XS508TM S3600 Series 8 Port or 16 Port 10G Multi Gigabit Ethernet Smart

Switch

Product Information

Specifications

• Model: S3600 Series
• Ports: 8-Port or 16-Port 10G/Multi-Gigabit Ethernet
• SFP+ Ports: 2

Product Usage Instructions

Chapter 1: Get Started

Before starting to use the S3600 Series Smart Switch, please
refer to the following:

• Available publications and online help
• Switch management options and default management mode
• Manage the switch by using the device UI

Chapter 2: Configure Switch System Settings

This chapter provides instructions on configuring various
settings of the switch:

• Dashboard: Display port utilization and port connections
• Display VLAN membership
• Display switch device details
• Display information about switch hardware components and
  firmware

FAQs (Frequently Asked Questions)

Q: Can I use this switch outdoors?

A: No, this switch is not designed for outdoor use.

Q: Can I use the PoE source for outdoor connections?

A: No, the PoE source is intended for intra building connection
only.

Q: Where can I find the user manual online?

A: You can access the user manual online at
https://www.netgear.com/support/download/.

Q: How can I contact NETGEAR support for assistance?

A: You can visit netgear.com/support to get your questions
answered and access the latest downloads. You can also check out
the NETGEAR Community at community.netgear.com for helpful
advice.

Q: Is there a privacy policy for this device?

A: Yes, you can find NETGEAR’s Privacy Policy at
https://www.netgear.com/about/privacy-policy.

Q: What are the Terms and Conditions for using this

device?

A: By using this device, you are agreeing to NETGEAR’s Terms and
Conditions at https://www.netgear.com/about/terms-and-conditions.
If you do not agree, you can return the device to your place of
purchase within your return period.

User Manual
S3600 Series 8-Port or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Models:
XS508TM XS516TM

December 2023 202-12646-01

NETGEAR, Inc. 350 E. Plumeria Drive San Jose, CA 95134, USA

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads.
You can also check out our NETGEAR Community for helpful advice at community.netgear.com.
Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy- policy.
By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.
Do not use this device outdoors. The PoE source is intended for intra building connection only.
Applicable to 6 GHz devices only: Only use the device indoors. The operation of 6 GHz devices is prohibited on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while flying above 10,000 feet. Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or communications with unmanned aircraft systems.
Trademarks © NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes only.
Revision History

Publication Part Number
202-12646-01

Publish Date

Comments

December 2023 First publication

2

Contents
Chapter 1 Get Started
Available publications and online help…………………………………….18 Switch management options and default management mode….18 Manage the switch by using the device UI………………………………..20
Device UI buttons and user-defined fields……………………………20 Interface naming conventions………………………………………………21 Save your changes in the device UI………………………………………21 Context-sensitive help………………………………………………………….22 About on- network and off-network access……………………………….22 Access the switch on-network and connected to the Internet……22 Use a Windows-based computer to access the switch on-network and connected to the Internet………………………………………………23 Use the NETGEAR Insight app to discover the IP address of the switch…………………………………………………………………………………..25 Use the NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet……………………………………..26 Use other options to discover the switch IP address……………..28 Access the switch on-network when you know the switch IP address………………………………………………………………………………..28 Access the switch off-network and not connected to the Internet.29 Credentials for the device UI…………………………………………………….31 Register the switch……………………………………………………………………33 Register and access the switch on-network with your NETGEAR account………………………………………………………………………………..33 Register the switch with your NETGEAR account and get a registration key for offline access…………………………………………34 Access the switch with a registration key………………………………35
Access the switch off-network and enter the registration key before you log in……………………………………………………………..35 Access the switch on-network and enter the registration key after you log in…………………………………………………………………36 Change the language of the device UI……………………………………..38 Change the management mode of the switch………………………….39 About changing the management mode……………………………..39 Change the management mode to NETGEAR Insight Mobile App and Insight Cloud Portal………………………………………………………40
3

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Change the management mode back to Directly Connect to Web-browser Interface…………………………………………………………41 Configure ports using the Device View…………………………………….44 Access the NETGEAR support website……………………………………..45 Access the user manual online…………………………………………………46
Chapter 2 Configure Switch System Settings
Dashboard……………………………………………………………………………….49 Display port utilization and port connections……………………….49 Display VLAN membership…………………………………………………..50 Display switch device details………………………………………………..51
Display information about switch hardware components and firmware…………………………………………………………………………………..52
Configure and display general switch system information and NETGEAR Insight Cloud application information………………….53 Display the power supply information………………………………….55 Display the boot and software version………………………………….56 Display the temperature sensor information…………………………57 Display the status of the fans………………………………………………..58 IP network settings for management access……………………………..59 Configure the IPv4 management interface……………………………59 Change the management VLAN…………………………………………..61 Configure an IPv6 management interface through autoconfiguration or a DHCPv6 server…………………………………62 Manage a static IPv6 address for the IPv6 management interface………………………………………………………………………………64 Display IPv6 network interface neighbors…………………………….66 Time and NTP settings……………………………………………………………..67 Configure the time settings with NTP and configure the global NTP settings…………………………………………………………………………67 Set the time manually…………………………………………………………..69 Display the global NTP status and packet information………….71 Configure NTP servers…………………………………………………………73
Add an NTP server…………………………………………………………..74 Change the settings for an existing NTP server………………..76 Remove an NTP server……………………………………………………..77 Configure daylight saving time settings……………………………….78 Display the daylight saving time status…………………………………81 Domain Name System……………………………………………………………..82 Configure the global DNS settings and add a DNS server……83 Remove a DNS server…………………………………………………………..84 Map host names to DNS server IP addresses and display dynamic host mappings……………………………………………………………………..85 Add an entry to the static DNS host mapping table………….85
4

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Change an entry in the static DNS host mapping table…….86 Remove an entry from the static DNS host mapping table…87 Display dynamic DHCP snooping bindings………………………88 Manage switch discovery protocols………………………………………….89 LLDP and LLDP-MED settings for the switch……………………………..91 Configure the LLDP and LLDP-MED settings………………………..91 Display the LLDP-MED network policy for an interface…………93 Display the LLDP local device information……………………………94 Display the LLDP neighbor information………………………………..97 Simple Network Management Protocol………………………………….101 Manage SNMPv1 and SNMPv2 communities……………………..101 Add an SNMPv1 and SNMPv2 community……………………..101 Change an existing SNMPv1 and SNMPv2 community…..103 Delete an SNMPv1 and SNMPv2 community………………….104 Manage the SNMPv1 and SNMPv2 trap settings…………………105 Add an SNMPv1 or SNMPv2 trap configuration for a host.105 Change an SNMPv1 or SNMPv2 trap configuration for a host……………………………………………………………………………….106 Delete an SNMPv1 or SNMPv2 trap configuration for a host……………………………………………………………………………….107 Configure SNMPv1 and SNMPv2 trap flags………………………..108 Display the supported MIBs……………………………………………….109 Manage SNMPv3 users………………………………………………………110 Add an SNMPv3 user account………………………………………..110 Change an SNMPv3 user account…………………………………..111 Delete an SNMPv3 user account…………………………………….112 Manage the SNMPv3 trap configuration…………………………….113 Add an SNMPv3 trap configuration for a user………………..113 Change an SNMPv3 trap configuration for a user…………..114 Delete an SNMPv3 trap configuration for a user…………….115 Configure HTTP and HTTPS access settings……………………………116 Browser security message with HTTPS access………………………..118 SSH management access……………………………………………………….118 Configure the SSH access settings……………………………………..118 Manage RSA, DSA, and ECDSA keys for SSH access…………..120 Generate an RSA, DSA, or ECDSA key……………………………120 Transfer an existing SSH key from a computer to the switch.121 Delete an RSA, DSA, or ECDSA key………………………………..122 Configure inbound Telnet settings…………………………………………123 DHCP server…………………………………………………………………………..124 Enable the DHCP server and configure the Bootp mode……124 Exclude IP addresses for the DHCP server………………………….126 Manage DHCP pools………………………………………………………….127 Add a DHCP pool or DHCP binding……………………………….127 Change a DHCP pool…………………………………………………….129
5

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Remove a DHCP pool or DHCP binding…………………………130 Display or clear the DHCP server bindings…………………………131 Display DHCP server statistics…………………………………………….132 DHCP relay…………………………………………………………………………….134 Configure the global DHCP relay server settings………………..134 Add the DHCP relay function to an existing routing VLAN….135 Remove the DHCP relay function from a routing VLAN………136 Display the DHCP relay statistics………………………………………..137 DHCP Layer 2 relay………………………………………………………………..139 Configure the global DHCP L2 relay settings……………………..139 Configure the DHCP L2 relay VLAN settings………………………140 Configure a DHCP L2 relay interface………………………………….141 Display or clear the DHCP L2 relay interface statistics…………143 DHCP snooping……………………………………………………………………..144 Enable DHCP snooping for the switch………………………………..145 Enable DHCP snooping for a VLAN……………………………………146 Configure DHCP snooping interface settings……………………..147 Add a static DHCP snooping binding…………………………………149 Change a static DHCP snooping binding……………………………150 Remove a static DHCP snooping binding…………………………..151 Display dynamic DHCP snooping bindings………………………..152 Configure DHCP snooping persistent settings……………………153 Display the DHCP snooping statistics…………………………………154 DHCPv6 server……………………………………………………………………….155 Enable the DHCPv6 server…………………………………………………156 Manage DHCPv6 pools………………………………………………………157
Add a DHCPv6 pool……………………………………………………….157 Change a DHCPv6 pool…………………………………………………158 Remove a DHCPv6 pool…………………………………………………159 Display or clear the DHCPv6 server bindings……………………..160 Display DHCPv6 server statistics…………………………………………161 DHCPv6 relay…………………………………………………………………………162 Add a DHCPv6 relay VLAN interface…………………………………..162 Remove a DHCPv6 relay VLAN interface…………………………….164 Display the DHCPv6 relay statistics…………………………………….164
Chapter 3 Manage VLANs
Manage the VLAN configuration on the switch……………………….168 About VLANs……………………………………………………………………..168 Add a VLAN……………………………………………………………………….169 Configure membership interfaces for a VLAN…………………….170 Change a VLAN………………………………………………………………….172 Delete one or more VLANs………………………………………………..173 Reset the entire VLAN configuration to default setting……….174
6

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Change the port VLAN ID (PVID) settings…………………………..176 Configure a voice VLAN……………………………………………………..178 Auto-VLANs……………………………………………………………………………180 Configure the OUI-based properties………………………………….181 Configure the OUI-based interface settings……………………….182 Manage the OUI table………………………………………………………..184
Add an OUI……………………………………………………………………185 Remove an OUI……………………………………………………………..186 Configure the global protocol-based VoIP prioritization and class…………………………………………………………………………………..187 Configure VoIP protocol-based interface settings………………188 Display the Auto-VoIP status………………………………………………190 Configure a MAC-based VLAN……………………………………………….191 Add a MAC-based VLAN configuration………………………………191 Delete a MAC-based VLAN configuration…………………………..192 Configure a protocol-based VLAN group……………………………….193 Add a protocol-based VLAN group……………………………………193 Configure membership interfaces for a protocol-based VLAN group…………………………………………………………………………………195 Change a protocol-based VLAN group………………………………196 Delete a protocol-based VLAN group………………………………..197 Configure Generic Attribute Registration Protocol…………………198 Configure the GARP switch settings……………………………………198 Configure GARP interface settings……………………………………..199 Private VLANs…………………………………………………………………………201 Overview of the tasks for private VLAN configuration…………202 Assign a private VLAN type to a VLAN………………………………..203 Configure a private VLAN association with a primary and secondary VLAN………………………………………………………………..204 Remove an existing private VLAN association…………………….206 Configure the private VLAN port mode……………………………..207 Private VLAN host interface: Assign the interface to primary and secondary VLANs……………………………………………………………….209 Private VLAN host interface: Remove the interface from primary and secondary VLANs………………………………………………………..210 Private VLAN promiscuous interface: Assign the interface to primary and secondary VLANs……………………………………………211 Private VLAN promiscuous interface: Remove the interface from primary and secondary VLANs……………………………………………213 Protect ports…………………………………………………………………………..214
Chapter 4 Configure Switching
LLDP and LLDP-MED settings for interfaces……………………………217 Configure LLDP interface settings………………………………………217
7

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Configure LLDP-MED interface settings……………………………..219 Green Ethernet settings………………………………………………………….221
Configure the global green Ethernet settings…………………….221 Configure green Ethernet interface settings……………………….222 Configure the port settings…………………………………………………….224 Link aggregation groups………………………………………………………..227 Configure a LAG………………………………………………………………..227 Configure the port members for a LAG………………………………230 Set the LACP system priority………………………………………………231 Set the LACP priority and time-out period for a port…………..232 Spanning Tree Protocol………………………………………………………….234 Configure the global STP settings and display the STP status.235 Configure the CST settings and display the MSTP status…….237 Configure the CST interface settings………………………………….239 Display the CST interface status………………………………………….242 Display the Rapid STP interface status………………………………..244 Manage MST instances………………………………………………………246
Add an MST instance and display the MST status…………..246 Change an MST instance………………………………………………..248 Delete an MST instance………………………………………………….249 Configure and display the interface settings for an MST instance…………………………………………………………………………250 Display the STP interface statistics………………………………………253 MAC address table…………………………………………………………………254 Set the dynamic MAC address aging interval……………………..254 View, search, or clear the MAC address table…………………….255 Add a static MAC address to the MAC address table…………257 Remove a static MAC address from the MAC address table..258 Dynamic ARP inspection………………………………………………………..259 Configure the global DAI settings………………………………………260 Configure DAI VLANs…………………………………………………………261 Configure a DAI interface…………………………………………………..262 DAI ACLs……………………………………………………………………………264 Add a DAI access control list………………………………………….264 Configure a rule for an existing DAI ACL………………………..265 Remove a rule from a DAI ACL……………………………………….267 Remove a DAI access control list……………………………………268 Display the DAI statistics…………………………………………………….269
Chapter 5 Configure Multicast
Display the entries in the multicast forwarding database………..272 Display the multicast forwarding database statistics……………….273 Internet Group Management Protocol snooping……………………274
Enable IGMP snooping and configure IP header validation…275
8

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Display entries in the IGMP snooping table………………………..276 Display IGMP snooping statics and VLANs…………………………277 Configure the IGMP snooping settings for an interface………279 Configure IGMP snooping for a VLAN………………………………..281 Configure an IGMP multicast router interface…………………….283 Configure an IGMP multicast router VLAN………………………….284 IGMP snooping querier overview…………………………………………..286 Enable the IGMP snooping querier and configure the global settings………………………………………………………………………………286 Add an IGMP snooping querier for a VLAN………………………..287 Change an IGMP snooping querier for a VLAN…………………..289 Remove the IGMP snooping querier settings from a VLAN….290 Display the status of the IGMP snooping querier for all VLANs.291 Enable IGMP snooping on the Auto-Video VLAN……………….292 Multicast Listener Discovery snooping……………………………………293 Enable MLD snooping……………………………………………………….294 Configure the MLD snooping settings for an interface……….295 Add MLD snooping for a VLAN………………………………………….297 Change the MLD snooping settings for a VLAN………………….298 Remove the MLD snooping settings from a VLAN………………299 Configure an MLD multicast router interface………………………300 Enable or disable MLD multicast router mode for a VLAN….302 MLD snooping querier overview…………………………………………….303 Enable the MLD snooping querier and configure the global settings………………………………………………………………………………303 Add an MLD snooping querier for a VLAN and display the status…………………………………………………………………………………305 Change an MLD snooping querier for a VLAN……………………307 Remove the MLD snooping querier settings from a VLAN….308 Multicast VLAN registration……………………………………………………309 Enable MVR and configure the global settings…………………..309 Add an MVR group…………………………………………………………….311 Remove an MVR group………………………………………………………312 Configure an MVR interface……………………………………………….313 Configure the members of an MVR group………………………….315 Display the MVR statistics…………………………………………………..316
Chapter 6 Manage Routing
Routing concepts…………………………………………………………………..319 IPv4 routing……………………………………………………………………………319
Enable IPv4 routing……………………………………………………………319 Display the IPv4 routing statistics……………………………………….321 IPv6 routing……………………………………………………………………………324 Enable IPv6 routing……………………………………………………………324
9

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Configure IPv6 routing for a VLAN……………………………………..325 Add prefix settings for an IPv6 routing VLAN……………………..329 Change prefix settings for an IPv6 routing VLAN………………..331 Remove prefix settings for an IPv6 routing VLAN………………..332 Display the IPv6 statistics……………………………………………………333 Display and search the IPv6 neighbor table……………………….338 Add a static IPv6 route……………………………………………………….340 Change a static IPv6 route………………………………………………….342 Delete a static IPv6 route……………………………………………………343 Display the IPv6 route table………………………………………………..344 Configure the IPv6 route preference for the switch…………….345 Routing VLANs……………………………………………………………………….346 Create a routing VLAN with the VLAN static routing wizard…347 Add routing to an existing VLAN and display routing VLAN information………………………………………………………………………..349 Change an existing routing VLAN………………………………………350 Remove the routing function from a VLAN…………………………351 Routing table, routes, and route preferences………………………….352 Router discovery and router advertisements………………………352 Add a static or default route……………………………………………….354 Display the routes………………………………………………………………356 Change a route………………………………………………………………….357 Delete a route…………………………………………………………………….358 Address Resolution Protocol………………………………………………….359 Display the ARP entries in the ARP cache……………………………360 Add a static entry to the ARP table……………………………………..361 Change a static entry in the ARP table………………………………..362 Delete a static ARP entry…………………………………………………….363 Configure the global ARP table settings…………………………….364 Remove entries from the ARP table……………………………………366
Chapter 7 Configure Quality of Service
Quality of Service concepts…………………………………………………….369 Class of Service………………………………………………………………………369
CoS configuration concepts……………………………………………….369 Configure the CoS trust mode settings globally…………………370 Configure the CoS trust mode and shaping rate for an interface…………………………………………………………………………….371 Configure CoS queue settings for an interface…………………..372 Map 802.1p priorities to queues………………………………………..374 Map DSCP values to queues………………………………………………376 Differentiated Services……………………………………………………………377 Defining DiffServ………………………………………………………………..378
10

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Configure the DiffServ mode and display the entries in the DiffServ private MIB tables…………………………………………………378 Configure a DiffServ class…………………………………………………..380
Add and configure a DiffServ class…………………………………380 Change the criteria for an existing DiffServ class…………….384 Remove a DiffServ class………………………………………………….385 Configure an IPv6 DiffServ class…………………………………………386 Add and configure an IPv6 DiffServ class……………………….386 Change the criteria for an existing IPv6 DiffServ class…….389 Remove an IPv6 DiffServ class………………………………………..390 Configure a DiffServ policy…………………………………………………391 Add and configure a DiffServ policy……………………………….391 Change the attributes for an existing DiffServ policy………394 Remove a DiffServ policy……………………………………………….395 Attach a DiffServ policy to an interface……………………………….396 Remove a DiffServ policy from an interface………………………..397 Display DiffServ service statistics………………………………………..398
Chapter 8 Manage Switch Security
Change the device admin password………………………………………402 RADIUS servers………………………………………………………………………403
Configure the global RADIUS server settings……………………..403 RADIUS authentication servers…………………………………………..405
Add a RADIUS authentication server………………………………405 Change the settings for a RADIUS authentication server…407 Remove a RADIUS authentication server from the switch..408 Display the RADIUS authentication server statistics………..408 RADIUS accounting server………………………………………………….410 Configure a RADIUS accounting server………………………….410 Display or clear the RADIUS accounting server statistics….412 TACACS+ servers…………………………………………………………………..413 Configure the global TACACS+ settings…………………………….414 Add a TACACS+ server……………………………………………………..415 Change the settings for a TACACS+ server………………………..416 Remove a TACACS+ server from the switch……………………….417 Authentication lists…………………………………………………………………418 Configure the HTTP/HTTPS authentication list……………………418 Configure the Dot1x authentication list………………………………420 Management access profiles and rules…………………………………..421 Add an access profile…………………………………………………………421 Add a rule to the access profile………………………………………….422 Activate the access profile………………………………………………….424 Display the access profile rules and the number of filtered packets………………………………………………………………………………425
11

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Change a rule for the access profile……………………………………426 Deactivate the access profile……………………………………………..427 Remove a rule from the access profile………………………………..428 Remove the access profile………………………………………………….429 Port authentication…………………………………………………………………430 Configure the global 802.1X authentication settings………….430 Configure the 802.1X authentication settings for a port……..432 Initialize 802.1X on a port…………………………………………………..436 Restart 802.1X authentication on a port……………………………..437 Display the port summary…………………………………………………..439 Display the client summary…………………………………………………440 MAC filters for traffic control…………………………………………………..442 Create a MAC filter for a MAC address………………………………442 Delete a MAC filter…………………………………………………………….444 Display the MAC filter summary…………………………………………445 Storm control…………………………………………………………………………446 Configure the global storm control settings……………………….446 Configure the storm control settings for a port…………………..448 Port security……………………………………………………………………………450 Configure the global port security mode……………………………450 Configure a port security interface……………………………………..451 Display learned MAC addresses and convert them to static addresses…………………………………………………………………………..453 Display port security violations…………………………………………..455 Loop protection……………………………………………………………………..456 Configure the global loop protection settings……………………457 Configure the loop protection settings for interfaces and display the loop protection state……………………………………………………459 Denial of service…………………………………………………………………….461 Configure Auto-DoS…………………………………………………………..461 Configure individual denial of service attack options………….462
Chapter 9 Configure Access Control Lists
About access control lists……………………………………………………….466 ACL Wizard…………………………………………………………………………….466
Use the ACL Wizard to create a simple ACL……………………….466 Change an ACL rule that you created with the ACL Wizard…471 Remove an ACL that you created with the ACL Wizard……….473 MAC ACLs……………………………………………………………………………..474 Add a MAC ACL…………………………………………………………………474 Change the name of a MAC ACL………………………………………..475 Remove a MAC ACL…………………………………………………………..476 MAC ACL rules………………………………………………………………………477 Add a rule for a MAC ACL………………………………………………….478
12

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Change the match criteria for a MAC ACL rule…………………..481 Remove a rule from a MAC ACL…………………………………………482 MAC ACL bindings…………………………………………………………………483 Configure a MAC ACL interface binding…………………………….483 Display or delete MAC ACL bindings…………………………………485 IPv4 ACLs……………………………………………………………………………….486 Add an IPv4 ACL………………………………………………………………..487 Change the number or name of an IPv4 ACL……………………..488 Remove an IPv4 ACL………………………………………………………….489 Standard IPv4 ACL rules…………………………………………………………490 Add a rule for a standard IPv4 ACL…………………………………….490 Change the match criteria for a standard IPv4 ACL rule……..493 Remove a rule from a standard IPv4 ACL……………………………495 Extended IPv4 ACL rules………………………………………………………..496 Add a rule for an extended IPv4 ACL………………………………….496 Change the match criteria for an extended IPv4 ACL rule…..502 Remove a rule from an extended IPv4 ACL…………………………504 IPv6 ACLs……………………………………………………………………………….505 Add an IPv6 ACL………………………………………………………………..505 Change the name of an IPv6 ACL……………………………………….507 Remove an IPv6 ACL………………………………………………………….508 IPv6 ACL rules………………………………………………………………………..509 Add a rule for an IPv6 ACL…………………………………………………509 Change the match criteria for an IPv6 ACL rule…………………..515 Remove a rule from an IPv6 ACL………………………………………..516 IP ACL bindings……………………………………………………………………..517 Configure an IP ACL interface binding……………………………….517 Display or delete IP ACL bindings………………………………………519 Display the existing ACLs and associated rules………………………520 VLAN ACL bindings……………………………………………………………….522 Configure a VLAN ACL binding………………………………………….522 Display or delete VLAN ACL bindings………………………………..523
Chapter 10 Monitor the Switch and Network
Switch, port, and EAP packet statistics……………………………………527 Display switch statistics………………………………………………………527 Display or clear port statistics…………………………………………….529 Display or clear detailed statistics for a port……………………….531 Display or clear EAP and EAPoL statistics…………………………..537
Perform a cable test……………………………………………………………….539 Logs……………………………………………………………………………………….540
Message log format……………………………………………………………541 Manage and display the memory log…………………………………541 Manage and display the flash log……………………………………….544
13

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Syslog and log server host settings…………………………………….546 Configure the syslog settings…………………………………………546 Add a syslog server………………………………………………………..547 Change the settings for a syslog server………………………….548 Delete the settings for a syslog server……………………………549
Trap log……………………………………………………………………………..550 Port mirroring…………………………………………………………………………552
Set up and enable a port mirroring session………………………..552 Change the traffic direction or remove a mirrored port from a mirroring session……………………………………………………………….554 Change the destination port for a port mirroring session……556 Enable or disable a port mirroring session…………………………557 Remove all ports from a mirroring session………………………….558 Display the system CPU memory status and CPU utilization……559
Chapter 11 Maintenance and Troubleshooting
Reboot the switch from the device UI……………………………………..562 Reset the switch to factory default settings……………………………..563 Export the configuration file or log files from the switch…………564
Export a file from the switch to a TFTP server……………………..564 Export a file from the switch to a computer or USB storage device………………………………………………………………………………..566 Update the switch software…………………………………………………….568 Download the switch software from a TFTP server and update the switch…………………………………………………………………………..568 Download the switch software from a computer or USB storage device and update the switch…………………………………………….570 Download a file to the switch………………………………………………….572 Download a file from a TFTP server to the switch……………….573 Download a file from a computer or USB storage device to the switch…………………………………………………………………………………575 Download and install an SSL security certificate file on the switch…………………………………………………………………………………577 Manage software images……………………………………………………….579 Change the software image that loads when the switch starts.579 Display the dual image configuration and add image descriptions……………………………………………………………………….580 Copy a software image from one flash sector to another……581 Delete a software image…………………………………………………….583 Diagnostics and troubleshooting……………………………………………584 Ping an IPv4 address………………………………………………………….584 Ping an IPv6 address………………………………………………………….586 Send an IPv4 traceroute……………………………………………………..588 Send an IPv6 traceroute……………………………………………………..590
14

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Enable the secure diagnostic mode……………………………………592 You cannot log in to the switch…………………………………………..593 Appendix A Configuration Examples Virtual Local Area Networks (VLANs)………………………………………595 VLAN example configuration……………………………………………..596 Access control lists (ACLs)………………………………………………………599 MAC ACL example configuration……………………………………….600 Standard IP ACL sample configuration……………………………….603 Differentiated Services (DiffServ)…………………………………………….607 DiffServ classes…………………………………………………………………..608 DiffServ traffic classes…………………………………………………………608 DiffServ policies…………………………………………………………………609 DiffServ traffic conditioning policy……………………………………..609 DiffServ example configuration………………………………………….610 802.1X port access control……………………………………………………..615 802.1X example configuration……………………………………………616 Multiple Spanning Tree Protocol……………………………………………619 MSTP example configuration……………………………………………..621 VLAN routing interface example configuration……………………….626 Appendix B Software Default Settings and Hardware Specifications Access default settings for the switch device UI………………………630 System features default settings……………………………………………..630 VLAN features default settings……………………………………………….634 Switching features default settings…………………………………………637 Multicast features default settings…………………………………………..640 Routing features default settings……………………………………………643 QoS features default settings…………………………………………………645 Security features default settings……………………………………………648 ACL features default settings………………………………………………….652 Monitoring features default settings……………………………………….652 Models XS508TM and XS516TM hardware technical specifications…………………………………………………………………………653
15

1
Get Started
This user manual describes how you can use the device user interface (UI) to configure and operate the following NETGEAR switches: · Model XS508TM: S3600 Series 8-Port 10G/Multi-Gigabit Ethernet Smart Switch
with 2 SFP+ Ports · Model XS516TM: S3600 Series 16-Port 10G/Multi-Gigabit Ethernet Smart Switch
with 2 SFP+ Ports The manual describes the software configuration procedures and explains the options that are available within those procedures. The chapter contains the following sections: · Available publications and online help · Switch management options and default management mode · Manage the switch by using the device UI · About on-network and off-network access · Access the switch on-network and connected to the Internet · Access the switch off-network and not connected to the Internet · Credentials for the device UI · Register the switch · Change the language of the device UI · Change the management mode of the switch · Configure ports using the Device View · Access the NETGEAR support website · Access the user manual online
Note: For more information about the topics covered in this manual, visit the support website at netgear.com/support.
16

Note: Firmware updates with new features and bug fixes are made available from time to time at netgear.com/support/download/. Some products can regularly check the site and download new firmware, or you can check for and download new firmware manually. If the features or behavior of your product does not match what is described in this guide, you might need to update your firmware.
17

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Available publications and online help
You can download the following publications and more for your switch by visiting netgear.com/support/download and entering your model number in the search box.
· Installation Guide · User Manual (this manual) · Lite CLI Reference Manual
When you are logged in to the device UI, you can access documentation online by selecting Help and clicking the link in the User Manual section.
In addition, context-sensitive online help is available in the device UI.
For information about how you can manage and monitor the switch with the Insight Cloud Portal and Insight app, visit netgear.com/business/services/insight. The Insight Cloud Portal and Insight app have embedded help and are documented in multiple knowledge base articles that you can access by visiting netgear.com/support/product/insight.
Switch management options and default management mode
If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up a custom configuration. Just connect power, connect to your network and to your other devices, and you’re done.
The switch provides administrative management options that let you configure, monitor, and control the network. The device UI is enabled by default, allowing you to configure the switch and the network from a web browser. If you are an Insight Premium or Pro subscriber, you can choose to manage the switch by using the NETGEAR Insight Cloud Portal that is available from a web browser on your Windows-based computer, Mac, or tablet, or from the NETGEAR Insight app on a smartphone or tablet.
The switch provides the following management options that let you discover the switch on the network and configure, monitor, and control the switch:
· NETGEAR Insight Cloud Portal and Insight app: If you set the management mode of the switch to NETGEAR Insight Mobile App and Insight Cloud Portal, you can use the following applications to manage the switch remotely:
– Insight Cloud Portal: As an Insight Premium or Insight Pro user, you can use the Insight Cloud Portal to set up the switch in the network; perform remote setup;

Get Started

18

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
configure, manage, and monitor the switch; analyze the switch and network usage; receive push notifications from the switch; and, if necessary, troubleshoot the switch and the network.
– Insight app: With the Insight app, you can discover the switch on the network and add it to a network location. You can then set up the switch in the network, and manage and monitor the switch remotely from your tablet or smartphone, and receive push notifications from the switch. You can choose from four methods to add the switch to the Insight app: You can scan your network for the switch, scan the QR code of the switch, scan the barcode of the switch, or add the serial number and MAC address of the switch.
For information about how you can manage and monitor the switch with the Insight Cloud Portal and Insight app, visit netgear.com/business/services/insight. The Insight Cloud Portal and Insight app have embedded help and are documented in multiple knowledge base articles that you can access by visiting netgear.com/support/product/insight. To use the NETGEAR Insight Cloud Portal or NETGEAR Insight app management method, you must change the method to NETGEAR Insight Mobile App and Insight Cloud Portal. After you do so, you can also change the method back to Directly Connect to Web Browser Interface and use the device UI. For more information, see Change the management mode of the switch on page 39.
· Device UI: By default, the management mode of the switch is set to Directly Connect to Web Browser Interface, which lets you access the device UI. In this mode, you can change all settings of the switch.
Note: If you plan to use NETGEAR Insight to manage the switch, we recommend that you do not use the device UI to change settings that are Insight manageable. These settings are overwritten by the settings for the Insight network location to which you assign the switch. We recommend that you use the Insight Cloud Portal or Insight app to change Insight manageable settings.
· Smart CLI: The smart command-line interface (CLI) is a text-based way to manage and monitor the switch. You can access the CLI by using a direct serial connection, or by using a remote logical connection with telnet or SSH. For more information about the smart CLI, see the CLI manual. To find the CLI manual, visit netgear.com/support/download and enter your model number in the search box.

Get Started

19

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Manage the switch by using the device UI
This manual describes how to use the device UI to manage and monitor the switch. For information about how you can manage and monitor the switch with the Insight Cloud Portal and Insight app, visit netgear.com/business/services/insight. The Insight Cloud Portal and Insight app have embedded help and are documented in multiple knowledge base articles that you can access by visiting netgear.com/support/product/insight.
Device UI buttons and user-defined fields
The following table shows the general buttons that are used on the pages in the device UI. (Some pages have unique buttons.)

Table 1. Device UI buttons

Button

Function

Apply

Click the Apply button on a device UI page to save configuration changes, which take effect immediately and are retained when you reboot the switch.

Save

Click the Save button in a device UI pop-up window to save configuration changes, which take effect immediately and are retained when you reboot the switch.

Add

Click the Add button in a device UI pop-up window to add and save a configuration, which takes effect immediately and is retained when you reboot the switch.

Add New

Click the Add New button to add a new item to the configuration.

Edit

Click the Edit button to change a selected item.

Delete

Click the Delete button to remove a selected item.

Refresh

Click the Refresh button to update the page with the latest information from the switch.

Cancel

Click the Cancel button to cancel your configuration changes on a device UI page or pop-up window.

Back

Click the back button to return to the previous page or the main page for a feature.

Clear

Click the Clear button to reset statistics on the page.

Logout

Click the Logout button to end the device UI session.

User-defined fields can contain alphanumeric and special characters except for the following special characters (unless specifically noted for a feature on a device UI page):

Get Started

20

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Table 2. Invalid characters for user-defined fields

Invalid characters for user-defined fields

|

/

Interface naming conventions
The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are Multigig Ethernet interfaces and 10G and 1G fiber interfaces, which are numbered on the front panel. You configure the logical interfaces.
The following table describes the naming convention for all interfaces available on the switch.

Table 3. Naming conventions for interfaces

Interface

Description

Example

Physical interfaces

Multigig Ethernet interfaces, which support 10 Gbps, 5 Gbps, 2.5 Gbps, 1 Gbps, and 100 Mbps. The interface number is the port number, which is a sequential number starting from 1.

xg1, xg2, xg3, and so on

Fiber interfaces (SFP+), which support 10 Model XS508TM: xg9 and xg10

Gbps or 1 Gbps.

Model XS516TM: xg17 and xg18

Link aggregation group (LAG) A LAG interface is a logical interface (channel) that aggregates two or more physical ports.

ch1 with LAG ID l1, ch2 with LAG ID l2, ch3 with LAG ID l3, and so on

Routing VLAN interfaces

This is an interface used for routing functionality.

VLAN 1, VLAN 2, VLAN 3, and so on

CPU management interface

This is the internal switch interface c/1

c1

responsible for the switch base MAC

address. This interface is not configurable

and is always listed in the MAC address

table.

Save your changes in the device UI
When you click the Apply button in the device UI, your changes are saved and are retained when you restart the switch. That is, your changes are saved to both the running configuration and the startup configuration of the switch.

Get Started

21

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Context-sensitive help
When you log in to the switch, every page contains a link to the online help that contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Network Configuration page is open, the help topic for that page displays if you click the link to the online help.
About on-network and off-network access
You can access the switch either on-network or off-network:
· On-network and connected to the Internet: When you use the device UI, for easiest access, we recommend that you cable the switch to a network that is connected to the Internet and that includes a router or DHCP server that assigns IP addresses. Power on the switch, and then use a computer that is connected to the same network as the switch to connect to the device UI. We refer to this setup as on-network. For more information, see Access the switch on-network and connected to the Internet on page 22.
· Off-network and not connected to the Internet: You can also configure the switch connected directly only to the computer that you are using to configure it. That is, the switch is not connected to the network and the Internet. We refer to this setup as off-network or offline. If your network does not include a DHCP server (or a router that functions as a DHCP server), you must access the switch off-network. For more information, see Access the switch off-network and not connected to the Internet on page 29.
Note: We recommend that you register the switch to activate your warranty. For more information, see Register the switch on page 33.
Access the switch on-network and connected to the Internet
The DHCP client on the switch is enabled by default, allowing a DHCP server or router on the network to assign an IP address to the switch.
If the switch is on-network, connected to a DHCP server, and connected to the Internet, you can use a Windows-based computer to access the device UI. We also recommend that you register the switch with NETGEAR to activate your warranty. For more information about accessing the device UI, see Use a Windows-based computer to access the switch on-network and connected to the Internet on page 23.

Get Started

22

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

If you use a Mac, or if you do not know the IP address of the switch, use one of the following tools to discover the IP address of the switch on the network:
· NETGEAR Insight app: You can install the NETGEAR Insight app on an iOS or Android mobile device and discover the IP address of the switch. See Use the NETGEAR Insight app to discover the IP address of the switch on page 25.
· NETGEAR Switch Discovery Tool (NSDT): If you use a Mac or a Windows-based computer, you can use the NSDT to discover the switch on your network. See Use the NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet on page 26.
· Other tools: You can also get the IP address of the switch from the DHCP server in the network or use an IP scanner utility. See Use other options to discover the switch IP address on page 28.
When you know the IP address, you can configure and manage the switch in the following ways:
· Device UI: For configuration of all switch features, access the switch over the device UI. See Access the switch on-network when you know the switch IP address on page 28.
· NETGEAR Insight Cloud Portal and Insight app: You can change the management mode of the switch so that you can use the NETGEAR Insight Cloud Portal and Insight app to manage the switch remotely. For more information, see Change the management mode of the switch on page 39.
Use a Windows-based computer to access the switch on-network and connected to the Internet
For the following procedure, the network must provide Internet access. To use a Windows-based computer to determine the switch IP address and access the switch on-network and connected to the Internet:
1. Cable the switch to a network with a router or DHCP server that manages IP addresses.
2. Power on the switch. The DHCP server assigns the switch an IP address.
3. Connect your computer to the same network as the switch. You can use a WiFi or wired network connection.
4. Open File Explorer. 5. Click the Network link.

Get Started

23

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
6. If prompted, enable the Network Discovery feature.
7. Under Network Infrastructure, locate the switch model number.
8. Double-click XXmodel-YYYYYY, in which XXmodel is the model number of your switch and YYYYYY represents the last six digits of the switch MAC address. The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you registered the switch.
9. Enter your credentials, which depend on the page that displays:
· Registration options page displays: If you did not yet activate your warranty, a page with the following options displays:
– Register to Activate Your Warranty: To activate your warranty, click the > button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch. If you do not have a NETGEAR account, you can create one.
– Enter Registration Key: If you obtained a registration key, enter it in the Registration Key field, and click the Submit button. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 34.
– Skip Registration & Access the UI: To access the device UI without activating your warranty, click the > button, and log in. You do not need to register the switch to activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected. If you do not activate your warranty, the registration options page continues to display when you log in.
· Device Admin Password page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device Admin Password page displays. Enter one of the following credentials:
– Device admin password: Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.
– Insight network password: If you previously logged in to the device UI, you changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)

Get Started

24

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

For information about the credentials, see Credentials for the device UI on page 31.
10. If you enter a password, click the Login button.
11. If the Change Default Password page displays, specify and confirm a new device admin password, click the Submit button, and log in again with your new password. The Dashboard page displays. You can now configure the switch.
Use the NETGEAR Insight app to discover the IP address of the switch
If the switch is connected to a WiFi router or access point, and the switch is connected to the Internet, the NETGEAR Insight app lets you discover the switch in your network.
Using the NETGEAR Insight app to discover the IP address of the switch in your network is not the same as managing the switch with the Insight app or the Insight Cloud Portal.
Note: The default management mode of the switch is the device UI. If you want to use the Insight Cloud Portal or the Insight app to manage the switch, you first must change the management mode (see Change the management mode to NETGEAR Insight Mobile App and Insight Cloud Portal on page 40). After you do so, you can manage the switch with Insight and add the switch to an Insight network location.
To use the NETGEAR Insight app to discover the IP address of the switch in your network when the switch is connected to the Internet:
1. On your iOS or Android mobile device, go to the app store, search for NETGEAR Insight, download the latest version of the app, and install the app.
2. Connect your mobile device to the WiFi network of the WiFi router or access point to which the switch is connected.
3. Open the NETGEAR Insight app.
4. If you did not set up a NETGEAR account, tap Create NETGEAR Account and follow the onscreen instructions.
5. Enter the email address and password for your account and tap LOG IN. After you log in to your account, the IP address of the switch displays in the device list.
6. Write down the IP address for future use. You can use this IP address to access the switch directly from a web browser. For information about how to do this, see Access the switch on-network when you know the switch IP address on page 28.

Get Started

25

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Use the NETGEAR Switch Discovery Tool to discover the switch when it is connected to the Internet
For easiest access, we recommend that you cable the switch to a network with a router or DHCP server that assigns IP addresses, power on the switch, and then use a computer that is connected to the same network as the switch.
The NETGEAR Switch Discovery Tool (NSDT) lets you discover the switch in your network and access the device UI of the switch from a Mac or a Windows-based computer. To install the NSDT and discover the IP address of the switch in your network when the switch is connected to the Internet:
1. Download the Switch Discovery Tool by visiting netgear.com/support/product /netgear-switch-discovery-tool. Depending on the computer that you are using, download either the Mac version or the version for a Windows-based computer.
2. Temporarily disable the firewall, Internet security, antivirus programs, or all of these on the computer that you use to configure the switch.
3. Unzip the NSDT files, and click or double-click the .exe file (for example, NSDT-1.2.103.exe) to install the program on your computer. You might see the tool icon appear on your Mac dock or Windows desktop.
4. Reenable the security services on your computer.
5. Power on the switch. The DHCP server assigns the switch an IP address.
6. Connect your computer to the same network as the switch. You can use a WiFi or wired connection. The computer and the switch must be on the same Layer 2 network.
7. Open the Switch Discovery Tool. To open the program, double-click the NETGEAR Switch Discovery Tool icon on your desktop.
The initial page displays a menu and a button.
8. From the Choose a connection menu, select the network for this switch. 9. Click the Start Searching button.
The NSDT displays the IP addresses of the switches that it discovers.
10. Click the ADMIN PAGE button next to your switch.

Get Started

26

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

The page that displays depends on whether you registered the switch.
11. Enter your credentials, which depend on the page that displays:
· Registration options page displays: If you did not yet activate your warranty, a page with the following options displays:
– Register to Activate Your Warranty: To activate your warranty, click the > button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch. If you do not have a NETGEAR account, you can create one.
– Enter Registration Key: If you obtained a registration key, enter it in the Registration Key field, and click the Submit button. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 34.
– Skip Registration & Access the UI: To access the device UI without activating your warranty, click the > button, and log in. You do not need to register the switch to activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected. If you do not activate your warranty, the registration options page continues to display when you log in.
· Device Admin Password page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device Admin Password page displays. Enter one of the following credentials:
– Device admin password: Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.
– Insight network password: If you previously logged in to the device UI, you changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)
For information about the credentials, see Credentials for the device UI on page 31.
12. If you enter a password, click the Login button.
13. If the Change Default Password page displays, specify and confirm a new device admin password, click the Submit button, and log in again with your new password. The Dashboard page displays. You can now configure the switch.

Get Started

27

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Use other options to discover the switch IP address
If the switch is on-network, you can use one of the following options to determine the switch IP address:
· Access the DHCP server: You can access the DHCP server (or router that functions as a DHCP server) in your network and view the IP address that is assigned to the switch. For more information, see the documentation for your DHCP server (or router).
· IP scanner utility: IP scanner utilities are available free of charge on the Internet. An IP scanner utility lets you discover the IP address that is assigned to the switch.
For information about how to access the device UI of the switch, see Access the switch on-network when you know the switch IP address on page 28.
Access the switch on-network when you know the switch IP address
If the switch is on-network and you know the switch IP address, you can access the device UI.
For the following procedure, the network must provide Internet access.
To access the switch on-network when you know the switch IP address:
1. Launch a web browser
2. In the address field of your web browser, enter the IP address of the switch. The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you registered the switch.
3. Enter your credentials, which depend on the page that displays:
· Registration options page displays: If you did not yet activate your warranty, a page with the following options displays:
– Register to Activate Your Warranty: To activate your warranty, click the > button, and follow the directions onscreen to register the switch with your email address and password. After you activate your warranty, you are no longer prompted to register the switch. If you do not have a NETGEAR account, you can create one.
– Enter Registration Key: If you obtained a registration key, enter it in the Registration Key field, and click the Submit button. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 34.

Get Started

28

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
– Skip Registration & Access the UI: To access the device UI without activating your warranty, click the > button, and log in. You do not need to register the switch to activate your warranty, but if you do not activate your warranty within 30 days of purchase, your warranty entitlement might be affected. If you do not activate your warranty, the registration options page continues to display when you log in.
· Device Admin Password page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device Admin Password page displays. Enter one of the following credentials:
– Device admin password: Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.
– Insight network password: If you previously logged in to the device UI, you changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)
For information about the credentials, see Credentials for the device UI on page 31.
4. If you enter a password, click the Login button. 5. If the Change Default Password page displays, specify and confirm a new device
admin password, click the Submit button, and log in again with your new password. The Dashboard page displays. You can now configure the switch.
Access the switch off-network and not connected to the Internet
The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.

Get Started

29

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
To access the switch off-network and enter the registration key before you log in to the device UI:
1. Change the IP settings of your computer to be in the same subnet as the IP settings of the switch. If the DHCP client of the switch is enabled and you remove the switch from the network with the DHCP server, the IP address reverts to the default IP address of 192.168.0.239 with a subnet of 255.255.255.0. If you already disabled the DHCP client and assigned a static IP address to the switch, change the IP settings of your computer to be in the same subnet as the static IP address.
For more information about changing the IP settings on your computer, see one of the following knowledge base articles at the NETGEAR website:
· Windows-based computer: See the following article: kb.netgear.com/27476 · Mac: See the following article, which is written for an access point but is also valid
for a switch: kb.netgear.com/000037250
2. Connect your computer to the switch using an Ethernet cable.
3. Power on the switch by connecting its power cord. 4. Open a web browser, and enter http://192.168.0.239.
This is the default IP address of the switch. If you already disabled the DHCP client and assigned a static IP address to the switch, enter the static IP address of the switch.
The registration options page displays.
5. Do one of the following:
· Enter a registration key: If you obtained a registration key, type or paste the key in the Registration Key field, and click the Submit button. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 34.
· Do not register at this time and access the device UI: Do the following: a. In the Skip Registration & Access the UI section, click the > button, and log in. The Device Admin Password page displays.
b. Enter one of the following credentials:
– Device admin password: Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security.

Get Started

30

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
– Insight network password: If you previously logged in to the device UI, you changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)
c. Click the Login button.
6. If the Change Default Password page displays, specify and confirm a new device admin password, click the Submit button, and log in again with your new password. The Dashboard page displays. You can now configure the switch.
7. After you complete the configuration of the switch, reconfigure the computer that you used for this process to its original TCP/IP settings. You can now connect your switch to your network using an Ethernet cable and use the switch on-network.
Credentials for the device UI
The information in this section applies to accessing the switch device UI in either management mode. That is, it does not apply to accessing the NETGEAR Insight Cloud Portal and Insight app. To access the device UI, use one of the following credentials:
· You registered the switch on-network and online: Use your NETGEAR account credentials. You can register the switch on-network and online to activate your warranty by entering your NETGEAR account credentials (see Register and access the switch on-network with your NETGEAR account on page 33). If you do not have a NETGEAR account, you can create one. Alternatively, you can obtain a registration key and enter the key when the switch is off-network or offline so that you are no longer prompted to activate your warranty (see Register the switch with your NETGEAR account and get a registration key for offline access on page 34 and Access the switch off-network and enter the registration key before you log in on page 35).
· You set a unique password: Use your device admin password. You can access the device UI with your device admin password. The first time that you access the device UI, enter the default device admin password (password), after which you are required to customize the password for greater

Get Started

31

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

security. Subsequent times that you log in to the device UI, use your customized device admin password.
· You already added the switch to a NETGEAR Insight network location: Use the Insight network location password. NETGEAR Insight can affect how you access the switch device UI. After you add the switch to an Insight network location and change the management mode of the switch so that you can use the NETGEAR Insight Cloud Portal and Insight app to manage the switch remotely (see Change the management mode of the switch on page 39), the Insight network location password replaces the switch device admin password. To access the device UI, you must enter the Insight network location password. Even if you temporarily change the management mode of the switch back to Direct Connect Web Browser Interface, for example to change settings that are not Insight-manageable or for debugging purposes, you must enter the Insight network location password. For information about how the Insight network password functions and for knowledge base articles about NETGEAR Insight, visit netgear.com/support/product/insight.
The following table lists the essential credential options for access to the device UI.

Table 4. Credentials for access to the device UI

Management mode in the device UI

Added to an Insight network

Credentials

Device UI menu

Default mode: Direct Connect Web Browser Interface (Local LAN Only)

No Yes1

Device admin password
Insight network password

Full device UI menu

NETGEAR Insight Mobile App No and Insight Cloud Portal (Cloud/Remote)

Device admin password

Limited device UI menu. (Not managed through NETGEAR Insight.)

Yes

Insight network

Limited device UI menu.

password

(Managed through NETGEAR

Insight.)

1. This situation occurs if you temporarily change the management mode of the switch from NETGEAR Insight Mobile App and Insight Cloud Portal back to Direct Connect Web Browser Interface.

Get Started

32

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Register the switch
You can register the switch online or offline to activate your warranty, after which you are no longer prompted to activate your warranty when you log in:
· Online registration for on-network access: If your switch is on-network or connected to the Internet, you can register the switch with your NETGEAR account credentials and activate your warranty. During the registration process, the switch contacts a NETGEAR server. For more information, see Register and access the switch on-network with your NETGEAR account on page 33.
· Registration for off-network access: You can register your switch from any device that is connected to the Internet and get a registration key. If the switch is off-network or not connected to the Internet, you can enter the registration key. After you do so, the Register to activate your warranty page no longer displays when you log in. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 34.
Register and access the switch on-network with your NETGEAR account
For initial registration and access with your NETGEAR account, the switch must be connected to the Internet so that it can communicate with a NETGEAR server.
If you do not have a free NETGEAR account, you can create one during the registration process.
To register and access the switch on-network over the device UI with your NETGEAR account:
1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and enter the registration key before you log in on page 35.
The registration options page displays.
3. In the Register to Activate Your Warrant section, click the > button and follow the directions onscreen to register the switch with your email address and password and activate the warranty.

Get Started

33

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
You are only prompted to do this once to confirm registration of your switch. If you did not yet create a NETGEAR account, click the Create account link, follow the directions onscreen to create an account, and register the switch with your email address and password. For information about the credentials, see Credentials for the device UI on page 31.
4. If the Change Default Password page displays, specify and confirm a new device admin password, click the Submit button, and log in again with your new password. The Dashboard page displays. You can now configure the switch.
Register the switch with your NETGEAR account and get a registration key for offline access
Note: If you register your switch with your NETGEAR account and then access the switch connected to the Internet, you do not need a registration key because the Device Admin Password page displays. That is, you are no longer prompted to activate your warranty.
After you register your switch with your NETGEAR account, you can get a registration key, access the switch offline or not connected to the Internet, and either before or after you log in to the device UI, enter the registration key. After you enter the registration key, you are no longer prompted to activate your warranty. Instead, the Device Admin Password page displays. You can visit my.netgear.com, log in to your NETGEAR account, register the switch using its serial number, and get a registration key. NETGEAR Insight Premium or Pro subscribers can use the Insight Cloud Portal or Insight app to get a registration key. The Insight Cloud Portal and Insight app have embedded help and are documented in multiple knowledge base articles that you can access by visiting netgear.com/support/product/insight. To register the switch with your NETGEAR account and get a registration key: 1. From a computer or mobile device that is connected to the Internet, go to
my.netgear.com. 2. Log in to your NETGEAR account.
If you do not have a free NETGEAR account, you can create one. The Your Registered Products page displays.
3. Click the REGISTER NEW PRODUCT button. 4. In the SERIAL NUMBER field, type the serial number of your switch.
The serial number is 13 digits long. It is printed on the switch label.

Get Started

34

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
5. From the PURCHASE DATE menus, select the date that you purchased the switch. 6. Click the REGISTER button.
Your switch is registered to your NETGEAR account. A confirmation email is sent to your NETGEAR account email address.
7. On the YOUR REGISTERED PRODUCTS page, click VIEW PRODUCT button for the switch that you just registered. The Registration Key field displays the registration key for your switch. You can use this key to access the switch offline.
Access the switch with a registration key
After you get a registration key, you can access the switch either off-network or on-network and enter the registration key. For more information, see one of the following sections:
· Access the switch off-network and enter the registration key before you log in on page 35
· Access the switch on-network and enter the registration key after you log in on page 36
After you enter the registration key, you are no longer prompted to activate your warranty when you log in. Instead, the Device Admin Password page displays.
Access the switch off-network and enter the registration key before you log in For information about getting a registration key, see Register the switch
with your NETGEAR account and get a registration key for offline access on page 34. The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.

Get Started

35

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
To access the switch off-network and enter the registration key before you log in to the device UI: 1. Change the IP settings of your computer to be in the same subnet as the IP settings
of the switch. If the DHCP client of the switch is enabled and you remove the switch from the network with the DHCP server, the IP address reverts to the default IP address of 192.168.0.239 with a subnet of 255.255.255.0. If you already disabled the DHCP client and assigned a static IP address to the switch, change the IP settings of your computer to be in the same subnet as the static IP address. For more information about changing the IP settings on your computer, see one of the following knowledge base articles at the NETGEAR website:
· Windows-based computer: See the following article: kb.netgear.com/27476 · Mac: See the following article, which is written for an access point but is also valid
for a switch: kb.netgear.com/000037250
2. Connect your computer to the switch using an Ethernet cable. 3. Power on the switch by connecting its power cord. 4. Open a web browser, and enter http://192.168.0.239.
This is the default IP address of the switch. If you already disabled the DHCP client and assigned a static IP address to the switch, enter the static IP address of the switch. The registration options page displays.
5. Type or paste the key 6. Click the Submit button. 7. If the Change Default Password page displays, specify and confirm a new device
admin password, click the Submit button, and log in again with your new password. The Dashboard page displays. You can now configure the switch.
8. After you complete the configuration of the switch, reconfigure the computer that you used for this process to its original TCP/IP settings. You can now connect your switch to your network using an Ethernet cable and use the switch on-network.
Access the switch on-network and enter the registration key after you log in For information about getting a registration key, see Register the switch with
your NETGEAR account and get a registration key for offline access on page 34.

Get Started

36

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

To access the switch on-network and enter the registration key after you log in to the device UI:
1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and enter the registration key before you log in on page 35.
The registration options page displays.
3. In the Skip Registration & Access the UI section, click the > button, and log in. The Device Admin Password page displays.
4. Enter one of the following passwords:
· Device admin password: Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password.
· Insight network password: If you previously logged in to the device UI, you changed the management mode to NETGEAR Insight, and you added the switch to an Insight network location, enter the Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.)
For information about the credentials, see Credentials for the device UI on page 31.
5. Click the Login button. The Dashboard page displays.
6. Select Maintenance > Registration Key. The Registration Key page displays.
7. In the field, type or paste the registration key.
8. Click the Submit button. The registration takes effect on the switch and you are no longer prompted to activate your warranty when you log in.
After successful registration, the Maintenance > Registration Key menu option and Registration Key page are hidden in the device UI.

Get Started

37

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Change the language of the device UI
You can set the language of the device UI to a specific one. To change the language of the device UI: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords: · Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
5. At the top right of the page, to the left of the Logout button, click the language button. The Select Language pop-up menu displays.
6. Select the radio button for a language. 7. Click the Apply button.
You are logged out. The language of the device UI is set to the language that you selected. To continue configuring the switch, log in again.

Get Started

38

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Change the management mode of the switch
By default, the management mode on the switch is Directly Connect to Web Browser Interface (which is the same as the device UI). You can also change the management mode to NETGEAR Insight Mobile App and Insight Cloud Portal.
About changing the management mode
The following applies to changing the management mode:
· Changing to the NETGEAR Insight Mobile App and Insight Cloud Portal mode:
– The first time that you enable this mode, the switch is reset to its factory default settings so that you can create the switch configuration and network topology using the Insight Cloud Portal or the Insight app. For more information, see Change the management mode to NETGEAR Insight Mobile App and Insight Cloud Portal on page 40.
– If you previously added the switch to a network location on the Insight Cloud Portal or the Insight app, all Insight-manageable device settings are returned to the last configuration saved on the cloud server, including the switch device admin password (that is, the password is reset to the Insight network location password).
– If you use the Insight Cloud Portal or the Insight app, you can temporarily change the management mode of the switch back to Directly Connect to Web Browser Interface. You can then access the device UI for settings that are not Insight-manageable, for complex tasks such as integrating with an existing network of devices that are not managed through Insight, and for debugging purposes. When you are done, you can change the management mode back to NETGEAR Insight Mobile App and Insight Cloud Portal.
· Changing back to Directly Connect to Web Browser Interface mode: After you change the management mode, back up your configuration. Then, reset the switch to factory defaults. Finally, restore your configuration and reboot the switch. For more information, see Change the management mode back to Directly Connect to Web-browser Interface on page 41. After you change the management mode, the follow occurs:
– The NETGEAR Insight Mobile App and Insight Cloud Portal management mode is disabled and the current Insight-manageable device settings are saved to the cloud server.
– Any changes that you make using the Directly Connect to Web Browser Interface management mode are not saved to the cloud server.

Get Started

39

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

– All configuration menus and options are available in the device UI.

Change the management mode to NETGEAR Insight Mobile App and Insight Cloud Portal
To change the management mode of the switch to NETGEAR Insight Mobile App and Insight Cloud Portal: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
5. Select System > Management > System Information. The System Information page displays.
6. In the Management Mode section, select the NETGEAR Insight Mobile App and Insight Cloud Portal radio button. A confirmation pop-up window displays.
7. Click the OK button. The System Information page display again.
8. Click the Apply button.

Get Started

40

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

An alert pop-up window displays.
9. Click the OK button. The pop-up window closes. The following occurs:
· The first time that you enable this mode, the switch is reset to its factory default settings.
· The switch connects to the cloud server.
· If you previously added the switch to a network on the Insight Cloud Portal or Insight app, all Insight-manageable device settings are returned to the last configuration saved on the cloud server, including the device admin password (that is, the password is reset to the Insight network password).
You can now manage the switch using the Insight Cloud Portal or Insight app.
For information about how you can manage and monitor the switch with the Insight Cloud Portal and Insight app, visit netgear.com/business/services/insight. The Insight Cloud Portal and Insight app have embedded help and are documented in multiple knowledge base articles that you can access by visiting netgear.com/support/product/insight.

Change the management mode back to Directly Connect to Web-browser Interface
After you change the management mode back to Directly Connect to Web-browser Interface, back up your configuration. Then, reset the switch to factory defaults. Finally, restore your configuration and reboot the switch. These steps are described in the following procedure.
To change the management mode of the switch to back to Directly Connect to Web-browser Interface:
1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29.
The Device Admin Password page displays.
If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.

Get Started

41

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
5. Select System > Management > System Information. The System Information page displays.
6. In the Management Mode section, select the Directly Connect to Web Browser Interface radio button. A confirmation pop-up window displays.
7. Click the OK button. The System Information page display again.
8. Click the Apply button. An alert pop-up window displays.
9. Click the OK button. The pop-up window closes, and the Device Admin Password page displays. Any current Insight-manageable device settings are saved to the cloud server.
10. Log in again. The Dashboard page displays. The full device UI is available. The following step uses an HTTP session to back up the configuration. For information about using a TFTP session, see Export a file from the switch to a TFTP server on page 564.
11. Back up the configuration by doing the following: a. Select Maintenance > Export > HTTP File Export. The HTTP File Export page displays. b. From the File Type menu, select Text Configuration. c. Click the Apply button. A pop-up window displays. d. Navigate to a location on your computer and save the file.

Get Started

42

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
The file transfer begins. The page displays information about the file transfer progress.
12. Reset the switch to factory default settings by doing the following: a. Select Maintenance > Reset. The Reset page displays.
b. Select the Factory Reset button. This option resets the switch to its factory default settings but does not change its registration status with NETGEAR. An Alert pop-up window displays. The configuration is reset to the factory default settings.
c. Click the OK button to close the window. After the switch is reset to factory default settings, the DHCP client on the switch is enabled. Your device admin password is reset to the default password (password). This process takes about 135 seconds. The Device Admin Password page displays. In the unlikely situation that the Device UI page does not display and you cannot log in, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29.
d. Enter the device admin password. The default device admin password is password. The first time that you enter the default device admin password, the Change Default Password page displays, requiring you to customize the device admin password. The Dashboard page displays. The following step uses an HTTP session to restore the configuration. For information about using a TFTP session, see Download a file from a TFTP server to the switch on page 573.
13. Restore the configuration that you saved in Step 11 by doing the following: a. Select Maintenance > Update > HTTP Firmware/File Update. The HTTP Firmware/File Update page displays.
b. From the File Type menu, select Text Configuration.
c. Click the Browse button and locate and select configuration file that you saved in Step 11.
d. Click the Apply button. The file transfer begins. The page displays information about the progress of the file transfer. The switch applies the configuration automatically.

Get Started

43

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

14. Reboot the switch by doing the following: a. Select Maintenance > Reset. The Reset page displays. b. Click the Reboot Now button. An Alert pop-up window displays. The switch reboots. c. Click the OK button to close the window. When the reboot is finished, the Device Admin Password page displays.
15. Log in again. The Dashboard page displays. You can now configure the switch using all options in the device UI.
Configure ports using the Device View

The Device View in the device UI displays the ports on the switch. This graphic tool provides an alternate way to navigate to port configuration and monitoring options. To configure ports using the Device View: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button.

Get Started

44

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

(If you are already logged into the device UI, select Dashboard.) The Dashboard page displays. The Device View pane shows the ports of the switch.
5. To display a port menu that shows the configuration and monitoring options, click a port. A pop-up menu displays.
6. Select a menu item. The associated page displays, allowing you to configure or monitor the port.
Access the NETGEAR support website
From the device UI, you can access the NETGEAR support website at netgear.com/support. To access the NETGEAR support website from the device UI:

1. Connect your computer to the same network as the switch.
   You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
   2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
   3. Enter one of the following passwords: · Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location.
   For information about the credentials, see Credentials for the device UI on page 31.
   4. Click the Login button. The Dashboard page displays.
   5. Select Help.

Get Started

45

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

The Online Help page displays.
6. In the Support section, click the link. The NETGEAR support website opens.

Access the user manual online

The user manual (the manual that you are now reading) is available from the NETGEAR download center at netgear.com/support/download/. To access the user manual online from the device UI: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
5. Select Help. The Online Help page displays.
6. In the User Manual section, click the link. The NETGEAR Download Center website opens.
7. Enter the model number of the switch and select the model from the menu.

Get Started

46

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
The page displays the documentation that is available for your model, including the user manual.

Get Started

47

User Manual

2
Configure Switch System Settings
This chapter covers the following topics: · Dashboard · Display information about switch hardware components and firmware · IP network settings for management access · Time and NTP settings · Domain Name System · Manage switch discovery protocols · LLDP and LLDP-MED settings for the switch · Simple Network Management Protocol · Configure HTTP and HTTPS access settings · Browser security message with HTTPS access · SSH management access · Configure inbound Telnet settings · DHCP server · DHCP relay · DHCP Layer 2 relay · DHCP snooping · DHCPv6 server · DHCPv6 relay
48

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
Dashboard
The information that is displayed on the dashboard is mostly self-explanatory.
Display port utilization and port connections
The Dashboard displays port utilization and port connections. To display port utilization and port connections: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords: · Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
The following table describes information about port utilization.

Configure Switch System

49

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Field

Description

Disconnected

The total number of ports that are not connected

Connected

The total number of connected ports

Available

The total number of available ports, including ports that are not connected to a device and excluding SFP and SFP+ fiber ports in which no SFP transceiver module is inserted

For more information about ports, see Configure the port settings on page 224.
The following table describes information about the port connections in the Device View section.

Field

Description

Connected

The port is connected to a device that is powered up.

Disconnected

The port is not connected to a device or it is connected to a device that is not powered up.

Available

The port is not connected to a device but is available.

1G SFP Fiber Port

The port is a 1G SFP fiber port that can accept an SFP transceiver module.

Blocked

The port is blocked. That is, STP blocked the port to prevent a loop. For more information, see Configure the port settings on page 224 and Loop protection on page 456.

10G SFP+ Fiber Port

The port is a 10G SFP+ fiber port that can accept an SFP or SFP+ transceiver module.

Link Disabled

The port is administratively down. For more information, see Configure the port settings on page 224.

For information about how you can use the Device View to configure the ports and the switch, see Configure ports using the Device View on page 44.

Display VLAN membership
The Dashboard displays information about VLAN membership on the switch. To display information about VLAN membership: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser.

Configure Switch System

50

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports
If you do not know the IP address of the switch, see Access the switch on- network and connected to the Internet on page 22 or Access the switch off- network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
The VLAN Membership section displays the number of member interfaces for each configured VLAN. If you did not configure any custom VLANs, the section displays only the following preconfigured VLANs: default, Auto-WiFi, Auto- Camera, Auto-VoIP, and Auto-Video. For more information about VLANs, see Manage VLANs on page 167.
Display switch device details
The Dashboard displays switch device details. To display switch device details: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.

Configure Switch System

51

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

3. Enter one of the following passwords: · Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
The following table describes the information that displays in the Device Details section,

Field Name
Serial Number Model MAC Address Uptime VLAN in use
IP Address
Date & Time
Firmware Version

Description
The system name that you configured, if any. For more information, see Configure and display general switch system information and NETGEAR Insight Cloud application information on page 53.
The serial number of the switch. This field is fixed.
The model number of the switch. This field is fixed.
The MAC address of the switch. This field is fixed.
The period in days, hours, minutes, and seconds since the switch was last started.
The VLAN that is being used as the management VLAN. For more information, see Change the management VLAN on page 61.
The management IP address at which you can access the device UI. For more information, see IP network settings for management access on page 59.
The current date and time. For more information, see Time and NTP settings on page 67.
The active main firmware version of the switch (see Manage software images on page 579).

Display information about switch hardware components and firmware

You can display information about switch hardware components such as power supplies, temperature sensors, and fans, and information about the boot version and software version on the switch.

Configure Switch System

52

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Configure and display general switch system information and NETGEAR Insight Cloud application information
You can configure the switch system name, location, and contact and display general switch information. If you set the management mode of the switch at least once to NETGEAR Insight Mobile App and Insight Cloud Portal, the NETGEAR Insight Cloud application information displays on the page. To configure and display general system information and NETGEAR Insight Cloud application information:
1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29.
The Device Admin Password page displays.
If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
5. Select System > Management > System Information. The System Information page displays.
6. Optionally, configure the following fields:
· System Name: Type a name to identify this switch. · System Location: Type the location for this switch. · System Contact: Type the name of a contact person for this switch.

Configure Switch System

53

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

For each field, you can use up to 255 alphanumeric characters.
7. Click the Apply button. Your settings are saved.
The following table describes the NETGEAR Insight Cloud application information on the page.

Table 5. NETGEAR Insight Cloud application information

Field App Name App Status

Description The application name The application status, which can be one of the following: · Operational: The cloud server is reachable, the switch is registered
with the cloud, and the switch is added to a user account. · Timeout: The cloud server is not reachable. · Device not registered: The cloud server is reachable, but the switch
is not registered with cloud. · Waiting for cloud sign-on: The cloud server is reachable, and the
device is registered with the cloud. · Device not added in account: The cloud server is reachable and the
switch is registered with the cloud, but the switch is not yet added to a user account. · Disabled: The Cloud mode is disabled.

Version

The version of the application, which is set by the NETGEAR Insight agent

The following table describes the system information on the page.

Table 6. System information
Field Product Name System Up Time Base MAC Address Date & Time

Description The product and model name of the switch The time in days, hours, and minutes since the switch was restarted Universally assigned network address The current date and time, including the time zone

Configure Switch System

54

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Table 6. System information (Continued)

Field Serial Number System Object OID

Description The serial number of the switch The base object ID for the enterprise MIB of the switch

Display the power supply information
You can view information about the power supplies. To display the power supply information: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
5. Select System > Management > System Information. The System Information page displays.
The following table describes the view-only power supply information.

Configure Switch System

55

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

Table 7. Power supply information

Field Power supply Description Type Operational

Description The ID number, which is always 1
The description is always PS-1
The type is always Fixed
The status of the power supply in the switch is always Operational. (If the power supply failed, you would not be able to access the device UI.)

Display the boot and software version
You can display the boot and software (firmware) versions that are running on the switch. To display the boot and software versions: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
5. Select System > Management > System Information. The System Information page displays.

Configure Switch System

56

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

The following table describes the version information.

Table 8. Version information

Field Model Name Boot Version
Software Version

Description
The model number of the switch
The version of the boot code that is in the flash memory to load the software into the memory
The release, version, and maintenance number of the software that is running on the switch. For example, if the release is 1, the version is 2.0, and the maintenance number is 3.5, the format is 1.2.0.3.5.

Display the temperature sensor information
You can view the current temperature of different system sensors using the Temperature Status table. To display the temperature sensor information: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.

Configure Switch System

57

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

5. Select System > Management > System Information. The System Information page displays.
6. To refresh the page, click the Refresh button. The following table describes the view-only Temperature Status information.

Table 9. Temperature Status information

Field Sensor Description Temp (C) State Max Temp (C)

Description The ID of the sensor The description of the sensor (System or MAC) The current temperature of the sensor in Celsius Indicates if the sensor is operating normally The maximum temperature in Celsius that the sensor detected

Display the status of the fans
The fans remove the heat generated by the power, CPU, and other chipsets, and allow the chipsets work normally.
To display the status of the fans:
1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29.
The Device Admin Password page displays.
If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password.

Configure Switch System

58

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

· If you previously managed the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
5. Select System > Management > System Information. The System Information page displays.
The following table describes the fan information.

Table 10. Fan information
Field FAN Description Type Speed Duty Level (%) State

Description The ID of the fan The description of the fan, such as Fan-1 The type of fan is always Fixed The speed of the fan The duty level of the fan in percentage The status of the fan: · Operational: The fan is running normally. · Failure: The fan failed. · Stop: The fan stopped because the switch temperature is low. The fan
will start if the switch temperature rises.

IP network settings for management access

You can configure network information for the device UI, which is the logical interface used for in-band connectivity with the switch through any of the switch’s front-panel ports. The settings associated with the device UI do not affect the configuration of the front panel ports through which traffic is switched or routed.

Configure the IPv4 management interface
You can restrict IPv4 management to one specific interface. You can use any of the interfaces as an IPv4 management interface.

Configure Switch System

59

Settings

User Manual

S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports

To configure an IPv4 management interface: 1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays.
If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33.
3. Enter one of the following passwords:
· Enter your device admin password. · If you previously managed the switch through the Insight Cloud Portal or Insight
app, enter the Insight network password for the last Insight network location.
For information about the credentials, see Credentials for the device UI on page 31.
4. Click the Login button. The Dashboard page displays.
5. Select System > Management > IP Network > IP Network Configuration. The IP Network Configuration page displays.
6. Select a radio button for the configuration of the switch management interface:
· Static IP Address: You must manually configure the IP address, subnet mask, and default gateway. Enter this information in the fields below the radio buttons.
· Dynamic IP Address (BOOT): The switch must obtain the IP address through a BootP server.
· Dynamic IP Address (DHCP): The switch must obta

References

• English - NETGEAR Communities
• How do I set a static IP address in Windows? - NETGEAR Support
• NETGEAR - Common Account Management
• MyNETGEAR.com
• NETGEAR: Advanced WiFi & Networking
• NETGEAR Support | NETGEAR
• Download Center | Downloads and Documentation | NETGEAR
• Download Center | Downloads and Documentation | NETGEAR
• Insight Management Solution | NETGEAR Support
• Switch Discovery Protocol | Product | Support | NETGEAR
• English - NETGEAR Communities
• Setting a static IP address on your network adapter in Mac OS for direct access to an access point - NETGEAR Support
• How do I set a static IP address in Windows? - NETGEAR Support
• NETGEAR Terms and Conditions | NETGEAR
• NETGEAR Terms and Conditions | NETGEAR
• NETGEAR Support | NETGEAR
• NETGEAR Support | NETGEAR
• Download Center | Downloads and Documentation | NETGEAR
• Insight Management Solution | NETGEAR Support
• Switch Discovery Tool | Smart Managed Plus Switches | NETGEAR Support

Read User Manual Online (PDF format)

Download This Manual (PDF format)

Download this manual  >>