ProSAFE Plus Configuration Utility

User Manual

August 2018
202-10524-10

350 East Plumeria Drive

San Jose, CA 95134
USA
 NETGEAR ProSAFE Plus Configuration Utility

Support
Thank you for purchasing this NETGEAR product. You can visit https://www.netgear.com/support/ to register your product,
get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official
NETGEAR support resources.

Compliance and Conformity

For regulatory compliance information including the EU Declaration of Conformity, visit
https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.

Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are
used for reference purposes only.

Revision History

Publication Publish Date Comments

Part Number

202-10524-10 August 2018 Minor editorial updates.

202-10524-09 July 2018 Removed references to the resource CD.

Updated the note for WinPcap in Install the ProSAFE Plus Utility.
Added supported models and a note to Set Up Static Link Aggregation
Groups.
Revised Upgrade the Firmware.

202-10524-08 March 2017 Made a correction to Specify a Port PVID for an 802.1Q-Based VLAN.

202-10524-07 November 2016 Added a note to Set Up Static Link Aggregation Groups.

202-10524-06 August 2016 Revised the content entirely and updated the book format.

202-10524-05 December 2012 Updated the book format.

202-10524-04 May 2012 Added the LAG and registration features.

202-10524-03 September 2010 Added the multicast and IGMP snooping features.

202-10524-02 February 2010 Added support for multiple languages and the cable testing, rate limiting, and
broadcast filtering features.

202-10524-01 September 2009 First publication.

2
Contents

Chapter 1 Get Started

What Is the ProSAFE Plus Configuration Utility? . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Install the ProSAFE Plus Utility. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Access the ProSAFE Plus Utility and Your Switch . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Chapter 2 Manage Network Settings

Specify IP Address Settings for the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Manage Multicast Traffic With IGMP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Customize IGMP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Specify a VLAN for IGMP Snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Set Up Static Link Aggregation Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Chapter 3 Optimize Performance With Quality of Service

Enable 802.1p/DSCP-Based Quality of Service . . . . . . . . . . . . . . . . . . . . . . . . . 17
Configure Port-Based Quality of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Set Up Rate Limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Set Up Broadcast Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Chapter 4 Use VLANS for Traffic Segmentation

VLAN Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Create Basic Port-Based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Assign Ports to Multiple Port-Based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Create 802.1Q-Based VLANs in a Basic Configuration. . . . . . . . . . . . . . . . . . . . 27
Create 802.1Q-Based VLANs in an Advanced Configuration . . . . . . . . . . . . . . 29
Add Tagged or Untagged Ports to an 802.1Q-Based VLAN. . . . . . . . . . . . . . . . 30
Specify a Port PVID for an 802.1Q-Based VLAN . . . . . . . . . . . . . . . . . . . . . . . . 32

Chapter 5 Manage and Monitor the Switch

Manage Flow Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Manage the Port Speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Enable Loop Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Manage Power Saving Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Change the Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Upgrade the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Reboot the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Save the Switch Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Restore a Saved Switch Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

3
 NETGEAR ProSAFE Plus Configuration Utility

Restore Factory Default Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Enable Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
View Switch Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
View the Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Chapter 6 Diagnostics and Troubleshooting

Test Cable Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Resolve a Subnet Conflict to Access the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Uninstall the ProSAFE Plus Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

4
1. Get Started
1
The NETGEAR ProSAFE® Plus Configuration Utility runs on a Windows-based computer and
lets you configure and manage NETGEAR Smart Managed Plus switches in your network.
This chapter covers the following topics:
• What Is the ProSAFE Plus Configuration Utility?
• Install the ProSAFE Plus Utility
• Access the ProSAFE Plus Utility and Your Switch

Note: For more information about the topics covered in this manual, visit the
support website at netgear.com/support.

Note: New releases of the ProSAFE Plus Configuration Utility are made
available from time to time at downloadcenter.netgear.com.

5
 NETGEAR ProSAFE Plus Configuration Utility

What Is the ProSAFE Plus Configuration Utility?

The ProSAFE Plus Configuration Utility, also referred to as the ProSAFE Plus Utility (or just
the utility), lets you discover and configure NETGEAR Smart Managed Plus switches (visit
netgear.com/business/products/switches/web-managed) on your network.
The utility runs on Windows-based computers. You can install the utility to customize and
manage one or more switches for your network. To download the latest version of the utility,
visit netgear.com/support/product/PCU.
Instead of using the ProSAFE Plus Utility, you can also access and configure a NETGEAR
Smart Managed Plus switch directly using a web browser and the switch’s web
browser–based management interface. For more information, see the NETGEAR Smart
Managed Plus Switches User Manual or a user manual that is specific to your switch model.
You can download manuals by visiting downloadcenter.netgear.com.
Some switches allow you to turn off the ability to manage them using the ProSAFE Plus
Utility, only allowing them to be managed through the web browser–based management
interface. If you do so, you can still use the ProSAFE Plus Utility to discover the switch in the
network and determine its IP address, but you can only use the web browser–based
management interface to configure and manage the switch. You can reenable the full
capability of the ProSAFE Plus Utility from the web browser–based management interface.

Install the ProSAFE Plus Utility

You can install the ProSAFE Plus Utility on any computer that runs a Windows operating
system (OS) and that is on the same network as the switches that you want to manage. If an
earlier version of the utility is present on your computer, installing a newer version replaces
the older version. Newer versions of the utility are backward compatible and support all
previously released NETGEAR Smart Managed Plus switches.

Note: The ProSAFE Plus Utility requires Adobe Air and WinPcap. If Adobe
Air and WinPcap are not detected during ProSAFE Plus Utility
installation, you are prompted to allow them be installed.

 To install the utility:

1. Visit netgear.com/support/product/PCU and download the latest version of the utility.
2. Open the software package and follow the prompts to install the program.
If your computer runs a Windows 7 OS, the utility is installed in the Program Files folder of
your computer and a ProSAFE Plus Utility icon is placed on your desktop.
If your computer runs a Windows 8 OS, Windows 8.1 OS, or Windows 10 OS, the utility is
installed in the Program Files folder of your computer and a new tile is created.

Get Started
6
 NETGEAR ProSAFE Plus Configuration Utility

If your computer runs a Windows 10 OS, the utility is installed in the Program Files folder
of your computer, a ProSAFE Plus Utility icon is placed on your desktop, and a new tile
is created.
3. If prompted, allow WinPcap and Adobe Air to be installed.
4. Reboot your computer after installing the ProSAFE Plus Utility.

Access the ProSAFE Plus Utility and Your Switch

For easiest access, we recommend that you cable the switch to a network with a router or
DHCP server that assigns IP addresses, power on the switch, and then use the computer on
which the ProSAFE Plus Utility is installed and that is connected to the same network as the
switch.
The ProSAFE Plus Utility automatically discovers any NETGEAR Smart Managed Plus
switches in your network.

 To configure the switch using the ProSAFE Plus Utility:

1. Cable the switch to a network with a router or DHCP server that manages IP address.
2. Power on the switch.
The DHCP server assigns the switch an IP address.
3. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection. The computer and the switch must be on the
same layer 2 network.

4. Launch the ProSAFE Plus Utility using the desktop icon or tile.

The Switch Selection page displays a list of Web Managed (Plus) switches that the utility
discovers on the local network.

Get Started
7
 NETGEAR ProSAFE Plus Configuration Utility

If the ProSAFE Plus Utility is unable to discover the switches in your network, make sure
that your computer’s security software allows broadcast of UDP packets to go through
UDP remote and source (local and destination) ports 63321 through 63324.
To allow this traffic, do one of the following:
• Create a rule in your computer’s security software.
• Temporarily disable the firewall, Internet security, antivirus programs, or all of these
programs.
5. To change the language, do the following:
a. From the Select Language menu, select your language.
A pop-up window displays.
b. Click the Yes button.
The utility relaunches.
6. Select the NETGEAR Smart Managed Plus switch that you want to configure.
If you do not see the switch, click the REFRESH button.
If the switch is connected to the Internet and you log in to the switch for the first time, the
Registration pop-up window displays. If this is not the first time that you log in, the
Registration pop-up window might display, depending on the selection that you made in
the Registration pop-up window during the previous session.
7. If the Registration pop-up window displays, select one of the following radio buttons:
• Turn Off. The Registration pop-up window closes and does not display again.
However, if you restore the switch to factory default settings, the pop-up window
displays again 24 hours after the restoration.
• Remind Me Later. The Registration pop-up window closes. After 24 hours, the
Registration pop-up window might display again.
• Register Now. If the switch is connected to the Internet connection, the NETGEAR
website displays and you can register your product.
8. When prompted, enter the password.
The default password is password.
The Switch Information page displays.
9. Use the utility to configure the switch settings.
Specific configuration procedures are described in this manual.
10. If you temporarily disabled the firewall, Internet security, antivirus programs, or all of
these programs, return them to their usual settings when you are finished with the
configuration.

Get Started
8
2. Manage Network Settings
2
This chapter covers the following topics:
• Specify IP Address Settings for the Switch
• Manage Multicast Traffic With IGMP Snooping
• Set Up Static Link Aggregation Groups

9
 NETGEAR ProSAFE Plus Configuration Utility

Specify IP Address Settings for the Switch

By default, the switch IP address works as follows:
• If you cable the switch to a network with a DHCP server before you power on the switch,
the DHCP server assigns an IP address to the switch when the switch is powered on.
• If you power on the switch when it is not connected to a network with a DHCP server, the
switch uses its default IP address, which is 192.168.0.239.
You can disable the DHCP mode in the switch and enter static IP address and subnet
mask values for the switch as well as the address of the gateway device used by the
switch.

 To specify IP address settings for a switch:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the IP SETTING button.

Note: To navigate to this page, select Network, select the switch, and click
the IP SETTING button.

5. In the DHCP Mode menu, select Disable.

The IP Address, Subnet Mask, and Gateway Address fields are enabled.
6. Enter the IP address, subnet mask, and if available, the gateway address.

Manage Network Settings

10
 NETGEAR ProSAFE Plus Configuration Utility

7. Enter the switch’s password in the Password field.

The switch’s default password is password.
8. Click the APPLY button.
Your settings are saved.

Manage Multicast Traffic With IGMP Snooping

Internet Group Management Protocol (IGMP) snooping allows a switch to forward multicast
traffic intelligently on the switch. Multicast IP traffic is traffic that is destined to a host group.
Host groups are identified by class D IP addresses, which range from 224.0.0.0 to
239.255.255.255. Based on the IGMP query and report messages, the switch forwards traffic
only to the ports that request the multicast traffic. This feature prevents the switch from
broadcasting the traffic to all ports and possibly affecting network performance.
The switch maintains a map that shows which links need which IP multicast streams. The
switch forwards multicast traffic only to the links that requested them and cuts multicast traffic
from links that do not contain a multicast listener. Essentially, IGMP snooping helps optimize
multicast performance at Layer 2 and is especially useful for bandwidth-intensive IP multicast
applications such as IPTV.

Customize IGMP Snooping

By default, IGMP snooping is enabled. You can customize the settings for your network.

 To customize IGMP snooping:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Multicast.

Manage Network Settings

11
 NETGEAR ProSAFE Plus Configuration Utility

7. Select the IGMP Snooping Status Enable radio button.

8. (Optional) Select the Validate IGMPv3 IP header Enable radio button.
Some network devices might not conform to the IGMPv3 standard. When the Validate
IGMPv3 IP header option is enabled, IGMP messages are required to include TTL = 1,
ToS Byte = 0xC0 (Internetwork Control), and the router alert IP option (9404) must be set.
Otherwise, the packets are ignored.
9. (Optional) Select the Block Unknown MultiCast Address Enable radio button.
When this feature is enabled, multicast packets are forwarded only to the ports that are in
the multicast group learned from IGMP snooping. All unknown multicast packets are
dropped.
10. (Optional, for some models only) Select an option from the IGMP Snooping Static Router
Port menu.
You can select a port to be the dedicated IGMP snooping static router port if no IGMP
query exists in the network for the switch to discover the router port dynamically. After a
port is selected as the static router port, all IGMP Join and Leave reports are forwarded to
the port.
11. Click the APPLY button.
Your settings are saved.

Specify a VLAN for IGMP Snooping

You can specify a VLAN for IGMP snooping only if you enabled port-based or 802.1Q-based
VLANs (see Chapter 4, Use VLANS for Traffic Segmentation).

 To specify a VLAN for IGMP snooping:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.

Manage Network Settings

12
 NETGEAR ProSAFE Plus Configuration Utility

3. Select the switch.

If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Multicast.

The previous figure is an example. Your switch might support more or less VLANs for
IGMP snooping.
7. Make sure that the IGMP Snooping Status Enable radio button is selected.
8. In the VLAN ID Enabled for IGMP Snooping field, enter the ID of the VLAN.
By default, if you enable IGMP snooping, snooping occurs on VLAN 1. However, you can
enable snooping on any VLAN:
• For port-based VLANs, you can enter a VLAN ID from 1 to the maximum number that
you switch supports (5, 8, 16, or 24).
• For 802.1Q-based VLANs, you can enter a VLAN ID from 1 to 4094.
9. Click the APPLY button.
Your settings are saved.

Set Up Static Link Aggregation Groups

Link aggregation groups (LAGs) allow you to combine multiple Ethernet links into a single
logical link. Network devices treat the aggregation as if it were a single link, which increases
fault tolerance and load sharing. The number of LAGs that the switch supports depends on
the model. Configure LAG membership before you enable the LAG.

Manage Network Settings

13
 NETGEAR ProSAFE Plus Configuration Utility

Note: Static link aggregation (port trunking) is supported on the following

models:
• GS110EMX
• GS116Ev2
• GS408EPP
• GS750E
• GSS108EPP
• GSS116E
• JGS516PE
• JGS524Ev1 (requires firmware v1.00.15 or a later version)
• JGS524Ev2
• JGS524PE
• XS512EM
• XS708E
• XS708Ev2
• XS716E
• XS724EM

Note: In addition to static link aggregation (port trunking), models

GS110EMX, GS750E, XS512EM, and XS724EM also support IEEE
802.3ad Link Aggregation and Link Aggregation Control Protocol
(LACP) groups.

You must set up LAG membership before you can enable LAGs.

 To specify LAG membership and enable a LAG:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.

Manage Network Settings

14
 NETGEAR ProSAFE Plus Configuration Utility

The Switch Status page displays.

6. Select System > LAG > LAG Membership.

The previous figure is an example. Your switch might provide a larger number of ports.
7. In the LAG ID menu, select the LAG ID.
The number of LAGs that the switch supports depends on the model.
8. Select the ports for the LAG by selecting the associated check boxes under the port
numbers.
A LAG consists of at least two ports.
9. Click the APPLY button.
Your settings are saved.
10. Select System > LAG.

11. Select the ID of the LAG for which you just set up the port membership.
12. In the Admin Mode menu, select Enable.
13. Click the APPLY button.
Your settings are saved.

Manage Network Settings

15
3. Optimize Performance With
Quality of Service 3
This chapter covers the following topics:
• Enable 802.1p/DSCP-Based Quality of Service
• Configure Port-Based Quality of Service
• Set Up Rate Limiting
• Set Up Broadcast Filtering

16
 NETGEAR ProSAFE Plus Configuration Utility

Enable 802.1p/DSCP-Based Quality of Service

802.1p/DSCP-based priority uses a field in the data packet header that identifies the class of
data in the packet (for example, voice or video). When 802.1p/DSCP-based priority is used,
the switch reads information in the packet header to determine the priority to assign to the
packet. The switch reads both 802.1p tag information and DSCP/ToS tag information. If an
ingress packet contains both an 802.1p tag and a DSCP/ToS tag, the switch gives
precedence to the 802.1p tag.
All ports on the switch check the packet header and transmit the packet with a priority
determined by the packet content.
This feature is enabled by default.

 To enable 802.1p/DSCP-based QoS:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select QoS.
The Quality of Service page displays.
7. Select the 802.1p/DSCP Based radio button.
A pop-up window opens, informing you that the current QoS settings will be lost.
8. Click the Yes button.
The pop-up window closes.
9. Click the APPLY button.
Your settings are saved. Data is now processed based on 802.1p priority tags in the data.

Optimize Performance With Quality of Service

17
 NETGEAR ProSAFE Plus Configuration Utility

Configure Port-Based Quality of Service

You can assign a priority to all data passing through a particular port. Data with a higher
priority is transmitted faster. If packets arrive at several ports at the same time, the ports
configured as higher priority transmit their packets first. You must determine which ports will
carry delay-sensitive data.

 To configure port-based QoS:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select QoS.
The Quality of Service page displays.
7. If this is the first time that you are setting up port-based QoS, select the Port Based radio
button and continue with Step 8.
Otherwise, see Step 9.
A pop-up window opens, informing you that the current QoS settings will be lost.
8. Click the Yes button.
The pop-up window closes and the port priority options display.

Optimize Performance With Quality of Service

18
 NETGEAR ProSAFE Plus Configuration Utility

The previous figure is an example. Your switch might provide more or less ports. The
802.1p/DSCP-based radio button is not supported on all models and therefore might not
show on the page.
9. To set the port priority for one or more ports, do the following:
a. Select one or more ports.
b. In the Priority section, select the priority by moving the slider.
c. Click the APPLY button.
Your settings are saved. The same priority is applied to all ports that you selected.
10. To set a different port priority for one or more other ports, repeat Step 9.

Set Up Rate Limiting

You can limit the rate at which the switch accepts incoming data and the rate that it
retransmits outgoing data. The rate choices vary depending on the switch model.
Rate limiting can be set for a port in addition to other QoS settings. If the port rate limit is set,
the switch restricts the acceptance or retransmission of data to the values configured.

 To set up rate limiting:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.

Optimize Performance With Quality of Service

19
 NETGEAR ProSAFE Plus Configuration Utility

3. Select the switch.

If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select QoS > Rate Limit.

The previous figure is an example. Your switch might provide more or less ports.
7. Select one or more ports.
8. Set the ingress (incoming) and egress (outgoing) traffic rates by doing the following:
a. Select one or more ports.
b. In the Ingress Rate menu, select the maximum rate.
The rate that you can set depends on the switch model. By default, no limit is set.
c. In the Egress Rate menu, select the maximum rate.
The rate that you can set depends on the switch model. By default, no limit is set.
d. Click the APPLY button.
Your settings are saved.
9. To set different rates for one or more other ports, repeat Step 8.

Optimize Performance With Quality of Service

20
 NETGEAR ProSAFE Plus Configuration Utility

Set Up Broadcast Filtering

You can configure the switch to block broadcast storms (massive transmission of broadcast
packets forwarded to every port on the same VLAN). If they are not blocked, broadcast storm
packets can delay or halt the transmission of other data. Some switches allow you to select a
storm control rate for each port. Others assign a predetermined storm control rate for all ports
on the switch.
If broadcast traffic on any port exceeds the threshold that you set, the switch temporarily
blocks (discards) the broadcast traffic.

 To set up broadcast filtering:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select QoS > Broadcast Filtering.
The Broadcast Filtering page displays.
7. If this is the first time that you are setting up broadcast filtering, select the Enable radio
button and continue with Step 8.
Otherwise, see Step 9.
8. Click the Apply button.
Your settings are saved and the Storm control rate table displays.

Optimize Performance With Quality of Service

21
 NETGEAR ProSAFE Plus Configuration Utility

The previous figure is an example. Your switch might provide more or less ports.
9. Set the storm control rate by doing the following:
a. Select one or more ports.
b. In the Storm control rate menu, select the maximum rate.
You can set a rate from 512 Kbps to 512 Mbps. By default, no limit is set.
c. Click the APPLY button.
Your settings are saved.
10. To set a different rate for one or more other ports, repeat Step 9.

Optimize Performance With Quality of Service

22
4. Use VLANS for Traffic
Segmentation 4
This chapter covers the following topics:
• VLAN Overview
• Create Basic Port-Based VLANs
• Assign Ports to Multiple Port-Based VLANs
• Create 802.1Q-Based VLANs in a Basic Configuration
• Create 802.1Q-Based VLANs in an Advanced Configuration
• Add Tagged or Untagged Ports to an 802.1Q-Based VLAN
• Specify a Port PVID for an 802.1Q-Based VLAN

23
 NETGEAR ProSAFE Plus Configuration Utility

VLAN Overview
Virtual LANs (VLANs) are made up of networked devices that are grouped logically into
separate networks. You can group ports on a switch to create a virtual network made up of
the devices connected to the ports.
Ports can be grouped in VLANs using port-based or 802.1Q criteria:
• Port-based VLANs. Assign ports to virtual networks. Ports with the same VLAN ID are
placed in the same VLAN. This feature provides an easy way to partition a network into
private subnetworks.
• 802.1Q VLANs. Create virtual networks using the IEEE 802.1Q standard. 802.1Q uses a
VLAN tagging system to determine which VLAN an Ethernet frame belongs to. You can
configure ports to be a part of a VLAN. When a port receives data tagged for a VLAN, the
data is discarded unless the port is a member of that VLAN. This technique is useful for
communicating with devices outside of your local network as well as receiving data from
other ports that are not in the VLAN. However, for you to be able to use an 802.1Q VLAN,
you must know the VLAN ID.

Create Basic Port-Based VLANs

A port-based VLAN configuration lets you assign ports on the switch to a VLAN. The number
of VLANs is limited to the number of ports on the switch. In a basic port-based VLAN
configuration, ports with the same VLAN ID are placed into the same VLAN.
You can also assign ports to multiple VLANs (see Assign Ports to Multiple Port-Based VLANs
on page 26).
By default, all ports are members of VLAN 1.

 To create basic port-based VLANs:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.

Use VLANS for Traffic Segmentation

24
 NETGEAR ProSAFE Plus Configuration Utility

The Switch Status page displays.

6. Select VLAN.
The Basic Port-Based VLAN page displays.
7. If this is the first time that you are accessing the Basic Port-based VLAN Status page or if
you are changing the VLAN assignment method, select the Enable radio button and
continue with Step 8.
Otherwise, see Step 9.
A pop-up window opens, informing you that the current VLAN settings will be lost.
8. Click the Yes button.
The pop-up window closes and the Basic Port-based VLAN Group table displays.

The previous figure is an example. Your switch might provide more or less ports.
9. Under each port to be added to a VLAN, enter the VLAN ID of the VLAN.
You can enter a VLAN ID from 1 to the maximum number of ports that your switch
supports. If all the VLANs share an uplink to the Internet or servers, enter all in the VLAN
ID field for the port that you want to use for the uplink.

Note: If ports are members of the same LAG, you must assign them to the same
VLAN.

10. Click the APPLY button.

Your settings are saved.

Use VLANS for Traffic Segmentation

25
 NETGEAR ProSAFE Plus Configuration Utility

Assign Ports to Multiple Port-Based VLANs

A port-based VLAN configuration lets you assign ports on the switch to a VLAN. The number
of VLANs is limited to the number of ports on the switch. In an advanced port-based VLAN
configuration, you can assign a single port to multiple VLANs.
By default, all ports are members of VLAN 1.

 To assign ports to multiple port-based VLANs:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select VLAN > Port Based > Advanced.
The Advanced Port-Based VLAN page displays.
7. If this is the first time that you are accessing the Advanced Port-based VLAN Status page
or if you are changing the VLAN assignment method, select the Enable radio button and
continue with Step 8.
Otherwise, see Step 9.
A pop-up window opens, informing you that the current VLAN settings will be lost.
8. Click the Yes button.
The pop-up window closes and the VLAN Configuration and VLAN Membership sections
display.

Use VLANS for Traffic Segmentation

26
 NETGEAR ProSAFE Plus Configuration Utility

The previous figure is an example. Your switch might provide more or less ports.
9. In the VLAN identifier menu, select the VLAN.
10. Select the ports that you want to add to the VLAN by doing the following:
a. (Optional) In the Group Operation menu, select either Select All or Remove All.
All ports are either added to the VLAN or removed from the VLAN.
b. Select or remove individual ports by selecting the check box under the port
numbers.

Note: If ports are members of the same LAG, you must assign them to the same
VLAN.

c. Click the APPLY button.

Your settings are saved. In the VLAN Membership table, the ports display as
members of the VLAN.
11. To select ports for another VLAN, repeat Step 9 and Step 10.

Create 802.1Q-Based VLANs in a Basic Configuration

A 802.1Q-based VLAN configuration lets you assign ports on the switch to a VLAN with an ID
number in the range of 1–4093. By default, all ports are members of VLAN 1.
In an advanced 802.1Q-based VLAN configuration, you can set up VLANs to which you can
add tagged or untagged ports and you can use port VLAN ID (PVID). For more information,
Create 802.1Q-Based VLANs in an Advanced Configuration on page 29.

 To create 802.1Q-based VLANs in a basic configuration:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.

Use VLANS for Traffic Segmentation

27
 NETGEAR ProSAFE Plus Configuration Utility

2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select VLAN > 802.1Q.
The Basic 802.1Q VLAN page displays.
7. If this is the first time that you are accessing the Basic 802.1Q VLAN Status page or if you
are changing the VLAN assignment method, select the Enable radio button and continue
with Step 8.
Otherwise, see Step 9.
A pop-up window opens, informing you that the current VLAN settings will be lost.
8. Click the Yes button.
The pop-up window closes and the Basic 802.1Q VLAN Identifier table displays.

The previous figure is an example. Your switch might provide more or less ports.
9. Under each port to be added to a VLAN, enter the VLAN ID of the VLAN.
You can enter a VLAN ID from 1 to 4093. If all the VLANs share an uplink to the Internet
or servers, enter all in the VLAN ID field for the port that you want to use for the uplink.

Note: If ports are members of the same LAG, you must assign them to the same
VLAN.

10. Click the APPLY button.

Your settings are saved.

Use VLANS for Traffic Segmentation

28
 NETGEAR ProSAFE Plus Configuration Utility

Create 802.1Q-Based VLANs in an Advanced

Configuration
In an advanced 802.1Q-based VLAN configuration, you can assign ports on the switch to a
VLAN with an ID number in the range of 1–4093 and you can add tagged or untagged ports
to a VLAN. In addition, you can use port VLAN IDs (PVIDs). By default, all ports are untagged
members of VLAN 1.

 To create 802.1Q-based VLANs in an advanced configuration:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select VLAN > 802.1Q > Advanced.
The Advanced 802.1Q VLAN Status page displays.
7. If this is the first time that you are accessing the Advanced 802.1Q VLAN Status page or if
you are changing the VLAN assignment method, select the Enable radio button and
continue with Step 8.
Otherwise, see Step 9.
A pop-up window opens, informing you that the current VLAN settings will be lost.
8. Click the Yes button.
The pop-up window closes and the VLAN Identifier Setting table displays.

Use VLANS for Traffic Segmentation

29
 NETGEAR ProSAFE Plus Configuration Utility

The previous figure is an example. Your switch might provide more or less ports, all of
which are members of VLAN 1 by default.
9. In the VLAN ID field, enter a VLAN ID.
You can enter a VLAN ID from 1 to 4093.
10. Click the ADD button.
The new VLAN is added to the VLAN Identifier Setting table.
After you create a new VLAN ID, use the VLAN membership option to add ports to the
VLAN. (Select VLAN > 802.1Q > Advanced > VLAN Membership. See also Add
Tagged or Untagged Ports to an 802.1Q-Based VLAN on page 30.)

Note: To delete a VLAN, select the check box for the VLAN and click the
Delete button.

Add Tagged or Untagged Ports to an 802.1Q-Based VLAN

After you define a VLAN ID using the advanced 802.1Q VLAN option (see Create
802.1Q-Based VLANs in an Advanced Configuration on page 29), you must add ports to the
VLAN.
While you add ports to a VLAN, you can specify whether the ports must be tagged or
untagged. Port tagging allows a port to be associated with a particular VLAN and allows the
VLAN ID tag to be added to data packets that are sent through the port. The tag identifies the
VLAN that must receive the data.
By default, all ports are untagged.

Use VLANS for Traffic Segmentation

30
 NETGEAR ProSAFE Plus Configuration Utility

 To add tagged or untagged ports to an 802.1Q-based VLAN:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select VLAN > 802.1Q > Advanced > VLAN Membership.
You can select VLAN Membership only if you already enabled the advanced 802.1Q
VLAN option (see Create 802.1Q-Based VLANs in an Advanced Configuration on
page 29).

The previous figure is an example. Your switch might provide more or less ports.
7. In the VLAN Identifier menu, select the VLAN.
8. Select the ports that you want to add to the VLAN by doing the following:
a. (Optional) In the Group Operation menu, select Untag All, Tag all, or Remove all.
All ports are either added to the VLAN (tagged or untagged) or removed from the
VLAN.
b. Select individual ports and assign them as tagged (T) or untagged (U) ports or
remove individual ports by selecting the check box under the port numbers.
By default, all ports are untagged.
c. Click the APPLY button.
Your settings are saved. In the VLAN Membership table, the ports display as
members of the VLAN.

Use VLANS for Traffic Segmentation

31
 NETGEAR ProSAFE Plus Configuration Utility

9. To select ports for another VLAN, repeat Step 7 and Step 8.

10. To verify your selections, select VLAN > 802.1Q > Advanced > VLAN Configuration.
The Advanced 802.1Q VLAN Status page displays. In the VLAN Identifier Setting table,
the ports display next to the VLAN or VLANS to which they were added.

Specify a Port PVID for an 802.1Q-Based VLAN

A default port VLAN ID (PVID) is a VLAN ID tag that the switch assigns to data packets it
receives that are not already addressed (tagged) for a particular VLAN. If you connected a
computer on port 6 and you want it to be a part of VLAN 2, configure port 6 to automatically
add a PVID of 2 to all data received from the computer. This step ensures that the data from
the computer on port 6 can be seen only by other members of VLAN 2. You can assign only
one PVID to a port.
 To assign a PVID to one or more ports:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select VLAN > 802.1Q > Advanced > PVID.
You can select Port PVID only if you already enabled the advanced 802.1Q VLAN option
(see Create 802.1Q-Based VLANs in an Advanced Configuration on page 29).

Use VLANS for Traffic Segmentation

32
 NETGEAR ProSAFE Plus Configuration Utility

The previous figure is an example. Your switch might provide more or less ports.
7. Select one or more ports.
8. Enter the PVID.
You can enter a PVID only for a VLAN that already exists.
9. Click the APPLY button.
Your settings are saved.

Use VLANS for Traffic Segmentation

33
5. Manage and Monitor the Switch
5
This chapter covers the following topics:
• Manage Flow Control
• Manage the Port Speed
• Enable Loop Detection
• Manage Power Saving Options
• Change the Password
• Upgrade the Firmware
• Reboot the Switch
• Save the Switch Configuration
• Restore a Saved Switch Configuration
• Restore Factory Default Settings
• Enable Port Mirroring
• View Switch Information
• View the Port Statistics

34
 NETGEAR ProSAFE Plus Configuration Utility

Manage Flow Control

Flow control works by pausing a port if the port becomes oversubscribed and dropping all
traffic for small bursts of time during the congestion condition. You can enable or disable
IEEE 802.3x flow control. By default, flow control is disabled.

 To manage flow control:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.

The previous figure is an example. Your switch might provide more or less ports.

Note: To navigate to this page, select System > Status > Switch Status.

6. For each port that you want to configure, in the Flow Control menu, select Enable or
Disable.
By default, flow control is disabled.

Manage and Monitor the Switch

35
 NETGEAR ProSAFE Plus Configuration Utility

7. Click the APPLY button.

Your settings are saved.

Manage the Port Speed

By default, the port speed on all ports is set automatically after the switch determines the
speed using auto-negotiation with the link partner. You can select a specific port speed
setting for each port, or disable a port by shutting it down manually.

 To specify the port speed or shut down a port:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.

The previous figure is an example. Your switch might provide more or less ports.

Note: To navigate to this page, select System > Status > Switch Status.

Manage and Monitor the Switch

36
 NETGEAR ProSAFE Plus Configuration Utility

6. For each port that you want to configure, in the Speed menu, select one of the following
options:
• Auto. The port speed is set automatically after the switch determines the speed using
auto-negotiation with the link partner. This is the default setting.
• Disable. The port is shut down.
• A specific speed and duplex mode, which depends on the switch model. If you select
a specific speed and duplex mode, the port is forced to function at that speed and
duplex mode. Ports that function at 1000M always function in full duplex mode.
7. Click the APPLY button.
Your settings are saved.

Enable Loop Detection

If loop detection is enabled and the switch detects a loop, both LEDs of a port blink at a
constant speed.

 To enable loop detection:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Management > Loop Detection.
The Loop Detection page displays.
7. Select the Enable radio button.
8. Click the APPLY button.
Your settings are saved.

Manage and Monitor the Switch

37
 NETGEAR ProSAFE Plus Configuration Utility

Manage Power Saving Options

Depending on the power saving options that your switch model provides, you can manage
the IEEE 802.3az Energy Efficient Ethernet (EEE) function, cable length power saving, or
link-up and link-down power saving, or a combination of these features:
• Short Cable Power Saving. Dynamically detects and adjusts power that is required for
the detected cable length.
• Link-Down Power Saving. Reduces the power consumption considerably when the
network cable is disconnected. When the network cable is reconnected, the switch
detects an incoming signal and restores normal power.
• EEE. Combines the Energy Efficient Ethernet (EEE) 802.3 MAC sublayer with the
100BASE-TX and 1000BASE-T physical layers to support operation in Low Power Idle
(LPI) mode. When LPI mode is enabled, systems on both sides of the link can disable
portions of their functionality and save power during periods of low link utilization.

 To enable the power saving options:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Management > Power Saving Mode.

The previous figure is an example. Your switch might provide other options.
7. Select the Enable radio button.
By default, the Disable radio button is selected.

Manage and Monitor the Switch

38
 NETGEAR ProSAFE Plus Configuration Utility

8. Click the APPLY button.

Your settings are saved.

Change the Password

The default password to access the switch is password. We recommend that you change
this password to a more secure password. The ideal password contains no dictionary words
from any language and contains uppercase and lowercase letters, numbers, and symbols. It
can be up to 20 characters.

 To change the password:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Maintenance > Change Password.
The Change Password page displays.
7. In the Old Password field, type the current password for the switch.
8. Type the new password in the New Password field and in the Re-type New Password
field.
9. Click the APPLY button.
Your settings are saved. Keep the new password in a secure location so that you can
access the switch in the future.

Manage and Monitor the Switch

39
 NETGEAR ProSAFE Plus Configuration Utility

Upgrade the Firmware

You can check for the latest firmware version for your switch by visiting
downloadcenter.netgear.com, entering your product model number in the Enter a Product
Name/Model Number field, and clicking the magnifying glass to search.
Read the new firmware release notes to find out if you must reconfigure the switch after
upgrading. The firmware upgrade method depends on the current firmware and boot loader
versions on your switch.

Note: To upgrade the firmware, do not use a WiFi connection to the switch
but use only a direct wired connection over an Ethernet cable. That is,
configure a computer with an IP address in the same subnet as the
switch and connect directly to the switch using an Ethernet cable
before you start the firmware upgrade.

 To upgrade the firmware:

1. Download the new firmware from the NETGEAR website.
You can check for the latest firmware version for your switch by visiting
downloadcenter.netgear.com, entering your product model number in the Enter a
Product Name/Model Number field, and clicking the magnifying glass to search.
2. Connect your computer to the same network as the switch.
Connect directly to the switch using an Ethernet cable.
3. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
4. Select the switch.
If you do not see the switch, click the REFRESH button.
5. Click the APPLY button.
You are asked to enter the password for the switch.
6. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
7. If the firmware release notice specifies that you must reconfigure the switch, save the switch
configuration settings.
For more information about how to save the switch configuration, see Save the Switch
Configuration on page 42.

Manage and Monitor the Switch

40
 NETGEAR ProSAFE Plus Configuration Utility

8. Select System > Maintenance > Firmware Upgrade.

The Firmware Upgrade page displays.
9. Click the BROWSE button and locate and select the firmware file.
10. Click the APPLY button.

WARNING:
To avoid the risk of corrupting the firmware, do not interrupt the
upgrade. For example, do not turn off the switch or disconnect it.

When the upgrade is complete, your switch restarts. The upgrade process typically takes
about three minutes.

Reboot the Switch

You can reboot the switch remotely.

 To reboot the switch:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Maintenance > Device Reboot.
The Device Reboot page displays.
7. Select the check box.
8. Click the APPLY button.
The switch reboots.

Manage and Monitor the Switch

41
 NETGEAR ProSAFE Plus Configuration Utility

Save the Switch Configuration

You can save the switch configuration as a file. We recommend that you save the
configuration. Then you can quickly restore the switch configuration if you change the
settings and then decide to return the switch to its previous settings.

 To save the switch configuration:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Maintenance > Save Configuration.
The Save Configuration page displays.
7. Click the BROWSE button.
8. Select the location to save the configuration file (a .cfg file).
9. Click the APPLY button.
The switch configuration is saved.

Restore a Saved Switch Configuration

You can restore switch configuration that you saved.

 To restore the switch configuration that you saved:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.

Manage and Monitor the Switch

42
 NETGEAR ProSAFE Plus Configuration Utility

The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Maintenance > Restore Configuration.
The Restore Configuration page displays.
7. Click the BROWSE button.
8. Find and select the configuration file (a .cfg file).
9. Click the APPLY button.
The saved configuration is restored to the switch. The switch reboots to load the restored
configuration.

Restore Factory Default Settings

You can return the switch to its factory settings.

 To restore factory settings:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Maintenance > Factory Default.

Manage and Monitor the Switch

43
 NETGEAR ProSAFE Plus Configuration Utility

The Factory Default page displays.

7. Select the check box.
8. Click the APPLY button.
The switch returns to its factory settings.

Enable Port Mirroring

Port mirroring lets you mirror the incoming (ingress) and outgoing (egress) traffic of one or
more ports (the source ports) to a predefined destination port.

 To enable port mirroring:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Monitoring > Mirroring.

The previous figure is an example. Your switch might provide more or less ports.
7. In the Source Port section, select one or more source ports by selecting the check boxes
under the port numbers.
You can select more than one source port. You cannot select a source port that is a
member of a LAG.

Manage and Monitor the Switch

44
 NETGEAR ProSAFE Plus Configuration Utility

8. In the Destination Port menu, select the destination port.

You can select a single destination port only. You cannot select a destination port that is a
member of a LAG.
9. In the Mirroring menu, select Enable.
By default, mirroring is disabled.
10. Click the APPLY button.
Your settings are saved.

View Switch Information

You can view the switch product name (model), MAC address, firmware level, DHCP mode,
and other network information.

 To view information about the switch:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select Switch Information.

Manage and Monitor the Switch

45
 NETGEAR ProSAFE Plus Configuration Utility

Note: To navigate to this page, select System > Status > Switch
Information.

View the Port Statistics

For each switch port, you can view the bytes received, bytes sent, and cyclic redundancy
check (CRC) error packets.

 To view and clear the port statistics:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Monitoring > Port Statistics.

Manage and Monitor the Switch

46
 NETGEAR ProSAFE Plus Configuration Utility

The previous figure is an example. Your switch might provide more or less ports.
7. To clear the port statistics, click the CLEAR COUNTERS button.
All statistics counters change to 0.

Manage and Monitor the Switch

47
6. Diagnostics and Troubleshooting
6
This chapter covers the following topics:
• Test Cable Connections
• Resolve a Subnet Conflict to Access the Switch
• Uninstall the ProSAFE Plus Utility

48
 NETGEAR ProSAFE Plus Configuration Utility

Test Cable Connections

You can use the cable diagnostic feature to easily find out the health status of network
cables. If any problems exist, this feature helps quickly locate the point where the cabling
fails, allowing connectivity issues to be fixed much faster, potentially saving technicians hours
of troubleshooting.
If an error is detected, the distance at which the fault is detected is stated in meters. (This is
the distance from the port.)

 To test a cable connection:

1. Connect your computer to the same network as the switch.
You can use a WiFi or wired network connection, or connect directly to a switch that is
off-network using an Ethernet cable.
2. Launch the ProSAFE Plus Utility using the desktop icon or tile.
The Switch Selection page displays a list of Web Managed (Plus) switches that it
discovers on the local network.
3. Select the switch.
If you do not see the switch, click the REFRESH button.
4. Click the APPLY button.
You are asked to enter the password for the switch.
5. Enter the switch’s password in the password field.
The switch’s default password is password.
The Switch Status page displays.
6. Select System > Monitoring > Cable Tester.

The previous figure is an example. Your switch might provide more or less ports.
7. Select one or more check boxes.
8. Click the TEST SELECTED PORT button.

Diagnostics and Troubleshooting

49
 NETGEAR ProSAFE Plus Configuration Utility

The switch tests the cable connection for the selected ports and displays the results. This
process might take up to a few minutes.

Resolve a Subnet Conflict to Access the Switch

If you power on the switch before you connect it to a network that includes a DHCP server,
the switch uses its own default IP address of 192.168.0.239. This subnet might be different
from the subnet used in your network. You might see the following message if you try to use
the ProSAFE Plus Utility to access the switch:
The switch and manager IP address are not in the same subnet.

 To fix this subnet conflict:

1. Disconnect the Ethernet cable between the switch and your network.
2. Unplug the switch’s power cord.
3. Reconnect the Ethernet cable between the switch and your network.
4. Plug the switch’s power cord into an electrical outlet.
The switch powers on. The network DCHP server discovers the switch and assigns it an
IP address that is in the correct subnet for the network.

Uninstall the ProSAFE Plus Utility

You can uninstall the ProSAFE Plus Utility by using the Windows program uninstall feature.

 To uninstall the utility from a computer that runs a Windows 7 OS:

1. On your computer, select Start > Control Panel > Programs and Features.
2. Select ProSafe Plus Utility.
3. Click Uninstall.
You are prompted to confirm the uninstall.
4. Click the Yes button.
The utility is removed.

 To uninstall the utility from a computer that runs a Windows 8.0 OS:
1. On your computer, move over the lower left corner of your desktop and right-click Start.
2. Select Programs and Features.
3. Select ProSafe Plus Utility.
4. Click Uninstall.
You are prompted to confirm the uninstall.
5. Click the Yes button.
The utility is removed.

Diagnostics and Troubleshooting

50
 NETGEAR ProSAFE Plus Configuration Utility

 To uninstall the utility from a computer that runs a Windows 8.1 OS:
1. On your computer, right-click Start.
2. Select Programs and Features.
3. Select ProSafe Plus Utility.
4. Click Uninstall.
You are prompted to confirm the uninstall.
5. Click the Yes button.
The utility is removed.

 To uninstall the utility from a computer that runs a Windows 10 OS:

1. On your computer, select Start > Settings > System > Apps & features.
2. Select ProSafe Plus Utility.
3. Click Uninstall.
You are prompted to confirm the uninstall.
4. Click the Yes button.
The utility is removed.

Diagnostics and Troubleshooting

51