NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Help: Auto-VoIP setting to correct VLAN, but also incorrectly on default
We are trying to configure our S3300's to utilize Auto-VoIP. The goal being that all devices with the correct MAC prefix will be pushed onto the VoIP VLAN regardless of device settings, and without having to manually adjust VLAN assignments on our switches. We have the default VLAN for normal network traffic (PCs, printers, etc), and have Auto-VoIP set up on VLAN 88. We've added several MAC prefixes for our phones. We have our FortiGate firewall configured with two LAN segments. The first for PCs, and the second for VoIP. Both of them are set to the default VLAN ID. The FortiGate subnet used for VoIP has its MAC address set to match a Poly prefix. When it is plugged into a Netgear S3300 switch, it shows up on both VLAN 88 and VLAN 1. It should only be on VLAN 88. Since the Fortigate is configured to do DHCP duty on the VoIP LANs, this is a problem: a non-VoIP device will pull an IP address from the VoIP LAN. The MAC address 80:5E:C0:09:00:05 should only be on VLAN 88. Since it's also showing up on VLAN 1, when I plug a laptop into the switch, it will pull DHCP for the VoIP network. That needs to not happen. Any idea what we're doing wrong? Any help greatly appreciated!GS752TP Firmware Upgrade Failed
I attempted to upgrade a GS752TP from firmware version 60.0.1.16 to 60.0.1.30. I followed the instructions here, just with the 60.0.1.30 firmware instead of .24 as shown in the instructions. When I rebooted, the switch powered up, but I cannot connect to it in any way. The Power LED lights up and alternately switches between green and orange very slowly (maybe once a minute). The LED Mode LED is on solid green. When the Power LED is orange, the port 37 and 43 link LEDs light up solid regardless of if anything is plugged in. When the Power LED is green, whatever ports I plug into will light up solid orange. The LED Mode LED stays on solid green the whole time. I've tried pushing the "Reset" and "Factory Default" buttons on the front and they don't seem to do anything (i.e. - it doesn't reboot/reset as far as I can tell). I've tried connecting to Smart Control Center, but nothing shows up. I've tried the default IP's I can find in the documentation (192.168.0.239 and 192.168.1.1) and I can't access the web interface. Obviously, something went wrong in the upgrade process, but I'm really not sure how to even troubleshoot since the switch is basically non-responsive to anything I do.GS724TPv3 The switch loses IP connection about 1 time in 5 days.
Hi, I have Netgear switch GS724TPv3, newest firmware installed The switch loses IP connection about 1 x every 5 days. I don't know why? While power supply of IP cameras powered via POE is maintained. IP connectivity from router and connected devices to switch is lost. After hard power off and on of switch everything works. The restart pin on the front of switch does not restore connectivity, it requires complete power off. The switch has a static IP address to avoid problems with address reservation from DHCP router. Looking for a solution to the problem of setting up a reboot script for switch GS724TPv3 from my NAS Synology via ssh or telnet. Can someone with experience help me with writing a script. Thank you Zbynek
VLAN Routing for Newbies
Howdy All, I've recently decided to install a GS752 switch in our offices to segregate traffic to help with security. I've run into a problem that I'm hoping someone can help me with (to keep things simple I'll just go over what VLAN 1 and VLAN 10 look like): VLAN1 - is fine. Systems attached get IP addresses from DHCP server, and can reach the internet. All ports are Untagged "U" in the port membership image. (Port 1-10) VLAN10 - doesn't work. No DHCP traffic through and no access to the internet even when using a static IP address in range. All ports are Untagged "U" in the port membership image. (Port 1, 11-20) My setup is: Broadband Router -> Firewall -> GS752 -> VLANS as follow: VLAN 1 - NAS, DNS Server, DHCP Server, Wifi APs VLAN 10 - PCs How do I allow DHCP and DNS to service VLAN1 and VLAN 10, as well others?[MS108TUP] - Switching - VLAN and routing
Hello everyone, I've this network configuration: Firewall --> MS108TUP --> Access Point Wifi The firewall and the AP is not a Netgear product. I've a domotic house so I've decided to separate the smart devices from the Main network. So in this case I've created an dedicated AP SSID with VLAN ID 20 only for manage smart devices. My network is also managed by a dedicated firewall device that manage VLAN Interfaces, WAN Interfaces, LAN Interfaces etc etc. Throught this Firewall, manage all the L2/L3 levels, from DHCP (one for every interfaces) to Privacy control, from Captive Portal (for Guests account) to Policy Control rule, ACL, Static route, QoS etc etc. So, I've configured the MS108TUP with several VLAN created in Switching mode (Switching --> VLAN). This is my current VLAN configuration on MS108TUP: MG1 is the Firewall uplink port, instead MG2 is the AP Uplink port. And this is the configuration of the interfaces into my Firewall: In this way, the AP create a SSID with VLAN 20, MG2 take the VLAN 20 and route it on MG1 VLAN 20; the firewall (MG1) take the VLAN 20 on port P2 and create it's own network with it's own dedicated DHCP and Static IPs list. All works good but when, from the firewall, I try to block traffic from/to the same interface/zone, not working. For example, if I try to block the SSH port from the tablet to my Raspberry PI and the tablet and the RPI is in the same interface/zone, the traffic is not blocked (my rule is: from DomoDevicesVLAN to DomoDevicesLAN source "tablet" destination "RPI" any service --> deny ----> this rule must deny the traffic for any service from the tablet to the RPI "using" the same zone but not work). Seems because the packet traffic is directly managed by the MS108TUP. Seems as the request is not passing throught the firewall, but remains at the switch level. For example: 192.168.0.5 --> 192.168.0.6 directly In this way the traffic is bypassing the firewall, because remain into the "switch" level Instead, how I can route the traffic thought the firewall? 192.168.0.5 --> 192.168.0.254 (Firewall interface) --> 192.168.0.6 In this way the traffic must pass into the firewall, and in this way I can have full-control on the packets and I can apply a Policy Control rule. Thank you so much Best Regards, Valerio
ERROR: can't get kernel image!
Hi, Overnight switch malfunction. I managed to connect to the switch with miniUSB console port using HyperTerminal port 23. I switched off/on couple of times. This is the error logs i get. :( Please help. I am attaching the pictures of switch too. " U-Boot 2012.10-00205-gef56c5f (Jan 01 2016 - 14:02:15)VerNo=1.0.0.7 UBIFS error (pid 0): ubifs_get_sb: cannot open "ubi:fs", error -19 UBIFS error (pid 0): ubifs_mount: Error reading superblock on volume 'ubi:fs' er rno=-19! ubifsmount - mount UBIFS volume Usage: ubifsmount <volume-name> - mount 'volume-name' volume UBIFS not mounted, use ubifs mount to mount volume first! ubifsload - load file from an UBIFS filesystem Usage: ubifsload <addr> <filename> [bytes] - load file 'filename' to address 'addr' Wrong Image Format for bootm command ERROR: can't get kernel image! ERROR: can't get kernel image! done UBIFS not mounted, use ubifs mount to mount volume first! ubifsload - load file from an UBIFS filesystem Usage: ubifsload <addr> <filename> [bytes] - load file 'filename' to address 'addr' Wrong Image Format for bootm command ERROR: can't get kernel image! Saving Environment to SPI Flash... done UBIFS not mounted, use ubifs mount to mount volume first! ubifsload - load file from an UBIFS filesystem Usage: ubifsload <addr> <filename> [bytes] - load file 'filename' to address 'addr' Wrong Image Format for bootm command ERROR: can't get kernel image! ERROR: Ethernet external port not connected at bcmiproc_eth.c:125/bcmiproc_eth_open() Wrong Image Format for bootm command ERROR: can't get kernel image!" Thank you MMGS110EMX not tagging frames
I've had this switch for quite a while but haven't had a need to configure VLANs until now. I've started by moving all the ports to Vlan 2, and configuring ports 7 and 8 - part of an LACP bundle - as tagged interfaces . However, pcaps on my upstream router show that frames coming from the switch over the trunk do not have VLAN tags; it's receiving tagged frames from the router and processing those correctly, but there are no tags from frames coming from the switch seen by the router. Any ideas what to check that might be misconfigured? Configuration screenshots below: Pcap from upstream router shows untagged frames from the switch, while response is properly tagged:
