

Note how PTP residency time stamping and AVB function on the switch:

• Mutual exclusion between PTP residency time stamping and AVB: If you a network profile that is incompatible with PTP residency time stamping, such as AVB, PTP residency time stamping is globally disabled.
  • AVB takes precedence over PTP residency time stamping:

- If you add a network prole that uses AVB (such as Audio AVB), you can manually enable PTP residency time stamping.

- If PTP residency time stamping is enabled for a network profile (such as Dante prole) on one port and then you enable a network prole that use (such as Audio AVB) on another port, PTP residency time stamping is autor disabled.

- PTP residency time stamping can be automatically reenabled: By default, P-residency time stamping is globally enabled but you can disable it globally. disable it and no network prole is using AVB, and then you add a network

that can use PTP residency time stamping (such as Audio Dante), PTP reside stamping is automatically and globally reenabled.

- PTP residency time stamping is not a strict requirement: Whether you need use PTP residency time stamping depends on your network setup rather than network prole that you use. Therefore, PTP residency time stamping is not a requirement for the network proles that can use it, so you can manually dis residency time stamping (see Congure PTP residency time stamping on page This exibility lets you, for example, use Audio AVB with Audio Dante on the switch.

Network proles

You can use either a precongured AV prole template (for example, Dante Audio a custom AV profile template that you created to set up one or multiple networks)

Change the Default VLAN prole

The default network prole is the Default VLAN prole, which uses the Data AV template and VLAN 1. All ports are untagged members of VLAN 1. You can use AV prole template and the member ports. For each port, you can either remove or export from VLAN 1 or change the port to a tagged port.

To change the Default VLAN prole:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

4. Select Congure > Network Proles.

The Network Proles page displays.

1. In the Congured Proles table, to the right of the Default VLAN, click the 3 icon and select Edit.

The Edit Prole Default window displays.

1. Select the ports to which the prole must apply.

By default, all ports are selected as untagged ports for the prole. That is, is marked with a green icon.

To congregate ports, do the following:

• Change a port to a tagged port: Click the port once. The port is mar T icon (for tagged).

• Remove a port from the prole: Click the port twice to remove it from prole. The port is not marked with a green icon or T icon.

• To change the AV prole template, from the Prole Template menu, select an template.

The default AV prole template is the Data template.

1. To change the color for the Default VLAN for visual representation, click the the Color eld, and select a color.
2. Click the Apply button.

Your settings are saved. The window closes. The Network Proles page display again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Use an AV prole template to congregate and assign a network prole

When you congregate a network prole, you must give the prole a name and ass to a VLAN. You can also assign a specific IP address to the prole and add a visual representation.

To use an AV prole template to congure and assign a network prole:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

4. Select Congure > Network Proles.

The Network Proles page displays.

1. In the Prole Templates table, to the right of the AV prole template that yo to use, do one of the following:

2. Precongured AV prole template: Click the gear icon.

3. Custom AV prole template: Click the 3 dots icon and select Congure.

The Prole Congure window displays.

1. Select the ports to add them to or exclude them from the VLAN to which prole must apply:

2. Untagged port: Click the port once. The port is added as an untagged is marked with a green icon. To untag all ports, click the Untag all but

3. Tagged port: Click the port twice. The port is added as a tagged port marked with a T icon (for tagged). To tag all ports, click the Tag all k

4. Excluded port: Do not click the port. The port is excluded and is not with a green icon or T icon. To exclude all ports, click the Remove all

5. In the Prole Name eld, enter a name for the prole.

Note: You cannot change the selection from the Prole Template menu.

1. From the VLAN ID menu, select the VLAN ID to which the template must
2. To add a color to the network prole for visual representation, click the box Color eld, and select a color.
3. To assign a specific IP address to the network prole, and as an option, use network prole as a DHCP server, do the following:

a. Turn on the Edit VLAN Routing / DHCP Server toggle so that it displays and is positioned to the right.

The IP address menu and elds become available.

b. From the VLAN IP Settings menu, select Static or DHCP client.

By default, None is selected. If you select Static, you must specify the IF settings manually and you can also congregate the network prole as a DHCP server. (See the following step.)

If you select DHCP client, the network prole functions as a DHCP client DHCP server in your network assigns an IP address to the network prole.

c. If you select Static from the VLAN IP Settings menu, specify the IP address and subnet mask in the VLAN IP Address and Subnet Mask elds.

d. To set up the network prole as a DHCP server, from the DHCP Server select DHCP Server, and specify the following settings:

• Default Router: The IP address of the router for the DHCP pool. By this IP address is the same address as the VLAN IP address, but you it.
• DHCP Server Pool Start. The start IP address of the DHCP server pool default, this IP address is derived from the VLAN IP address and submit but you can change it.
• DHCP Server Pool End. The end IP address of the DHCP server pool default, this IP address is derived from the VLAN IP address and subn but you can change it.
  • DNS Server 1: The IP address of the primary DNS server.
  • DNS Server 2: As an option, the IP address of the secondary DNS si
• Search Domain: The domain name for the DHCP server. This name is a fully qualified domain name (FQDN).

• Lease Time: The lease time of the IP addresses that the DHCP server. The default is 240 minutes.

• Click the Apply button.

Your settings are saved. The window closes. The Network Proles page display again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Change a network prole

You can change an existing network prole.

To change a network prole:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Network Proles.

The Network Proles page displays.

1. In the Congured Proles table, to the right of the network prole that you w change, click the 3 dots icon and select Edit.

The Edit Prole window displays.

1. Change the settings as needed.

For more information about the settings, Use an AV prole template to congu and assign a network prole on page 19.

You cannot change the VLAN ID and AV prole template selection.

1. Click the Apply button.

Your settings are saved. The window closes. The Network Proles page display again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Remove a network prole

You can remove an existing network prole that you no longer need.

To remove a network prole:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Network Proles.

The Network Proles page displays.

1. In the Congured Proles table, to the right of the network prole that you remove, click the 3 dots icon and select Delete.

A conrmation window displays.

1. Click the Delete button.

The network prole is removed. The window closes. The Network Proles page displays again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Custom AV prole templates

You can create your own AV prole template. After you do so, you can use t AV prole template to set up one or multiple network proles (see Use an AV template to congure and assign a network prole on page 19).

The advantage of a custom AV profile template is that you can decide whether multicast, PTP, and QoS. If you enable QoS, you can specify either a DSCP o conguration.

Create a custom AV prole template

Before you create a custom AV prole template, consider the following:

• Does the template require multicast to be enabled?
• Does the template require Precision Time Protocol (PTP) to be enabled?
• Does the template require QoS to be enabled, and if so, in a DSCP or C conguration?

To add one or more QoS congrurations, you need knowledge about conguring QoS in a network.

Note: You can enable PTP and multicast for a custom AV prole template but cannot conjure the PTP and multicast settings in the AV UI. For DSCP and C can conjure limited settings in the AV UI. To conjure PTP and multicast setting all DSCP and CoS settings that are available on the switch, use the main UI For more information, see the main user manual or the CLI command reference both of which you can download by visiting netgear.com/support/download.

To create a custom AV prole template:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter

your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Network Proles.

The Network Proles page displays.

1. At the top right of the Prole Templates table, click the Create AV Template

The Create AV Proles window displays.

1. In the Prole Type eld, enter a name for the type of service that the temp provide.

2. In the Prole Description eld, enter a description for the template.

3. To enable multicast, turn on the Multicast toggle so that it displays green positioned to the right.

By default, multicast is disabled and the toggle displays gray and is positioned the left.

1. To enable PTP, turn the PTP toggle so that it displays green and is positive right.

By default, PTP is disabled and the toggle displays gray and is positioned t

1. To add a QoS congruration to the template, do the following:

a. To the right of the Quality of Service section, click the Add QoS link.

b. The xed selection from the QoS Type menu is DSCP, but this setting also includes CoS.

• In an incoming IP packet, the switch applies QoS according to the info in the DiffServ Code Point (DSCP) eld.
• In an incoming Ethernet frame, the switch applies QoS according to the information in the Class of Service (CoS) eld.

You must select a value from the Code Point menu, a value from the Priority menu, and a selection from the Scheduler Type menu.

c. From the Code Point menu, select a value from 0 to 63.

The DSCP value that you select allows an incoming IP packet to be map the egress queue that you select from the Priority menu in the following

d. From the Priority menu, select the priority value for the egress queue from 0 to number 7.

The priority goes from low (0) to high (7). For example, trafc with a prior of 0 is for most data trafc and is sent using best effort. Trafc with a priority, such as 6 or 7, might be time-sensitive trafc, such as voice or The priority value for the egress queue applies to either DSCP or CoS.

e. From the Scheduler Type menu, select one of the following types for tra which CoS is applied:

• Weighted: The switch uses the weighted round robin (WRR) algorithm to associate a weight with each queue.
• Strict: The switch services traffic with the highest priority on a queue rs

By default, the queue management type is taildrop, irrespective of your se from the Scheduler Type menu. You can change the queue management to weighted random early detection (WRED) by accessing the main UI.

f. In the Quality of Service section, click the Save button.

The QoS conguration is saved.

1. To add another QoS conguration to the template, repeat the previous step.

You can add multiple QoS congrurations to a single AV prole template.

1. Click the Save button.

Your settings are saved. The window closes. The Network Proles page display again.

1. To save the settings to the running conguration, at the top of the page, c

Save icon or text.

Change a custom AV prole template

You can change an existing custom AV prole template. You cannot change a precongured AV prole template.

To change a custom AV prole template:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter

your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Network Proles.

The Network Proles page displays.

1. In the Prole Templates table, to the right of the custom AV prole template you want to change, click the 3 dots icon and select Edit.

The Edit AV Proles window displays.

1. Change the settings as needed.

For more information about the settings, Create a custom AV prole template page 23.

You cannot change the name of the AV prole template.

1. To add, change, or delete a QoS congruration in the AV prole template, do of the following:

- Add a QoS congregation: Do the following:

a. To the right of the Quality of Service section, click the Add QoS link

b. Add the QoS conguration.

For more information about the settings, Create a custom AV prole terr on page 23.

c. In the Quality of Service section, click the Save button. The QoS congruration is saved.

- Change a QoS congregation: Do the following:

a. In the Quality of Service section, next to the QoS congruration that you to change, click the 3 dots icon, and select Edit.

b. Change the QoS conguration as needed.

For more information about the settings, Create a custom AV prole terr on page 23.

c. In the Quality of Service section, click the Save button. The QoS conguration is saved.

- Delete a QoS congregation: Do the following:

a. In the Quality of Service section, next to the QoS congruration that you to delete, click the 3 dots icon, and select Delete.

The QoS conguration is deleted.

b. In the Quality of Service section, click the Save button.

The QoS conguration is saved.

1. Click the Save button.

Your settings are saved. The window closes. The Network Proles page display again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Remove a custom AV prole template

You can remove an existing custom AV prole template that you no longer nee cannot remove a precongured AV prole template.

To remove a custom AV prole template:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

4. Select Congure > Network Proles.

The Network Proles page displays.

1. In the Prole Templates table, to the right of the custom AV prole template you want to remove, click the 3 dots icon and select Delete.

A conrmation window displays.

1. Click the Delete button.

The AV prole template is removed. The window closes. The Network Proles displays again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Auto-Trunk overview

Auto-trunk is a feature that lets the switch automatically enable Trunk mode on physical links and LAG interfaces between partner devices. A trunk can carry all VLANs. By default, the Auto-Trunk feature is enabled on the switch.

If the switch automatically congures a port as a trunk (that is, an Auto-Trunk), on the switch become part of the trunk, allowing automatic conguration of all on the switch and on the partner device with which the trunk is established.

Before the switch congures an Auto-Trunk, the switch rst detects the physical lir with the partner device that also supports the Auto-Trunk feature, and then autor congures the ports that are connected and capable of forming a trunk at both

A trunk carries multiple VLANs and accepts both tagged and untagged packets. A connection between the switch and a partner device such as a router, access or another switch functions as a trunk.

For the switch to form an Auto-Trunk with a partner device, the following are

• The Auto-Trunk feature must be supported and globally enabled on the switch the partner device.
  (On all M4250 switch models, the Auto-Trunk feature is enabled by default.)
• The interconnected ports on both the switch and the partner device must be (On all M4250 switch models, all ports are enabled by default.)
• LLDP must be enabled on the interconnected ports on both the switch and partner device.
  (On all M4250 switch models, LLDP is enabled by default on all ports.)
• The interconnected ports on the switch and the partner device must be in t switch port mode, which is the General mode. If the ports are in the Acce or already in the Trunk mode, an Auto-Trunk cannot be formed on an Auto

For an Auto-Trunk, the PVID is automatically set to the default VLAN. If you change the PVID for an Auto-Trunk, change the default VLAN.

The Auto-Trunk feature functions together with the Auto-LAG feature (see Auto-LA overview on page 34). After an Auto-LAG is formed, the switch automatically ap trunk mode (that is, an Auto-Trunk) to the LAG at both ends. In other words, Auto-LAG is formed, the mode for the ports that participate in an Auto-LAG is automatically changed from the default switch port mode to the trunk port mode the Auto-LAG then becomes an Auto-Trunk.

After a port or an Auto-LAG becomes an Auto-Trunk, all VLANs on the switch part of the trunk, and all VLANs on the switch and the partner device can be automatically.

Enable or disable Auto-Trunks

By default, the Auto-Trunk feature is globally enabled but you can globally disa

To enable or disable Auto-Trunks:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Network Proles.

The Network Proles page displays.

1. Below the graphical display of the switch, do one of the following:

- Disable Auto-Trunks: Do the following:

a. Turn off the toggle so that it displays gray and is positioned to the A pop-up window displays a warning.

b. Click the Yes button.

Your settings are saved.

- Enable Auto-Trunks: Turn on the toggle so that it displays green and is p to the right.

Your settings are saved automatically.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Congure PTP residency time stamping

Depending on the network prole that is enabled, you can disable or enable the residency time stamping manually, which then applies globally.

If a network profile that uses AVB is enabled (for example, a network profile t on Audio AVB), PTP residency time stamping is automatically disabled and you manually enable it.

To globally enable or disable PTP residency time stamping:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Network Proles.

The Network Proles page displays.

1. Below the graphical display of the switch, do one of the following:

- Disable PTP residency time stamping: Turn off the toggle so that it disp gray and is positioned to the left.

- Enable PTP residency time stamping: Turn on the toggle so that it disp green and is positioned to the right. By default, PTP residency time stamping is enabled.

Your settings are saved automatically.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Congure the IGMP querier for a network prole

IGMP snooping requires that one central switch or router in a VLAN periodically all end-devices on the network to announce their multicast memberships. This ce device is the IGMP querier. The IGMP query responses, known as IGMP reports, the switch updated with the current multicast group membership on a port-by-po network prole basis. If the switch does not receive updated membership information in a timely fashion, it stops forwarding multicasts to the port where the end of located.

Each network prole can function as a querier in the VLAN in which it operates IGMP querier for the Default network prole with VLAN 1 is enabled by default. Can congregate an IGMP querier for use with a network prole in another VLAN 1.

To congregate the IGMP querier for a network prole:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Network Proles.

The Network Proles page displays.

1. In the Congured Proles table, to the right of the network prole that you w change, click the 3 dots icon and select Querier.

The Edit default querier prole window displays.

1. Congure the settings for the querier:

- Election Participate: Select to enable or disable the querier election partici mode for the network prole":

- Enabled: Turn on the toggle so that it displays green and is positioned right. This setting indicates that the querier for the network profile particular in querier election, in which the lowest numbered IP address operates a querier in the VLAN. Any other querier moves to the non-querier state.

- Disabled: Turn off the toggle so that it displays gray and is positioned left. This setting indicates that if the querier for the network prole dete another querier of the same version in the VLAN, the snooping querier to the non-querier state.

Except for the Default network prole, the election participation is disabled default, and the toggle displays gray and is positioned to the left

- Querier VLAN address: Specify the IP address to be used as the source in periodic IGMP queries that are sent on the VLAN.

By default, the operational state is QUERIER, indicating that the network prole function as a querier.

1. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

3

Link Aggregation

Link aggregation groups (LAGs), which are also known as port-channels, allow yo combine multiple full-duplex Ethernet links into a single logical link. Network dev treat the aggregation as if it were a single link, which increases fault tolerance provides load sharing.

You can create a LAG that includes two or more ports as members and applies to a network prole. A LAG can be static or dynamic, and you can congregate as a trunk. The switch can support multiple LAGs.

The chapter contains the following sections:

• Auto-LAG overview
- Enable or disable Auto-LAGs
- Congure the hash mode for Auto-LAGs
- Create a LAG
- Change a LAG
- Remove a LAG

For more information about the LAG options of the switch, see the main user which you can download by visiting netgear.com/support/download.

Auto-LAG overview

An Auto-LAG is a LAG that forms automatically between two devices that support Auto-LAG feature. An Auto-LAG is a dynamic Layer 2 LAG that is based on the Aggregation Control Protocol (LACP).

Note: A LAG is also referred to as a port channel or an EtherChannel.

The switch can detect the physical links with a partner device and automatically a LAG (that is, an Auto-LAG) on interconnected and capable ports at both end switch can form one Auto-LAG only with each partner device.

The Auto-LAG feature functions together with the Auto-Trunk feature, which must be supported and enabled on the partner device with which the LAG is formed by an Auto-LAG is formed, the switch automatically applies trunk mode (that is, an Auto-Trunk) to the LAG at both ends. In other words, after an Auto-LAG is formed for the ports that participate in an Auto-LAG changes from the default mode to the trunk port mode. For more information about the Auto-Trunk feature, Auto-Trunk overview on page 27.

For the switch to form an Auto-LAG with a partner switch, the following are r

• Both the Auto-LAG and Auto-Trunk features must be supported and globally er on the switch and the partner device.
  (On all M4250 switch models, the Auto-LAG and Auto-Trunk features are enable by default.)
• At least two links must be established between the switch and the partner and these links must support the same speed and duplex mode.
• The links cannot be members of a manually congured static or dynamic LAG
• LLDP must be enabled on the interconnected ports on the switch and the device.
  (On all M4250 switch models, LLDP is enabled by default on all ports.)
• The interconnected ports on the switch and the partner device must be in t switch port mode, which is the General mode. If the ports are in the Acce or already in the Trunk mode, an Auto-Trunk cannot be formed on the Aut

An Auto-LAG can form with up to eight interfaces as members. Interfaces are automatically selected for the Auto-LAG based on whether they are up and available and on the following conditions:

• The interface is not already manually congured as a member of a LAG.
• The interface is not manually congured as a trunk port or an access port. the interface must be a general interface.

Note: The switch can support multiple static and dynamic LAGs, but with each device, the switch can support a single Auto-LAG only.

Enable or disable Auto-LAGs

By default, the Auto-LAG feature is globally enabled but you can globally disab

To enable or disable Auto-LAGs:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Link Aggregation.

The Link Aggregation Group page displays.

1. Below the graphical display of the switch, the one of the following:

- Disable Auto-LAGs: Do the following:

a. Turn off the toggle so that it displays gray and is positioned to the A pop-up window displays a warning.

b. Click the Yes button. Your settings are saved.

- Enable Auto-LAGs: Turn on the toggle so that it displays green and is to the right.

Your settings are saved automatically. By default, the Auto-LAG feature is en

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Congure the hash mode for Auto-LAGs

By default, the Auto-LAG feature is enabled and uses the Layer 2; Destination which auto-congures a LAG based on the destination MAC address, VLAN, Ether and incoming port in the packet. You can change the hash mode (that is, the balancing mode) for the Auto-LAG feature.

The switch balances traffic on a LAG by selecting one of the links in the character which packets must be transmitted. The switch selects the link by creating a bit pattern from selected elds in a packet and associating that pattern with a part link. The hash mode determines which elds in a packet the switch selects.

To change the hash mode for the Auto-LAGs:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Link Aggregation.

The Link Aggregation Group page displays.

1. Below the graphical display of the switch, from the Auto-LAG Hash menu, so the hash mode for the Auto-LAGs:

2. Layer 2; Source: Based on the source MAC address, VLAN, EtherType, an incoming port associated with the packet.

3. Layer 2; Destination: Based on the destination MAC address, VLAN, EtherT and incoming port in the packet. This is the default mode.
4. Layer 2; Source + Destination: Based on the source and destination MAC addresses, VLAN, EtherType, and incoming port in the packet.
5. Layer 3+4; Source: Based on the source IP address and source TCP or eld in the packet.
6. Layer 3+4; Destination: Based on the destination IP address and destinatic TCP or UDP port eld in the packet.
7. Layer 3+4; Source + Destination: Based on the source and destination IP addresses and source and destination TCP or UDP port eld in the packet

Your settings are saved automatically.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Create a LAG

Although the maximum number of LAGs that you can create and add is eight, number of LAGs is limited by the number of ports that are available.

When you create a LAG, we recommend that you congregate a network prole on LAG rather than on a physical interface. By default, the network prole for a L default prole with VLAN 1.

To create a LAG:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Link Aggregation.

The Link Aggregation Group page displays.

1. Below the graphical display of the switch, click the Create LAG link.

The Create Link Aggregation Group window displays.

1. Select two or more ports that must become members of the LAG by clickir individual ports.
2. In the LAG Name eld, specify a name for the LAG.

3. From the Hash menu, select the hash mode for the LAG:

4. Layer 2; Source: Based on the source MAC address, VLAN, EtherType, an incoming port associated with the packet.

5. Layer 2; Destination: Based on the destination MAC address, VLAN, EtherT and incoming port in the packet. This is the default mode.

6. Layer 2; Source + Destination: Based on the source and destination MAC addresses, VLAN, EtherType, and incoming port in the packet.

7. Layer 3+4; Source: Based on the source IP address and source TCP or eld in the packet.

8. Layer 3+4; Destination: Based on the destination IP address and destinatic TCP or UDP port eld in the packet.
9. Layer 3+4; Source + Destination: Based on the source and destination IP addresses and source and destination TCP or UDP port eld in the packet

The switch balances traffic on a LAG by selecting one of the links in the c which packets must be transmitted. The switch selects the link by creating a pattern from selected elds in a packet and associating that pattern with a p link. The hash mode determines which elds in a packet the switch selects.

1. From the LAG ID menu, select an ID from 1 to 8.
2. To create a static LAG instead of a dynamic LAG, turn on the Static toggle displays green and is positioned to the right.

When you create a static LAG, the member ports do not transmit LACPDUs, LACPDUs that the member ports receive are dropped.

1. Click the Apply button.

Your settings are saved. The window closes. The Link Aggregation Group page displays again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Change a LAG

You can change an existing LAG.

To change a LAG:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Link Aggregation.

The Link Aggregation Group page displays.

1. In the Link Aggregation Group table, to the right of the LAG that you war click the 3 dots icon and select Edit.

The Edit Link Aggregation Group window displays.

1. Change the settings as needed.

For more information about the settings, Create a LAG on page 37.

You cannot change the LAG ID.

1. Click the Apply button.

Your settings are saved. The window closes. The Link Aggregation Group page displays again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Remove a LAG

You can remove an existing LAG that you no longer need.

To remove a LAG:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Link Aggregation.

The Link Aggregation Group page displays.

1. In the Link Aggregation Group table, to the right of the LAG that you want click the 3 dots icon and select Delete.

A conrmation window displays.

1. Click the Delete button.

The LAG is removed. The window closes. The Link Aggregation Group page again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

4

Multicast

Communication from point to multipoint is called multicasting. The source host (p) transmits a message to a group of zero or more hosts (multipoint) that are id a single IPv4 destination address. Although the task can be accomplished by se unicast (point-to-point) messages to each of the destination hosts, multicasting is preferred method for this type of transmission.

A multicast message is delivered to all members of its destination host group same best-efforts reliability as regular unicast IPv4 messages. The message is not guaranteed to arrive intact at all members of the destination group or in the relative to other messages.

Multicast is best suited for video and audio traffic requiring multicast packet control optimal operation. Multicast for IPv4 includes support for IGMPv1, IGMPv2, and IGMPv3. The chapter contains the following sections:

• Conjure the multicast mode for one or more ports
• Add or remove blocked multicast address ranges
  • Display the multicast groups in your network

Congure the multicast mode for one or more ports

By default, if the switch detects multicast trafc on a port, it allows the trafc of You can also force the switch to use one or more specific ports to process m trafc. As another option, you can block multicast trafc from selected networks o or more ports.

Multicast IP trafc is trafc that is destined to a host group. Host groups are id by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255. If you to block multicast trafc on one or more ports, you can select one, several, or multicast address ranges.

To congregate the multicast mode for one or more ports:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Multicast.

The Multicast page displays.

1. Select the port or ports to which the settings must apply by clicking individual, to select all ports, select the Select All Ports check box.
2. From the Multicast Mode menu, select the multicast mode:

- Default: Multicast traffic is allowed on the selected port or ports based on protocols that the switch detects.

This is the default mode.

• Force Multicast: Multicast trafc is forced through the selected port or port

• Block Multicast: Multicast traffic from the networks that you select (see the step) is blocked on the selected port or ports.

• If you select Block Multicast from the Multicast Mode menu in the previous step, in this step select one or more multicast address ranges to be blocked from Multicast Block Addresses menu:

- Individual multicast address ranges: Click the Network Ranges text (not the check box) and select one or more check boxes for individual network ra - All multicast network ranges: Select the Network Ranges check box.

The switch does not let trafc from a blocked address pass through.

1. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Add or remove blocked multicast address ranges

Multicast host groups are identified by class D IP addresses, which range from 239.255.255.255. You can block one, several, or all of these multicast addresses which you then can apply to one or more ports. The switch does not let trade blocked address pass through.

Note: If you want remove a blocked multicast range from a port, we recommend you set the multicast mode for the port to default mode rather than remove the for the multicast range. For more information, see Congure the multicast mode one or more ports on page 42.

To add or remove blocked multicast address ranges:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

1. Select Congure > Multicast.

The Multicast page displays.

1. From the Multicast Block Addresses menu, select one or more ranges to k unblock:

2. Individual multicast address ranges: Click the Network Ranges text (not the check box) and select or clear one or more check boxes for individual ranges.

3. All multicast network ranges: Select or clear the Network Ranges check box.

4. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Display the multicast groups in your netv

The switch automatically detects the multicast groups in your network.

To display the multicast groups in your network:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Multicast.

The Multicast page displays.

The Multicast Groups table displays detailed information about each multicast g in your network.

	DescriptionLegend
Forwarding Port	The port on which multicast is enabled and on which multicast trafc is forward in the network.
Network Prole (VLAN)	The network prole to which the port is assigned (see Change the Default VL, prole on page 18 or Use an AV prole template to congure and assign a n prole on page 19). By default, the port is assigned to the Data network pro VLAN 1.
	The IP address of the network device that is subscribed to receive multicast
Subscriber MAC Address	The MAC address of the network device that is subscribed to receive multicast trafc.
	The IP address of the device from which the multicast trafc originates.Multicast
	The MAC address of the device from which the multicast trafc originates.Multica
	The IGMP version that is being used (IGMPv1, IGMPv2, or IGMPv3).Type

5

Power over Ethernet

You can manage the Power over Ethernet (PoE) options for the interfaces.

The chapter contains the following sections:

• Manage PoE interface settings
• Disable PoE for one or more interfaces
• PoE schedules
  • Display the total PoE consumption for the switch

For more information about the PoE management options of the switch, see the user manual, which you can download by visiting netgear.com/support/download.

Manage PoE interface settings

The Power over Ethernet (PoE) models support 8, 24, or 40 PoE+ or PoE++ with the capacities and budgets that are described in the following table.

Table 1. PoE interface capacities and budgets

	Switch PoE	BudgetPort	CapacityPoE	PortsMoc
	125W30W8	PoE+	(802.3at)M4250-10G2F-PoE+
	240W30W8	PoE+	(802.3at)M4250-10G2XF-PoE+
	720W90W8	PoE++	(802.3bt)M4250-10G2XF-PoE
	300W30W24	PoE+	(802.3at)M4250-26G4F-PoE+
	480W30W24	PoE+	(802.3at)M4250-26G4XF-PoE+
	1440W (with 2 power supplies)			90W24 PoE+
	480W30W40	PoE+	(802.3at)M4250-40G8F-PoE+
	960W30W40	PoE+	(802.3at)M4250-40G8XF-PoE+
	2880W (with 3 power supplies)			90W40 PoE+

Supplied power is prioritized according to the port order, up to the total power of the device. For example, on an 8-port model, port 1 receives the highest I while port 8 is relegated to the lowest PoE priority.

If the power requirements for attached powered devices (PDs) exceed the total budget of the switch, the PoE power to the device on the highest-numbered a port is disabled to make sure that the devices connected to the higher-priority, lower-numbered PoE ports are supported rst.

To manage the PoE interface settings:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Power over Ethernet.

The Power over Ethernet (PoE) page displays.

1. In the upper right of the page, above the graphical display of the switch, PoE Interface Settings link.

The PoE Interface Settings window displays. By default, PoE is enabled for int

1. Select the port or ports to which the settings must apply by clicking individual, to select all ports, select the Select All PoE Ports check box.

2. Either leave the default PoE mode (802.3at for PoE+ models; 802.3bt for PoE models), or, depending on your network devices and requirements, select one the following modes from the PoE Standard menu:

- 802.3af: The port is powered in and limited to the IEEE 802.3af mode. requires IEEE 802.3at does not receive power if the port functions in IEEE mode.

- Legacy: The port is powered using high-inrush current, which is used by PDs that require more than 15W to power up.

- Pre-802.3at: The port is initially powered in the IEEE 802.3af mode and, 75 msec pass, is switched to the high power IEEE 802.3at mode. Select if the PD does not perform Layer 2 classification or if the switch performs Layer 1 classification.

- 802.3at: The port is powered in the IEEE 802.3at mode and is backward compatible with IEEE 802.3af. The 802.3at mode is the default mode. In 1 mode, if the switch detects that the attached PD requests more power than 802.3af but is not an IEEE 802.3at Class 4 device, the PD does not receive from the switch.

For PoE+ models, 802.3at is the default setting.

- Pre-802.3bt: The PoE++ port supports Class 4 devices that use 4-pair PoE to receive power higher than 30W but that are not compliant with IEEE The port also supports the IEEE 802.3at and IEEE 802.3af modes.

- 802.3bt-Type3: The PoE++ port supports the IEEE 802.3bt Type 3 mode, IEEE 802.3at mode, and the IEEE 802.3af mode.

- 802.3bt: The PoE++ port is powered in the IEEE 802.3bt mode and is I compatible with IEEE 802.3at and IEEE 802.3af. In this mode, if the switch that the attached PD requests more power than IEEE 802.3at but is not 802.3bt device, the PD does not receive power from the switch.

For PoE++ models, 802.3bt is the default setting.

1. Either leave the default detection type (4ptdot3af), or, from the Detection Tyl menu, select how the port detects the attached PD:

2. 4ptdot3af: The port performs a 4-point resistive detection. This is the defa setting.

3. 4ptdot3af+legacy: The port performs a 4-point resistive detection, and if required, continues with legacy detection.
   • legacy: The port performs legacy detection.

4. Either leave the default priority type (Low), or, from the Priority Type menu, the priority for the port in relation to other ports if the total power that t capable of delivering exceeds the total power budget:

5. Low: Low priority. This is the default setting.
   • Medium: Medium priority.
   • High: High priority.
   • Critical: Critical priority.

6. Either leave the default power limit type (Class), or, from the Power Limit menu, select how the port controls the maximum power that it can deliver:

- None: For PoE+ (802.3at) ports, the port draws up to Class 0 maximum in low power mode. In high power mode, the following applies:

- PoE+ (802.3at) ports: The port draws up to Class 4 maximum power.

- PoE++ (802.3bt) ports: The port draws up to Class 8 maximum power.

- Class: The port power limit is equal to the class of the attached PD. The default setting. The upper limit is the power that a port can deliver to class is detected based on the PD that is attached to the port, and the applies:

- PoE+ (802.3at) ports: Possible values are from Class 0 to Class 4.

- PoE++ (802.3bt) ports: Possible values are from Class 0 to Class 8.

- User: The port power limit is equal to the value that you specify in the Limit (Watts) eld.

1. If you select User from the Power Limit Type, enter the maximum power (in W) that the port can deliver in the Power Limit (Watts) eld.

The power value (in W) that you can enter depends on the physical capacit port (which depends on the switch model) and the selection from the PoE menu:

• 802.3af: The value that you can enter ranges from 3.0W to 18.0W.
• Legacy: The value that you can enter ranges from 3.0W to 18.0W.
• Pre-802.3at: The value that you can enter ranges from 3.0W to 32.0W.
• 802.3at: The value that you can enter ranges from 3.0W to 32.0W.
- Pre-802.3bt: For PoE++ models, the value that you can enter ranges from to 60.0W.
- 802.3bt-Type3: For PoE++ models, the value that you can enter ranges from 3.0W to 60.0W.
- 802.3bt: For PoE++ models, the value that you can enter ranges from 3.99.9W.

1. If you set up one or more PoE schedules (see PoE schedules on page 51), PoE Schedule menu, you can select a schedule.

The default is None, so that no schedule applies.

1. Click the Apply button.

Your settings are saved. The window closes. The Power over Ethernet (PoE) displays again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Disable PoE for one or more interfaces

By default, PoE is enabled for all interfaces. You can disable PoE for one or interfaces.

To disable PoE for one or more interfaces:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter
   your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i

The Overview page displays.

1. Select Congure > Power over Ethernet.

The Power over Ethernet (PoE) page displays.

1. In the upper right of the page, above the graphical display of the switch, PoE Interface Settings link.

The PoE Interface Settings window displays.

1. Select the port or ports to for which PoE must be disabled.

2. Turn off the Enable PoE toggle so that it displays gray and is positioned

3. Click the Apply button.

Your settings are saved. The window closes. The Power over Ethernet (PoE) displays again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

PoE schedules

You can denote multiple PoE schedules (each with a unique name) that you can Power delivery to attached PDs.

After you create a PoE schedule, you can associate it with one or more PoE Manage PoE interface settings on page 47). You can use a separate timer scheme each PoE port.

After you associate a PoE schedule with a PoE port, the start date and time PoE port to stop delivering power, and the stop date and time enable the PoE start delivering power.

Create a PoE schedule

The maximum number of PoE schedules that you can create and add is 100.

To create a PoE schedule:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Power over Ethernet.

The Power over Ethernet (PoE) page displays.

1. Below the graphical display of the switch, click the Create Schedule link. The Create New PoE Schedule window displays.

2. Select the port or ports to which the settings must apply by clicking individual, to select all ports, select the Select All PoE Ports check box. You can also set up and save the schedule and add the port or ports lat

3. In the Schedule Name eld, enter a name for the schedule.

4. From the Recurrence Type menu, select the frequency of the recurrence, con the period during which the schedule is effective (and, for weekly or monthly recurrences, during which the schedule can be either active or inactive), and on the settings that are associated with your selection from the Recurrence Type

- Daily: The schedule works with daily recurrence. This is the default setting must set the start and end dates and the start and end times that apply each day.

The period that the schedule is effective is dened by the start and end (see the following steps). During this period, the schedule can be active or Do the following:

a. To specify the schedule start date, select a date from the Start Date
b. To specify the schedule end date, select a date from the End Date of
c. To let the schedule be active all day, turn on the All Day toggle so displays green and is positioned to the right, or specify specific times by continuing with the following steps.

d. To specify the schedule start time, select a time from the Start Time

e. To specify the schedule end time, select a time from End Time menu.

- Weekly: The schedule works with weekly recurrence. The elds in the wind adjust. You must select one or more days of the week, set the start and set the start and end times that apply during the days that the sch effective.

Do the following:

a. Select one or more buttons for the days that the schedule must be a week during the period that the schedule is effective.

The days do not need to be consecutive. The period that the schedule effective is defined by the start and end dates (see the following steps) this period, the schedule can be active or inactive.

b. To specify the schedule start date, select a date from the Start Date

c. To specify the schedule end date, select a date from the End Date c

d. To let the schedule be active all day, turn on the All Day toggle si displays green and is positioned to the right, or specify specific times k continuing with the following steps.

e. To specify the schedule start time, select a time from the Start Time

f. To specify the schedule end time, select a time from End Time menu.

- Monthly: The schedule works with monthly recurrence. The elds in the wir adjust. You must select the day in a month that the schedule becomes at the start and end dates, and set the start and end times that apply due to days that the schedule is effective.

Do the following:

a. Click the Select one for the recurring schedule eld and select the da month that the schedule must become active every month during the p that the schedule is effective.

The period that the schedule is effective is dened by the start and end (see the following steps). During this period, the schedule can be active inactive.

b. To specify the schedule start date, select a date from the Start Date

c. To specify the schedule end date, select a date from the End Date c

d. To let the schedule be active all day, turn on the All Day toggle si displays green and is positioned to the right, or specify speci times b continuing with the following steps.

e. To specify the schedule start time, select a time from the Start Time

f. To specify the schedule end time, select a time from End Time menu.

1. Click the Apply button.

Your settings are saved. The window closes. The Power over Ethernet (PoE) displays again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Change a PoE schedule

You can change an existing PoE schedule.

To change a PoE schedule:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Power over Ethernet.

The Power over Ethernet (PoE) page displays.

1. In the PoE Schedule table, to the right of the PoE schedule that you want click the 3 dots icon and select Edit. The Edit PoE schedule window displays.

2. Change the settings as needed.

For more information about the settings, Create a PoE schedule on page 51 You cannot change the name of the PoE schedule.

1. Click the Apply button.

Your settings are saved. The window closes. The Power over Ethernet (PoE) displays again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Remove a PoE schedule

You can remove an existing PoE schedule that you no longer need.

To remove a PoE schedule:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter

your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Power over Ethernet.

The Power over Ethernet (PoE) page displays.

1. In the PoE Schedule table, to the right of the PoE schedule that you want click the 3 dots icon and select Delete.

A conrmation window displays.

1. Click the Delete button.

The PoE schedule is removed. The window closes. The Power over Ethernet page displays again.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Display the total PoE consumption for the switch

You can display the total PoE power consumption for the switch. The xed PoE for the switch is also displayed.

To display the total PoE power consumption for the switch:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

1. Select Congure > Power over Ethernet.

The Power over Ethernet (PoE) page displays.

The bar below the graphical display shows the total PoE power consumption switch, with the maximum PoE budget stated to the right of the bar.

6

Port Conguration

For the physical ports and LAGs on the switch, you can display the settings at the administrative mode of a port or LAG (both of which are enabled by defa frame size for a port, and the ow control for a port. You can also add port

Note: In this chapter, we use the term interface to indicate both physical ports and link aggregation interfaces..

The chapter contains the following sections:

• Administratively enable or disable one or more interfaces
• Add a description to one or more interfaces
• Set the frame size for one or more interfaces
• Congure ow control for one or more interfaces
  • Display detailed information about the physical ports and LAGs

Administratively enable or disable one or more interfaces

By default, all ports and LAGs are administratively enabled. You can manually d a port or LAG, but this can also occur automatically if a fault or other condi After a port or LAG is manually or automatically disabled, you can reenable th LAG.

To administratively enable or disable one or more ports or LAGs:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Port conguration.

The Port Conguration page displays.

1. Click the Port Interface Settings link:

The Interface Settings page displays.

1. Select the one or more ports to which the settings must apply by clicking ports or, to select all ports, select the Select All Ports check box.

If you congured LAGs (see Link Aggregation on page 33), you can also sell or more LAGs.

1. Do one of the following:

2. Disable the selected interfaces: Turn off the Enable Port toggle so that it displays gray and is positioned to the left.

3. Enable the selected interfaces: Turn on the Enable Port toggle so that it displays green and is positioned to the right.

4. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Add a description to one or more inter

You can add a description for a port or LAG. This description is for information only.

To add a description for one or more ports or LAGs:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Port conguration.

The Port Conguration page displays.

1. Click the Port Interface Settings link:

The Interface Settings page displays.

1. Select the one or more ports to which the settings must apply by clicking ports or, to select all ports, select the Select All Ports check box.

If you congured LAGs (see Link Aggregation on page 33), you can also sell or more LAGs.

1. In the Port Description eld, type a text.

2. Click the Apply button.

Your settings are saved. The description displays in the Port Interface Details

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Set the frame size for one or more in-

The frame size is the maximum Ethernet frame size that the interface supports congured to use, including the Ethernet header, CRC, and payload. The default is 9198.

To set the frame size for one or more ports or LAGs:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Port conguration.

The Port Conguration page displays.

1. Click the Port Interface Settings link:

The Interface Settings page displays.

1. Select the one or more ports to which the settings must apply by clicking ports or, to select all ports, select the Select All Ports check box.

If you congured LAGs (see Link Aggregation on page 33), you can also sell or more LAGs.

1. In the Frame Size eld, enter a value from 1500 (the minimum) to 9198 (the maximum).

The default value is 9198.

1. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Congure ow control for one or more interfaces

You can congregate IEEE 802.3x ow control, which can help to prevent data loss the port cannot keep up with the number of frames being switched:

- Symmetric ow control: With symmetric ow control, the switch can send a p frame to stop trafc on the port if the amount of memory used by the pa port exceeds a preconfigured threshold and responds to pause requests from p

devices. The paused port does not forward packets for the time that is spe the pause frame. When the pause frame time elapses, or the utilization return specied low threshold, the switch enables the port to again transmit frames.

- Asymmetric ow control: With asymmetric ow control, the switch does not set pause frames, but does honor incoming pause frames by temporarily halting transmission.

To congregate ow control for one or more ports or LAGs:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Port conguration.

The Port Conguration page displays.

1. Click the Port Interface Settings link:

The Interface Settings page displays.

1. Select the one or more ports to which the settings must apply by clicking ports or, to select all ports, select the Select All Ports check box.

If you congured LAGs (see Link Aggregation on page 33), you can also sell or more LAGs.

1. From the Flow Control menu, select a setting to congregate what happens if buffers become full:

2. disable: The switch does not send pause frames, and data loss could occur is the default setting.

3. symmetric: The switch sends pause frames to stop trafc. The switch also incoming pause frames by temporarily halting transmission.

4. asymmetric: The switch does not send pause frames, and data loss could. However, the switch does honor incoming pause frames by temporarily halt transmission.

5. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Display detailed information about the physical ports and LAGs

To display detailed information about the physical ports and LAGs:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

1. Select Congure > Port conguration.

The Port Conguration page displays.

The Port Interface Details table displays detailed information about each port LAG.

	DescriptionLegend
Port Description	The description that you added (see Add a description to one or more inter on page 58). If you did not add a description, this eld is blank.
Media Type	The media type that the port supports. The media type can be copper for ar port or fiber for a port that supports an SFP or SFP+ transceiver for a fiber
	The port speed and duplex mode.Physical Status
Frame Size	The frame size (see Set the frame size for one or more interfaces on page did not change the frame size, the default frame size is 9198.
Flow Control	The mode of ow control (see Congure ow control for one or more interfaces page 59) . If you did not congure ow control, it is disabled.
Network Prole	The network prole to which the port is assigned (see Change the Default VL prole on page 18 or Use an AV prole template to congure and assign a n prole on page 19). By default, the port is assigned to the Data network pro

7

Security

You can configure 802.1X port authentication and the associated RADIUS server set. The chapter contains the following sections:

• Port authentication
• Manage port authentication for individual ports
• Manage 802.1X authentication
• Remove port authentication from individual ports
• RADIUS servers
• Congure the basic settings for a RADIUS server
• Remove a RADIUS server

For information about all security options of the switch, see the main user mar you can download by visiting_netgear.com/support/download.

Port authentication

With port-based authentication, if 802.1X is enabled both globally and on the p successful authentication of any one supplicant attached to the port results in al being able to use the port without restrictions. At any time, only one supplicant to attempt authentication on a port in this mode. Ports in this mode are unde bidirectional control. 802.1X is the default authentication mode. 802.1X is also re to as dot1x.

An 802.1X network includes three components:

• Authenticator: The port that is authenticated before access to system services permitted.
• Supplicant: The host that is connected to the authenticated port requesting a to the system services.
• Authentication server: The external server, for example, the RADIUS server that performs the authentication on behalf of the authenticator, and indicates whether the supplicant is authorized to access system services.

For port authentication to function, you must congregate at least one RADIUS server RADIUS servers on page 66).

Manage port authentication for individual ports

After you enable 802.1X port authentication globally, the default port authentic mode on the ports is Auto.

However, before you enable 802.1X access authentication globally (see Manage 80 authentication on page 64), manually set the port authentication mode of the u port or ports to Authorized to enable the switch to keep its network connection applicable, Internet connection.

To assign a port authentication mode to individual ports:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Security.

The Security page displays.

1. Select the ports to which you want to assign a port authentication mode.

To select all ports, select the Select All Ports check box.

1. From the menu below the graphical display, select the authentication mode for selected ports:

- Auto: The authenticator port access entity (PAE) sets the controlled port m to react the outcome of the authentication exchanges between the supplica authenticator, and the authentication server. This is the default setting.

- Authorized: The authenticator PAE unconditionally sets the controlled port to authorized.

- Unauthorized: The authenticator PAE unconditionally sets the controlled port to unauthorized.

1. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Manage 802.1X authentication

If you enable 802.1X access authentication, port authentication is performed by a server. If you disable 802.1X access authentication, port authentication is globally disabled and the switch allows traffic on any ports without authentication.

Note: Before you enable 802.1X access authentication globally, manually set the authentication mode of the uplink port or ports to Authorized (see Manage port authentication for individual ports on page 63) to enable the switch to keep its connection and, if applicable, Internet connection.

To manage 802.1X access authentication:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch

The login page displays.

1. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

1. Select Congure > Security.

The Security page displays.

1. In the RADIUS Server Settings section, do one of the following:

- Enable 802.1X access authentication: Turn on the 802.1x Access Authentication button so that it displays green and is positioned to the

CAUTION: Before you enable 802.1X access authentication, manually set the port authentication mode of the uplink port or ports to Authorized (see M port authentication for individual ports on page 63).

- Disable 802.1X access authentication: Turn off the 802.1x Access Authentication button so that it displays gray and is positioned to the left. This is the default setting.

1. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Remove port authentication from individual ports

After you remove port authentication form a port, the switch allows trafc on th without authentication.

To remove port authentication mode from individual ports:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Security.

The Security page displays.

1. Select the ports from which you want to remove port authentication.

To select all ports, select the Select All Ports check box.

1. Click the Remove Port Authentication button.

2. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

RADIUS servers

RADIUS servers provide additional security for networks. A RADIUS server maintains user database, which can contain per-user or per-port authentication information. switch passes information to the congured RADIUS server, which can authenticate user name and password or port and password before authorizing use of the

Congure the basic settings for a RADIUS server

After you enable 802.1X access authentication globally (see Manage 802.1X authentication on page 64), you can congure one or more RADIUS servers.

The main UI lets you manage extensive RADIUS settings. For more information, main user manual, which you can download by visiting netgear.com/support/downlo.

To congregate the basic settings for a RADIUS server:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter

your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Security.

The Security page displays.

1. In the RADIUS Server Settings section, do one of the following:

2. Add a new RADIUS server: To add the settings for a new RADIUS serv the + Add Server link.

3. Change a RADIUS server: To change the settings for a RADIUS server the previously added, click the server link, for example, Server1 or Server2.

4. Congure the settings for the RADIUS server in the following elds:

5. RADIUS Address: The IP address of the RADIUS server. The switch must to reach this IP address.
   You cannot change the IP address for a RADIUS server that you previously

6. Port Number: The UDP port number used to reach the RADIUS server. T default is port 1812. You can specify a custom port in the range from

7. Secret Key: The secret key is the password for authentication and encrypting all RADIUS communications between the switch and the RADIUS server. This password must match the one that is congured on the RADIUS server. You cannot change the secret key for a RADIUS server that you previously

8. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Remove a RADIUS server

You can remove a RADIUS server that you no longer need.

To remove the settings for a RADIUS server:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch

The login page displays.

1. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

1. Select Congure > Security.

The Security page displays.

1. In the RADIUS Server Settings section, next to the server, click the x. For example, to remove the second RADIUS server that you added, click the to Server2 .

2. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

8

Manage and monitor the switch

You can manage the firmware of the switch, set the switch to factory defaults, a new AVB license. You can also display the switch logs.

The chapter contains the following sections:

• Licenses
• Update the rmware
• Startup conguration
  • Date and time settings
• Add a system name
  • Management interface IP address
  • OOB port IP address
• Set the STP network redundancy for the switch
• Restart the switch from the AV UI
• Reset the switch to factory default settings
  • Manually control the fans
  • Display the status of the ports and switch
  • Display the neighboring devices

For information about all management and monitoring options of the switch, see main user manual, which you can download by visiting netgear.com/support/downlo

Licenses

Full access to the AV UI requires a license.

You can add a license online or ofine.

For information about purchasing a license, contact NETGEAR or your local NETC reseller.

After you purchase a license, you receive an email with a license key.

Add a license online

If you received a license key, you can add a license online. Your switch must to the Internet so that your license can be verified and activated by a NETGEA server.

To add a license online:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

1. Select Congure > AVB License.

The AVB License page displays.

1. Click the Activate New License link.

The Activate New License window displays.

By default, the Online License Activation radio button is selected.

1. In the License Key eld, enter your license.
2. Click the Apply button.

The switch contacts the NETGEAR license server.

1. To activate the license, restart the switch by clicking the Reboot link in the right of the page.

A pop-up window displays a warning.

1. Click the Yes button.

The switch restarts. During the restart process, do not power down the switc

Add a license ofine

You can add a license of fine. The license must already be activated by a NET license server and must be located on the computer that you use to access t

To add a license ofine:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > AVB License.

The AVB License page displays.

1. Click the Activate New License link.

The Activate New License window displays.

1. Click the Ofine License Activation radio button.
2. Click in the Browse eld, navigate to the license, and select it.
3. Click the Apply button.

The license is uploaded to the switch.

1. To activate the license, restart the switch by clicking the Reboot link in the right of the page.

A pop-up window displays a warning.

1. Click the Yes button.

The switch restarts. During the restart process, do not power down the switch

Delete a license

You can delete a license that is no longer valid or that you do not need a

To delete a license:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > AVB License.

The AVB License page displays.

1. To the right of the license, click the trashcan icon.

A conrmation window displays

1. Click the Delete button.

The license is deleted.

1. To deactivate the license on the switch, restart the switch by clicking the R in the upper right of the page.

A pop-up window displays a warning.

1. Click the Yes button.

The switch restarts. During the restart process, do not power down the switch

Update the rmware

You can update the rmware from a le that you downloaded and that is located the computer that you use to access the AV UI.

To update the rmware:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Congure > Maintenance.

The Maintenance page displays.

Note: The switch can hold two rmware versions. If it does, the page displays active rmware version. The main UI lets you manage rmware les, and change from one version to another. The AV UI lets you update the rmware but do let you manage rmware versions. If you update rmware using the AV UI, the rmware becomes the active rmware.

1. Click in the Browse Field eld, navigate to the rmware le, and select it.

2. Click the Upload button.

A pop-up window displays the progress of the rmware le upload.

1. After the upload completes, in the pop-up window, click the Reboot Now b The rmware upgrade process starts. During the rmware upgrade, do not pow down the switch. The switch reboots and restart with the new firmware versio the process is complete, you can log in again to the AV UI.

Startup conguration

You can manage the startup conguration, that is, the startup-cong le. You can the following:

• Save the running conguration to the startup conguration.
• Download the running conguration le.
• Restore the running and startup congrurations from a previously downloaded conguration le.

Save the running conguration

After you make changes on a page of the AV UI and click the Apply button windows, the Save button), your changes are saved for the current session, but retained when you restart the switch. That is, your running conguration is not set the startup conguration (the startup-cong le).

Note: The idle time-out period for an AV UI session is ve minutes. However, are automatically logged out of the AV UI and then log in again, the running is not lost and you can save it to the startup conguration.

To save the running conguration to the startup conguration:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.
4. At the top of the page, click the Save icon or text.
   The running conguration is saved to the startup conguration.

Download the running conguration

You can download the running conguration (that is, the current conguration) to computer. If you do so, you can restore both the running conguration and start conguration from your saved conguration le.

To download the running conguration:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.
4. Select Congure > Maintenance.
   The Maintenance page displays.
5. In the Configuration Management section, click the Download Configuration button A pop-up window displays.
6. Navigate to a location on your computer and save the text le.

The le is saved with a .cfg extension.

Restore the conguration

If you downloaded the conguration to a computer (see Download the running conguration on page 74), you can restore both the running conguration and sta conguration from your saved conguration le.

To restore the conguration:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

4. Select Congure > Maintenance.

The Maintenance page displays.

1. In the Conguration Management section, click in the Browse File eld.

A pop-up window displays.

1. Navigate to and select the saved conguration le.

The le has a .cfg extension.

1. Click the Upload button.

A pop-up window displays.

1. Click the Restore Now button.

The running conguration and startup conguration are restored.

Date and time settings

You can either set the date and time for the switch manually or conjure one Simple Network Time Protocol (SNTP) servers, allowing the switch to synchronizing internal clock with an SNTP server clock.

Manually set the date and time

You can manually set the date and time for the switch.

To manually set the date and time:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.
4. In the Device Details section, below the Date & Time eld, click the pencil The Time Conguration window displays.
5. Click in the Date eld, and from the pop-up calendar, select a date.
6. Click in the Time eld, use the menus to select the hour, minutes, seconds, meridian setting, and click the OK button.
7. Click the Apply button.
   Your settings are saved. The window closes. The Overview page displays again
8. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Congure one or more SNTP servers

You can congregate one or more SNTP servers. You must know the domain name addresses of the SNTP servers that you want to use. By default, the switch co includes one NETGEAR SNTP server, which is time-a.netgear.com.

To congregate one or more SNTP servers:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i

The Overview page displays.

1. In the Device Details section, below the Date & Time eld, click the pencil The Time Conguration window displays.
2. Turn on the Enable SNTP toggle so that it displays green and is positione right.
3. From the Time Zone menu, select the time zone in which the switch opera
4. In the SNTP Server Address 1, SNTP Server Address 2, and SNTP Server Address 3

elds, enter the domain name or IP address for an SNTP server.

By default, the SNTP Server Address 1 eld contains the NETGEAR SNTP serv (time-a.netgear.com), but you can replace that SNTP server with another one. Conguring the additional two SNTP servers is optional.

1. Click the Apply button.

Your settings are saved. The window closes. The Overview page displays again

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Add a system name

You can add a system name, which allows you and others to identify the swit network. By default, no system name is congured.

To add a system name:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. In the Device Details section, below the System Name eld, click the pencil The Edit System Name window displays.
2. In the New System Name eld, specify a system name.
3. Click the Apply button.

Your settings are saved. The window closes. The Overview page displays again

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Management interface IP address

The management interface is the logical interface used for in-band connectivity with the switch over any of the switch's network interfaces.

You can set a xed IP address for the management interface or enable the DH for the interface so that the interface receives an IP address from a DHCP set network.

If the management interface does not receive an IP address from a DHCP serv default IP address for the interface is set to 169.254.100.100 with 255.255.0.0 a subnet mask.

Set a xed IP address for the management interface

By default, the IP address of the management interface is 169.254.100.100 and DHCP client is enabled. You can disable the DHCP client for the management and set a xed (static) IP address.

To set a xed IP address for the management interface:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. In the Device Details section, below the Management IP Address eld, click the pencil icon.

The Edit Management IP Address window displays.

1. From the Management IP Settings menu, select DHCP Static and specify the following settings:

- Management IP Address: The static IP address for the management interfa The default value is 169.254.100.100.

• Subnet Mask: The IP subnet mask for the management interface. This is referred to as the subnet/network mask and denes the portion of the inte IP address that is used to identify the attached network.
  The default value is 255.255.0.0.
• Default Gateway: The gateway through which the management interface car be reached.
  The default value is 0.0.0.0.

WARNING: If you are logged in to switch over the management interface, w you click the Apply button, you are disconnected and need to log in to tl at the new IP address.

1. Click the Apply button.

Your settings are saved. The window closes. The Overview page displays again

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Enable the DHCP client for the management interface

By default, the DHCP client for the management interface is enabled. If you see IP address for the management interface, the DHCP client is disabled. You can the DHCP client again.

To enable the DHCP client for the management interface:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter
   your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

4. In the Device Details section, below the Management IP Address eld, click the pencil icon.

The Edit Management IP Address window displays.

1. From the Management IP Settings menu, select DHCP Client.

WARNING: If you are logged in to switch over the management interface, we you click the Apply button, you are disconnected and need to log in to that at the new IP address that is assigned by the DHCP server. If you do not new IP address, determine it by accessing the DHCP server or by using an utility.

1. Click the Apply button.

Your settings are saved. The window closes. The Overview page displays again

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

OOB port IP address

The OOB port, also referred to as the IPv4 service port, is a dedicated Ether out-of-band (OOB) management of the switch. Trafc on this port is segregated operational network trafc on the switch ports and cannot be switched or routed operational network.

By default, no IP address is set for the OOB port, but its DHCP client is en the port can receive an IP address from a DHCP server in your network.

If the OOB port does not receive an IP address from a DHCP server in your the IP address for the port is set to 192.168.0.239 with 255.255.255.0 as the mask. The same occurs if you connect the OOB port directly to a computer at the switch.

You can also set a xed IP address for the OOB port.

Set a xed IP address for the OOB port

By default, no IP address is set for the OOB port and the DHCP client is e can disable the DHCP client for the OOB port and set a xed (static) IP addr

To set a xed IP address for the OOB port:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i

The Overview page displays.

1. In the Device Details section, below the OOB IP Address eld, click the pen The Edit OOB IP Address window displays.

2. From the OOB IP Settings menu, select DHCP Static and specify the following settings:

3. OOB IP Address: The static IP address for the OOB port. By default, no is set for the OOB port.

4. Subnet Mask: The IP subnet mask for the OOB port. By default, no sub is set for the OOB port.
5. Default Gateway: The gateway through which the OOB port can be reach By default, no IP address is set for the default gateway.

WARNING: If you are logged in to switch over the OOB port, when you call Apply button, you are disconnected and need to log in to the switch at the address.

1. Click the Apply button.

Your settings are saved. The window closes. The Overview page displays again

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Enable the DHCP client for the OOB port

By default, the DHCP client for the OOB port is enabled. If you connect the to your network but the port does not receive an IP address from a DCHP s address for the port is set to 192.168.0.239 with 255.255.255.0 as the subnet same occurs if you connect the OOB port directly to a computer and reboot. If you set a xed IP address for the OOB port, the DHCP client is disabled. enable the DHCP client again.

To enable the DHCP client for the OOB port:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. In the Device Details section, below the OOB IP Address eld, click the pen The Edit OOB IP Address window displays.

2. From the OOB IP Settings menu, select DHCP Client.

WARNING: If you are logged in to switch over the OOB port, when you call Apply button, you are disconnected and need to log in to the switch at the address that is assigned by the DHCP server. If you do not know the new determine it by accessing the DHCP server or by using an IP scanner utility

1. Click the Apply button.

Your settings are saved. The window closes. The Overview page displays again

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Set the STP network redundancy for the switch

You can set the Spanning Tree Protocol (STP) network redundancy for the switch is also referred to as the bridge priority, which is the priority for a multiple tree (MST) instance on the switch.

When switches or bridges are running STP, each is assigned a priority. After e bridge protocol data units (BPDUs), the switch with the lowest priority value be the root bridge and the other devices become backup or redundant bridges. The priority is a multiple of 4096. The range is from 0 to 61440. The default is

The following table shows how the network redundancy settings in the AV UI and the bridge priority values in the main UI.

Table 2. STP network redundancy in the AV UI and the main UI

Congurable Setting in the AV UI	Associated Bridge PriorityConfigurable Value in the AV UI Setting	Bridge Priority in the Main UI
		00Primary mode

32768Neutral modAny value from

4096\~57344

6144061440Backup mode

In the AV UI, you can set the STP network redundancy to Primary mode, Neu or Backup mode. In the main UI, you must set a specific bridge priority value.

To set the STP network redundancy for the switch:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

4. In the Device Details section, below to the STP Network Redundancy eld, click pencil icon.
   The Edit STP Network Redundancy window displays.

5. Select the Primary mode, Neutral mode, or Backup radio button.

By default, the Neutral mode radio button is selected.

1. Click the Apply button.

Your settings are saved. The window closes. The Overview page displays again

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Restart the switch from the AV UI

You can restart the switch from the AV UI.

To restart the switch:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. At the top of the page, click the Reboot icon or text.

A pop-up window displays a warning.

1. Click the Yes button.

The switch restarts. During the restart process, do not power down the switch

Reset the switch to factory default setting

You can reset the switch to factory default settings. This process erases all your settings, including your network prole assignments and any custom prole template. After the switch restarts, its default IP address is 169.254.100.100, the DHCP clie enabled, and the IP address of the OOB port is 192.168.0.239.

To reset the switch to factory default settings:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

1. Select Congure > Maintenance.

The Maintenance page displays.

1. Click the Factory Default button.

A pop-up window displays a warning.

CAUTION: This process erases all your custom settings, including your network prole assignments and any custom prole templates.

1. In the pop-up window, click the Conrm button.

The factory default reset process starts. During the reset process, do not pow the switch. The switch reboots and restarts with factory default settings. When process is complete, you can log in again to the AV UI, but you rst might determine the IP address of the switch.

Manually control the fans

The switch includes internal fans that support intelligent operation, which enables switch to automatically start the operation of the fans, gradually increase the sp the fans, and either halt PoE or block trafc if the temperature exceeds a critic

You can manually control the fans through either the AV UI (see the following or the command-line interface (CLI).

If the fans are functioning in Off mode (which you only can set manually) or mode, the switch automatically manages the fans and turns on the fans or grain increases the speed of the fans under the following conditions:

• PoE+ and PoE++ M4250 series models: Either the temperature detected by the temperature sensor exceeds its threshold or a PoE budget is exceeded.
• LED tiles model (M4250-12M2XF): Either the temperature detected by the temperature sensor exceeds its threshold or the switch processes a full trafc
• Aggregation model (M4250-16XF): Either the temperature detected by the temperature sensor exceeds its threshold or the switch processes a full trafc

Note: For detailed information about temperature thresholds, PoE budgets, and tr load conditions that affect the fans, see the hardware installation guide, which y download by visiting_netgear.com/support/download.

To manually control the fans:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter

your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. In the Fans & Temperature section, select one of the following radio buttons

- Off: The fans are off and produce no noise. You can only manually set in Off mode. The following models do not support Off mode.

• M4250-26G4F-PoE++
• M4250-40G8XF-PoE+
• M4250-40G8XF-PoE++

- Quiet: The fans function from 10, 20, or 25 percent (depends on the m 100 percent speed. Quiet mode is the default mode. At 10, 20, or 25 speed, the fans produce minimal noise. Fan noise increases at 50 percent and even more so at 75 percent speed. At 100 percent speed, the fans considerable noise.

In Quiet mode, the switch might automatically change back and forth between Cool mode and Quiet mode until a temperature, PoE budget, or traffic load condition returns within thresholds.

- Cool: The fans consistently function at 100 percent speed and produce ma: cooling as well as considerable noise.

The fan setting changes immediately. However, depending on the switch mode the temperature detected by the temperature sensor exceeds its threshold, a budget is exceeded, or a traffic load condition is exceeded, the switch autom overrides your manual setting.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Display the status of the ports and swit

To display the status of the ports and switch:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. If the port legends do not display below the graphical display of the switch the Show Legends check box.

The following table describes the ports legend.

	DescriptionLegend
	The port is connected to a device that is powered up. Connected
Connected & Powered	The port is connected to a powered device (PD) that is receiving PoE from the switch.
	The port is disabled. Disabled
	An error occurred on the port. Error
	The port is not connected to a device but is available. Available
10G SFP+ Fiber Port	The port is a 10G SFP+ fiber port that can accept an SFP or SFP+ transceiver module.
	The port is blocked. That is, STP blocked the port to prevent a loop. Blocked
	The port is administratively down. Admin Down
	The port is a 1G SFP ber port that can accept an SFP transceiver module. 10
PoE	The port is a PoE port. Depending on the switch model, the port can provide or both PoE+ and PoE++.
PoE Disabled	PoE is disabled on the port (see Disable PoE for one or more interfaces on 50).
	The port is member of a LAG (see Link Aggregation on page 33).LAG
	The port authentication mode is Authorized (see Port authentication on page 6).
Unauthorized	The port authentication mode is Unauthorized (see Port authentication on page 63).
VLAN Trunk	The port functions as a VLAN trunk. That is, the port is a tagged port that tagged VLAN trafc.
	The port functions as an Auto-Trunk (see Auto-Trunk overview on page 27). Auto
Force Multicast	This port is congured for forced multicast (see Congure the multicast mode for one or more ports on page 42).
	The port reached 98 percent of its ingress or egress transmit rate.Warning

For more information about the ports, see Display detailed information about physical ports and LAGs on page 61.

The following table describes the information that displays in the Device Data section, Configured Profiles section, CPU Utilization graph, Memory Utilization graph and Fans & Temperature section.

	DescriptionField or Graph
Device Details
	M4250 by default. This eld is xed.Product Name
	The serial number of the switch. This eld is xed.Serial Number
	The model number of the switch. This eld is xed.Model
	The congured or detected date and time (see Date and time settings on page 77).
	This eld does not apply to the switch (N/A).Country/Region
	The MAC address of the switch. This eld is xed.Base MAC Address
	The congured system name, if any (see Add a system name on page 77).Sys
Firmware Version	The active main rmware version of the switch (see Update the rmware on page 72).
AV UI Version	The active rmware version for the AV UI. This rmware is included in the main rmware.
	The active boot version of the switch. This rmware is included in the main r
	The period in days, hours, minutes, and seconds since the switch was last sta
OOB IP Address	The IP address for access to the main UI or AV UI over the out-of-band (C of the switch (see OOB port IP address on page 80).(This port is also referred to as the service port.)
DescriptionField or Graph
Management IP Address The management IP address for access to the main UI or AV UI over any I network port of the switch (see Management interface IP address on page 78)
STP Network RedundancyThe configured STP network redundancy mode of the switch (see Set the STP redundancy for the switch on page 82).
Congured ProlesFor more information about network proles, see Network proles on page 18.
	The name of the network prole.Prole Name
Prole Type	The prole template on which the network prole is based.The profile template can be any of the preconfigured profile template (for e Data or Video, see Overview of precongured AV prole templates on page 15) a custom prole template (see Custom AV prole templates on page 23).
	The VLAN ID that is assigned to the network prole.VLAN ID
	The IP address that is assigned to the network prole.IP Address
	The number of ports that are assigned to the network prole.# of Assigned Po
	The CPU utilization as a percentage of the CPU capacity.CPU Utilization
	The memory utilization as a percentage of the total memory.Memory Utilization
Fans & Temperature
Fans (numbered)	The number of internal fans depends on the switch model. The state of the be Active. If the state is not Active, there might be a problem with the fan cooling.
Sensor (numbered)	The temperature in Celsius that is measured by the sensor. The number of ir sensors depends on the switch model.
	DescriptionField or Graph
Max Temperature	The maximum temperature for normal operation of the switch.Note: If the switch exceeds this temperature, the operation of the switch might limited, for example, PoE might be disabled. The fans are placed in Cool more return the switch to normal operation, you must restart the switch. For more information, see the hardware installation guide.
Fan Mode	The mode can be Off, Quiet, or Cool. For more information, see the fans on page 85. Manually cc

Display the neighboring devices

You can display the devices that are connected to the switch.

To display the neighboring devices:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

1. Select Congure > Neighbor.

The Neighbor page displays.

For each detected device, the page displays the following:

• Port. The port to which the device is attached.
• Host. The system name of the device, if any.
  • MAC Address. The MAC address of the device.
• IP Address. The IP address of the device.
• Remote Port ID: The port number of the device.

9

Diagnostics and Troubleshooting

You can diagnose and troubleshoot the switch and its network.

The chapter contains the following sections:

• Manage the switch log, console log, and command log
  • Display or download the message log
  • Display or clear the port statistics
• Send a ping, traceroute, or DNS lookup request to an IP address or host
  • Perform a cable test
  • Congure port mirroring
• Access the CLI through the terminal in the AV UI
• Download diagnostics les for technical support

Manage the switch log, console log, and command log

The switch generates messages in response to events, faults, and errors as well changes in the conguration or other occurrences. These messages are stored loc and can be forwarded to one or more centralized points of collection for mon purposes or long-term archival storage. Local and remote conguration of the log capability includes ltering of messages logged or forwarded based on severity ar generating component.

To congregate a syslog server and set up remote logging, use the main UI or more information, see the main user manual or the CLI command reference may both of which you can download by visiting netgear.com/support/download.

By default, the switch log is enabled at the Notice logging level but the cons command log are disabled.

To manage the switch log, console log, and command log that are stored

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Diagnostics > Logs.

The Logs page displays.

1. In the Log Settings section enable or disable logs by doing the following form: individual log:

2. Enable one or more logs: Click the Switch Logging button, Console Logging
   button, Command Logging button, or a combination of these buttons so they turn green.

3. Disable one or more logs: Click the Switch Logging button, Console Logging
   button, Command Logging button, or a combination of these buttons so they turn gray.

By default, the switch log is enabled but the console log and command log disabled.

1. For the switch log and the console log individually, in the Log Settings sec the logging level from the Switch Logging Level menu or the Console Logging Level menu:

• Emergency: Level 0, the system is unusable.
- Alert: Level 1, action must be taken immediately.
• Critical: Level 2, critical conditions.
- Error: Level 3, error conditions. If you enable console logging, this is the level.
- Warning: Level 4, warning conditions.
- Notice: Level 5, normal but significant conditions. This is the default level switch logging.
• Informational: Level 6, informational messages.
- Debug: Level 7, debug-level messages.

Note: A log records messages equal to or above the selected severity level. example, if you select the Warning level from the menu, the switch records at the Warning, Error, Critical, Alert, and Emergency levels.

1. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Display or download the message log

You can display or download the message log.

To display or download the message log:

1. Launch a web browser.

2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

4. Select Diagnostics > Logs.

The Logs page displays. The Logs section shows the recorded log entries.

1. To download the logs, do the following:

a. Click the Download Logs link.

A pop-up window displays.

b. Navigate to a location on your computer and save the le.

Display or clear the port statistics

You can display or clear the port statistics.

To display or clear the port statistics:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

4. Select Diagnostics > Port Statistics.

The Port Statistics page displays.

The Inbound Trafc table displays detailed information about the inbound traffic each port and LAG. The separate Outbound Traffic table displays detailed information about the outbound traffic on each port and LAG.

Table 3. Inbound trafc

DescriptionLegend

The port or LAG to which the statistics apply.Port

The number of inbound octets (bytes).InOctets

The number of inbound unicast packets.InUcastPkts

The number of inbound multicast packets.InMcastPkts

The number of inbound broadcast packets.InBcastPkts

The number of inbound packets that were dropped.InDropPkts

The bit rate for inbound trafc.InBitRate

The number of received packets with errors.rxError

Table 4. Outbound trafc

DescriptionLegend

The port or LAG to which the statistics apply.Port

The number of outbound octets (bytes).OutOctets

The number of outbound unicast packets.OutUcastPkts

The number of outbound multicast packets.OutMcastPkts

The number of outbound broadcast packets.OutBcastPkts

The number of outbound packets that were dropped.OutDropPkts

The bit rate for outbound trafc.OutBitRate

The number of transmitted packets with errors.txError

1. To clear all statistics, click the Clear all statistics link above the table.

A pop-up window displays a warning.

1. Click the Delete button.

The port statistics counters are reset to zero.

Send a ping, traceroute, or DNS lookup request to an IP address or host name

You can you take the following actions independently of each other or simultan (or rather, one after the other):

• Send a ping: The switch sends a xed number of ping requests to a partic device to determine if it can communicate with the device.
• Send a traceroute: The switch attempts to trace the route to a particular IF to determine the precise path to the device.
• Send a DNS lookup request: The switch contacts DNS servers to determine address that is associated with a host name.

When you run one or more tests, the test results are displayed in the panes

To send a ping, traceroute, or DNS lookup request to an IP address or help

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Diagnostics > Troubleshoot.

The Troubleshoot page displays.

1. In the IP Address/Host Name eld, specify the IP address or host name.

2. Do one or more of the following:

3. Ping: To ping the IP address or host name, turn on the Ping toggle so that it displays green and is positioned to the right.

4. Traceroute: To send a traceroute to the IP address or host name, turn of Traceroute toggle so that it displays green and is positioned to the right

5. DNS Lookup: To send a DNS lookup to a host name, turn on the DNS toggle so that it displays green and is positioned to the right.

6. Click the Run Tests button.

The selected tests run one after the other. The results display in the result

Perform a cable test

You can test and display information about the cables that are connected to s'ports.

To perform a cable test:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch. The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Diagnostics > Cable Test.

The Cable Test page displays.

1. Select the ports for which you want to test the attached cables.
2. Click the Test Selected Ports button.

A cable test is performed on the selected ports. The cable test might take seconds to complete. If the port forms an active link with a device, the ca is Normal.

The following table describes the test results that might display in the Cable Results section.

	DescriptionField
	The port on which the test was performedPort
Test Results	Normal: The cable is working correctly.Open: The cable is disconnected or has a faulty connector.Short: An electrical short occurred in the cable.Cable Test Failed: The cable status could not be determined. The cable might in fact be working.Untested: The cable is not yet tested.Invalid cable type: The cable type is unsupported.
Fault Distance	The estimated distance in meters from the end of the cable to the failure location is displayed only if the cable status is Open or Short.

Congure port mirroring

Port mirroring lets you select the network traffic of specific switch ports for analysis a network analyzer. You can select many switch ports as source ports but only switch port as the destination port.

A packet that is copied to the destination port is in the same format as the packet. That means that if the mirror is copying an incoming packet, the copie is VLAN-tagged or untagged as it was received on the source port. If the mirror an outgoing packet, the copied packet is VLAN-tagged or untagged as it is be transmitted on the source port.

To congure port mirroring:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

1. Select Diagnostics > Port Mirroring.

The Port Mirroring page displays.

1. Click the Port Mirroring toggle so that it displays green and is positioned right.

The page shows two graphical displays of the switch.

1. In the upper graphical display, select one or more source ports.
2. In the lower graphical display, select a single destination port.
3. Click the Apply button.

Your settings are saved.

1. To save the settings to the running conguration, at the top of the page, c Save icon or text.

Access the CLI through the terminal in AV UI

You can access the command-line interface (CLI) from the AV UI. While you will CLI, the AV UI can remain open.

To access the CLI from the AV UI:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.
3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.

The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log i The Overview page displays.

1. Select Diagnostics > Terminal.

Depending on how you congured your browser, the CLI opens in a new br tab or browser window.

Download diagnostics les for technical support

NETGEAR technical support might request combined diagnostic les from your swit. Such les might help troubleshooting a problem. The combined diagnostic les may include the following information:

• Conguration le
• Buffered log
• Tech support le
• Crash logs
  • Full memory dump
  • Supported MIBs

Please do not send les unless instructed to do so by NETGEAR technical supp

To download the combined diagnostics les:

1. Launch a web browser.
2. In the address eld of your web browser, enter the IP address of the switch The login page displays.

3. In the Login Name eld, enter admin as the user name, in the Password eld, enter your local device password, and click the AV UI Login button.
   The rst time that you log in, no password is required. However, you then specify a local device password to use each subsequent time that you log in The Overview page displays.

4. Select Diagnostics > Support Diagnostics.

The Support Diagnostics page displays.

1. Click the Download Files link.

A pop-up window displays.

1. Navigate to a location on your computer and save the text le.