NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
GS308EP sends management traffic outside configured Management VLAN
Hello, I would like to report a possible VLAN isolation issue with my GS308EP. Environment Device: NETGEAR GS308EP Firmware: V2.0.0.11 (latest as of writing) Configuration: The uplink port is configured as an IEEE 802.1Q trunk. Management VLAN is configured as VLAN 8. Management IP address is 192.168.8.18. The uplink is connected to a Linux router with multiple 802.1Q VLAN interfaces. The VLAN interfaces share the physical NIC's MAC address, which is the default behavior of Linux VLAN interfaces. The router also has arp_ignore=1 and arp_announce=2 configured to prevent ARP flux-related issues. Observed behavior Although the management VLAN is configured as VLAN 8, the GS308EP sends management-related traffic on VLANs other than VLAN 8. For example, packet captures show the switch sending ARP requests on multiple VLANs: VLAN 19: ARP Request: who-has 192.168.8.1 tell 192.168.8.18 Sender MAC: 28:94:01:XX:XX:XX The same ARP request appears to be sent on the VLANs configured on the GS308EP, in ascending VLAN ID order. In addition, management traffic generated by the switch, such as NTP, DNS, and UPnP/SSDP traffic, is observed on non-management VLANs. Expected behavior I would expect: - Management traffic generated by the GS308EP to be sent only through the configured Management VLAN. - ARP, NTP, DNS, UPnP/SSDP, and other management-plane traffic to use VLAN 8 only. - No traffic sourced from the management IP address (192.168.8.18) to appear on other VLANs. I can provide packet captures if needed. Thank you.
XS508M Crashed. No Longer Have Any Confidence in This Device
My XS508M stopped working whilst I was away for work which is when I need my office network working reliably so caused me a lot of issues. Basically I use this as my main switch. My WAN router and my NAS (which hosts a number of key services) connect to it. All other switches, servers and clients are off that switch, so the loss of that switch meant all other LAN traffic stopped, as well as no incoming internet traffic which was what knackered me. When I returned and started my investigation, I was careful not to do anything that might lose the root cause so I fired up a laptop (no DHCP), set a static IP and then tried to connect to different appliances/devices. It was clear the XS508M was dead, anything connected to it was down and as it is unmanaged, nothing else I could do but unplugging/reconnected the AC lead, which immediately resulted in the entire LAN coming back to life and being contactable from the WAN once more. Since it is unmanaged I obviously cannot get any logs, cannot upgrade/downgrade the FW, what else can I do to determine the cause? Has anyone has this with a XS508M? Is this an unreliable switch? If it is not totally reliable, I will need to replace it, what a waste of money. What else should I use?
