NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
[MS108TUP] - Switching - VLAN and routing
Hello everyone, I've this network configuration: Firewall --> MS108TUP --> Access Point Wifi The firewall and the AP is not a Netgear product. I've a domotic house so I've decided to separate the smart devices from the Main network. So in this case I've created an dedicated AP SSID with VLAN ID 20 only for manage smart devices. My network is also managed by a dedicated firewall device that manage VLAN Interfaces, WAN Interfaces, LAN Interfaces etc etc. Throught this Firewall, manage all the L2/L3 levels, from DHCP (one for every interfaces) to Privacy control, from Captive Portal (for Guests account) to Policy Control rule, ACL, Static route, QoS etc etc. So, I've configured the MS108TUP with several VLAN created in Switching mode (Switching --> VLAN). This is my current VLAN configuration on MS108TUP: MG1 is the Firewall uplink port, instead MG2 is the AP Uplink port. And this is the configuration of the interfaces into my Firewall: In this way, the AP create a SSID with VLAN 20, MG2 take the VLAN 20 and route it on MG1 VLAN 20; the firewall (MG1) take the VLAN 20 on port P2 and create it's own network with it's own dedicated DHCP and Static IPs list. All works good but when, from the firewall, I try to block traffic from/to the same interface/zone, not working. For example, if I try to block the SSH port from the tablet to my Raspberry PI and the tablet and the RPI is in the same interface/zone, the traffic is not blocked (my rule is: from DomoDevicesVLAN to DomoDevicesLAN source "tablet" destination "RPI" any service --> deny ----> this rule must deny the traffic for any service from the tablet to the RPI "using" the same zone but not work). Seems because the packet traffic is directly managed by the MS108TUP. Seems as the request is not passing throught the firewall, but remains at the switch level. For example: 192.168.0.5 --> 192.168.0.6 directly In this way the traffic is bypassing the firewall, because remain into the "switch" level Instead, how I can route the traffic thought the firewall? 192.168.0.5 --> 192.168.0.254 (Firewall interface) --> 192.168.0.6 In this way the traffic must pass into the firewall, and in this way I can have full-control on the packets and I can apply a Policy Control rule. Thank you so much Best Regards, ValerioXS724EMv2: UL listed / certified?
Hi. I'm searching for successor >=24 Port 10G-BaseT L2/L2+ Ethernet Switch as the current model XS728T is End-of-life. Netgear offers the XS724EM, which is also End-of-life, and the new XS724EMv2, which seems to be perfect for our use case. But as this is an important requirement for our international business the Switch must be UL listed or certified. Based on the datasheet the obsolete XS724EM is UL listed (UL listed (UL 1950)/cUL IEC 950/EN 60950), but I can't find any UL specification in the datasheet of the new XS724EMv2. So, I want to ask if anyone here can check the name plate on the XS724EMv2 switch if there is any symbol regarding UL or cUL. Thanks in advance4350 multiple routers for a/v
I have a video over ip system (transmit receiver bluestream to send hdmi to monitors on a network) 4x 4350 switches with sfp modules to link is 'stacking' how i need to configure this? They will be wired in a spider configuration and there will be sends and receives across the multiple routers.
XS512EM ports download speed
I just purchased a new XS512EM switch from Netgear's Amazon store. Updated firmware to 1.0.2.5, created two VLANs. VLAN1 has port1 for management connected to internal 172.16.200.x LAN and VLAN2 has ports 2-12 for external static public IPs 47.181.202.x. No QoS enabled, no speed limit Everything seems to work fine except I don't get symmetrical speeds on VLAN2. The uplink is a 2G/2G Frontier FiOS using their Optical Network Terminal (ONT) FRX523. If I connect a computer directly to the ONT 10G port I get 2G/2G all day long. If I use my old 2.5G unmanaged switch I get 2G/2G all day long on all ports. I opened a case with Netgear and they have never encountered nothing similar. Did I miss something in the configuration process?. A Frontier tech came onsite and checked the ONT and verified 2G/2G speeds today. [root@mail ~]# speedtest Speedtest by Ookla Server: Frontier - Los Angeles, CA (id: 14236) ISP: Frontier Communications Idle Latency: 3.84 ms (jitter: 0.34ms, low: 3.44ms, high: 4.67ms) Download: 1208.43 Mbps (data used: 708.7 MB) 4.16 ms (jitter: 0.39ms, low: 3.48ms, high: 5.39ms) Upload: 2352.98 Mbps (data used: 2.6 GB) 4.78 ms (jitter: 0.30ms, low: 3.07ms, high: 6.02ms) Packet Loss: 0.0% https://www.speedtest.net/result/c/0d419a3a-90ab-4321-b4bc-474756a90ef3Two Active Switches With Redundant Uplink
Hi, I am looking to connect both switches to my Firewalla each on port one. I am also looking to create a LAG between the two switches on the sfp ports. I am using the default vlan to assign ip addresses to the management port of the switches using dhcp. I also have a single vlan 20 for the remaining ports (also assigned via dhcp on different subnet from vlan 1) on the switches. My sfp lag between the two switches is a trunk for vlan 20. What I cannot figure out the correct STP (RSTP or MSTP) settings to prevent the switches from freaking out (rapid light blinking). The switches should know that all vlan 20 are routable without going through the firewalla and are acceptable via the connected LAG. Only the default vlan 1 should get routed via port 1 and any ip not on vlan 20. Also note that all of vlan 20 is on the same subnet. The firewalla also supports tree spanning which is turned on.
M4300 stack with over 10Gb lag groups
Hey I would like to make a stack with six 10Gb links between two m4300 switches. I use Ligtware Ubex vido converters from with two DAC cables that go to the switch. When sending 4k images, the lag group is about 12Gb in size and the switch can manage the lag group well. The Stack between the switches does not know how to divide the LAG group into several 10Gb lanes, but tries to put everything in one cable and the next lag group in another. Is it possible to get the stack to handle LAG groups with a data flow of more than 10Gb?XS708T LAG with two 10G Mac ports says switch doesn't support 802.3ad
Simliar to jdmarlow's post here https://community.netgear.com/t5/Plus-and-Smart-Switches-Forum/Cannot-get-LAG-working-on-XS708T/m-p/2181135/highlight/true#M20138 I've been unsuccessful at bonding two 10G ports on a Mac on the XS708T switch. The difference with mine is I do have the two ports bonded on the MAC and LACP is turned on the LAG/switch; howover my Mac says my switch doesn't support 802.3AD Link aggregation. Any guidance or suggestions would be greatly appreciated, Thanks