NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
adeeb_taqui
Mar 05, 2019Aspirant
M4300 configuration as AV network access switch
Greetings to all,
I want to know the way to configure new M4300 network switches as AV network access switch for below requirements.
I want to create a management vlan with (provided Mana...
- Mar 05, 2019
OK, here's how you could do it
1/ Connect to the M4300 switch, per the Installation Guide
Not sure if you want to use CLI or the Web GUI, I am going to assume Web GUI for now. Since you want to assign VLANs on all ports, it might be better for you, initially, to connect via the OOB (out-of-band) port. This port is a Gigabit Ethernet port for the Management CPU only. If you connect your computer to that OOB port using an Ethernet cable, make sure to configure your computer with a static IP address in the 192.168.0.0/16, like 192.168.0.100. Then you can launch your web browser and access the M4300 switch via its OOB port by entering 192.168.0.239. Enter admin for the user name, leave the password field blank, and click the
LOGIN button. The Web GUI page displays. Please remember to click the blue button APPLY before leaving each page below:2/ Create the VLANs
Go to Switching\VLAN\Basic\VLAN Configuration and find the table called VLAN Configuration at the bottom of the page. Only VLAN 1 (default) should be present. You can use the blank fields at the top to add the two new VLANs. Enter 2 in VLAN ID, AV in VLAN Name, let Disable in Make Static and click the blue Add button. Re-do the same for the second VLAN: Enter 5 in VLAN ID, Management in VLAN Name, let Disable in Make Static and click the blue Add button.
3/ Configure the Management VLAN and the IP address of the M4300 switch
Go to System\Management\Management Interfaces\IPv4 Management VLAN Configuration and find the first section at the top of the page. Enter 5 in Management VLAN ID, keep Routing Mode as Enabled, select Manual as Configuration Method and enter your supplied IP Address 10.70.1.228, Subnet Mask 255.255.255.0 and Gateway 10.70.1.250. Click the blue Apply button.
4/ Assign one port as an uplink trunk to the existing core switch
I am going to assume you have an M4300-12X12F and you want to assign the first fiber port (port number 1) to the uplink. Go to Switching\VLAN\Advanced\VLAN Trunking Configuration and find the large table called Switchport Configuration. Click the first row (Interface 1/0/1 meaning Switch 1 - Physical Interface - Port 1) to select it, and start the configuration for that port 1. Select Trunk in Switchport Mode dropdown list at the top of the second column, let Acces VLAN ID empty, Select 5 in Native VLAN ID dropdown list at the top of the fifth column and Select 2 in the Trunk Allowed VLANs list at the top of the last column. Click the blue Apply button.
5/ Assign all other ports to AV VLAN 2
Stay on this Switching\VLAN\Advanced\VLAN Trunking Configuration page. Select all rows from Interface 1/0/2 (port 2) to Interface 1/0/24 (port 24). To do that, you can click the button at the very top left (will select all rows) and don't forget to un-select the first row (Interface 1/0/1 you have already configured). Start the configuration for ports 2 to 24. Select Access in Switchport Mode dropdown list at the top of the second column, Select 2 in Access VLAN ID dropdown list at the top of the fourth column, let Native VLAN ID empty at the top of the fifth column, and let Trunk Allowed VLANs empty in the list at the top of the last column. Click the blue Apply button.
With 4/ and 5/ you have effectively "disabled" VLAN 1 which is not used anywhere any more. To verify it, you can go to Switching\VLAN\Advanced\VLAN Membership (nothing needs to be done here).
6/ Configure AV VLAN 2 for SDVoE (with same Multicast configuration as default VLAN 1)
- Go to Switching\Multicast\IGMP Snooping\Configuration: check that all three IGMP Snooping Configuration Admin Mode, Validate IGMP Header and Proxy Querier mode are ENABLE
- Go to Switching\Multicast\IGMP Snooping\Interface Configuration: all interfaces should show DISABLE in Admin Mode
- Go to Switching\Multicast\IGMP Snooping\IGMP VLAN Configuration: we should show VLAN 2 in the IGMP VLAN Configuration table. Select VLAN 2 in that table by clicking the second row and start to configure that VLAN: Select ENABLE in the Admin Mode dropdown list, Select ENABLE in the Fast Leave dropdown list, Membership interval 260, Maximum Response Time 10, Multicast Router Expiry Time 0, Report Suppression DISABLE and Proxy Querier ENABLE. Click the blue Apply button
- Go to Switching\Multicast\IGMP Snooping\Multicast Router Configuration: all interfaces should show DISABLE in Admin Mode
- Go to Switching\Multicast\IGMP Snooping\Multicast Router VLAN Configuration: it should be empty
- Go to Switching\Multicast\IGMP Snooping\Querier Configuration: Querier Admin Mode should show ENABLE, Snooping Querier Address should show 0.0.0.0 (used for querier election priority - I am assuming there isn't another querier in the network - if this is not the case, please ask your customer if a master querier should be used for instance on the core switch and if yes, since the lowest IP number will be taken into consideration for the querier election process, insert a higher number here than the one on the core switch, for instance, 99.99.99.99), IGMP Version 2, Query Interval(secs) 125 and Querier Expiry Interval(sec) 255
- Go to Switching\Multicast\IGMP Snooping\Querier VLAN Configuration: we should show VLAN 1 only at this stage. We are going to add VLAN 2: Enter directly 2 in VLAN ID field at the top of the first column, select ENABLE in Querier Election Participate Mode dropdown list, enter 0.0.0.0 or 99.99.99.99 (same as for the general Querier configuration above) in VLAN Address Querier, and click the blue Add button
- Go back to Switching\Multicast\IGMP Snooping\Querier Configuration: now we should show VLAN 2 at the bottom of the page, under VLAN IDs Enabled for IGMP Snooping Querier
- Go to Maintenance\Save Config, or click the little "floppy disk" icon at the top of the page*****
This should be it, all done and ready to connect the M4300 switch to the core switch (via its Port-1 here), and all your SDVoE encoders and decoders are now "plug & play" on all other ports.
I hope this helps, let us know how it goes!
Regards,
adeeb_taqui
Mar 05, 2019Aspirant
Management vlan is vlan5
And vlan2 is for AV devices
And vlan2 is for AV devices
LaurentMa
Mar 05, 2019NETGEAR Expert
OK, here's how you could do it
1/ Connect to the M4300 switch, per the Installation Guide
Not sure if you want to use CLI or the Web GUI, I am going to assume Web GUI for now. Since you want to assign VLANs on all ports, it might be better for you, initially, to connect via the OOB (out-of-band) port. This port is a Gigabit Ethernet port for the Management CPU only. If you connect your computer to that OOB port using an Ethernet cable, make sure to configure your computer with a static IP address in the 192.168.0.0/16, like 192.168.0.100. Then you can launch your web browser and access the M4300 switch via its OOB port by entering 192.168.0.239. Enter admin for the user name, leave the password field blank, and click the
LOGIN button. The Web GUI page displays. Please remember to click the blue button APPLY before leaving each page below:
2/ Create the VLANs
Go to Switching\VLAN\Basic\VLAN Configuration and find the table called VLAN Configuration at the bottom of the page. Only VLAN 1 (default) should be present. You can use the blank fields at the top to add the two new VLANs. Enter 2 in VLAN ID, AV in VLAN Name, let Disable in Make Static and click the blue Add button. Re-do the same for the second VLAN: Enter 5 in VLAN ID, Management in VLAN Name, let Disable in Make Static and click the blue Add button.
3/ Configure the Management VLAN and the IP address of the M4300 switch
Go to System\Management\Management Interfaces\IPv4 Management VLAN Configuration and find the first section at the top of the page. Enter 5 in Management VLAN ID, keep Routing Mode as Enabled, select Manual as Configuration Method and enter your supplied IP Address 10.70.1.228, Subnet Mask 255.255.255.0 and Gateway 10.70.1.250. Click the blue Apply button.
4/ Assign one port as an uplink trunk to the existing core switch
I am going to assume you have an M4300-12X12F and you want to assign the first fiber port (port number 1) to the uplink. Go to Switching\VLAN\Advanced\VLAN Trunking Configuration and find the large table called Switchport Configuration. Click the first row (Interface 1/0/1 meaning Switch 1 - Physical Interface - Port 1) to select it, and start the configuration for that port 1. Select Trunk in Switchport Mode dropdown list at the top of the second column, let Acces VLAN ID empty, Select 5 in Native VLAN ID dropdown list at the top of the fifth column and Select 2 in the Trunk Allowed VLANs list at the top of the last column. Click the blue Apply button.
5/ Assign all other ports to AV VLAN 2
Stay on this Switching\VLAN\Advanced\VLAN Trunking Configuration page. Select all rows from Interface 1/0/2 (port 2) to Interface 1/0/24 (port 24). To do that, you can click the button at the very top left (will select all rows) and don't forget to un-select the first row (Interface 1/0/1 you have already configured). Start the configuration for ports 2 to 24. Select Access in Switchport Mode dropdown list at the top of the second column, Select 2 in Access VLAN ID dropdown list at the top of the fourth column, let Native VLAN ID empty at the top of the fifth column, and let Trunk Allowed VLANs empty in the list at the top of the last column. Click the blue Apply button.
With 4/ and 5/ you have effectively "disabled" VLAN 1 which is not used anywhere any more. To verify it, you can go to Switching\VLAN\Advanced\VLAN Membership (nothing needs to be done here).
6/ Configure AV VLAN 2 for SDVoE (with same Multicast configuration as default VLAN 1)
- Go to Switching\Multicast\IGMP Snooping\Configuration: check that all three IGMP Snooping Configuration Admin Mode, Validate IGMP Header and Proxy Querier mode are ENABLE
- Go to Switching\Multicast\IGMP Snooping\Interface Configuration: all interfaces should show DISABLE in Admin Mode
- Go to Switching\Multicast\IGMP Snooping\IGMP VLAN Configuration: we should show VLAN 2 in the IGMP VLAN Configuration table. Select VLAN 2 in that table by clicking the second row and start to configure that VLAN: Select ENABLE in the Admin Mode dropdown list, Select ENABLE in the Fast Leave dropdown list, Membership interval 260, Maximum Response Time 10, Multicast Router Expiry Time 0, Report Suppression DISABLE and Proxy Querier ENABLE. Click the blue Apply button
- Go to Switching\Multicast\IGMP Snooping\Multicast Router Configuration: all interfaces should show DISABLE in Admin Mode
- Go to Switching\Multicast\IGMP Snooping\Multicast Router VLAN Configuration: it should be empty
- Go to Switching\Multicast\IGMP Snooping\Querier Configuration: Querier Admin Mode should show ENABLE, Snooping Querier Address should show 0.0.0.0 (used for querier election priority - I am assuming there isn't another querier in the network - if this is not the case, please ask your customer if a master querier should be used for instance on the core switch and if yes, since the lowest IP number will be taken into consideration for the querier election process, insert a higher number here than the one on the core switch, for instance, 99.99.99.99), IGMP Version 2, Query Interval(secs) 125 and Querier Expiry Interval(sec) 255
- Go to Switching\Multicast\IGMP Snooping\Querier VLAN Configuration: we should show VLAN 1 only at this stage. We are going to add VLAN 2: Enter directly 2 in VLAN ID field at the top of the first column, select ENABLE in Querier Election Participate Mode dropdown list, enter 0.0.0.0 or 99.99.99.99 (same as for the general Querier configuration above) in VLAN Address Querier, and click the blue Add button
- Go back to Switching\Multicast\IGMP Snooping\Querier Configuration: now we should show VLAN 2 at the bottom of the page, under VLAN IDs Enabled for IGMP Snooping Querier
- Go to Maintenance\Save Config, or click the little "floppy disk" icon at the top of the page
*****
This should be it, all done and ready to connect the M4300 switch to the core switch (via its Port-1 here), and all your SDVoE encoders and decoders are now "plug & play" on all other ports.
I hope this helps, let us know how it goes!
Regards,
- adeeb_taquiMar 07, 2019Aspirant
I am not able to add default gateway for management vlan. It remains as 0.0.0.0.
What is to be done?
I have configured the M4300 21x12f switch as per your post. Next week I would connect AV devices and uplink to core switch and do testing.
- LaurentMaMar 07, 2019NETGEAR Expert
Hi, the Management VLAN number and the Management IP address are all different from your initial requirements, I hope you're aware. Yes, 0.0.0.0 is normal if the link to the core is down, it means unspecified gateway. You should see a popup when attempting to enter the gateway IP address explaining that "the configured Default Gateway will not take effect until" it's probed.
Thanks,
- adeeb_taquiMar 07, 2019Aspirant
Interface vlan222 for av is defined in existing core switch with ip address and subnet mask.
Do i need to add any other info for vlan222 on netgear switch? The av device to be connected to netgear switch ports would be given static ip address from vlan222 ip range.
I need to define static route for any ip outside vlan 222 to go to core switch ip address-next hop?
- LaurentMaMar 07, 2019NETGEAR Expert
Hi again, the AV VLAN number seems different from your initial requirements, I hope it's OK. Yes please go to Routing\VLAN\VLAN Routing Configuration and find the VLAN Routing Configuration table. You can add your AV VLAN 2 (or 222 now) at the top of this table, with its provisioned IP address/subnet mask at the core and click the blue Add button. This way, static routes will be created and you shouldn't need to manually enter a default route for that range. But of course, you need to have the switch connected to the core for all that, since for now, the default Management IP gateway in down in your Management VLAN (0.0.0.0) so the default route shouldn't be probed.
Thanks
- adeeb_taquiMar 09, 2019AspirantHi Laurent,
Since netgear switch is by default plug&play, i have decided to deply it in below ways. Pls check if its ok
1.
Deploy the new m4300-96x in location A and m4300 12×12f in another city-location B as AV network switch to manage all new av device there in client's auditorium.
Do initial startup of m4300-96x& m4300-12×12f with default config vlan1 and connect all av devices to the switch and plug&play.
Do testing for auditorium av network.
Question: will all av devices work as plug&play in this scenario and what &how will the av device recieve ip addresses from default vlan 1 dynamically. Do i need to configure anything? Can i give static ip to av devices from vlan1 before connecting?
After above deplyment is tested for success as internal av network for auditorium , I would proceed to below step for connecting av switch to existing core network of client by using steps suggested by you of reconfiguring switch new av vlan 222 and management vlan and then do testing.
Question. After reconfiguring av vlan to 222, how do i define/configure new ip range from vlan222 for connected av devices. How to keep it as dynamic assignment of ip addresses or shall i assign ip statically on av devices.Vlan 222 range given by client i x.x.222.20-100 as an example.
Related Content
NETGEAR Academy

Master AV-over-IP networking, multicast protocols, and troubleshooting to confidently deploy and manage AV networks.
Join Us!