ProSAFE Intelligent Edge Managed Switches

Transcription

1 The NETGEAR Intelligent Edge consists of 9 fully managed switches, ranging from 12-port to 50-port Fast and Gigabit Ethernet. They are ideal for all organizations considering reliable, affordable and simple access layer switching with CLI, advanced scripting capabilities and Layer 3 routing. As a cost-effective component of converged voice, video and data networking solutions, NETGEAR delivers a secure edge in commercial buildings and campus LAN environments: PoE (802.3af) and PoE+ (802.3at) versions of are perfect for Wireless access points, IP telephony and IP surveillance deployments. Highlights Layer 2+ with static routing comes with Port-based/ VLAN-based/Subnet-based static routing Layer 2+ versions L3 fixed routes to the next hop towards the destination network are added to the routing table L3 routing is wire-speed in hardware with 64 static routes (IPv4) Engineered for convergence Automatic multi-vendor Voice over IP prioritization based on SIP, H323 and SCCP protocols Voice VLAN and LLDP-MED for automatic IP phones QoS and VLAN configuration Advanced classifier-based hardware for L2, L3, L4 security and prioritization Advanced Multicast filtering with IGMP and MLD snooping and querier modes High-value performance and IPv6 ready 16K MAC addresses; up to 100Gbps switching fabric; 9K jumbo frames; Green Ethernet IPv4/IPv6 ingress traffic filtering (ACLs) and prioritization (QoS - DiffServ) High availability and PoE/PoE+ full power capability Redundant power supply option for uninterruptible operation (RPS) External power supply option for PoE and PoE+ full power applications (EPS up to 1,440W) Industry standard management Industry standard command line interface (CLI), functional NETGEAR web interface (GUI), SNMP, sflow and RSPAN Single-pane-of-glass NMS300 management platform with centralized firmware updates and mass-configuration support Industry leading warranty NETGEAR is covered under NETGEAR ProSAFE Lifetime Hardware Warranty* 90 days of Technical Support via phone and , Lifetime Technical Support through online chat and Lifetime Next Business Day hardware replacement Page 2-4 Page 5 Page 6-10 Page Page Page Models at a glance Product brief Modern access layer features highlights Target application and why Accessories and modules Technical specifications and ordering information Page 1 of 35

2 Hardware at a Glance FRONT REAR Model Name Form Factor 10/100 Base-T RJ45 ports 10/100/ 1000 Base-T RJ45 ports 100/ 1000X Fiber SFP ports PoE 802.3af PoE at Storage (image, config) Power Supply/ Powered by PoE PoE budget (PSU/ Pass through) PoE budget (with EPS) RPS (connector) Management console Model number M POE Rack mount (shared) 48 PoE 802.3af Internal/ No 1 (RPS or EPS) 380W Up to 740W (EPS) FSM7250P M4100-D12G Desktop (shared) - External/ PD mode - - GSM5212 M4100-D12G-POE+ Desktop (shared) M GF Rack mount (shared) 10 PoE at 4 PoE at Internal/ Internal/ No PD mode 120W/ 25W 1 (RPS) 150W x RS232 DB9, GSM5212P v1h2 GSM7212F v1h2 M G M G Rack mount Rack mount (shared) (shared) - 1 x USB Internal/ No Internal/ No 1 (RPS) (RPS) x Mini-USB GSM7224 v2h2 GSM7248 v2h2 M G-POE Rack mount (shared) 24 PoE 802.3af Internal/ No 1 (RPS or EPS) 192W Up to 380W (EPS) (selectable) GSM7226LP M G-POE+ Rack mount (shared) 24 PoE at Internal/ No 1 (RPS or EPS) 380W Up to 720W (EPS) GSM7224P v1h2 M G-POE+ Rack mount (shared) 48 PoE at Internal/ No 1 (RPS or EPS) 380W Up to 1,440W (EPS) GSM7248P Page 2 of 35

3 Hardware at a Glance Powered by PoE M POE is a 48 x 100Base-T PoE version, Layer 2+ 2 Gigabit ports with 2 shared SFP Internal PSU with RPS/EPS 380W budget and up to 720W with EPS M4100-D12G is a desktop 12 x 1000Base-T version, Layer 2+ 2 shared SFP External PSU; fanless Can be powered by PoE+ M GF is a 12 x SFP version for aggregation, Layer shared 1000Base-T Internal PSU with RPS 4 ports PoE+ with 150W budget PoE passthrough technology M4100-D12G-POE+ is a desktop 12 x 1000Base-T version, Layer 2+ M G is a 26 x 1000Base-T version, Layer 2+ M G is a 50 x 1000Base-T version, Layer 2+ 4 shared SFP; 2 ports PoE+ in and 10 ports PoE+ out Internal PSU with low acoustics; 120W budget Can be powered by PoE+ and redistribute 25W PoE budget 4 shared SFP Internal PSU with RPS 4 shared SFP Internal PSU with RPS M G-POE is a 24 x 1000Base-T PoE version, Layer 2+ 2 x 1000Base-T and 4 shared SFP Internal PSU with RPS/EPS 192W budget and up to 380W with EPS M G-POE+ is a 24 x 1000Base-T PoE+ version, Layer 2+ 4 shared SFP Internal PSU with RPS/EPS 380W budget and up to 720W with EPS M G-POE+ is a 48 x 1000Base-T PoE+ version, Layer 2+ 2 x 1000Base-T and 4 shared SFP Internal PSU with RPS/EPS 380W budget and up to 1,440W with EPS Page 3 of 35

4 Software at a Glance LAYER 2+ PACKAGE Model Name Management IPv4/IPv6 ACL and QoS, DiffServ IPv4/IPv6 Multicast Filtering Auto-VoIP Green Ethernet VLANs Convergence IPv4 Unicast Static Routing Model Number M4100 series Web GUI; HTTPs CLI; Telnet; SSH SNMP, MIBs RSPAN L2, L3, L4, ingress 1 Kbps IGMP and MLD Snooping, IGMP and MLD Querier, MVR EEE (802.3az) or Energy Detect Mode Static, Dynamic, Voice, MAC, Subnet, Protocol-based, QinQ, Private VLANs LLDP-MED, RADIUS, 802.1X, timer (Port-based, Subnet, VLANs, Loopback) all models Performance at a Glance TABLE SIZE Model Name Packet buffer CPU ACLs MAC address table ARP/NDP table VLANs DHCP server Fabric Latency Static Routes IP interfaces Multicast IGMP Group membership sflow Model number M4100 series all models 12 Mb 600Mhz 128M RAM 32M Flash 50 ACLs 512 rules (ingress) 16K MAC 512 ARP/NDP VLANs: 1K DHCP: 16 pools 1,024 max leases Up to 100Gbps all models line-rate 1G <3.91 μs 100M < μs 64 static routes 64 IP interfaces IPv4 1K 32 samplers 52 pollers 8 receivers all models Page 4 of 35

5 Product Brief The Intelligent Edge switches are NETGEAR fully managed switches for 100M/1G access layer in SMB, Small Enterprise and Campus networks. The delivers the best combination of performance, security and convergence at a high-value price point unlike competitive, entry-level SMB solutions. Redundant power supply options (RPS), full PoE+ external power supply options (EPS), Private VLANs, LLDP-MED and MVR take a scalable, future-proof approach to delivering network services for Wireless access points, IP phones and IP cameras infrastructures. NETGEAR Intelligent Edge key features: Broad portfolio of access layer solutions, ranging from 12 ports Fast Ethernet to 50 ports Gigabit Ethernet 802.3af PoE and 802.3at PoE+ best fit, ranging from 120W to 1,440W power budget per switch IPv4 routing in Layer 2+ package (L3 static routing) with IPv4/IPv6 ACLs and QoS High value L2/L3 tables with 16K MAC, 512 ARP/NDP, 9K jumbo frames, 1K VLANs, 64 static L3 routes Redundant power supply option for uninterruptible operation (RPS) External power supply option for PoE and PoE+ full-power applications (EPS) Green Ethernet compliance for maximum power efficiency NETGEAR Intelligent Edge software features: Automatic multi-vendor Voice over IP prioritization based on SIP, H323 and SCCP protocol detection Voice VLAN and LLDP-MED for automatic IP phones QoS and VLAN configuration IPv4/IPv6 Multicast filtering with IGMP and MLD snooping, Querier mode and MVR for simplified video deployments Advanced classifier-based hardware implementation for L2 (MAC), L3 (IP) and L4 (UDP/TCP transport ports) inbound security and prioritization NETGEAR Intelligent Edge link aggregation and channeling features: Flexible Port-Channel/LAG (802.3ad) implementation for maximum compatibility, fault tolerance and load sharing with any type of Ethernet channeling Including static (selectable hashing algorithms) or dynamic LAGs (LACP) NETGEAR Intelligent Edge management features: DHCP/BootP innovative auto-installation including firmware and configuration file upload automation Industry standard SNMP, RMON, MIB, LLDP,AAA, sflow and RSPAN implementation Selectable serial RS232 DB9 and Mini-USB port for management console Standard USB port for local storage, configuration or image files Dual firmware image and configuration file for updates with minimum service interruption Industry standard command line interface (CLI) for IT admins used to other vendors commands Fully functional Web console (GUI) for IT admins who prefer an easy to use graphical interface Single-pane-of-glass NMS300 management platform with mass-configuration support NETGEAR Intelligent Edge warranty and support: NETGEAR ProSafe Lifetime Hardware Warranty* Included Lifetime Online Chat Technical Support Included Lifetime Next Business Day Hardware Replacement Page 5 of 35

6 Modern access layer features highlights Layer 3 hardware with L2+ software affordability models are built upon L3 hardware platform while Layer 2+ software package allows for better budget optimization Layer 2+ software package provides straight forward IP static routing capabilities for physical interfaces, VLANs and subnets High-value switching performance uses latest generation silicon low-power 40-nanometer technology L2 and L3 switching features (access control list, classification, filtering, IPv4 routing) are performed in hardware at interface line rate for voice, video, and data convergence Fast Ethernet 802.3af PoE: M POE (48 ports) Gigabit: M4100-D12G (12 ports desktop); M GF (12 ports Fiber); M G (26 ports); M G (50 ports) Gigabit 802.3af PoE: M G-POE (24 ports) Gigabit 802.3at PoE+: M4100-D12G-POE+ (12 ports desktop); M G-POE+ (24 ports); M G-POE+ (48 ports) At the edge of campus networks or in the server room, static routes are often preferred for simplicity (L3 fixed routes to the next hop towards the destination network are manually added to the routing table), without any impact on performance because L3 routing is wire-speed in hardware 16K MAC address table, 1K concurrent VLANs and 64 static routes for SMB and small enterprise access layers 80 PLUS certified power supplies for energy high efficiency Green Ethernet with Energy Efficient Ethernet (EEE) defined by IEEE 802.3az Energy Efficient Ethernet Task Force Green Ethernet with Energy Detect Mode (unused ports automatic power off) M4100-D12G; M G; M G; M G-POE; M G-POE+ M POE; M4100-D12G-POE+; M GF; M G-POE+ Increased packet buffering with up to 12 Mb dynamically shared accross all interfaces for most intensive virtualization applications Low latency at all network speeds Jumbo frames support of up to 9Kb accelerating storage performance for backup and cloud applications Ease of deployment Placement outside the wiring closet (conference rooms, offices, class rooms, sales floor in retail stores, etc ) For secure deployment in open areas, desktop versions come with a Wall Mount Kit with four brackets M4100-D12G (GSM5212) M4100-D12G-POE+ (GSM5212P) As an option, a Rack Mount Kit is orderable ( ) Installing M4100 desktop series on a Wall Select desktop versions also come with a set of strong magnets for mounting on any metal surface M4100-D12G (GSM5212) Installing M4100 desktop series using Magnets Page 6 of 35

7 Modern access layer features highlights Automatic configuration with DHCP and BootP Auto Install eases large deployments with a scalable configuration files management capability, mapping IP addresses and host names and providing individual configuration files to multiple switches as soon as they are initialized on the network Both the Switch Serial Number and Switch primary MAC address are reported by a simple "show" command in the CLI - facilitating discovery and remote configuration operations Automatic Voice over IP prioritization with Auto-VoIP simplifies most complex multi-vendor IP telephones deployments either based on protocols (SIP, H323 and SCCP) or on OUI bytes (default database and user-based OUIs) in the phone source MAC address; providing the best class of service to VoIP streams (both data and signaling) over other ordinary traffic by classifying traffic, and enabling correct egress queue configuration An associated Voice VLAN can be easily configured with Auto-VoIP for further traffic isolation When deployed IP phones are LLDP-MED compliant, the Voice VLAN will use LLDP-MED to pass on the VLAN ID, 802.1P priority and DSCP values to the IP phones, accelerating convergent deployments Versatile connectivity including PoE Passthrough IEEE 802.3af Power over Ethernet (PoE) provides up to 15.4W per port (M POE; M G-POE) IEEE 802.3at Power over Ethernet Plus (PoE+) provides up to 30W per port (M4100-D12G-POE+; M G-POE+; M G-POE+) Desktop versions can be powered by upstream PoE+ switch using their Port-1 (PD, PoE+ 30W): M4100-D12G and M4100-D12G-POE+ M4100-D12G-POE+ can even redistribute PoE power from the upstream PoE+ switch to VoIP phones or other devices in meeting rooms, retail sales floors or other challenging environments without outlet Both IEEE 802.3at Layer 2 LLDP method and 802.3at 2-event classification methods are supported for compatibility with all PoE+ PD devices Automatic MDIX and Auto-negotiation on all ports select the right transmission modes (half or full duplex) as well as data transmission for crossover or straightthrough cables dynamically for the admin 100Mbps backward compatiblity on all SFP ports IPv6 support with multicasting (MLD for IPv6 filtering), ACLs and QoS Tier 1 availability Rapid Spanning Tree (RSTP) and Multiple Spanning Tree (MSTP) allow for rapid transitionning of the ports to the Forwarding state and the suppression of Topology Change Notification IP address conflict detection performed by the embedded DHCP server prevents accidental IP address duplicates from perturbing the overall network stability Power redundancy for higher availability when mission critical, including hot-swap PSUs and Fans Ease of management and control Dual firmware image and dual configuration file for transparent firmware updates/configuration changes with minimum service interruption Flexible Port-Channel /LAG (802.3ad) implementation for maximum compatibility, fault tolerance and load sharing with any type of Ethernet channeling from other vendors switch, server or storage devices conforming to IEEE 802.3ad - including static (selectable hashing algorithms) or dynamic LAGs (highly tunable LACP Link Aggregation Control Protocol ) Port names feature allows for descriptive names on all interfaces and better clarity in real word admin daily tasks Loopback interfaces management for routing protocols administration Private VLANs and local Proxy ARP help reduce broadcast with added security Management VLAN ID is user selectable for best convenience Industry-standard VLAN management in the command line interface (CLI) for all common operations such as VLAN creation; VLAN names; VLAN "make static" for dynamically created VLAN by GRVP registration; VLAN trunking; VLAN participation as well as VLAN ID (PVID) and VLAN tagging for one interface, a group of interfaces or all interfaces at once Simplified VLAN configuration with industry-standard Access Ports for 802.1Q unaware endpoints and Trunk Ports for switch-to-switch links with Native VLAN Page 7 of 35

8 Modern access layer features highlights System defaults automatically set per-port broadcast, multicast, and unicast storm control for typical, robust protection against DoS attacks and faulty clients which can, with BYOD, often create network and performance issues IP Telephony administration is simplified with consistent Voice VLAN capabilities per the industry standards and automatic functions associated Comprehensive set of "system utilities" and "Clear" commands help troubleshoot connectivity issues and restore various configurations to their factory defaults for maximum admin efficiency: traceroute (to discover the routes that packets actually take when traveling on a hop-by-hop basis and with a synchronous response when initiated from the CLI), clear dynamically learned MAC addresses, counters, IGMP snooping table entries from the Multicast forwarding database etc. All major centralized software distribution platforms are supported for central software upgrades and configuration files management (HTTP, TFTP), including in highly secured versions (HTTPS, SFTP, SCP) Simple Network Time Protocol (SNTP) can be used to synchronize network resources and for adaptation of NTP, and can provide synchronized network timestamp either in broadcast or unicast mode (SNTP client implemented over UDP - port 123) Embedded RMON (4 groups) and sflow agents permit external network traffic analysis Remote mirroring (RSPAN) can transport packets captured on an interface on a source switch across the network to a destination on a possibly different destination switch Engineered for convergence Audio (Voice over IP) and Video (multicasting) comprehensive switching, filtering, routing and prioritization Auto-VoIP, Voice VLAN and LLDP-MED support for IP phones QoS and VLAN configuration IGMP Snooping for IPv4, MLD Snooping for IPv6 and Querier mode facilitate fast receivers joins and leaves for multicast streams and ensure multicast traffic only reaches interested receivers without the need of a Multicast router Multicast VLAN Registration (MVR) uses a dedicated Multicast VLAN to forward multicast streams and avoid duplication for clients in different VLANs Schedule enablement Enterprise security Traffic control MAC Filter and Port Security help restrict the traffic allowed into and out of specified ports or interfaces in the system in order to increase overall security and block MAC address flooding issues DHCP Snooping monitors DHCP traffic between DHCP clients and DHCP servers to filter harmful DHCP message and builds a bindings database of (MAC address, IP address, VLAN ID, port) tuples that are considered authorized in order to prevent DHCP server spoofing attacks IP source guard and Dynamic ARP Inspection use the DHCP snooping bindings database per port and per VLAN to drop incoming packets that do not match any binding and to enforce source IP / MAC addresses for malicious users traffic elimination Time-based Layer 2/Layer 3-v4/Layer 3-v6/Layer 4 Access Control Lists (ACLs) can be binded to ports, Layer 2 interfaces, VLANs and LAGs (Link Aggregation Groups or Port channel) for fast unauthorized data prevention and right granularity Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology consistent and predictable - unauthorized devices or switches behind the edge ports that have BPDU enabled will not be able to influence the overall STP topology by creating loops Spanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance, unauthorized or unexpected new equipment in the network may accidentally become a root bridge for a given VLAN Dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN/ Unauthenticated VLAN are supported for rigorous user and equipment RADIUS policy server enforcement Up to 48 clients (802.1x) per port are supported, including the authentication of the users domain, in order to facilitate convergent deployments: for instance when IP phones connect PCs on their bridge, IP phones and PCs can authenticate on the same switch port but under different VLAN assignment policies (Voice VLAN versus data VLAN) Page 8 of 35

9 Modern access layer features highlights 802.1x MAC Address Authentication Bypass (MAB) is an alternative method for non-radius clients A list of authorized MAC addresses of client NICs is maintained on the RADIUS server for MAB purpose MAB can be configured on a per-port basis on the switch MAB initiates only after the dot1x authentication process times out, and only when clients don t respond to any of the EAPOL packets sent by the switch When 802.1x unaware clients try to connect, the switch sends the MAC address of each client to the authentication server The RADIUS server checks the MAC address of the client NIC against the list of authorized addresses The RADIUS server returns the access policy and VLAN assignment to the switch for each client Double VLANs (DVLAN - QinQ) pass traffic from one customer domain to another through the metro core in a multi-tenancy environment: customer VLAN IDs are preserved and a service provider VLAN ID is added to the traffic so the traffic can pass the metro core in a simple, secure manner Private VLANs (with Primary VLAN, Isolated VLAN, Community VLAN, Promiscuous port, Host port, Trunks) provide Layer 2 isolation between ports that share the same broadcast domain, allowing a VLAN broadcast domain to be partitioned into smaller point-to-multipoint subdomains across switches in the same Layer 2 network Private VLANs are useful in DMZ when servers are not supposed to communicate with each other but need to communicate with a router; they remove the need for more complex port-based VLANs with respective IP interface/subnets and associated L3 routing Another Private VLANs typical application are carrier-class deployments when users shouldn t see, snoop or attack other users traffic Secure Shell (SSH) and SNMPv3 (with or without MD5 or SHA authentication) ensure SNMP and Telnet sessions are secured TACACS+ and RADIUS enhanced administrator management provides strict "Login" and "Enable" authentication enforcement for the switch configuration, based on latest industry standards: exec authorization using TACACS+ or RADIUS; command authorization using TACACS+ and RADIUS Server; user exec accounting for HTTP and HTTPS using TACACS+ or RADIUS; and authentication based on user domain in addition to user ID and password Superior quality of service Advanced classifier-based hardware implementation for Layer 2 (MAC), Layer 3 (IP) and Layer 4 (UDP/TCP transport ports) prioritization 8 queues for priorities and various QoS policies based on 802.1p (CoS) and DiffServ can be applied to interfaces and VLANs Advanced rate limiting down to 1 Kbps granularity and mininum-guaranteed bandwidth can be associated with ACLs for best granularity Automatic Voice over IP prioritization with Auto-VoIP Advanced Layer 2+ routing package Static Routes/ECMP Static Routes for IPv4 Static and default routes are configurable with next IP address hops to any given destination 64 static routes are configurable for IPv4 Permitting additional routes creates several options for the network administrator The admin can configure multiple next hops to a given destination, intending for the router to load share across the next hops The admin distinguishes static routes by specifying a route preference value: a lower preference value is a more preferred static route A less preferred static route is used if the more preferred static route is unusable (down link, or next hop cannot be resolved to a MAC address) Page 9 of 35

10 Modern access layer features highlights Advanced Static Routing functions for administrative traffic control In order to facilitate VLAN creation and VLAN routing using Web GUI, a VLAN Routing Wizard offers following automated capabilities DHCP Relay Agents relay DHCP requests from any routed interface, including VLANs, when DHCP server doesn t reside on the same IP network or subnet Static Reject Routes are configurable to control the traffic destined to a particular network so that it is not forwarded through the router Such traffic is discarded and the ICMP destination unreachable message is sent back to the source Static reject routes can be typically used to prevent routing loops Default routes are configurable as a preference option Create a VLAN and generate a unique name for VLAN Add selected ports to the newly created VLAN and remove selected ports from the default VLAN Create a LAG, add selected ports to a LAG, then add this LAG to the newly created VLAN Enable tagging on selected ports if the port is in another VLAN Disable tagging if a selected port does not exist in another VLAN Exclude ports that are not selected from the VLAN Enable routing on the VLAN using the IP address and subnet mask entered as logical routing interface The agent relays requests from a subnet without a DHCP server to a server or next-hop agent on another subnet Unlike a router which switches IP packets transparently, a DHCP relay agent processes DHCP messages and generates new DHCP messages Supports DHCP Relay Option 82 circuit-id and remote-id for VLANs Multiple Helper IPs feature allows to configure a DHCP relay agent with multiple DHCP server addresses per routing interface and to use different server addresses for client packets arriving on different interfaces on the relay agent server addresses for client packets arriving on different interfaces on the relay agent Flow Control 802.3x Flow Control implementation per IEEE Annex 31 B specifications with Symmetric flow control, Asymmetric flow control or No flow control Asymmetric flow control allows the switch to respond to received PAUSE frames, but the ports cannot generate PAUSE frames Symmetric flow control allows the switch to both respond to, and generate MAC control PAUSE frames Allows traffic from one device to be throttled for a specified period of time: a device that wishes to inhibit transmission of data frames from another device on the LAN transmits a PAUSE frame Page 10 of 35

11 Reset Reset Power Fan RP S Power Fan RP S US B Reset Power Fan PD MaxPoE US B Power Fan RPS MaxPoE Reset Power Fan R PS Max Po E Reset U SB 1 U SB RJ45 SPD/Link/ACT mode: Green=1G Yellow=10/100M Blink=ACT USB backup act PoE (Max 30W per port): Off = No PD Green = PoE Powered Yellow = PoE Fault PoE-PD (Port 1,2): Off = No PSE Green = PSE 30w Yellow = PSE 15.4w RJ45 SPD/Link/ACT mode: Green = 1G Po E SPD/Link/ACT T 24 T RJ45 SPD/Link/ACT mode: Green = 1G Yellow = 10/100M Blink = ACT PoE (Max 30W per port): Of f = No PD Green = PoE Powered Yellow = PoE Fault RJ45 SPD/Link/ACT mode: Green = 1G Yellow = 10/100M Blink = ACT Po E SPD/Link/ACT PROSAFE GSM5212P SFP SPD/Link/ACT mode: Green = Link at 1G Yellow = Link at 100M Blink = ACT US B DB 9 Yellow = 10/100M Blink = ACT T 10 T 11 T 12 T 9F 10 F 11 F 12 F Console(USB) SPD/Link/ACT ,N,8, GHz 5 GHz backup act Reset 46 Power Fan PD MaxPoE 47 T 2.4 GHz 5 GHz 48 T 49 T U SB 50 T M G 23 F 24 F 25 F 26 F SFP SPD/Link/ACT mode: Green = Link at 1G Yellow = Link at 100M Blink = ACT M G SFP SPD/Link/ACT mode: Green=Link at 1G Yellow=Link at 100M Blink=ACT T 10 T 11 T 12 T T 22 T 23 T 24 T 21 F 22 F 23 F 24 F SPD/Link/ACT PROSAFE M G-POE Po E 1 SPD T 24 T 25 T 26 T 25 F 26 F SPO Link/Act 23 F 24 F PoE (Max 15.4 W per port): Off = No PD Green = PoE Powered Yellow = PoE Fault RJ45 SPD mode: Green = Link at 1G Yellow = Link at 10/100M Blink = ACT T 24 T 23 F 24 F 25 F 26 F 25 T 26 T 25 T 26 T 47 F 48 F SFP SPD mode: Green=Link at 1G Yellow=Link at 100M Blink=ACT 49 F PROSAFE 50 F GSM7224P SFP SPD/Link/ACT mode: Green = Link at 1G Yellow = Link at 100M Blink = ACT USB DB9 Console(USB) ,N,8,1 Power Fan PD MaxPoE Reset PROSAFE GSM5212P Po E SPD/Link/ACT PoE (Max 30W per port): SFP SPD/Link/ACT mode: Off = No PD Green = Link at 1G Green = PoE Powered Yellow = Link at 100M Yellow = PoE Fault Blink = ACT PoE-PD (Port 1,2): Off = No PSE Green = PSE 30w Yellow = PSE 15.4w RJ45 SPD/Link/ACT mode: Green = 1G US B DB 9 Yellow = 10/100M Blink = ACT T 10 T 11 T 12 T 9F 10 F 11 F 12 F Console(USB) SPD/Link/ACT ,N,8,1 U SB Supervis or PWR / Status Supervis or PWR / Status Supervis or PWR / Status NETGEAR ProSAFE M6100-3S Reset XCM8924X Consol e OOB U SB XCM8924X OOB Consol e Reset U SB XCM8944F OOB Consol e Reset PROSAFE GSM5212P Po E SPD/Link/ACT PoE (Max 30W per port): SFP SPD/Link/ACT mode: Off = No PD Green = Link at 1G Green = PoE Powered Yellow = Link at 100M Yellow = PoE Fault Blink = ACT PoE-PD (Port 1,2): Off = No PSE Green = PSE 30w Yellow = PSE 15.4w RJ45 SPD/Link/ACT mode: Green = 1G US B DB 9 Yellow = 10/100M Blink = ACT T 10 T 11 T 12 T 9F 10 F 11 F 12 F Console(USB) SPD/Link/ACT ,N,8,1 U SB 1F 2F 1T 2T 3F 4F 3T 4T 5F 6F 5T 6T 7F 8F 7T 8T 9F 10 F 9T 10 T SFP S PD/Link/ACT Mode: Green = Li nk at 10G Yellow = Link at 1G Bl ink = ACT RJ45 S PD/Link/ACT Mode: Green = Link at 10G Yellow = Li nk at 100M/1G Bl ink = ACT 1F 2F 1T 2T 3F 4F 3T 4T 5F 6F 5T 6T 7F 8F 7T 8T 9F 10 F 9T 10 T SFP S PD/Link/ACT Mode: Green = Li nk at 10G Yellow = Link at 1G Bl ink = ACT RJ45 S PD/Link/ACT Mode: Green = Link at 10G Yellow = Li nk at 100M/1G Bl ink = ACT SFP SPD /Lin k/act Mo de: Green = Lin k a t 1G Ye llow = Lin k a t 100M Blink = ACT 11 F 12 F 11 F 12 F 11 T 12 T 11 T 12 T 13 F 14 F 13 F 14 F 13 T 14 T 13 T 14 T 15 F 16 F 15 F 16 F 15 T 16 T 15 T 16 T Green = Link at 10G Yellow= Link at M/1G Bl ink=a CT Green = Link at 10G Yellow= Link at M/1G Bl ink=a CT F 42 F Power Fan RPS Max PoE Reset Power Fan R PS MaxPoE U SB 2.4 GHz 5 GHz Po E SPD/Link/ACT SPD Link/ACT PoE (Max 30W per port): Off = No PD Green = PoE Powered Yellow = PoE Fault RJ45 Link/Act mode: Green = Link at 1G Yellow = Link at 10/100M Blink = ACT SFP Link/Act mode: Green = Link at 1G Yellow = Link at 100M SPD/Link/ACT Link Green= 10G Yellow=1G Bl ink=a CT 43 T 44 T 1 2 Link Green= 10G Yellow= 3 100M/1G Bl ink=a CT Blink = ACT 1T 2T 1F 2F 3T 4T 3F 4F 5T 6T 5F 6F 7T 8T 7F 8F 9T 10 T 9F 10 F 11 T 12 T 11 F 12 F SPD/Link/ACT PROSAFE GSM7212F T 48 T 49 T 50 T 47 F 48 F 50 F Po E 1 SPD T 48 T 49 T 50 T 47 F 48 F 49 F 50 F USB 49 F Reset PoE (Max 30W per port): Of f = no PD Green = PoE Powered Yellow = PoE f ault RJ45 SPD mode: Green = Link at 1G Yellow=Link at 10/100M Blink = ACT SFP SPD/Link/ACT mode: Green=Link at 1G Yellow=Link at 100M Blink=ACT Power Fan RPS Max PoE T 48 T 49 T 50 T 47 F 48 F SP D: Green = 1G Yellow = 10/100M Link/Act mode: OFF = No Link Green = Link Blinking = ACT Console(USB) ,N,8,1 US B DB 9 M G-POE+ USB 49 F Reset PoE (Max 30W per port): Of f = no PD Green = PoE Powered Yellow = PoE f ault RJ45 SPD mode: Green = Link at 1G Yellow=Link at 10/100M Blink = ACT SFP SPD/Link/ACT mode: Green=Link at 1G Yellow=Link at 100M Blink=ACT Power Fan R PS MaxPoE Reset Power Fan RP S Max PoE US B Reset M G-POE+ Po E 1 SPD T 48 T 49 T 50 T 47 F 48 F 49 F 50 F PROSAFE GSM7224P Po E SPD/Link/ACT PoE (Max 30W per port): SFP SPD/Link/ACT mode: Off = No PD Green = Link at 1G Green = PoE Powered Yellow = Link at 100M Yellow = PoE Fault Blink = ACT RJ45 SPD/Link/ACT mode: Green = 1G Yellow = 10/100M Blink = ACT US B DB T 10 T 11 T 12 T T 22 T 23 T 24 T 21 F 22 F 23 F 24 F Console(USB) U SB SPD/Link/ACT ,N,8,1 M POE Po E 1 SPD T 50 T 49 F 50 F SPD Link/ACT Ports 49T, 50T SPD: Green=1G Yellow=10/100M Link/ACT mode: Of f =No link Green=Link Blinking=ACT T 50 T 49 F 50 F PoE (Max 15.4W per port): Of f = no PD Green = PoE Powered Yellow = PoE f ault RJ45 SPD mode: Green = Link at 100M Yellow=Link at 10M Blink = ACT SFP SPD/Link/ACT mode: Green=Link at 1G Yellow=Link at 100M Blink=ACT 50 F Combo Ports Combo Ports ProSAFE Intelligent Edge Managed Switches Target Application Why for the edge of small enterprise networks? Because the offers up to 3x better value: M G M G M6100 Chassis Switch series Combining superior resiliency and advanced security, NETGEAR Intelligent Edge managed switches feature comprehensive Layer 2, Lite Layer 3 and Layer 4 switching; including fiber aggregation capabilities. Unlike other cost conscious products from competitors, the NETGEAR Intelligent Edge series has been designed from the ground up for organizations requiring intelligence at the network edge. Affordable and reliable, these access layer switches win as a proficient component of secure, converged voice, video and data networking solutions. SERVER ROOM BUILDING 1 M G-POE+ M G-POE Combo Ports Combo Ports Combo Ports M GF M4100-D12G-POE+ MDF BUILDING 1 PoE Passthrough mode Meeting Room MDF BUILDING 2 M4100-D12G-POE+ M POE M4100-D12G PoE Passthrough mode Meeting Room Powered By PoE Meeting Room IDF BUILDING 2 M G-POE+ M G-POE+ Fiber, 1000SX multimode Fiber, 1000LX single mode Copper, Gigabit PoE+ Powering desktop switches Combo Ports Copper, Gigabit PoE / PoE+ Copper, Gigabit IDF BUILDING 2 Page 11 of 35

12 Three Reasons to Get Started Today with the NETGEAR 1. Versatile, Protected and Expendable Power The are the first affordable managed switches with both redundant and external power supply capabilities - key for critical applications such as VoIP, IP surveillance and Wireless access points. PoE devices gobble increasing amounts of PoE power, yet existing SMB switching solutions from other vendors don t scale to full power. Although most servers in SMB networks have dual power supplies, switches in SMB networks have not until now. Select desktop switches in the can be powered by PoE as a cost-effective solution when there is no existing electrical wiring or power outlets, as the switch can draw power directly from the wiring closet. The flexibility of a PoE switch is also convenient for meeting rooms and open spaces where visible electrical wiring is unsightly or impractical. One PoE+ downlink (30W) from the upstream switch is sufficient for the standard operation of the M4100-D12G and M4100-D12G-POE+ switches. This also increases resiliency for critical installations: the Power over Ethernet PD connection on these switches also doubles as a redundant power supply (RPS) should the switch be locally powered. Innovative PoE passthrough technology even lets M4100-D12G- POE+ power local PoE PD devices - redistributing PoE budget from the upstream switch. Up to 25W of power can be available for local PD devices - extending the reach of PoE deployments beyond the 100-meter or 328-feet bar: the M4100-D12G-POE+ can function as a PoE repeater for powering remote IP cameras, Wireless access points, etc. For all other rackmount Power over Ethernet models in the NETGEAR Intelligent Edge, in addition to their built-in PSU providing more PoE power than competitive solutions at a similar price point, the NETGEAR Intelligent Edge is the only one allowing for an additional PoE power upgrade via external power supply; immediately or at later times. Short story, all rackmount switches in the NETGEAR are either PoE Full Power capable already or PoE Full Power capable when drawing external power from the RPS4000. All 24-port and 48-port models can scale up to 802.3af PoE full power or 802.3at PoE+ full power simultaneously for all ports. This is real investment protection. 2. Security and Control Enhanced security includes network access control and isolation for improved convergence of voice, video and data: dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN / Unauthenticated VLAN are supported for rigorous user and equipment policy enforcement from a RADIUS server. The RADIUS server can also be the Network Policy Server (NPS) in Microsoft Windows Server 2008 or 2012, when in an Active Directory domain. Up to 48 clients (802.1x) per port are supported, including the authentication of a user s domain, in order to facilitate convergent deployments. When IP phones connect PCs on their bridge, IP phones and PCs authenticate on the same switch port but under different VLAN assignment policies (Voice VLAN versus data VLAN) - providing administrators with greater flexibility during deployment and policy enforcement. For 802.1x unaware clients, 802.1x MAC Address Authentication Bypass (MAB) is a great alternative: when 802.1x unaware clients try to connect, the switch sends their MAC addresses to the authentication server. When checked, the RADIUS server returns the access policy and VLAN assignment to the switch for each client. Enhanced security also includes better network isolation with Private VLANs, providing Layer 2 isolation between ports that share the same broadcast domain. A VLAN broadcast domain can be partitioned into smaller point-to-multipoint subdomains across switches in the same Layer 2 network. This is useful for IP camera deployments, or in the DMZ when servers are not supposed to communicate with each other but need to communicate with a router. Private VLANs remove the need for more complex port-based VLANs with respective IP interface/ subnets and associated L3 routing. 3. Reliability Learn how the NETGEAR delivers more for less: all models provide much longer MTBF (average lifetime) thanks to better/higher quality components and circuitry. For instance, the desktop 8-port PoE Fast Ethernet M4100-D10- POE (FSM5210P) is predicted to have an average mean time between failure of 579,985 hours, or 66 years at an ambient standard 25 C temperature (77 F). The rackmount 24-port PoE Gigabit Ethernet M G-POE (GSM7226LP) is to predicted to have an average mean time between failure of 437,199 hours, more than 49 years. This is nearly double the reliability of the closest competitive solutions in this price band. Conclusion The delivers an unbeatable combination of performance, security and convergence for voice, video and data networking solutions. Due to the wide adoption of virtualization, the convergence of voice, video, and data and the rapid proliferation of bandwidth-intensive applications, small and mid-sized businesses, hospitals and schools today have security, control and reliability needs similar to those of large enterprises. For approximately the same price as low-end solutions currently on the market aimed at SMBs, NETGEAR is offering highend features that have so far been reserved only for enterprise-class offerings available at double or triple the price point. Page 12 of 35

13 Accessories RPS4000 RPS/EPS unit for up to 4 concurrent switches Ordering information Americas, Europe: RPS NES Asia Pacific: RPS AJS Warranty: 5 years RPS mode: provide power backup for up to four switches concurrently With same level of protection as with four dedicated, one-to-one RPS units EPS mode: provide supplemental PoE power up to four switches concurrently Up to 2,880W shared PoE+ budget When in EPS mode, RPS4000 supersedes each switch main PSU Switch main PSU system power reverts to redundant power supply (RPS) function Front view RPS4000 is 1RU unit with four (4) empty slots Power modules (APS1000W) are sold separately APS1000W requirement depends on RPS, EPS, PoE application Rear view Four (4) embedded RPS connectors Switch selectors for RPS/EPS power modes Switch selectors for power modules two-by-two bridging Included: Four (4) RPS cables - 60cm each (~2 ft) Rack mount kit Power cord The RPS4000 RPS/EPS unit supports the following key features: The RPS4000 can be connected to a maximum of four switches (any combination of M5300 series switches is supported) using RPS switch connectors and RPS cables The RPS4000 provides protection against electrical issues such as high-voltage (input, output) or short circuits for maximum security The RPS4000 can accommodate up to four hot-swap APS1000W power modules Either one, two, three or four APS1000W power modules are required, depending on RPS or EPS application (see combinations in Number of APS1000W table) In RPS mode with only one APS1000W power module, RPS4000 can protect up to four (4) non-poe or PoE switches In case of a general switches power feed failure, powering all four switches simultaneously for 12V DC system power RPS4000 takes over and delivers adequate power without any service interruption (continuous monitoring) When the switch internal power is restored, the RPS4000 stops supplying power to the switch automatically, again without any service interruption In RPS mode with multiple APS1000W power module combinations, RPS4000 can protect up to four (4) PoE switches In case of a general switches power feed failure, powering all four switches simultaneously (12V DC system power and -56V DC PoE) Same RPS functionality as with non-poe switches including PoE power budget protection One-to-one mode (one APS1000W power module / one PoE M4100 switch) provides 720W PoE budget protection for each switch One APS1000W power module can be used for two (2) PoE switches instead, providing 380W PoE budget protection for each switch In EPS mode with multiple APS1000W power module combinations, RPS4000 allows for various PoE 802.3af and 802.3at full power applications Supports M POE, M G-POE; M G-POE+ and M G-POE+ Superseding switches main PSU for PoE budget and switch powering Delivering -56V DC for PoE power and 12V for switch power Switch main PSU system acts as built-in RPS for both switch power and PoE budget protection In EPS mode, power slots can be organized into groups of two (Group 1 and Group 2) allowing for APS1000W power modules bridging Two APS1000W power modules can be bridged and deliver 1,440W PoE budget to one 48-port switch M G-POE+ Power slots can be configured for RPS or EPS mode All four power slots can be combined together with only one APS1000W power module for four (4) 12V switches RPS application Power slots can be utilized in one-to-one mode for PoE switches RPS or EPS applications Power slots can be combined two by two for PoE switches RPS or EPS applications Page 13 of 35

14 Accessories Number of APS1000W 1 POWER MODULE 2 POWER MODULES 3 POWER MODULES 4 POWER MODULES RPS mode (Redundant Power Supply) Up to 4 switches (non-poe versions) M G or M G or M GF Complete protection 12V system power Up to 4 switches (PoE versions) M POE or M GF M G-POE or M G-POE+ or M G-POE+ Up to 4 switches (PoE versions) M POE or M GF M G-POE or M G-POE+ or M G-POE+ 4 switches (PoE versions) M POE or M GF M G-POE or M G-POE+ or M G-POE+ Or: Up to 2 switches (PoE versions) M POE or M GF Complete protection 12V system power and -56V PoE power Complete protection 12V system power and -56V PoE power Complete protection 12V system power and -56V PoE power M G-POE or M G-POE+ or M G-POE+ EPS mode (External Power Supply) 720W PoE budget available (total) for up to 2 switches (PoE versions) 1,440W PoE budget available (total) for up to 4 switches (PoE versions) 2,160W PoE budget available (total) for up to 4 switches (PoE versions) 2,880W PoE budget available (total) for up to 4 switches (PoE versions) M POE or M G-POE M POE or M G-POE M POE or M G-POE M POE or M G-POE M G-POE+ or M G-POE+ M G-POE+ or M G-POE+ M G-POE+ or M G-POE+ M G-POE+ or M G-POE+ Example for PoE applications: One M POE providing 720W Two M POE providing 720W each Three M POE providing 720W each Four M POE providing 720W each (802.3af full power) 46 ports full power 802.3af PoE 96 ports full power 802.3af PoE 138 ports full power 802.3af PoE 192 ports full power 802.3af PoE Example for PoE+ applications: One M G-POE+ providing 720W One M G-POE+ providing 1,440W One M G-POE+ providing 720W Two M G-POE+ providing 1,440W each (802.3at full power) 24 ports full power 802.3at PoE+ 48 ports full power 802.3at PoE+ One M G-POE+ providing 1,440W 96 ports full power 802.3at PoE+ 72 ports full power 802.3at PoE+ Page 14 of 35

15 Accessories APS1000W Power Module for RPS4000 Ordering information Americas, Europe: APS1000W-100NES Asia Pacific: APS1000W-100AJS Warranty: 5 years Capacity: 110V-240V AC power input Up to 960W DC 12V output power for up to 4 switches (RPS) Up to 720W DC -56V PoE budget output power for up to 2 PoE switches (EPS) Inserting one APS1000W in RPS4000 power slot #1 (front view) RPS4000 equipped with 4 APS1000W power modules (front view) RPS5412 RPS unit for 1 switch by Optimal Power Ordering information Americas: RPS NAS Europe: RPS EUS Asia Pacific: RPS AJS Warranty: 3 years Optimal Power RPS unit certified by NETGEAR for Includes the RPS cable for the switch RPS connector Provides seemless one-to-one redundant power to the Switch 56V DC power limited to 308W (maximum PoE budget) Rack mount kit for M4100 series desktop versions Ordering information Worldwide: Warranty: 5 years desktop switches come with wall mount kit only This optional rack mount kit contains two brackets for standard 19 rack mount Compatible with: M4100-D12G (GSM5212) M4100-D12G-POE+ (GSM5212P) Page 15 of 35

16 Accessories GBIC SFP Optics for ORDERING INFORMATION WORLDWIDE: SEE TABLE BELOW WARRANTY: 5 YEARS OM1 or OM2 62.5/125µm Multimode Fiber (MMF) OM3 or OM4 50/125µm Single mode Fiber (SMF) 9/125µm Gigabit SFP AGM731F AGM731F AGM732F 1000Base-SX short range multimode LC duplex connector up to 275m (902 ft) 1000Base-SX short range multimode LC duplex connector OM3: up to 550m (1,804 ft) OM4: up to 1,000m (3,280 ft) 1000Base-LX long range single mode LC duplex connector up to 10km (6.2 miles) Fits into SFP interfaces (front) AGM731F (1 unit) AGM731F (1 unit) AGM732F (1 unit) Fast Ethernet SFP AFM735 AFM Base-FX IEEE Base-FX IEEE LC duplex connector up to 2km (1.24 miles) LC duplex connector up to 2km (1.24 miles) Fits into SFP interfaces (front) AFM S (1 unit) AFM S (1 unit) Page 16 of 35

17 Technical Specifications Requirements based on 10.x software release Layer 2+ package includes Layer 3 static routing Model Name Description Model number M POE 48 ports Fast Ethernet PoE 802.3af, Layer 2+ software package FSM7250P M4100-D12G Desktop 12 ports Gigabit, Layer 2+ software package GSM5212 M4100-D12G-POE+ Desktop 12 ports Gigabit PoE at, Layer 2+ software package GSM5212P v1h2 M GF 12 ports Gigabit Fiber, Layer 2+ software package GSM7212F v1h2 M G 26 ports Gigabit, Layer 2+ software package GSM7224 v2h2 M G 50 ports Gigabit, Layer 2+ software package GSM7248 v2h2 M G-POE 24 ports Gigabit PoE 802.3af, Layer 2+ software package GSM7226LP M G-POE+ 24 ports Gigabit PoE at, Layer 2+ software package GSM7224P v1h2 M G-POE+ 48 ports Gigabit PoE at, Layer 2+ software package GSM7248P TECHNICAL SPECIFICATIONS PHYSICAL INTERFACES Front Auto-sensing RJ45 10/100 Auto-sensing RJ45 10/100/1000 Auto-sensing SFP ports 100/1000Base-X Console port (selectable) M POE (shared) - M4100-D12G (shared) - M4100-D12G-POE (shared) Mini-USB M GF (shared ) Mini-USB M G (shared) - M G (shared) - M G-POE (shared) - M G-POE (shared) Mini-USB M G-POE (shared) - Storage Port 1 x USB Firmware, Configuration Files Rear Power Supply RPS/EPS connector Console port (selectable) Physical security M POE Fixed, internal 1 Serial RS232 DB9, Mini-USB M4100-D12G External - Serial RS232 DB9, Mini-USB M4100-D12G-POE+ Fixed, internal - Serial RS232 DB9 M GF Fixed, internal 1 Serial RS232 DB9 M G Fixed, internal 1 Serial RS232 DB9, Mini-USB M G Fixed, internal 1 Serial RS232 DB9, Mini-USB M G-POE Fixed, internal 1 Serial RS232 DB9, Mini-USB M G-POE+ Fixed, internal 1 Serial RS232 DB9 M G-POE+ Fixed, internal 1 Serial RS232 DB9, Mini-USB Total Port Count Fast Ethernet Gigabit M POE 48 ports total 2 ports total M4100-D12G - 12 ports total M4100-D12G-POE ports total M GF - 12 ports total M G - 26 ports total M G - 50 ports total M G-POE - 26 ports total M G-POE ports total M G-POE ports total 1 Kensington Lock Slot Page 17 of 35

18 Power over Ethernet PSE Capacity PoE ports 802.3af PoE+ ports 802.3at Internal PoE budget PoE budget with EPS M POE W 740W with EPS (RPS4000) M4100-D12G-POE W when AC power - M GF W - M G-POE W 380W with EPS (RPS4000) M G-POE W 720W with EPS (RPS4000) M G-POE W 1,440W with EPS (RPS4000) PD Capacity Powered by PoE+ PoE Passthrough Technology M4100-D12G with one link PoE+ 30W (PD Port 1) M4100-D12G-POE+ with one link PoE+ 30W (PD Port 1) when second link PoE+ 30W (PD Port 2): 25W PoE budget can be redistributed by Port 3-12 Features Support IEEE 802.3af (up to 15.4W per port) IEEE 802.3at (up to 30W per port) IEEE 802.3at Layer 2 (LLDP) method IEEE 802.3at 2-event classification (M POE ; M G-POE) (M4100-D12G-POE+; M GF; M G-POE+; M G-POE+) (M4100-D12G-POE+; M GF; M G-POE+; M G-POE+) (M4100-D12G-POE+; M GF; M G-POE+; M G-POE+) PoE timer / schedule (week, days, hours) for all 802.3af and 802.3at models Convenient for Wireless Access Points schedules Processor/Memory Processor (CPU) System memory (RAM) Broadcom 600MHz 128 MB Code storage (flash) 32 MB Dual firmware image, dual configuration file Packet Buffer Memory All models 12 Mb Dynamically shared across only used ports Page 18 of 35