Home » Netgear Manuals » Hubs & Switches » Netgear GC108P » Manual Viewer

Netgear GC108P User Manual - Page 310

Security > Traffic Control > Storm Control, Ingress Control Mode

Add to My Manuals
Save this manual to your list of manuals

Page 310 highlights

Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Security > Traffic Control > Storm Control. The Storm Control page displays. 7. In the Storm Control section, configure the following settings: a. From the Ingress Control Mode menu, select the mode of broadcast affected by storm control: • Disabled. Storm control is disabled. This is the default setting. • Unknown Unicast. If the rate of incoming unknown Layer 2 unicast traffic (that is, traffic for which a destination lookup failure occurs) increases beyond the configured threshold on an interface, the traffic is dropped. • Multicast. If the rate of incoming Layer 2 multicast traffic increases beyond the configured threshold on an interface, the traffic is dropped. • Broadcast. If the rate of incoming Layer 2 broadcast traffic increases beyond the configured threshold on an interface, the traffic is dropped. b. If the selection from the Ingress Control Mode menu is not Disabled, specify whether the ingress control mode is enabled by selecting Enable or Disable from the Status menu. c. In the Threshold field, specify the maximum rate at which unknown packets are forwarded. The range is a percent of the total threshold between 0-100 percent. The default is 5 percent. d. In the Storm Control section, from the Control Action mode menu, select one of the following options: • None. This is the default setting. • Trap. If the threshold of the configured broadcast storm is exceeded, a trap is sent. • Shutdown. If the threshold of the configured broadcast storm is exceeded, the port is shut down. 8. Click the Apply button. Your settings are saved. 9. To enable or disable storm control for one or more ports or to specify different threshold and control action settings for one or more ports, do the following: a. In the Port Settings section, select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface. Manage Switch Security 310 User Manual

Section	Page
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power	1
Contents	3
1 Getting Started	10
Available publications	11
Switch management options and default management mode	12
Manage the switch by using the local browser UI	13
Software requirements for the local browser UI	13
Supported web browsers for the local browser UI	13
User-defined fields	14
Access the switch	14
Access the switch on-network and connected to the Internet	15
Access the switch off-network and not connected to the Internet	25
Credentials for the local browser UI	28
Register and access the switch with your NETGEAR account	29
Change the management mode of the switch	32
Change the management mode to Direct Connect Web-browser Interface	32
Change the management mode back to NETGEAR Insight Mobile App and Insight Cloud Portal	33
Change the language of the local browser UI	35
How to configure interface settings	36
Use the Device View of the local browser UI	38
2 Configure System Information	41
View or define system information	42
View the temperature sensor information	44
View the software versions	45
View the switch CPU status	46
Configure the CPU thresholds	48
Configure the IP network settings for management access	49
Configure the IPv4 network and VLAN settings for the local browser UI	49
Configure the IPv6 network settings for the local browser interface	51
View the IPv6 network neighbors	53
Configure the time settings	54
Configure the time settings manually	54
Configure the time settings with SNTP and configure the global SNTP settings	56
View the SNTP global status	58
Configure an SNTP server	60
Configure daylight saving time settings	64
View the daylight saving time status	67
Manage the denial of service settings	68
Configure Auto-DoS	68
Configure protection for different types of denial of service attacks	69
Configure the DNS settings	71
Configure the global DNS settings	71
Configure and view host name-to-IP address information	73
Configure green Ethernet settings	76
Configure the global green Ethernet settings	76
Configure the green Ethernet interface settings	77
Manage the Bonjour settings and view Bonjour information	79
Manage the Bonjour settings	79
View Bonjour information	80
Control the LEDs	81
Use the Device View	82
Configure Power over Ethernet	82
Configure SNMP	82
Configure the SNMPv1 and SNMPv2 communities	82
Configure SNMPv1 and SNMP2 trap settings	86
Configure SNMPv1 and SNMPv2 trap flags	88
View the supported MIBs	89
Configure SNMPv3 users	90
Configure Link Layer Discovery Protocol	92
Configure the LLDP global settings	92
Configure the LLDP port settings	93
View the LLDP-MED network policy	95
Configure the LLDP-MED port settings	96
View the local LLDP information	97
View the LLDP neighbors information	100
Configure DHCP snooping	103
Set up Power over Ethernet timer schedules	111
3 Configure Switching	112
Configure the port settings and maximum frame size	113
Configure link aggregation groups	116
Configure LAG settings	116
Configure LAG membership	118
Set the LACP system priority	119
Set the LACP port priority settings	120
Configure VLANs	121
Manage the basic VLAN settings	122
Configure VLAN membership	125
View the VLAN status	127
Configure the PVID settings for an interface	128
Configure a MAC-based VLAN	130
Configure protocol-based VLAN groups	132
Configure protocol-based VLAN Group membership	134
Configure a voice VLAN	135
Configure the GARP switch settings	137
Configure GARP ports	138
Configure Auto-VoIP	140
Configure the Auto-VoIP global and protocol-based port settings	140
Configure Auto-VoIP OUI-based properties	141
Configure OUI-based port settings	142
Manage the OUI table	144
Display the Auto-VoIP status	146
Configure Spanning Tree Protocol	147
Spanning Tree Protocol overview	147
Configure the STP settings	148
Configure the CST settings	149
Configure the CST port Settings	151
View the CST port status	153
View Rapid STP information	155
Manage the MST settings	156
Configure MST port settings	159
View the STP statistics	162
Configure multicast	164
View, search, or clear the MFDB table	164
View the MFDB statistics	165
Configure the auto-video settings	166
Configure IGMP snooping	167
Configure an IGMP snooping querier	177
Configure MLD snooping	182
Configure multicast VLAN registration	193
Configure the global MVR settings	193
Configure an MVR group	195
Configure an MVR interface	196
Configure the MVR group membership	197
View MVR statistics	198
View, search, and configure the MAC address table	199
View and search the MAC address table	200
Set the dynamic address aging interval	201
Add a static MAC address	202
Remove a static MAC address	203
Configure Layer 2 loop protection	204
Configure global Layer 2 loop protection	204
Configure Layer 2 loop protection on a port	206
4 Configuring Routing	208
How the switch handles routing	209
Enable the routing mode	209
View the IP statistics	210
Configure routing VLANs	213
Configure VLAN routing with the VLAN Routing Wizard	214
Manually manage routing VLANs	216
Configure router discovery	219
Configure routes and view routes	220
Delete routes	222
Configure ARP	223
View entries in the ARP cache	224
Create a static ARP entry	225
Configure the global ARP settings	226
Remove ARP entries from the ARP cache	227
5 Configure Quality of Service	229
Quality of Service concepts	230
Manage Class of Service	230
CoS configuration concepts	230
Configure the global CoS settings	231
Configure the CoS settings for an Interface	232
Configure CoS queue settings for an interface	234
Map 802.1p priorities to queues	236
Map DSCP values to queues	237
Manage Differentiated Services	239
Overview of how you can define DiffServ	239
Configure the DiffServ settings	239
Configure the global DiffServ mode	240
Configure a DiffServ class	241
Configure the DiffServ IPv6 class settings	248
Configure a DiffServ policy	253
Configure the DiffServ service interface	259
View DiffServ service statistics	261
6 Manage Switch Security	263
Change the local device password for the local browser UI	264
Manage the RADIUS settings	265
Configure the global RADIUS server settings	265
Configure a RADIUS authentication server on the switch	267
Configure a RADIUS accounting server	271
Configure TACACS+ settings	274
Configure the global TACACS+ settings	275
Configure a TACACS+ server on the switch	276
Modify the settings for a TACACS+ server on the switch	277
Remove a TACACS+ server from the switch	278
Configure authentication lists	279
Configure the HTTP authentication list	279
Configure the HTTPS authentication list	280
Configure the dot1x authentication list	282
Configure management access	283
Configure HTTP settings	283
Configure HTTPS settings	284
Manage certificates	286
Control access with profiles and rules	289
Add an access profile	290
Add a rule to an access rule profile	291
Activate the access profile	292
Display the access profile summary and the number of filtered packets	293
Deactivate an access profile	294
Remove an access profile	295
Configure port authentication	296
Configure global 802.1X settings	297
Manage port authentication for individual ports	298
View the port summary	303
View the client summary	304
Set up traffic control	306
Manage MAC filtering	306
View the MAC filter summary	308
Configure storm control	309
Configure port security	311
Configure protected ports	315
Configure a private VLAN	316
Configure access control lists	322
Use the ACL Wizard to create a simple ACL	323
Configure a MAC ACL	329
Configure MAC ACL rules	332
Configure MAC bindings	337
View or delete MAC ACL bindings in the MAC binding table	339
Configure a basic or extended IPv4 ACL	340
Configure rules for a basic IPv4 ACL	344
Configure rules for an extended IPv4 ACL	348
Configure an IPv6 ACL	356
Configure rules for an IPv6 ACL	359
Configure IP ACL interface bindings	367
View or delete IP ACL bindings in the IP ACL binding table	369
Configure VLAN ACL bindings	370
7 Perform Maintenance Tasks	373
Reboot the switch from the local browser UI	374
Reset the switch to its factory default settings	375
Export a file from the switch	377
Export a file to a TFTP server	377
Use an HTTP session to export a file	378
Update the software or download a file to the switch	380
Use an HTTP session to update the software image or download a file to the switch	380
Use an HTTP session to download and install an SSL security certificate file on the switch	382
Use a TFTP server to update the software image or download a file to the switch	384
Manage software images	386
Copy an image	386
Configure dual image settings	387
View the dual image status	389
Perform troubleshooting tasks	390
Ping an IPv4 address	390
Ping an IPv6 address	392
Send an IPv4 traceroute	394
Send an IPv6 traceroute	395
Enable remote diagnostics	397
8 Manage Power over Ethernet	399
PoE concepts	400
Device class power requirements	400
Power allocation and power budget concepts	401
Activate the new PoE budget for an optional or replacement power adapter	403
Configure the global PoE settings	404
Manage and view the PoE+ port configuration	406
Reset PoE+ ports	410
Set up PoE timer schedules	411
Create a PoE timer schedule	411
Specify the settings for an absolute PoE timer schedule	412
Specify the settings for a recurring PoE timer schedule	413
Change the settings for a recurring PoE timer schedule entry	415
Delete a PoE timer schedule entry	416
Delete a PoE timer schedule	417
9 Monitor the Switch	419
Monitor the switch and the ports	420
View or clear the switch statistics	420
View the port statistics	422
Reset counters for all interfaces on the switch	423
Reset counters for a specific interface	424
View or clear the detailed port statistics	425
View or clear the EAP statistics	431
Test the cables	433
Configure and the view the logs	434
Manage the memory log	434
Manage the flash log	436
Manage the server log	438
View or clear the trap logs	441
Configure port mirroring	443
A Configuration Examples	445
Virtual Local Area Networks (VLANs)	446
VLAN configuration examples	447
Access control lists (ACLs)	448
MAC ACL sample configuration	448
Standard IP ACL sample configuration	449
Differentiated Services (DiffServ)	450
Class	451
DiffServ traffic classes	451
DiffServ example configuration	453
802.1X access control	454
802.1X example configuration	456
Multiple Spanning Tree Protocol (MSTP)	457
MSTP example configuration	458
VLAN routing interfaces	460
B Switch Default Settings and Hardware Specifications	462
Switch default settings	463

Match case Limit results 1 per page

Insight Managed 8-Port Gigabit (Hi-Power)

PoE+ Smart Cloud Switch with

NETGEAR FlexPoE Power

Manage Switch Security

User Manual

310

Click the

button.

The System Information page displays.

Select

Security > Traffic Control > Storm Control

The Storm Control page displays.

In the Storm Control section, configure the following settings:

From the

Ingress Control Mode

menu, select the mode of broadcast affected by

storm control:

•

Disabled

. Storm control is disabled. This is the default setting.

•

Unknown Unicast

. If the rate of incoming unknown Layer 2 unicast traffic (that is,

traffic for which a destination lookup failure occurs) increases beyond the

configured threshold on an interface, the traffic is dropped.

•

Multicast

. If the rate of incoming Layer 2 multicast traffic increases beyond the

configured threshold on an interface, the traffic is dropped.

•

Broadcast

. If the rate of incoming Layer 2 broadcast traffic increases beyond the

configured threshold on an interface, the traffic is dropped.

If the selection from the

Ingress Control Mode

menu is

not

Disabled

, specify

whether the ingress control mode is enabled by selecting

Enable

Disable

from

the

Status

menu.

In the

Threshold

field, specify the maximum rate at which unknown packets are

forwarded.

The range is a percent of the total threshold between 0–100 percent. The default is

percent.

In the Storm Control section, from the

Control Action

mode menu, select one of the

following options:

•

None

. This is the default setting.

•

Trap

. If the threshold of the configured broadcast storm is exceeded, a trap is

sent.

•

Shutdown

. If the threshold of the configured broadcast storm is exceeded, the

port is shut down.

Click the

Apply

button.

Your settings are saved.

To enable or disable storm control for one or more ports or to specify different threshold and

control action settings for one or more ports, do the following:

In the Port Settings section, select one or more interfaces by taking one of the

following actions:

•

To configure a single interface, select the check box associated with the port, or

type the port number in the

Go To Interface

field and click the

button.

•

To configure multiple interfaces with the same settings, select the check box

associated with each interface.