Netgear 7000 Series Managed switch GSM7312/GSM7324/FSM7326P/GSM7224/GSM7212

1. Netgear 7000 Series Managed switchGSM7312/GSM7324/FSM7326P/GSM7224/GSM7212

2. Background • Why is a non-blocking architecture important? • Blocking architectures drop traffic when over-subscribed (over-capacity) • Dropping traffic at higher speed means more data lost or more users affected • Data loss in the core of the network is a critical failure • What is L3 switching? • Routing done in a switch • Cheaper and faster than traditional routers • When/Why use L3 switching? • Companies > 100 users • Flat networks bogging down on traffic • Need to segment network to improve performance • VLAN • Sub-networks • How is it different than L2? • L2 uses MAC addresses, limited to one IP network • L3 uses IP addresses, can route to any IP network

3. Layer2 segmentation - VLAN

4. Layer3 segmentation - IP Subneting

5. Layer 2 features Layer 3 features Layer 2 vs. Layer 3 features • SMNP – tested with OpenView • RMON (groups 1,2,3 and 9) • 802.3x flow control • Up to 512 static VLAN groups (IEEE 802.1Q) • Protocol Based VLAN • 803.3ad LACP • Spanning Tree (IEEE 802.1D) • Rapid Spanning Tree (IEEE 802.1w) • Multiple Spanning Tree (IEEE 802.1s) • Port Mirroring • DHCP/Bootp Client for automatic IP address setup • 802.1x port baswed security • Broadcast Storm control • IGMP Snooping • IP Routing • RIP I, II (Routing Information Protocol) • OSPF V2 (Open Shortest Path First) • VRRP (Virtual Router Redundancy Protocol) • Eliminates single point of failure • DiffServ • ACL

6. Application FVL328 FSM726 GSM712 FSM726S/FSM750S • Core of Network • Sits between WAN device and LAN • Hang as many GSM7xx or FSM7xx switches on it as necessary

7. GSM7212 • 12 Gigabit ethernet ports. • Each port support optional hot-swapping SFP GBIC slots for fiber connection. • Full layer2 management suite.

8. GSM7224 • 24 Gigabit Ethernet ports. • 4 SFP GBIC slot for fiber connection. • Full layer2 management suite.

9. GSM7224 Competitive chart

10. GSM7312 • 12 Gigabit copper/GBIC combo ports. • Full layer3 management suite.

11. GSM7312 Competitive chart

12. GSM7324 • 24 Gigabit ethernet ports. • 4 optional hot-swapping SFP GBIC slot for fiber connection. • Full layer3 management suite.

13. GSM7324 Competitive chart

14. FSM7326P • 24 10/100 FastEthernet ports. • 2 optional hot-swapping SFP GBIC slots for fiber connection. • IEEE 802.3af Power-over-Ethernet support. • 170W of PoE for Powered Device (PD) such as: • 24 VoIP phones • 15 WG302 Access Points • 10 IP Video cameras (drawing full power)

15. FSM7326P Competitive chart

16. GSM7312 Performance Specifications • Forwarding modes: Store-and-forward • Bandwidth: 24Gbps • Switch latency: < 20 microsecond for 64-byte frames • System memory: 128Mb • Packet buffer memory: 122 KB embedded memory per port • Flash: 16Mb • Address database size: 16000 MAC addresses • Addressing: 48 bits

17. GSM7324 Performance Specifications • Forwarding modes: Store-and-forward • Bandwidth: 40Gbps • Switch latency: < 20 microsecond for 64-byte frames • System memory: 128Mb • Packet buffer memory: 122 KB embedded memory per port • Flash: 16Mb • Address database size: 16000 MAC addresses • Addressing: 48 bits

18. FSM7326P Performance Specifications • Store and forward. • Bandwidth: 8.8 Gbps (non-blocking). • < 20 microseconds for 64-bytes frames. • System memory: 128MB. • Packet buffer memory 32MB. • Flash: 16M. • Address database size: 8000.

19. GSM7212 Performance Specifications • Store and forward. • Bandwidth: 24 Gbps (non-blocking). • < 20 microseconds for 64-bytes frames. • System memory: 64MB. • Packet buffer memory 171 KB per port. • Flash: 8M. • Address database size: 8000. • Number of VLANs: 256 • Number of trunk: 6 • Number of queues: 4

20. GSM7224 Performance Specifications • Store and forward. • Bandwidth: 48 Gbps (non-blocking). • < 20 microseconds for 64-bytes frames. • System memory: 64MB. • Packet buffer memory 122 KB per port. • Flash: 8M. • Address database size: 8000. • Number of VLANs: 228 • Number of trunk: 6 • Number of queues: 4

21. GSM7312 System Specifications • Number of VLAN 228 • Maximum VLAN ID 4096 • Number of 802.1p traffic class 8 • Number of trunks (up to 8 ports) 6 • Number of routes 512 • Number of routed VLAN 24 • Number of ARP entries 2048 • Number of ACL (and entries) with 10 entries/rule 100 • Number of Queues used for DiffServ 8 • Maximum rules per class 8 • Maximum instance per policy 10 • Maximum attributes per instance 1 • Maximum service interfaces 48

22. GSM7324 System Specifications • Number of VLAN 228 • Maximum VLAN ID 4096 • Number of 802.1p traffic class 4 • Number of trunks (up to 8 ports) 6 • Number of routes 512 • Number of routed VLAN 24 • Number of ARP entries 2048 • Number of ACL (and entries) with 10 entries/rule 100 • Number of Queues used for DiffServ 4 • Maximum rules per class 8 • Maximum instance per policy 10 • Maximum attributes per instance 1 • Maximum service interfaces 48

23. FSM7326P System Specifications • Number of MAC address 8000 • Number of VLAN 228 • Maximum VLAN ID 4096 • Number of 802.1p traffic class 4 • Number of trunks (up to 8 ports) 6 • Number of routes 16 • Number of routed VLAN 6 • Number of ARP entries 2047 • Number of ACL (and entries) with 10 entries/rule 100 • Number of Queues used for DiffServ 2 • Maximum rules per class 8 • Maximum instance per policy 10 • Maximum attributes per instance 8 • Maximum service interfaces 16

24. GSM7324 Front Panel

25. GSM7312 Front Panel

26. FSM7326P Front Panel

27. GSM7212 Front Panel

28. GSM7224 Front Panel

29. Firmware • Version 2 • Version 3 • New CLI • Jumbo Frame support • Static LAG support • DHCP Server

30. Configurations

31. Management Interface • Three ways to manage the switch: • Command Line Interface • Web Browser Interface • SNMP Access • All three: • Provide access to the same information and functions • Grant access via user accounts • Use a Management VLAN with a default ID of 1 • The CLI is accessible via telnet and the serial port • Baud Rate: 9600 Bps • Data bit: 8 • Parity: None • Stop bit: 1 • Flow Control: None

32. User Account • To access the switch via CLI, Web or SNMP you must login as a user • Two kinds of user: • READWRITE user : • Has the authority to do anything on the system • There is one READWRITE user who is always enabled • The default READWRITE user name is admin • READONLY users : • Can view but not change data • There can be up to five READONLY users • The default READONLY user name is guest • SNMP user accounts are separate from CLI and Web accounts

33. Setting up user accounts • Access the switch via the serial port • Login the first time using the admin account • By default there is no password • Set up a password for the admin account • Create additional accounts • Create additional READONLY user accounts and password protection as required • Create SNMP user accounts and password protection as required • For greater security specify encryption for account access – Secure HTTP/SSH.

34. Configurable management VLAN • Configurable Management VLAN: • Management VLAN is used to manage switch over a network • Only one Management VLAN may be associated with a switch • The default Management VLAN ID is 1 • Applies to all network connections • Web, telnet and SNMP • Does not apply to the service port or any routing interfaces • Provides additional control over switch access

35. Command Line Interface • Access via the serial port or by telnet • Answer the login prompts with a user name and password (blank if none has been set) • CLI commands follow the industry-standard (IS) format • A list of commands is available by typing ? at the prompt • Command help is available by typing the command name followed by ?

36. CLI Modes • User Exec Mode • Privileged Exec Mode - en • Global Config Mode – config • Vlan Mode – vlan database • Interface Config Mode – interface x/x • Line Config Mode • Policy Map Mode • Policy Class Mode • Class Map Mode • Router Config OSPF Mode • Router Config RIP Mode • Router Config BGP Mode • Bandwidth Provisioning Mode • Bwprovisioning - Trafficclass Mode • Bwprovisioning -BWAllocation Mode • DHCP Pool Configuration Mode – ip dhcp pool <name> The IS-CLI is divided into various modes. The commands available to the operator at any point in time depend upon the mode. At login, the user starts in User Exec Mode. A password is required to enter any other mode.

37. CLI Tree Structure

38. CLI conventions • Some commands take no parameters: • e.g show inventory, or snmp-server enable traps • Most commands take parameters: • Parameters are positional and must be entered in the correct order • Required parameters (in angle brackets <>) precede optional parameters (in square brackets []) • Use of {} indicates a choice of required values • Begin comments with # • Reverse the action of a command • No <command> • e.g “no vlan 100” # Remove vlan 100

39. CLI shortcuts • When enough letters of a command are typed to uniquely identify it, the command may be: • Executed by typing <enter> (command abbreviation) • Completed by typing the <tab> or <space bar> (command completion) • The system stores the last 16 commands executed -- access by typing the <up-arrow-key> • Help is accessed by entering a question mark

40. Network connectivity via CLI • Specify IP address information: • Privileged Exec Mode • network parms <ipaddr> <netmask> [<gateway>] • Specify MAC address type and local address if not using the burned-in address: • Privileged Exec Mode: • network mac-type {local | burnedin} • network mac-address <macaddr> • Set Management VLAN Id: • Privileged Exec Mode: • network mgmt_vlan <1-4094> -- default 1 • Display settings: • Privileged and User Exec Mode: • show network

41. Web Interface • http://<management_IP_address> • Access using any web browser (e.g. Microsoft Explorer or Netscape) • Use the IP address of the switch as the URL • Type the user account name in the login pop-up box • Provide a password if one has been defined

42. Using web interface • Navigate using the menus in the left side panel • Pop-up messages are used on the screen as feedback for incorrect input, failed submissions, successful submissions, etc. • Help text is available by clicking on the “help” button • If java is enabled (on the Network Connectivity panel) a picture of the switch is shown – click on a port to bring up the Port Configuration panel

43. Java Applet

44. SNMP • Access using network control station • Agent supports SNMPv1, SNMPv2 and SNMPv3 • SNMP user accounts are similar to CLI/Web accounts • A password may be defined • Authentication is available: • MD5 • SHA • Encryption is available: • DES

45. SNMP structure

46. MIBs • RFC 1213 -- Interfaces MIB • RFC 1493 -- Bridge MIB • RFC 1643 -- Ethernet MIB • RFC 1657 -- BGP4 MIB • RFC 1724 -- RIP Version 2 MIB • RFC 1850 -- OSPF Version 2 MIB • RFC 2233 -- Interfaces Group MIB • RFC 2674 -- VLAN Bridge MIB • RFC 2787 -- Virtual Router Redundancy Protocol • RFC 2819 -- RMON MIB • RFC 2932 -- IPv4 Multicast Routing MIB • RFC 2933 -- IGMP MIB • RFC 2934 -- PIM MIB • RFC 3289 -- Differentiated Services MIB • IEEE 802.3 Annex 30c -- Link Aggregation • Plus LVL7 enterprise MIB • Draft DVMRP

47. RMON • SNMP includes a RMON agent. • Supports the RMON MIB, RFC 2819 • Group 1 – Statistics • Group 2 – History • Group 3 – Alarm • Group 9 – Event • No configuration parameters are required. • All communication is via USMDB.

48. Initial Setup • Default – DHCP • CLI • Web interface

49. Initial Setup - CLI • Management IP • Default – DHCP • Configure static IP • network protocol none (turn off DHCP) • network parms <IP address> <IP subnet> <gateway> • Save configuration • copy system:running-config nvram:startup-config • Show current firmware version • en • show hardware

50. Initial Setup