speed....8-42 speed all.....8-42 storm-control broadcast....8-43 no storm-control broadcast...8-43 storm-control flowcontrol...8-44 no storm-control flowcontrol...8-44 show mac-address-table multicast...8-44 show mac-address-table static...8-45 show mac-address-table staticfiltering..8-45 show mac-address-table stats...8-46 show monitor....8-46 show port....8-46 show port protocol...8-47 show storm-control....8-48 Virtual LAN (VLAN) Commands...8-48 vlan....8-48 no vlan....8-48 vlan acceptframe....8-49 no vlan acceptframe...8-49 vlan ingressfilter....8-49 no vlan ingressfilter...8-49 vlan makestatic....8-50 vlan name....8-50 no vlan name....8-50 vlan participation....8-50 vlan participation all...8-51 vlan port acceptframe all...8-51 no vlan port acceptframe all...8-52 vlan port ingressfilter all....8-52 no vlan port ingressfilter all...8-52 vlan port pvid all....8-52 no vlan port pvid all...8-52 vlan port tagging all...8-53 no vlan port tagging all...8-53 vlan protocol group....8-53 x 202-10088-01, March 2005 Contents
vlan protocol group add protocol...8-53 no vlan protocol group add protocol...8-54 vlan protocol group remove...8-54 protocol group....8-54 no protocol group...8-54 protocol vlan group....8-55 no protocol vlan group...8-55 protocol vlan group all....8-55 no protocol vlan group all...8-55 vlan pvid.....8-56 no vlan pvid....8-56 vlan tagging...8-56 no vlan tagging...8-56 show vlan....8-56 show vlan brief...8-58 show vlan port....8-58 System Utility Commands....8-59 traceroute....8-59 clear config....8-60 clear counters....8-60 clear igmpsnooping...8-60 clear pass....8-60 enable passwd...8-60 clear port-channel...8-61 clear traplog....8-61 clear vlan....8-61 logout....8-61 ping....8-62 reload....8-62 copy....8-62 Pre-login Banner....8-63 copy....8-63 CLI Command Logging....8-64 logging cli-command....8-64 no logging cli-command...8-64
Configuration Scripting....8-64 configscript apply....8-65 configscript delete...8-65 configscript list....8-65 configscript show....8-65 configscript validate...8-66 show running-config....8-66 System Log (Syslog)....8-66 logging buffered....8-67 no logging buffered...8-67 logging buffered wrap...8-67 no logging wrap....8-67 logging console....8-67 no logging console...8-68 logging history....8-68 no logging history....8-68 logging host...8-68 logging host remove....8-69 logging port...8-69 no logging port....8-69 logging syslog....8-69 no logging syslog...8-69 show logging....8-70 show logging history....8-70 show logging buffered....8-71 show logging hosts....8-71 Simple Network Time Protocol (SNTP)..8-72 sntp broadcast client poll-interval...8-72 no sntp broadcast client poll-interval...8-72 sntp client mode....8-72 sntp client mode....8-73 sntp client port....8-73 no sntp client port....8-73 sntp unicast client poll-interval...8-73 no sntp unicast client poll-interval...8-73 xii 202-10088-01, March 2005 Contents
sntp unicast client poll-timeout...8-74 no sntp unicast client poll-timeout..8-74 sntp unicast client poll-retry...8-74 no sntp unicast client poll-retry..8-74 sntp multicast client poll-interval...8-74 no sntp multicast client poll-interval...8-75 sntp server....8-75 no sntp server...8-75 show sntp....8-75 show sntp client....8-76 show sntp server....8-76 User Account Commands...8-77 disconnect....8-77 show loginsession...8-77 show users....8-78 users name...8-79 no users name....8-79 users passwd....8-79 no users passwd....8-79 users snmpv3 accessmode...8-80 no users snmpv3 accessmode..8-80 users snmpv3 authentication...8-80 no users snmpv3 authentication...8-80 users snmpv3 encryption....8-81 no users snmpv3 encryption...8-81 DHCP Server Commands....8-81 client-identifier....8-82 no client-identifier....8-82 client-name....8-82 no client-name....8-82 default-router....8-83 no default-router....8-83 dns-server....8-83 no dns-server....8-83 hardware-address...8-83

xxiv 202-10088-01, March 2005
match destination-address mac... 11-13 match dstip.... 11-14 match dstl4port.... 11-14 match ip dscp... 11-15 match ip precedence... 11-15 match ip tos.... 11-16 match protocol.... 11-16 match source-address mac... 11-17 match srcip.... 11-17 match srcl4port.... 11-17 match vlan.... 11-18 Policy Commands... 11-18 assign-queue.... 11-19 drop.... 11-19 mark secondary-cos... 11-19 redirect.... 11-20 conform-color.... 11-20 bandwidth kbps.... 11-20 bandwidth percent.... 11-21 class.... 11-21 expedite kbps... 11-22 expedite percent.... 11-22 mark cos.... 11-23 mark ip-dscp... 11-23 mark ip-precedence.... 11-24 police-simple... 11-24 police-single-rate... 11-25 police-two-rate.... 11-26 policy-map.... 11-27 policy-map rename... 11-27 randomdrop.... 11-27 shape average.... 11-28 shape peak.... 11-28 Service Commands.... 11-29 service-policy.... 11-29
Show Commands.... 11-30 show class-map... 11-31 show diffserv... 11-32 show policy-map.... 11-33 show diffserv service... 11-36 show diffserv service brief.... 11-37 show policy-map interface.... 11-37 show service-policy.... 11-39 Class of Service (CoS) Commands... 11-40 classofservice dot1p-mapping... 11-40 classofservice ip-dscp-mapping... 11-40 classofservice ip-precedence-mapping... 11-41 classofservice trust.... 11-41 no classofservice trust... 11-41 cos-queue max-bandwidth... 11-41 no cos-queue max-bandwidth... 11-42 cos-queue min-bandwidth... 11-42 no cos-queue min-bandwidth.. 11-42 cos-queue random-detect... 11-42 no cos-queue random-detect... 11-42 cos-queue strict.... 11-43 no cos-queue strict... 11-43 random-detect.... 11-43 no random-detect... 11-43 random-detect exponential-weighting-constant... 11-44 no random-detect exponential-weighting-constant.. 11-44 random-detect queue-parms... 11-44 no random-detect queue-parms... 11-44 tail-drop queue-parms... 11-44 traffic-shape.... 11-45 show classofservice dot1p-mapping... 11-45 show classofservice ip-precedence-mapping.. 11-46 show classofservice trust... 11-46 show interfaces cos-queue.... 11-46 show interfaces random-detect... 11-47 xxvi 202-10088-01, March 2005 Contents
show interfaces tail-drop-threshold... 11-48 Chapter 12 Managing Switch Stacks Understanding Switch Stacks....12-1 Switch Stack Membership...12-2 Switch Stack Cabling....12-4 Stack Master Election and Re-Election...12-5 Stack Member Numbers....12-5 Stack Member Priority Values...12-6 Switch Stack Offline Configuration...12-6 Effects of Adding a Preconfigured Switch to a Switched Stack..12-6 Effects of Replacing a Preconfigured Switch in a Switch Stack..12-7 Effects of Removing a Preconfigured Switch from a Switch Stack.12-7 Switch Stack Software Compatibility Recommendations...12-8 Incompatible Software and Stack Member Image Upgrades..12-8 Switch Stack Configuration Files....12-8 Switch Stack Management Connectivity...12-9 Connectivity to the Switch Stack Through Console Ports..12-9 Connectivity to the Switch Stack Through Telnet...12-9 Switch Stack Configuration Scenarios...12-9 Stacking Recommendations....12-10 General Practices.... 12-11 Initial installation and Power-up of a Stack... 12-11 Removing a Unit from the Stack...12-12 Adding a Unit to an Operating Stack...12-12 Replacing a Stack Member with a New Unit...12-12 Renumbering Stack Members...12-13 Moving a Master to a Different Unit in the Stack..12-14 Removing a Master Unit from an Operating Stack..12-14 Merging Two Operational Stacks...12-14 Preconfiguration....12-15 Upgrading Firmware...12-15 Migration of Configuration With a Firmware Upgrade..12-16 Code Mismatch....12-16

Switching Commands 202-10088-01, March 2005

show arp switch

This command displays connectivity between the switch and other devices. The Address Resolution Protocol (ARP) cache identifies the MAC addresses of the IP stations communicating with the switch. Format Mode MAC Address
show arp switch Privileged EXEC
A unicast MAC address for which the switch has forwarding and/ or filtering information. The format is 6 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB

slot/port

IP Address The IP address assigned to each interface. Valid slot and port number separated by forward slashes.

show eventlog

This command displays the event log, which contains error messages from the system. The event log is not cleared on a system reset. Format Mode File Line Task Id Code Time
show eventlog Privileged EXEC
The file in which the event originated. The line number of the event The task ID of the event. The event code. The time this event occurred.
Note: Event log information is retained across a switch reset.

show hardware

This command displays inventory information for the switch. Format Mode Switch Description
8-2 202-10088-01, March 2005
show hardware Privileged EXEC
Text used to identify the product name of this switch.

Switching Commands

Machine Type Machine Model Serial Number FRU Number Part Number Maintenance Level Manufacturer Software Version Operating System Additional Packages
Specifies the machine model as defined by the Vital Product Data. Specifies the machine model as defined by the Vital Product Data. The unique box serial number for this switch. The field replaceable unit number. Manufacturing part number. Indicates hardware changes that are significant to software. Manufacturer descriptor field. The release.version.revision number of the code currently running on the switch. The operating system currently running on the switch. This displays the additional packages that are incorporated into this system, such as BGP-4 or Multicast.
Burned in MAC Address Universally assigned network address.
Network Processing Element The type of the processor microcode.

show interface

This command displays a summary of statistics for a specific port or a count of all CPU traffic based upon the argument. Format Mode
show interface {<slot/port> | switchport} Privileged EXEC
The display parameters, when the argument is ' <slot/port>', is as follows : Packets Received Without Error The total number of packets (including broadcast packets and multicast packets) received by the processor. Packets Received With Error The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. Broadcast Packets Received The total number of packets received that were directed to the broadcast address. Note that this does not include multicast packets. Packets Transmitted Without Error The total number of packets transmitted out of the interface.

Default

Two default community names: Public and Private. You can replace these default community names with unique identifiers for each community. The default values for the remaining four community names are blank.
snmp-server community <name> Global Config
no snmp-server community This command removes this community name from the table. The name is the community name to be deleted. Format Mode
no snmp-server community <name> Global Config
snmp-server community ipaddr
This command sets a client IP address for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP mask value to denote a range of IP addresses from which SNMP clients may use that community to access the device. A value of 0.0.0.0 allows access from any IP address. Otherwise, this value is ANDed with the mask to determine the range of allowed client IP addresses. The name is the applicable community name. Default Format Mode 0.0.0.0
snmp-server community ipaddr <ipaddr> <name> Global Config
no snmp-server community ipaddr This command sets a client IP address for an SNMP community to 0.0.0.0. The name is the applicable community name. Format Mode
no snmp-server community ipaddr <name> Global Config
snmp-server community ipmask
This command sets a client IP mask for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP address value to denote a range of IP addresses from which SNMP clients may use that community to access the device. A value of 255.255.255.255 will allow access from only one station, and will use that machine's IP address for the client IP Address. A value of 0.0.0.0 will allow access from any IP address. The name is the applicable community name. Default Format Mode 0.0.0.0
snmp-server community ipmask <ipmask> <name> Global Config
no snmp-server community ipmask This command sets a client IP mask for an SNMP community to 0.0.0.0. The name is the applicable community name. The community name may be up to 16 alphanumeric characters. Format
no snmp-server community ipmask <name>
8-30 202-10088-01, March 2005
snmp-server community mode
This command activates an SNMP community. If a community is enabled, an SNMP manager associated with this community manages the switch according to its access right. If the community is disabled, no SNMP requests using this community are accepted. In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable. Default Format Mode The default private and public communities are enabled by default. The four undefined communities are disabled by default.
snmp-server community mode <name> Global Config
no snmp-server community mode This command deactivates an SNMP community. If the community is disabled, no SNMP requests using this community are accepted. In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable. Format Mode

macfilter

This command adds a static MAC filter entry for the MAC address <macaddr> on the VLAN <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The restricted MAC Addresses are: 00:00:00:00:00:00, 01:80:C2:00:00:00 to 01:80:C2:00:00:0F, 01:80:C2:00:00:20 to 01:80:C2:00:00:21, and FF:FF:FF:FF:FF:FF. The <vlanid> parameter must identify a valid VLAN. Up to 100 static MAC filters may be created. Format Mode no macfilter This command removes all filtering restrictions and the static MAC filter entry for the MAC address <macaddr> on the VLAN <vlanid>. The <macaddr> parameter must be specified as a 6byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The <vlanid> parameter must identify a valid VLAN. Format Mode
no macfilter <macaddr> <vlanid> Global Config macfilter <macaddr> <vlanid> Global Config

macfilter adddest

This command adds the interface to the destination filter set for the MAC filter with the given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The <vlanid> parameter must identify a valid VLAN. Format Mode
macfilter adddest <macaddr> <vlanid> Interface Config
8-38 202-10088-01, March 2005
no macfilter adddest This command removes a port from the destination filter set for the MAC filter with the given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The <vlanid> parameter must identify a valid VLAN. Format Mode
no macfilter adddest <macaddr> <vlanid> Interface Config

macfilter adddest all

This command adds all interfaces to the destination filter set for the MAC filter with the given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The <vlanid> parameter must identify a valid VLAN. Format Mode no macfilter adddest all This command removes all ports from the destination filter set for the MAC filter with the given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The <vlanid> parameter must identify a valid VLAN. Format Mode

no monitor session mode Global Config

disabled

monitor session mode Global Config

shutdown

This command disables a port. Default Format Mode enabled
shutdown Interface Config
no shutdown This command enables a port. Format Mode
no shutdown Interface Config

shutdown all

This command disables all ports. Default Format Mode no shutdown all This command enables all ports. Format Mode
no shutdown all Global Config
shutdown all Global Config
This command sets the speed and duplex setting for the interface. Format Mode Acceptable values are:
100h speed {<100 | 10> <half-duplex | full-duplex>} Interface Config
100BASE-T half duplex 100BASE-T full duplex 10BASE-T half duplex 10BASE-T full duplex

100f 10h 10f

speed all
This command sets the speed and duplex setting for all interfaces.
8-42 202-10088-01, March 2005
Format Mode Acceptable values are: 100h 100f 10h 10f
speed all {<100 | 10> <half-duplex | full-duplex>} Global Config
100BASE-T half-duplex 100BASE-T full duplex 10BASE-T half duplex 10BASE-T full duplex

storm-control broadcast

This command enables broadcast storm recovery mode. If the mode is enabled, broadcast storm recovery with high and low thresholds is implemented. The threshold implementation follows a percentage pattern. If the broadcast traffic on any Ethernet port exceeds the high threshold percentage (as represented in Table 1) of the link speed, the switch discards the broadcasts traffic until the broadcast traffic returns to the low threshold percentage or less. The full implementation is depicted in the Table 1.
Table 1. Broadcast Storm Recovery Thresholds
Link Speed 10M 100M 1000M High 5 storm-control broadcast Global Config Low 2
Format Mode no storm-control broadcast
This command disables broadcast storm recovery mode. The threshold implementation follows a percentage pattern. If the broadcast traffic on any Ethernet port exceeds the high threshold percentage (as represented in Table 2) of the link speed, the switch discards the broadcasts traffic until the broadcast traffic returns to the low threshold percentage or less. The full implementation is depicted in the Table 2.
User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software Table 2. Broadcast Storm Recovery Thresholds
Link Speed 10M 100M 1000M High 5 Low 2
no storm-control broadcast Global Config
storm-control flowcontrol
This command enables 802.3x flow control for the switch.
Note: This command only applies to full-duplex mode ports.

show vlan port

This command displays VLAN port information. Format Mode Slot/Port
show vlan port {<slot/port> | all} Privileged EXEC and User EXEC
Valid slot and port number separated by forward slashes. It is possible to set the parameters for all ports by using the selectors on the top line. The VLAN ID that this port will assign to untagged frames or priority tagged frames received on this port. The value must be for an existing VLAN. The factory default is 1.

Port VLAN ID

Acceptable Frame Types Specifies the types of frames that may be received on this port. The options are 'VLAN only' and 'Admit All'. When set to 'VLAN only', untagged frames or priority tagged frames received on this port are discarded. When set to 'Admit All', untagged frames or priority tagged frames received on this port are accepted and assigned the value of the Port VLAN ID for this
8-58 202-10088-01, March 2005
port. With either option, VLAN tagged frames are forwarded in accordance to the 802.1Q VLAN specification. Ingress Filtering May be enabled or disabled. When enabled, the frame is discarded if this port is not a member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is identified by the VLAN ID in the tag. In an untagged frame, the VLAN is the Port VLAN ID specified for the port that received this frame. When disabled, all frames are forwarded in accordance with the 802.1Q VLAN bridge specification. The factory default is disabled.
May be enabled or disabled.
Default Priority The 802.1p priority assigned to tagged packets arriving on the port.

System Utility Commands

This section describes system utilities. The commands are divided into two functional groups: Show commands display switch settings, statistics, and other information. Configuration commands configure features and options of the switch. For every configuration command, there is a show command that displays the configuration setting.

traceroute

This command is used to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. <ipaddr> should be a valid IP address. [port] should be a valid decimal integer in the range of 0(zero) to 65535. The default value is 33434. The optional port parameter is the UDP port used as the destination of packets sent as part of the traceroute. This port should be an unused port on the destination system. Format Mode
traceroute <ipaddr> [port] Privileged EXEC

clear config

This command resets the configuration to the factory defaults without powering off the switch. The switch is automatically reset when this command is processed. You are prompted to confirm that the reset should proceed. Format Mode

Malformed Responses The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses. Bad Authenticators Pending Requests Timeouts Unknown Types Packets Dropped The number of RADIUS Accounting-Response packets containing invalid authenticators received from this accounting server. The number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. The number of accounting timeouts to this server. The number of RADIUS packets of unknown types, which were received from this server on the accounting port. The number of RADIUS packets received from this server on the accounting port and dropped for some other reason.

show authentication

This command displays the ordered authentication methods for all authentication login lists.
9-12 202-10088-01, March 2005 Security Commands
Format Mode Method 1 Method 2 Method 3
show authentication Privileged EXEC
Authentication Login List This displays the authentication login listname.
This displays the first method in the specified authentication login list, if any. This displays the second method in the specified authentication login list, if any. This displays the third method in the specified authentication login list, if any.
show authentication users
This command displays information about the users assigned to the specified authentication login list. If the login is assigned to non-configured users, the user default will appear in the user column. Format Mode User Component
show authentication users <listname> Privileged EXEC This field displays the user assigned to the specified authentication login list. This field displays the component (User or 802.1x) for which the authentication login list is assigned.

show dot1x

This command is used to show a summary of the global dot1x configuration, summary information of the dot1x configuration for a specified port or all ports, the detailed dot1x configuration for a specified port and the dot1x statistics for a specified port - depending on the tokens used. Format Mode
show dot1x [{summary {<slot/port> | all} | {detail <slot/port>} | {statistics <slot/port>}]
If none of the optional parameters are used, the global dot1x configuration summary is displayed. Administrative mode
Indicates whether authentication control on the switch is enabled or disabled.
If the optional parameter 'summary {<slot/port> | all}' is used, the dot1x configuration for the specified port or all ports are displayed. Port
The interface whose configuration is displayed.

Control Mode

The configured control mode for this port. Possible values are force-unauthorized | force-authorized | auto authorized | unauthorized

The configuration files record settings for all global and interface specific settings that define the operation of the stack and individual members. Once a save config command is issued, all stack members store a copy of the configuration settings. If a stack master becomes unavailable, any stack member assuming the role of stack master will operate from the saved configuration files. When a new, out-of-box switch joins a switch stack, it uses the system-level settings of that switch stack. However, if you want it to store this system level configuration, you must issue a save config command. You back up and restore the stack configuration in the same way as you would for standalone switch configuration by using the copy command.
12-8 202-10088-01, March 2005
Switch Stack Management Connectivity
You manage the switch stack and the stack member interfaces through the stack master. You can use the web interface, the CLI, and SNMP. You cannot manage stack members on an individual switch basis.
Connectivity to the Switch Stack Through Console Ports
You can connect to the stack master through the console port of the stack master only.
Connectivity to the Switch Stack Through Telnet
You can connect to the stack master using telnet by telnetting to the ip address of the stack.
Switch Stack Configuration Scenarios
Table 12-2 provides switch stack configuration scenarios. Most of the scenarios assume at least two switches are connected through their stacking ports.

Table 12-2.

Scenario Stack master election specifically determined by existing stack masters Note: This is not recommended. Connect two powered-on switch stacks through the stacking ports. Stack master election specifically determined by the stack member priority value Connect two switches through their stacking ports. Use the switch stack-member-number priority new-priority-number global configuration command to set one stack member to a higher member priority value. Restart both stack members at the same time.
Switch stack configuration scenarios
Result Only one of the two stack masters becomes the new stack master. None of the other stack members become the stack master.

Routing Routing

7300S Series L3 Switch Command CLI Command Mode Router RIP Config Routing config router rip prefrence <0-255> Router RIP Config Interface Config Interface Config Routing config router rip interface defaultmetric <slot/port> <0-15> config router rip interface mode <enable | disable> Router RIP Config Interface Config Interface Config Routing config router rip interface version receive <slot/port> <rip1 | rip2 | both | none> Interface Config Interface Config Routing config router rip interface version send <slot/port> <rip1 | rip1c | rip2 | none> Interface Config Interface Config Routing config router route create <networkaddr> <subnetmask> <nexthopip> [metric] Global Config Syntax no enable
distance rip <1-255>
config router rip interface authentication <slot/port> <none | simple> [key]
ip rip authentication {none | {simple <key>} | {encrypt <key> <keyid>}} no ip rip authentication default-information originate
ip rip no ip rip ip rip receive version {rip1 | rip2 | both | none} no ip rip receive version ip rip send version {rip1 | rip1c | rip2 | none} no ip rip send version ip route <networkaddr> <subnetmask> <nexthopip> [0-255]
A-14 202-10088-01, March 2005
7300S Series L3 Switch Command config router route delete <networkaddr> <subnetmask> <nexthopip> config router route staticpreference <local/static> <0-255> config config router route default create <nexthopip> config router route default delete config router vrrp adminmode <enable/disable> CLI Command Mode Global Config Global Config Global Config Global Config Global Config Global Config Routing config router vrrp interface adminmode <slot/port> <VrID> <enable/disable> Interface Config Interface Config Routing config router vrrp interface priority <slot/port> <VrID> <1-254> Interface Config Interface Config Routing config router vrrp interface ipaddress <slot/port> <vrID> <ipaddr> config router vrrp interface preemptmode <slot/port> <vrID> <enable/disable> Interface Config Interface Config Interface Config Syntax no ip route <networkaddr> <subnetmask> <nexthopip> ip route distance <1-255> ip route default <nexthopip> no ip route default <nexthopip> ip vrrp no ip vrrp ip vrrp <VrID> mode
Routing Routing Routing Routing
no ip vrrp <VrID> mode ip vrrp <VrID> priority <1-254> no ip vrrp <VrID> priority ip vrrp <VrID> ip <ipaddress> <ipaddr> ip vrrp <VrID> preempt

7300S Series L3 Switch Command CLI Command Mode Router RIP Config Routing config router rip hostroutesaccept <enable/disable> Router RIP Config Router RIP Config Switching Switching Switching Switching Switching show serviceport show snmpcommunity show snmptrap show trapflags show telnet Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC and User EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Syntax no split-horizon

no hostroutesaccept

show serviceport show snmpcommunity show snmptrap show trapflags show remotecon
Switching Switching Switching Switching
show forwardingdb agetime [fdbid | all] config network parms <ipaddr> <netmask> [gateway] config network protocol <none | bootp | dhcp> config network webmode <enable | disable>
show forwardingdb agetime {<fdbid> | all} network parms <ipaddr> <netmask> [<gateway>] network protocol {none | bootp | dhcp} ip http server no ip http server
A-18 202-10088-01, March 2005
7300S Series L3 Switch Command config network javamode <enable | disable> CLI Command Mode Privileged EXEC Privileged EXEC Switching Switching config prompt <system prompt> config serial baudrate <speed> Privileged EXEC Line Config Line Config Privileged EXEC Privileged EXEC Global Config Global Config Switching Switching Switching config snmpcommunity create <name> config snmpcommunity delete <name> config snmpcommunity ipaddr <ipaddr> <name> Global Config Global Config Global Config Global Config Switching config snmpcommunity ipmask <ipmask> <name> Global Config Global Config Syntax network javamode no network javamode set prompt <promptstring> serial baudrate {1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 57600 | 115200} serial timeout <0-160> set serviceport ip <ipaddr> <netmask> [gateway] set serviceport protocol {none | bootp | dhcp} snmp-server community ro <name> snmp-server community rw <name> snmp-server community <name> no snmp-server community <name> snmp-server community ipaddr <ipaddr> <name> no snmp-server community ipaddr <name> snmp-server community ipmask <ipmask> <name> no snmp-server community ipmask <name>

Switching

config serial timeout <0 - 160> config serviceport parms <ipaddr> <netmask> [gateway] config serviceport protocol <none | bootp | dhcp> config snmpcommunity accessmode <ro | rw> <name>
7300S Series L3 Switch Command config snmpcommunity mode <enable | disable> <name> CLI Command Mode Global Config Global Config Switching Switching Switching Switching config snmptrap create <name> <ipaddr> config snmptrap delete <name> <ipaddr> config snmptrap ipaddr <ipaddrold> <name> <ipaddrnew> config snmptrap mode <enable | disable> <name> <ipaddr> Global Config Global Config Global Config Global Config Global Config Switching config trapflags authentication <enable | disable> Global Config Global Config Switching config trapflags bcaststorm <enable | disable> Global Config Global Config Switching config trapflags linkmode <enable | disable> Global Config Global Config Switching config trapflags multiusers <enable | disable> Global Config Global Config Syntax snmp-server community mode <name> no snmp-server community mode <name> snmptrap <name> <ipaddr> no snmptrap <name> <ipaddr> snmptrap ipaddr <name> <ipaddrold> <ipaddrnew> snmptrap mode <name> <ipaddr> no snmptrap mode <name> <ipaddr> snmp-server enable traps no snmp-server enable traps snmp-server enable traps bcaststorm no snmp-server enable traps bcaststorm snmp-server enable traps linkmode no snmp-server enable traps linkmode snmp-server enable traps multiusers no snmp-server enable traps multiusers

Extensible Authentication Protocol is a general protocol for authentication that supports multiple authentication methods. EAP, an extension to PPP, supports such authentication methods as token cards, Kerberos, one-time passwords, certificates, public key authentication and smart cards. In wireless communications using EAP, a user requests connection to a WLAN through an AP, which then requests the identity of the user and C-6 202-10088-01, March 2005 Glossary
User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software transmits that identity to an authentication server such as RADIUS. The server asks the AP for proof of identity, which the AP gets from the user and then sends back to the server to complete the authentication. EAP is defined by RFC 2284.

Endstation

A computer, printer, or server that is connected to a network.

Ethernet

A LAN specification developed jointly by Xerox, Intel and Digital Equipment Corporation. Ethernet networks transmit packets at a rate of 10 Mbps.

Fast Ethernet

An Ethernet system that is designed to operate at 100 Mbps.

Fault isolation

A technique for identifying and alerting administrators about connections (such as those associated with switch ports) that are experiencing congestion or failure, or exceeding an administrator-defined threshold.

Fast STP

A high-performance Spanning Tree Protocol. See STP on page 19 for more information.

Filtering

The process of screening a packet for certain characteristics, such as source address, destination address, or protocol. Filtering is used to determine whether traffic is to be forwarded, and can also prevent unauthorized access to a network or network devices.

Flow Control

The process of adjusting the flow of data from one network device to another to ensure that the receiving device can handle all of the incoming data. This is particularly important where the sending device is capable of sending data much faster than the receiving device can receive it. There are many flow control mechanisms. One of the most common flow control protocols for asynchronous communication is called xon-xoff. In this case, the receiving device sends a an xoff message to the sending device when its buffer is full. The sending device then stops sending data. When the receiving device is ready to receive more data, it sends an xon signal.

Traffic prioritization

Giving time-critical data traffic a higher quality of service over other, non-critical data traffic.
Trivial File Transfer Protocol
TFTP is a simple form of the File Transfer Protocol (FTP). TFTP uses the User Datagram Protocol (UDP, a direct protocol used to communicate datagrams over a network with little error recovery) and provides no security features. It is often used by servers to boot diskless workstations, X-terminals, and routers.

Trunking

The process of combing a set of trunks that are traffic-engineered as a unit for the establishment of connections between switching systems in which all of the communications paths are interchangeable.
Unshielded twisted pair is the cable used by 10BASE-T and 100BASE-Tx Ethernet networks.
Virtual Local Area Network
Operating at the Data Link Layer (Layer 2 of the OSI model), the VLAN is a means of parsing a single network into logical user groups or organizations, as if they physically resided on a dedicated LAN segment of their own. In reality, this virtually defined community may have individual members peppered across a large, extended LAN. The VLAN identifier is part of the 802.1Q tag, which is added to an Ethernet frame by C-20 202-10088-01, March 2005 Glossary
User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software an 802.1Q-compliant switch or router. Devices recognizing 802.1Q-tagged frames maintain appropriate tables to track VLANs. The first three bits of the 802.1Q tag are used by 802.1P to establish priority for the packet.
Virtual Router Redundancy Protocol
VRRP specifies an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN. The VRRP router controlling the IP address(es) associated with a virtual router is called the Master, and forwards packets sent to these IP addresses. The election process provides dynamic fail-over in the forwarding responsibility should the Master become unavailable. This allows any of the virtual router IP addresses on the LAN to be used as the default first hop router by end-hosts. The advantage gained from using VRRP is a higher availability default path without requiring configuration of dynamic routing or router discovery protocols on every end-host.
See Virtual Local Area Network on page 20.
See Virtual Router Redundancy Protocol on page 21.
See Wide Area Network on page 21.
Also known as World-Wide Web (WWW) or W3. An Internet client-server system to distribute information, based upon the hypertext transfer protocol (HTTP).

Wide Area Network

A WAN is a computer network that spans a relatively large geographical area. Typically, a WAN consists of two or more local-area networks (LANs).
Windows Internet Naming Service

NETGEAR CASE STUDY

Digital Media Projects (DMP) Streams High Definition Content with NETGEAR

Profile

INDUSTRY:

Background

The High Definition Media Server (HDMS) is DMPs first IPTV product, allowing users to choose a mix of digital terrestrial, satellite, pre-recorded video, advertising and audio channels that can be changed as frequently as required. The company uses Internet Group Management Protocol (IGMP), a communications standard that allows one computer to send content throughout the network to make more efficient use of resources when supporting high-bandwidth programs. This means that DMPs media server can be integrated into the IT infrastructure in almost any office, trading, commercial or leisure environment without disruption to existing services. The result is superb quality video over almost any distance.
Digital Media Projects (DMP) www.digitalmediaprojects.co.uk designs and develops leading-edge, triple-play products to provide television, telephone and broadband services for hospitality, education, residential and corporate environments. DMP's high definition media server is capable of simultaneously receiving and distributing six multiplexes of terrestrial and satellite transmissions to accommodate a limitless number of PC desktops and televisions.

www.netgear.com

PROBLEM/OBJECTIVE
With the rapidly increasing demand for high definition media content, DMPs business has grown significantly in the past year. DMPs growing subscriber base meant that the company needed to ensure that each of its customers in-house IT systems had the necessary backbone and speed required to handle the increasing volume of content coming through the network. DMPs customers required a solid, reliable foundation and at least 300Mbs output per HDMS unit. The infrastructure also needed to intelligently filter the networks traffic on a per-request basis, so IGMP support was therefore essential. Nick Fearnley, Director at Digital Media Projects, Ltd. stated, We did some research and tested IGMP enabled switches from the major names in the market including Cisco, Linksys, HP, but found issues with all. We just werent getting the throughput we needed, which caused severe picture deterioration. In addition, some of the switches had port limits, which again affected the quality of the video even after the IGMP issues were resolved. The gigabit connectivity of the FSM7328S enables DMP to overcome the limits of the standard 10/100 Mbps Ethernet to facilitate the high speeds required for the streaming video from the server. Kilner remarked, We have tested the FSM7328S with our server streaming video out at 200Mbps and above. The NETGEAR switch distributed the incoming content so fast that we ran out of channels we could transmit above this level! This has not always been the case with other vendors equipment. DMP also required an easy-to-maintain solution, as its growing customer base means that after the units are installed, the network should be easy for administrators to manage. NETGEAR FSM7328S Managed Switches provide GUI-based device configuration to simplify and reduce the workload for IT staff.

RESULT

After successful trials and installations with the FSM7328S, DMP was impressed with the superior performance of the NETGEAR products and recommended NETGEAR L3 switches to complement its customers IP TV head units. Kilner commented, We have found the NETGEAR FSM7000 series of switches to provide almost out of the box support for our highbandwidth, triple-play backbones. It has proved to be the most reliable switching platform we have tested to date, combined with simple, yet powerful configuration and management. NETGEARs FSM7328S offered us the reliable performance and low maintenance requirements we were looking for, while also having a lower cost-per-port than the other products on the market. NETGEAR has a fantastic support team that played an active part in working alongside us to make sure all our requirements were fulfilled. In the future, we are looking to offer triple-play to residential customers, so well need high throughput with maximum security and are hoping to work closely with NETGEAR to ensure this happens!

SOLUTION

As Iain Kilner, fellow Director of DMP, was already very familiar with the NETGEAR reputation for high quality home and small business networking products, DMP turned to NETGEAR to evaluate its ProSafe line of business-class networking products. NETGEAR reviewed the needs of DMP and its customers and suggested the ProSafe 24-port 10/100 L3 Managed Stackable Switch with 4 gigabit ports (FSM7328S). The NETGEAR FSM7328S is a powerful, easy to use managed switch with front-panel stacking capabilities that enable DMP to overcome the problem of port limits by connecting up to eight individual switches utilizing standard copper or fiber gigabit interfaces and cards, building a single-IP manageable device. This creates a cost-effective infrastructure that grows with the network, for maximized flexibility and scalability. The NETGEAR team helped us test and develop the necessary firmware upgrades to get the switch filtering correctly, said Kilner. The stacking capabilities mean we can scale according to our customers individual needs, ensuring that the content runs smoothly throughout the network.
*The Lifetime Hardware Warranty only covers hardware, fans, and internal power supplies, and does not include external power supplies or software. Hardware modifications or customization void the warranty. The warranty is only valid for the original purchaser and cannot be transferred. NETGEAR, the NETGEAR logo, Connect with Innovation, ProSafe and ProSecure are trademarks and/or registered trademarks of NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Other brand names mentioned herein are for identification purposes only and may be trademarks of their respective holder(s). Information is subject to change without notice. 2009 NETGEAR, Inc. All rights reserved.