NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

daveoneal's avatar
daveoneal
Aspirant
Sep 20, 2016

Service Port routable on managed switch ?

Is the Service Port or Out of Band port connected via ethernet routable?

I have our correct subnet and default gateway setup and can't ping past the default gateway (which is a cisco router).

I can ping the default gateway.

I can also access the switch if I am on the local LAN.

I can't access the switch if I'm on another subnet. The cisco is configured right.

I could use a port on the main switch and it works, but I thought the whole point of the out of band interface is to segregate traffic for management.

6 Replies

  • DaneA's avatar
    DaneA
    NETGEAR Employee Retired

    Hi daveoneal,

     

    Welcome to the community! :) 

     

    What I know about Out-of-Band connectivity is that you will need to use the console port to connect the switch to a terminal desktop system running terminal emulation software.  

     

    What is the model of the NETGEAR switch you have? 

     

     

    Regards,

     

    DaneA

    NETGEAR Community Team

  • DaneA's avatar
    DaneA
    NETGEAR Employee Retired

    Hi daveoneal,

     

    I just want to follow-up on this.

     

     

    Regards,

     

    DaneA

    NETGEAR Community Team

    • daveoneal's avatar
      daveoneal
      Aspirant

      No, there are at least two out of band ports. One is USB to serial in which you use terminal emulation.

       

      But another is RJ45 ethernet with a default IP address of 169.254.101.100. We had set that IP address to an internal one with the correct gateway. We can address that IP address from on the same LAN segment. We can't access that IP address if we are one hop away. That doesn't make sense because the IP routing looks correct.

       

      The out of band port is set to 10.10.1.120

      I can access every other device in the 10.10.1.x range from my subnet (172.16.3.x) but not the netgear

      The netgear has the same default route as every other devce on 10.10.1.x

       

      So there must be something special about the out of band port, but I can find nothing in the docs.

      • DaneA's avatar
        DaneA
        NETGEAR Employee Retired

        Hi daveoneal,

         

        It would be best if you post a screenshot or image of your detailed network setup.  Also, what is the model of the NETGEAR switch you are referring to? 

         

         

        Regards,

         

        DaneA

        NETGEAR Community Team
         

  • Retired_Member's avatar
    Retired_Member

    Hi daveoneal,

     

    Welcome to the community!

     

    I have tested the scenario same as you. And the ServicePort can be routable if config gateway in ServicePort.

    Maybe it's helpful for you.

     

    [Test topology]:

    PC1------(port1)Switch1(port2)-------(ServicePort)DUT(port1)--------(port1)Switch2(port2)--------PC2

     

    [Configuration]:

    For DUT:

    1. SevicePort IP is 200.1.1.2/24, gateway is 200.1.1.1

             serviceport protocol none

             serviceport ip 200.1.1.2 255.255.255.0 200.1.1.1

    1. Port1 IP is 100.1.1.1/24, Create one default route, next-hop is 100.1.1.2

             interface 1/0/1

             routing

             ip address 100.1.1.1 255.255.255.0

             exit

             ip route default 100.1.1.2

     

    For Switch1:

    1. Port2 IP is 200.1.1.1/24

             interface 1/0/2

             routing

             ip address 200.1.1.1 255.255.255.0

             exit

    1. Port1 IP is 201.1.1.1/24

             interface 1/0/1

             routing

             ip address 201.1.1.1 255.255.255.0

             exit

     

    For Switch2:

    1. Port1 IP is 100.1.1.1/24

             interface 1/0/1

             routing

             ip address 100.1.1.1 255.255.255.0

             exit

    1. Port2 IP is 101.1.1.1/24

             interface 1/0/2

             routing

             ip address 101.1.1.1 255.255.255.0

             exit

     

    For PC1:

    Set IP is 201.1.1.2/24, gateway is 201.1.1.1

     

    For PC2:

    Set IP is 101.1.1.2/24, gateway is 101.1.1.1

     

    [Test Result]:

    From PC1: ping 201.1.1.1/200.1.1.1/200.1.1.2 ok, so PC1 can reach DUT ServicePort success

    From PC2: ping 101.1.1.1/100.1.1.1/100.1.1.2 ok

     

     

     

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More