prosafe® intelligent edge managed switches - · pdf fileprosafe® intelligent edge...

4 Models at a glance Page 5 Product brief Page 6 - 10 Modern access layer features highlights 1 - 12 Target application and why M4100 series Page 13 - 16 Accessories and modules Page 17 - 35 Technical specifications and ordering information

ProSAFE® Intelligent Edge Managed Switches Data Sheet

M4100 series

Page 1 of 35

Highlights

The NETGEAR® Intelligent Edge M4100 series consists of 9 fully managed switches, ranging from 12-port to 50-port Fast and Gigabit Ethernet. They are ideal for all organizations considering reliable, affordable and simple access layer switching with CLI, advanced scripting capabilities and Layer 3 routing.

As a cost-effective component of converged voice, video and data networking solutions, NETGEAR M4100 series delivers a secure edge in commercial buildings and campus LAN environments: PoE (802.3af) and PoE+ (802.3at) versions of M4100 series are perfect for Wireless access points, IP telephony and IP surveillance deployments.

Layer 2+ with static routing•M4100seriescomeswithPort-based/VLAN-based/Subnet-based“staticrouting”Layer2+versions

•L3fixedroutestothenexthoptowardsthedestinationnetworkareaddedtotheroutingtable

•L3routingiswire-speedinM4100serieshardwarewith64staticroutes(IPv4)

Engineered for convergence•Automaticmulti-vendorVoiceoverIPprioritizationbasedonSIP,H323and SCCPprotocols

•VoiceVLANandLLDP-MEDforautomaticIPphonesQoSandVLANconfiguration

•Advancedclassifier-basedhardwareforL2,L3,L4securityandprioritization

•AdvancedMulticastfilteringwithIGMPandMLDsnoopingandqueriermodes

High-value performance and IPv6 ready•16KMACaddresses;upto100Gbpsswitchingfabric;9Kjumboframes;GreenEthernet

•IPv4/IPv6ingresstrafficfiltering(ACLs)andprioritization(QoS-DiffServ)

High availability and PoE/PoE+ full power capability

•Redundantpowersupplyoptionforuninterruptibleoperation(RPS)

•ExternalpowersupplyoptionforPoEandPoE+fullpowerapplications(EPSupto1,440W)

Industry standard management•Industrystandardcommandlineinterface(CLI),functionalNETGEARwebinterface(GUI),SNMP,sFlowandRSPAN

•Single-pane-of-glassNMS300managementplatformwithcentralizedfirmwareupdatesandmass-configurationsupport

Industry leading warranty•NETGEARM4100seriesiscoveredunderNETGEARProSAFELifetimeHardwareWarranty*

•90daysofTechnicalSupportviaphoneandemail,LifetimeTechnicalSupportthroughonlinechatandLifetimeNextBusinessDayhardwarereplacement


M4100 series

Page2of35

FRONT REAR

Model Name

Form Factor

10/100 Base-T RJ45ports

10/100/ 1000 Base-T RJ45 ports

100/ 1000X

FiberSFP ports

PoE802.3af PoE+

802.3at

Storage(image,config)

Power Supply/PoweredbyPoE

RPS (connec-

tor)

PoE budget (PSU/Pass

through)

PoE budget (withEPS)

Man-age-ment

console

Modelnumber

M4100-50-POERack

mount48 2 2 (shared)

48 PoE 802.3af

1 x USB

Internal/No

1 (RPS or EPS)

380WUp to 740W (EPS)

1xRS232DB9,

1x Mini-USB

(select-able)

FSM7250P

M4100-D12G Desktop - 12 2 (shared) -External/

YesPD mode - - GSM5212

M4100-D12G-POE+ Desktop - 12 4 (shared)10 PoE+ 802.3at

Internal/Yes

PD mode120W/

25W- GSM5212P

v1h2

M4100-12GFRack

mount- 12 12 (shared)

4 PoE+ 802.3at

Internal/No

1 (RPS) 150W - GSM7212F v1h2

M4100-26GRack

mount- 26 4 (shared) -

Internal/No

1 (RPS) - - GSM7224 v2h2

M4100-50GRack

mount- 50 4 (shared) -

Internal/No

1 (RPS) - - GSM7248 v2h2

M4100-26G-POERack


24 PoE 802.3af

Internal/No

1 (RPS or EPS)


GSM7226LP

M4100-24G-POE+Rack


24 PoE+ 802.3at

Internal/No

1 (RPS or EPS)


GSM7224P v1h2

M4100-50G-POE+Rack


48 PoE+ 802.3at

Internal/No

1 (RPS or EPS)

380WUp to

1,440W (EPS)

GSM7248P

Hardware at a Glance


M4100 series

of 35

M4100-D12G isadesktop12x1000Base-Tversion,Layer2+

•2sharedSFP

•ExternalPSU;fanless

•CanbepoweredbyPoE+

M4100-D12G-POE+isadesktop12x1000Base-Tversion,Layer2+

•4sharedSFP;2portsPoE+“in”and10portsPoE+“out”

•InternalPSUwithlowacoustics;120Wbudget

•CanbepoweredbyPoE+andredistribute25WPoEbudget

M4100-26G-POEisa24x1000Base-TPoEversion,Layer2+

•2x1000Base-Tand4sharedSFP

•InternalPSUwithRPS/EPS

•192Wbudgetandupto380WwithEPS

M4100-12GFisa12xSFPversionforaggregation,Layer2+

•12shared1000Base-T

•InternalPSUwithRPS

•4portsPoE+with150Wbudget

M4100-26Gisa26x1000Base-Tversion,Layer2+

•4sharedSFP


M4100-24G-POE+isa24x1000Base-TPoE+version,Layer2+

•4sharedSFP



M4100-50-POEisa48x100Base-TPoEversion,Layer2+

•2Gigabitportswith2sharedSFP



M4100-50Gisa50x1000Base-Tversion,Layer2+

•4sharedSFP


M4100-50G-POE+isa48x1000Base-TPoE+version,Layer2+

•2x1000Base-Tand4sharedSFP


•380Wbudgetandupto1,440WwithEPS

Hardware at a Glance

Powered by PoE

PoE “passthrough” technology


M4100 series

Page4of35

LAYER 2+ PACKAGE

ModelName Management

IPv4/IPv6 ACLandQoS,

DiffServ

IPv4/IPv6 Multicast Filtering

Auto-VoIP GreenEthernet VLANs Convergence

IPv4 UnicastStatic

Routing

Model Number

M4100series

WebGUI;HTTPs CLI;Telnet;SSH

SNMP,MIBs RSPAN

L2,L3,L4, ingress 1Kbps

IGMPandMLD Snooping,IGMPandMLDQuerier,MVR

Yes

EEE(802.3az)

or Energy DetectMode

Static,Dynamic, Voice,MAC,Subnet,

Protocol-based, QinQ,PrivateVLANs

LLDP-MED,RADIUS,

802.1X,timer

Yes (Port-based,

Subnet,VLANs,Loopback)

all models

TABLE SIZE

ModelName

Packetbuffer CPU ACLs

MACaddresstable ARP/NDPtable

VLANs DHCPserver

Fabric Latency StaticRoutes IPinterfaces

Multicast IGMPGroup membership

sFlow Modelnumber

M4100series

allmodels

12Mb600Mhz

128MRAM 32MFlash

50ACLs 512rules (ingress)

16KMAC 512ARP/NDP

VLANs:1K DHCP:16pools

1,024maxleases

Upto100Gbps

allmodels line-rate

1G <3.91μs

100M <10.194μs

64staticroutes

64IPinterfaces

IPv4

1K32samplers 52pollers 8receivers

all models

Software at a Glance

Performance at a Glance

The Intelligent Edge M4100 series switches are NETGEAR fully managed switches for 100M/1G access layer in SMB, Small Enterprise and Campus networks. The M4100 series delivers the best combination of performance, security and convergence at a high-value price point—unlike competitive, entry-level “SMB” solutions. Redundant power supply options (RPS), full PoE+ external power supply options (EPS), Private VLANs, LLDP-MED and MVR take a scalable, future-proof approach to delivering network services for Wireless access points, IP phones and IP cameras infrastructures.

NETGEAR Intelligent Edge M4100 series key features:

•Broadportfolioofaccesslayersolutions,rangingfrom12portsFastEthernetto50portsGigabitEthernet

•802.3afPoEand802.3atPoE+bestfit,rangingfrom120Wto1,440Wpowerbudgetperswitch

•IPv4routinginLayer2+package(L3staticrouting)withIPv4/IPv6ACLsandQoS

•HighvalueL2/L3tableswith16KMAC,512ARP/NDP,9Kjumboframes,1KVLANs,64staticL3routes

•Redundantpowersupplyoptionforuninterruptibleoperation(RPS)

•ExternalpowersupplyoptionforPoEandPoE+full-powerapplications(EPS)

•GreenEthernetcomplianceformaximumpowerefficiency

NETGEAR Intelligent Edge M4100 series software features:

•Automaticmulti-vendorVoiceoverIPprioritizationbasedonSIP,H323andSCCPprotocoldetection

•VoiceVLANandLLDP-MEDforautomaticIPphonesQoSandVLANconfiguration

•IPv4/IPv6MulticastfilteringwithIGMPandMLDsnooping,QueriermodeandMVRforsimplifiedvideodeployments

•Advancedclassifier-basedhardwareimplementationforL2(MAC),L3(IP)andL4(UDP/TCPtransportports)inboundsecurityandprioritization

NETGEAR Intelligent Edge M4100 series link aggregation and channeling features:

•FlexiblePort-Channel/LAG(802.3ad)implementationformaximumcompatibility,faulttoleranceandloadsharingwithanytypeof Ethernet channeling

•Includingstatic(selectablehashingalgorithms)ordynamicLAGs(LACP)

NETGEAR Intelligent Edge M4100 series management features:

•DHCP/BootPinnovativeauto-installationincludingfirmwareandconfigurationfileuploadautomation

•IndustrystandardSNMP,RMON,MIB,LLDP,AAA,sFlowandRSPANimplementation

•SelectableserialRS232DB9andMini-USBportformanagementconsole

•StandardUSBportforlocalstorage,configurationorimagefiles

•Dualfirmwareimageandconfigurationfileforupdateswithminimumserviceinterruption

•Industrystandardcommandlineinterface(CLI)forITadminsusedtoothervendorscommands

•FullyfunctionalWebconsole(GUI)forITadminswhopreferaneasytousegraphicalinterface

•Single-pane-of-glassNMS300managementplatformwithmass-configurationsupport

NETGEAR Intelligent Edge M4100 series warranty and support:

•NETGEARProSafeLifetimeHardwareWarranty*

•IncludedLifetimeOnlineChatTechnicalSupport

•IncludedLifetimeNextBusinessDayHardwareReplacement


M4100 series

of 35

Product Brief


M4100 series

Page6of35

Layer 3 hardware with L2+ software affordability

M4100 series models are built upon L3 hardware platform while Layer 2+ software package allows for better budget optimization

• M4100 series uses latest generation silicon low-power 40-nanometer technology

• M4100 series L2 and L3 switching features (access control list, classification, filtering, IPv4 routing) are performed in hardware at interface line rate for voice, video, and data convergence

M4100 series Layer 2+ software package provides straight forward IP static routing capabilities for physical interfaces, VLANs and subnets

• Fast Ethernet 802.3af PoE: M4100-50-POE (48 ports)

• Gigabit: M4100-D12G (12 ports desktop); M4100-12GF (12 ports Fiber); M4100-26G (26 ports); M4100-50G (50 ports)

• Gigabit 802.3af PoE: M4100-26G-POE (24 ports)

• Gigabit 802.3at PoE+: M4100-D12G-POE+ (12 ports desktop); M4100-24G-POE+ (24 ports); M4100-50G-POE+ (48 ports)

• At the edge of campus networks or in the server room, static routes are often preferred for simplicity (L3 fixed routes to the next hop towards the destination network are manually added to the routing table), without any impact on performance because L3 routing is wire-speed in M4100 series hardware

High-value switching performance

16KMACaddresstable,1KconcurrentVLANsand64staticroutesforSMBandsmallenterpriseaccesslayers

80PLUScertifiedpowersuppliesforenergyhighefficiency

GreenEthernetwithEnergyEfficientEthernet(EEE)definedbyIEEE802.3azEnergyEfficientEthernetTask Force

• M4100-D12G; M4100-26G; M4100-50G; M4100-26G-POE; M4100-50G-POE+

Green Ethernet with Energy Detect Mode (unused ports automatic power off) • M4100-50-POE; M4100-D12G-POE+; M4100-12GF; M4100-24G-POE+

Increased packet buffering with up to 12 Mb dynamically shared accross all interfaces for most intensive virtualization applications

Low latency at all network speeds

Jumboframessupportofupto9Kbacceleratingstorageperformanceforbackupandcloudapplications

Ease of deployment

Placement outside the wiring closet (conference rooms,offices,classrooms,salesfloorinretail stores, etc…)

• Forsecuredeploymentinopenareas,desktopversionscomewithaWallMountKitwithfourbrack-ets

• M4100-D12G (GSM5212)

• M4100-D12G-POE+ (GSM5212P)

• Asanoption,aRackMountKitisorderable(420-10043-01)

Select desktop versions also come with a set of strong magnets for mounting on any metal surface

• M4100-D12G (GSM5212)

Modern access layer features highlights

Installing M4100 desktop series on a Wall

Installing M4100 desktop series using Magnets


M4100 series

Page7of35

AutomaticconfigurationwithDHCPandBootPAutoInstalleaseslargedeploymentswithascalableconfigurationfilesmanagementcapability,mappingIPaddressesand host names and providing individual configuration files to multiple switches as soon as they are initialized on the network

Both the Switch Serial Number and Switch primary MAC address are reported by a simple "show" command in the CLI - facilitating discovery and remote configuration operations

AutomaticVoiceoverIPprioritizationwithAuto-VoIPsimplifiesmostcomplexmulti-vendorIPtelephonesdeploymentseitherbasedonprotocols(SIP,H323andSCCP) or on OUI bytes (default database and user-based OUIs) in the phone source MAC address; providing the best class of service to VoIP streams (both data and signaling)overotherordinarytrafficbyclassifyingtraffic,andenablingcorrectegressqueueconfiguration

AnassociatedVoiceVLANcanbeeasilyconfiguredwithAuto-VoIPforfurthertrafficisolation

When deployed IP phones are LLDP-MED compliant, the Voice VLAN will use LLDP-MED to pass on the VLAN ID, 802.1P priority and DSCP values to the IP phones, accelerating convergent deployments

Versatile connectivity including “PoE Passthrough”

IEEE 802.3af Power over Ethernet (PoE) provides up to 15.4W per port (M4100-50-POE; M4100-26G-POE)

IEEE 802.3at Power over Ethernet Plus (PoE+) provides up to 30W per port (M4100-D12G-POE+; M4100-24G-POE+; M4100-50G-POE+)

Desktop versions can be powered by upstream PoE+ switch using their Port-1 (PD, PoE+ 30W): M4100-D12G and M4100-D12G-POE+

M4100-D12G-POE+canevenredistributePoEpowerfromtheupstreamPoE+switchtoVoIPphonesorotherdevicesinmeetingrooms,retailsalesfloorsorotherchallenging environments without outlet

Both IEEE 802.3at Layer 2 LLDP method and 802.3at 2-event classification methods are supported for compatibility with all PoE+ PD devices

Automatic MDIX and Auto-negotiation on all ports select the right transmission modes (half or full duplex) as well as data transmission for crossover or straight-through cables dynamically for the admin

100Mbps backward compatiblity on all SFP ports

IPv6supportwithmulticasting(MLDforIPv6filtering),ACLsandQoS

Tier 1 availability

Rapid Spanning Tree (RSTP) and Multiple Spanning Tree (MSTP) allow for rapid transitionning of the ports to the Forwarding state and the suppression of Topology Change Notification

IPaddressconflictdetectionperformedbytheembeddedDHCPserverpreventsaccidentalIPaddressduplicatesfromperturbingtheoverallnetworkstability

Power redundancy for higher availability when mission critical, including hot-swap PSUs and Fans

Ease of management and control

Dual firmware image and dual configuration file for transparent firmware updates/configuration changes with minimum service interruption

Flexible Port-Channel /LAG (802.3ad) implementation for maximum compatibility, fault tolerance and load sharing with any type of Ethernet channeling from other vendors switch, server or storage devices conforming to IEEE 802.3ad - including static (selectable hashing algorithms) or dynamic LAGs (highly tunable LACP Link Aggregation Control Protocol )

Port names feature allows for descriptive names on all interfaces and better clarity in real word admin daily tasks

Loopback interfaces management for routing protocols administration

Private VLANs and local Proxy ARP help reduce broadcast with added security

Management VLAN ID is user selectable for best convenience

Industry-standard VLAN management in the command line interface (CLI) for all common operations such as VLAN creation; VLAN names; VLAN "make static" for dynamically created VLAN by GRVP registration; VLAN trunking; VLAN participation as well as VLAN ID (PVID) and VLAN tagging for one interface, a group of interfaces or all interfaces at once

SimplifiedVLANconfigurationwithindustry-standardAccessPortsfor802.1QunawareendpointsandTrunkPortsforswitch-to-switchlinkswithNativeVLAN



M4100 series

of 35


System defaults automatically set per-port broadcast, multicast, and unicast storm control for typical, robust protection against DoS attacks and faulty clients which can, with BYOD, often create network and performance issues

IP Telephony administration is simplified with consistent Voice VLAN capabilities per the industry standards and automatic functions associated

Comprehensive set of "system utilities" and "Clear" commands help troubleshoot connectivity issues and restore various configurations to their factory defaults for maximumadminefficiency:traceroute(todiscovertheroutesthatpacketsactuallytakewhentravelingonahop-by-hopbasisandwithasynchronousresponsewhen initiated from the CLI), clear dynamically learned MAC addresses, counters, IGMP snooping table entries from the Multicast forwarding database etc.

Allmajorcentralizedsoftwaredistributionplatformsaresupportedforcentralsoftwareupgradesandconfigurationfilesmanagement(HTTP,TFTP),includinginhighlysecuredversions(HTTPS,SFTP,SCP)

Simple Network Time Protocol (SNTP) can be used to synchronize network resources and for adaptation of NTP, and can provide synchronized network timestamp either in broadcast or unicast mode (SNTP client implemented over UDP - port 123)

EmbeddedRMON(4groups)andsFlowagentspermitexternalnetworktrafficanalysis

Remote mirroring (RSPAN) can transport packets captured on an interface on a source switch across the network to a destination on a possibly different destination switch

Engineered for convergence

Audio (Voice over IP) and Video (multicasting) comprehensive switching, filtering, routing and prioritization

Auto-VoIP,VoiceVLANandLLDP-MEDsupportforIPphonesQoSandVLANconfiguration

IGMPSnoopingforIPv4,MLDSnoopingforIPv6andQueriermodefacilitatefastreceiversjoinsandleavesformulticaststreamsandensuremulticasttrafficonlyreaches interested receivers without the need of a Multicast router

Multicast VLAN Registration (MVR) uses a dedicated Multicast VLAN to forward multicast streams and avoid duplication for clients in different VLANs

Schedule enablement

Enterprise security

TrafficcontrolMACFilterandPortSecurityhelprestrictthetrafficallowedintoandoutofspecifiedportsorinterfacesinthesysteminordertoincreaseoverallsecurityandblockMACaddressfloodingissues

DHCPSnoopingmonitorsDHCPtrafficbetweenDHCPclientsandDHCPserverstofilterharmfulDHCPmessageandbuildsabindingsdatabaseof(MACaddress, IPaddress,VLANID,port)tuplesthatareconsideredauthorizedinordertopreventDHCPserverspoofingattacks

IPsourceguardandDynamicARPInspectionusetheDHCPsnoopingbindingsdatabaseperportandperVLANtodropincomingpacketsthatdonotmatchany bindingandtoenforcesourceIP/MACaddressesformalicioususerstrafficelimination

Time-based Layer 2/Layer 3-v4/Layer 3-v6/Layer 4 Access Control Lists (ACLs) can be binded to ports, Layer 2 interfaces, VLANs and LAGs (Link Aggregation Groups or Port channel) for fast unauthorized data prevention and right granularity

Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology consistentandpredictable-unauthorizeddevicesorswitchesbehindtheedgeportsthathaveBPDUenabledwillnotbeabletoinfluencetheoverallSTPtopology by creating loops

Spanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance, unauthorized or unexpectednewequipmentinthenetworkmayaccidentallybecomearootbridgeforagivenVLAN

Dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN/ Unauthenticated VLAN are supported for rigorous user andequipmentRADIUSpolicyserverenforcement

• Up to 48 clients (802.1x) per port are supported, including the authentication of the users domain, in order to facilitate convergent deployments: for instance when IP phones connect PCs on their bridge, IP phones and PCs can authenticate on the same switch port but under different VLAN assignment policies (Voice VLAN versus data VLAN)


M4100 series

Page9of35

802.1x MAC Address Authentication Bypass (MAB) is an alternative method for non-Radius clients

• A list of authorized MAC addresses of client NICs is maintained on the RADIUS server for MAB pur-pose

• MAB can be configured on a per-port basis on the switch

• MAB initiates only after the dot1x authentication process times out, and only when clients don’t respond to any of the EAPOL packets sent by the switch

• When 802.1x unaware clients try to connect, the switch sends the MAC address of each client to the authentication server

• The RADIUS server checks the MAC address of the client NIC against the list of authorized addresses

• The RADIUS server returns the access policy and VLAN assignment to the switch for each client

DoubleVLANs(DVLAN-QinQ)passtrafficfromonecustomerdomaintoanotherthroughthe“metrocore”inamulti-tenancyenvironment:customerVLANIDsarepreservedandaserviceproviderVLANIDisaddedtothetrafficsothetrafficcanpassthemetrocoreinasimple,securemanner

Private VLANs (with Primary VLAN, Isolated VLAN, CommunityVLAN,Promiscuousport,Hostport,Trunks) provide Layer 2 isolation between ports that share the same broadcast domain, allowing a VLAN broadcast domain to be partitioned into smaller point-to-multipoint subdomains across switches in the same Layer 2 network

• Private VLANs are useful in DMZ when servers are not supposed to communicate with each other but need to communicate with a router; they remove the need for more complex port-based VLANs with respective IP interface/subnets and associated L3 routing

• Another Private VLANs typical application are carrier-class deployments when users shouldn’t see, snoop orattackotherusers’traffic

SecureShell(SSH)andSNMPv3(withorwithoutMD5orSHAauthentication)ensureSNMPandTelnetsessionsaresecured

TACACS+ and RADIUS enhanced administrator management provides strict "Login" and "Enable" authentication enforcement for the switch configuration, based on latestindustrystandards:execauthorizationusingTACACS+orRADIUS;commandauthorizationusingTACACS+andRADIUSServer;userexecaccountingforHTTPandHTTPSusingTACACS+orRADIUS;andauthenticationbasedonuserdomaininadditiontouserIDandpassword

Superior quality of service

Advanced classifier-based hardware implementation for Layer 2 (MAC), Layer 3 (IP) and Layer 4 (UDP/TCP transport ports) prioritization

8queuesforprioritiesandvariousQoSpoliciesbasedon802.1p(CoS)andDiffServcanbeappliedtointerfacesandVLANs

Advancedratelimitingdownto1Kbpsgranularityandmininum-guaranteedbandwidthcanbeassociatedwithACLsforbestgranularity

Automatic Voice over IP prioritization with Auto-VoIP

Advanced Layer 2+ routing package

Static Routes/ECMP Static Routes for IPv4 • Static and default routes are configurable with next IP address hops to any given destination

• 64 static routes are configurable for IPv4

• Permitting additional routes creates several options for the network administrator

• The admin can configure multiple next hops to a given destination, intending for the router to load share across the next hops

• The admin distinguishes static routes by specifying a route preference value: a lower preference value is a more preferred static route

• A less preferred static route is used if the more preferred static route is unusable (down link, or next hop cannot be resolved to a MAC address)



M4100 series

Page10of35


Advanced Static Routing functions for administrative trafficcontrol • StaticRejectRoutesareconfigurabletocontrolthetrafficdestinedtoaparticularnetworksothatitisnot

forwarded through the router

• SuchtrafficisdiscardedandtheICMPdestinationunreachablemessageissentbacktothesource

• Staticrejectroutescanbetypicallyusedtopreventroutingloops

• Default routes are configurable as a preference option

In order to facilitate VLAN creation and VLAN routing using Web GUI, a VLAN Routing Wizard offers follow-ing automated capabilities

• CreateaVLANandgenerateauniquenameforVLAN

• Add selected ports to the newly created VLAN and remove selected ports from the default VLAN

• Create a LAG, add selected ports to a LAG, then add this LAG to the newly created VLAN

• Enable tagging on selected ports if the port is in another VLAN

• Disable tagging if a selected port does not exist in another VLAN

• Exclude ports that are not selected from the VLAN

• Enable routing on the VLAN using the IP address and subnet mask entered as logical routing interface

DHCPRelayAgentsrelayDHCPrequestsfromanyroutedinterface,includingVLANs,whenDHCPserverdoesn’t reside on the same IP network or subnet

• TheagentrelaysrequestsfromasubnetwithoutaDHCPservertoaserverornext-hopagentonanothersubnet

• UnlikearouterwhichswitchesIPpacketstransparently,aDHCPrelayagentprocessesDHCPmessagesandgeneratesnewDHCPmessages

• SupportsDHCPRelayOption82circuit-idandremote-idforVLANs

• MultipleHelperIPsfeatureallowstoconfigureaDHCPrelayagentwithmultipleDHCPserveraddressesper routing interface and to use different server addresses for client packets arriving on different inter-faces on the relay agent server addresses for client packets arriving on different interfaces on the relay agent

Flow Control

802.3x Flow Control implementation per IEEE 802.3 Annex31BspecificationswithSymmetricflow control,AsymmetricflowcontrolorNoflowcontrol

AsymmetricflowcontrolallowstheswitchtorespondtoreceivedPAUSEframes,buttheportscannotgenerate PAUSE framesSymmetricflowcontrolallowstheswitchtobothrespondto,andgenerateMACcontrolPAUSEframes

Allowstrafficfromonedevicetobethrottledforaspecifiedperiodoftime:adevicethatwishestoinhibittransmissionofdataframesfromanotherdeviceontheLAN transmits a PAUSE frame

WhyM4100seriesfortheedgeofsmallenterprise networks?

BecausetheM4100seriesoffersupto3xbettervalue:

•Combiningsuperiorresiliencyandadvancedsecurity, NETGEAR Intelligent Edge managed switches feature comprehensive Layer 2, Lite Layer 3 and Layer 4 switching; including fiber aggregation capabilities. Unlike other ‘cost conscious’ products from competitors, the NETGEAR Intelligent Edge series has been designed from the ground up for organizationsrequiringintelligenceatthenetwork edge.

•Affordableandreliable,theseaccesslayerswitches win as a proficient component of secure, converged voice, video and data networking solutions.

1

2

3

NETGEARProSAFE

M6100-3S

XCM8924X

Reset

SFP SPD/Link/ACT Mode: Green = Link at 10G Yellow = Link at 1G Bl ink = ACT

Green =Link at 10GYellow=

USB

OOB

Console

100M/1GBl ink=ACT

Supervisor

PWR/Status

1F 2F 1T 2T 3F 4F 3T 4T 5F 6F 5T 6T 7F 8F 7T 8T 9F 10 F 9T 10 T 11 F 12 F 11 T 12 T 13 F 14 F 13 T 14 T 15 F 16 F 15 T 16 T

RJ45 SPD/Link/ACT Mode: Green = Link at 10G Yellow = Link at 100M/1G Bl ink = ACT

23 2421 2219 2017 18

Link at

XCM8924X

Reset

SFP SPD/Link/ACT Mode: Green = Link at 10G Yellow = Link at 1G Bl ink = ACT

Green =Link at 10GYellow=

USB

OOB

Console

100M/1GBl ink=ACT

Supervisor

PWR/Status

1F 2F 1T 2T 3F 4F 3T 4T 5F 6F 5T 6T 7F 8F 7T 8T 9F 10 F 9T 10 T 11 F 12 F 11 T 12 T 13 F 14 F 13 T 14 T 15 F 16 F 15 T 16 T

RJ45 SPD/Link/ACT Mode: Green = Link at 10G Yellow = Link at 100M/1G Bl ink = ACT

23 2421 2219 2017 18

Link at

XCM8944F

Reset

43 T 44 T

Link

Green= 10G

Yellow=

USB

OOB

Console

100M/1G

Bl ink=ACTSupervisor

PWR/Status

Link

Green= 10G

Yellow=1G

Bl ink=ACT

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 F 42 F

SFP SPD/Link/ACT Mode: Green = Link at 1G Yellow = Link at 100M Blink = ACT

SPD/Link/ACT

GSM5212P

Power

Reset

Fan

PD

SPD/Link/ACT

SFP SPD/Link/ACT mode:

Green = Link at 1G

Yellow = Link at 100M

Blink = ACT

MaxPoE

Po E

1 3 5 7 9T 10 T8642 11 T 12 T 11 F 12 F9F 10 F

PoE (Max 30W per port):

Of f = No PD

Green = PoE Powered

Yellow = PoE Fault

Of f = No PSE

Green = PSE 30w

Yellow = PSE 15.4w

PoE-PD (Port 1,2):

Blink = ACT

Yellow = 10/100M

RJ45 SPD/Link/ACT mode:

Green = 1G

USB 115200,N,8,1Console(USB)

USB DB9

PROSAFE

GSM7212F

SPD/Link/ACT

SPD:Green = 1GYellow = 10/100M

115200,N,8,1Console(USB)

USB DB9

PROSAFE

Power

Reset

Fan

RPS

MaxPoE

USB

Link/Act mode:OFF = No LinkGreen = LinkBlinking = ACT

1F 2F 3F 4F 5F 6F 7F 8F 9F 10 F 11 F 12 F1T 2T 3T 4T 5T 6T 7T 8T 9T 10 T 11 T 12 T

SPD/Link/ACT

SFP Link/Act mode:Green = Link at 1G

Yellow = Link at 100MBlink = ACT

PoE (Max 30W per port):Of f = No PD

Green = PoE PoweredYellow = PoE Fault

RJ45 Link/Act mode:Green = Link at 1G

Yellow = Link at 10/100MBlink = ACT

Po E SPD/Link/ACT SPD Link/ACT

M4100-24G-POE+

M4100-26G-POE

M6100 Chassis Switch series

MDF – BUILDING 1

2.4 GHz GHz5

Meeting Room

2.4 GHz GHz5

MDF – BUILDING 2

M4100-12GF

M4100-D12G-POE+

M4100-24G-POE+

M4100-48G-POE+

IDF – BUILDING 2

Fiber, 1000SX multimode

Fiber, 1000LX single mode

Copper, Gigabit PoE+

Powering desktop switches

Copper, Gigabit PoE / PoE+

2.4 GHz GHz5

Copper, Gigabit

SERVER ROOM – BUILDING 1

1 2 3 4

actbackup

1 2 3 4

1 2 3 4

actbackup

1 2 3 4

M4100-26G

M4100-50G

M4100-50-POE

IDF – BUILDING 2

PoEPassthroughmode

SPD/Link/ACT

GSM5212P

Power

Reset

Fan

PD

SPD/Link/ACT


Green = Link at 1G


Blink = ACT

MaxPoE

Po E

1 3 5 7 9T 10 T8642 11 T 12 T 11 F 12 F9F 10 F


Of f = No PD

Green = PoE Powered

Yellow = PoE Fault

Of f = No PSE

Green = PSE 30w

Yellow = PSE 15.4w

PoE-PD (Port 1,2):

Blink = ACT

Yellow = 10/100M


Green = 1G


USB DB9

PROSAFE

Meeting Room

M4100-D12G

PoweredByPoE

Meeting Room

M4100-D12G-POE+

M4100-50G

Power

Reset

Fan

RPS

USB

SFP SPD/Link/ACT mode: Green=Link at 1G Yellow=Link at 100M Blink=ACT

49 F 50 F47 F 48 F2625 2827 3029 3231 3433 3635 3837 4039 4241 4443 4645 48 T47 T

21 43 65 87 109 1211 1413 1615 1817 2019 2212 2423

RJ45 SPD/Link/ACT mode: Green=1G Yellow=10/100M Blink=ACT

50 T49 T

Com

bo P

ort

s

M4100-26G-POE

SFP SPD mode: Green=Link at 1G Yellow=Link at 100M Blink=ACT

13 15 17 19 21 2220181614 25 F 26 F23 F 24 F

PROSAFEPower

Reset

Fan

RPS

Max

USB1 3 5 7 9 108642

PoE (Max 15.4 W per port):

Of f = No PD

Green = PoE Powered

Yellow = PoE Fault

Blink = ACT

Yellow = Link at 10/100M

RJ45 SPD mode:

Green = Link at 1G

23 T 24 T11 12

PoE

Com

bo P

ort

s

Po E SPD 121110987654321 25 T 26 T 25 F 26 FSPO Link/Act

25 T 26 T

23 F 24 F13 24 T23 T222120191817161514

GSM7224P

SPD/Link/ACT


Green = Link at 1G


Blink = ACT

13 15 17 19 21 T 22 T20181614 23 F 24 F21 F 22 F


USB DB9

PROSAFE

Power

Reset

Fan

RPS

MaxPoE

USB

SPD/Link/ACTPo E

1 3 5 7 9T 10 T8642


Of f = No PD

Green = PoE Powered

Yellow = PoE Fault

Blink = ACT

Yellow = 10/100M


Green = 1G

11 T 12 T 23 T 24 T

M4100-50G-POE+

Power

Reset

Fan

RPS

USB49 F 50 F

PoE (Max 30W per port): Of f = no PD Green = PoE Powered Yellow = PoE f ault RJ45 SPD mode: Green = Link at 1G Yellow=Link at 10/100M Blink = ACT

21 43 65 87 109 1211 1413 1615 1817 2019 2221 2423 2625 2827 3029 3231 3433 3635 3837 4039 4241 4443 45 48 T47 T46

Com

bo P

ort

s

49 T 50 T 47 F 48 F

Max

PoE


Po E SPD 13 14 15 16 17 18 19 20 21 22 23 24121110987654321 3635343332312928272625 30 48 T47 T464544434140393837 42 50 T49 T 48 F47 F 50 F49 F

M4100-50-POEPower

Reset

Fan

RPS

USB

PoE (Max 15.4W per port): Of f = no PD Green = PoE Powered Yellow = PoE f ault RJ45 SPD mode: Green = Link at 100M Yellow=Link at 10M Blink = ACT

21 43 65 87 109 1211 1413 1615 1817 2019 2221 2423 2625 2827 3029 3231 3433 3635 3837 4039 4241 4443 45 484746

Com

bo P

ort

s

49 T 50 T 49 F 50 F

Max

PoE


Po E SPD 13 14 15 16 17 18 19 20 21 22 23 24121110987654321 3635343332312928272625 30 4847464544434140393837 42 50 T49 T 50 F49 F

Ports 49T, 50T

SPD: Green=1G

Yellow=10/100M

Link/ACT mode:Of f =No linkGreen=LinkBlinking=ACT

SPD Link/ACT

GSM7224P

SPD/Link/ACT


Green = Link at 1G


Blink = ACT

13 15 17 19 21 T 22 T20181614 23 F 24 F21 F 22 F


USB DB9

PROSAFE

Power

Reset

Fan

RPS

MaxPoE

USB

SPD/Link/ACTPo E

1 3 5 7 9T 10 T8642


Of f = No PD

Green = PoE Powered

Yellow = PoE Fault

Blink = ACT

Yellow = 10/100M


Green = 1G

11 T 12 T 23 T 24 T

M4100-26G

Power

Reset

Fan

RPS

USB

SFP SPD/Link/ACT mode: Green = Link at 1G Yellow = Link at 100M Blink = ACT

25 F 26 F


23 F 24 F21 43 65 87 109 1211 1413 1615 1817 2019 2221 24 T23 T

Green = 1GYellow = 10/100M

Blink = ACT

26 T25 T

Co

mb

o P

ort

s

SPD/Link/ACT

GSM5212P

Power

Reset

Fan

PD

SPD/Link/ACT


Green = Link at 1G


Blink = ACT

MaxPoE

Po E

1 3 5 7 9T 10 T8642 11 T 12 T 11 F 12 F9F 10 F


Of f = No PD

Green = PoE Powered

Yellow = PoE Fault

Of f = No PSE

Green = PSE 30w

Yellow = PSE 15.4w

PoE-PD (Port 1,2):

Blink = ACT

Yellow = 10/100M


Green = 1G


USB DB9

PROSAFE

PoEPassthroughmode

M4100-50G-POE+

Power

Reset

Fan

RPS

USB49 F 50 F

PoE (Max 30W per port): Of f = no PD Green = PoE Powered Yellow = PoE f ault RJ45 SPD mode: Green = Link at 1G Yellow=Link at 10/100M Blink = ACT

21 43 65 87 109 1211 1413 1615 1817 2019 2221 2423 2625 2827 3029 3231 3433 3635 3837 4039 4241 4443 45 48 T47 T46

Com

bo P

ort

s

49 T 50 T 47 F 48 F

Max

PoE


Po E SPD 13 14 15 16 17 18 19 20 21 22 23 24121110987654321 3635343332312928272625 30 48 T47 T464544434140393837 42 50 T49 T 48 F47 F 50 F49 F


M4100 series

of 35

Target Application

1. Versatile, Protected and Expendable Power The M4100 series are the first affordable managed switches with both redundant and external power supply capabilities - key for critical applications such as VoIP, IP surveillance and Wireless access points. PoE devices gobble increasing amounts of PoE power, yet existing SMB switching solutions from other vendors don’t scale to full power. Although most servers in SMB networks have dual power supplies, switches in SMB networks have not – until now.

Select desktop switches in the M4100 series can be powered by PoE as a cost-effective solution when there is no existing electrical wiring or power outlets, as the switch can draw power directly from the wiring closet.TheflexibilityofaPoEswitchisalsoconvenientformeetingrooms and open spaces where visible electrical wiring is unsightly or impractical. One PoE+ downlink (30W) from the upstream switch issufficientforthestandardoperationoftheM4100-D12GandM4100-D12G-POE+ switches. This also increases resiliency for critical installations: the Power over Ethernet PD connection on these switches also doubles as a redundant power supply (RPS) should the switch be locally powered.

Innovative PoE passthrough technology even lets M4100-D12G-POE+ power local PoE PD devices - redistributing PoE budget from the upstream switch. Up to 25W of power can be available for local PD devices - extending the reach of PoE deployments beyond the 100-meter or 328-feet bar: the M4100-D12G-POE+ can function as a “PoE repeater” for powering remote IP cameras, Wireless access points, etc.

For all other rackmount Power over Ethernet models in the NETGEAR Intelligent Edge M4100 series, in addition to their built-in PSU providing more PoE power than competitive solutions at a similar price point, the NETGEAR Intelligent Edge M4100 series is the only one allowing for an additional PoE power “upgrade” via external power supply; immediately or at later times.

Short story, all rackmount switches in the NETGEAR M4100 series are either PoE Full Power capable already or PoE Full Power capable when drawing external power from the RPS4000. All 24-port and 48-port models can scale up to 802.3af PoE full power or 802.3at PoE+ full power simultaneously for all ports. This is real investment protection.

2. Security and Control Enhanced security includes network access control and isolation for improved convergence of voice, video and data: dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN / Unauthenticated VLAN are supported for rigorous user and equipmentpolicyenforcementfromaRADIUSserver.TheRADIUSserver can also be the Network Policy Server (NPS) in Microsoft® Windows Server™ 2008 or 2012, when in an Active Directory domain.

Up to 48 clients (802.1x) per port are supported, including the authentication of a user’s domain, in order to facilitate convergent deployments. When IP phones connect PCs on their bridge, IP phones and PCs authenticate on the same switch port but under different VLAN assignment policies (Voice VLAN versus data VLAN) - providing administratorswithgreaterflexibilityduringdeploymentandpolicyenforcement.

For 802.1x unaware clients, 802.1x MAC Address Authentication Bypass (MAB) is a great alternative: when 802.1x unaware clients try to connect, the switch sends their MAC addresses to the authentication server. When checked, the RADIUS server returns the access policy and VLAN assignment to the switch for each client.

Enhanced security also includes better network isolation with Private VLANs, providing Layer 2 isolation between ports that share the same broadcast domain. A VLAN broadcast domain can be partitioned into smaller point-to-multipoint subdomains across switches in the same Layer 2 network. This is useful for IP camera deployments, or in the DMZ when servers are not supposed to communicate with each other but need to communicate with a router. Private VLANs remove the need for more complex port-based VLANs with respective IP interface/subnets and associated L3 routing.

3. Reliability Learn how the NETGEAR M4100 series delivers more for less: all models provide much longer MTBF (average lifetime) thanks to better/higher qualitycomponentsandcircuitry.

For instance, the desktop 8-port PoE Fast Ethernet M4100-D10-POE (FSM5210P) is predicted to have an average mean time between failure of 579,985 hours, or 66 years at an ambient standard 25°C temperature (77°F). The rackmount 24-port PoE Gigabit Ethernet M4100-26G-POE (GSM7226LP) is to predicted to have an average mean time between failure of 437,199 hours, more than 49 years. This is nearly double the reliability of the closest competitive solutions in this price band.

Conclusion The M4100 series delivers an unbeatable combination of performance, security and convergence for voice, video and data networking solutions.

Due to the wide adoption of virtualization, the convergence of voice, video, and data and the rapid proliferation of bandwidth-intensive applications, small and mid-sized businesses, hospitals and schools today have security, control and reliability needs similar to those of large enterprises. For approximately the same price as low-end solutions currently on the market aimed at SMBs, NETGEAR is offering high-end features that have so far been reserved only for enterprise-class offerings available at double or triple the price point.


M4100 series

Page12of35

Three Reasons to Get Started Today with the NETGEAR M4100 series

• The RPS4000 can be connected to a maximum of four switches (any combination of M5300 series switches is supported) using RPS switch connectors and RPS cables

• The RPS4000 provides protection against electrical issues such as high-voltage (input, output) or short circuits for maximum security

• The RPS4000 can accommodate up to four hot-swap APS1000W power modules

– Eitherone,two,threeorfourAPS1000Wpowermodulesarerequired,depending on RPS or EPS application (see combinations in “Number of APS1000W” table)

• In RPS mode with only one APS1000W power module, RPS4000 can protect up to four (4) non-PoE or PoE M4100 series switches

– In case of a general switches power feed failure, powering all four switches simultaneously for 12V DC system power

– RPS4000takesoveranddeliversadequatepowerwithoutanyserviceinterruption (continuous monitoring)

– When the switch internal power is restored, the RPS4000 stops supplying power to the switch automatically, again without any service interruption

• In RPS mode with multiple APS1000W power module combinations, RPS4000 can protect up to four (4) PoE M4100 series switches

– In case of a general switches power feed failure, powering all four switches simultaneously (12V DC system power and -56V DC PoE)

– Same RPS functionality as with non-PoE switches including PoE power budget protection

– One-to-one mode (one APS1000W power module / one PoE M4100 switch) provides 720W PoE budget protection for each switch

– One APS1000W power module can be used for two (2) PoE M4100 series switches instead, providing 380W PoE budget protection for each switch

• In EPS mode with multiple APS1000W power module combinations, RPS4000 allows for various PoE 802.3af and 802.3at “full power” applications

– Supports M4100-50-POE, M4100-26G-POE; M4100-24G-POE+ and M4100-50G-POE+

– Superseding switches main PSU for PoE budget and switch powering

– Delivering -56V DC for PoE power and 12V for switch power

– Switch main PSU system acts as built-in RPS for both switch power and PoE budget protection

• In EPS mode, power slots can be organized into groups of two (Group 1 and Group 2) allowing for APS1000W power modules bridging

– Two APS1000W power modules can be bridged and deliver 1,440W PoE budget to one 48-port switch M4100-50G-POE+

• Power slots can be configured for RPS or EPS mode – All four power slots can be combined together with only one APS1000W power module for four (4) 12V switches RPS application

– Power slots can be utilized in one-to-one mode for PoE switches RPS or EPS applications

– Power slots can be combined two by two for PoE switches RPS or EPS applications

The RPS4000 RPS/EPS unit supports the following key features:

•RPS mode: provide power backup for up to four switches concurrently – With same level of protection as with four dedicated, “one-to-one” RPS units

•EPS mode: provide supplemental PoE power up to four switches concurrently – Up to 2,880W shared PoE+ budget

– When in EPS mode, RPS4000 supersedes each switch main PSU

– Switch main PSU system power reverts to redundant power supply (RPS) function

RPS4000RPS/EPS unit for up to 4 concurrent switches

Ordering information•Americas, Europe: RPS4000-200NES

•Asia Pacific: RPS4000-200AJS

•Warranty: 5 years

Front view• RPS4000 is 1RU unit with four (4) empty slots

• Power modules (APS1000W) are sold separately

• APS1000WrequirementdependsonRPS,EPS,PoEapplication

Rear view• Four (4) embedded RPS connectors

• Switch selectors for RPS/EPS power modes

• Switch selectors for power modules two-by-two bridging

Included:• Four (4) RPS cables - 60cm each (~2 ft)

• Rack mount kit

• Power cord


M4100 series

of 35

Accessories

Number of APS1000W 1 POWER MODULE 2 POWER MODULES 3 POWER MODULES 4 POWER MODULES

RPS mode (Redundant Power Supply)

Up to 4 switches (non-PoEversions)

M4100-26Gor M4100-50Gor M4100-12GF

Complete protection 12Vsystempower

Or:

Up to 2 switches (PoE versions)

M4100-50-POEor M4100-12GF

M4100-26G-POEor M4100-24G-POE+

orM4100-50G-POE+


M4100-50-POEor M4100-12GF


orM4100-50G-POE+

Complete protection 12Vsystempowerand

-56VPoEpower


M4100-50-POEor M4100-12GF


orM4100-50G-POE+


and-56VPoEpower

4 switches (PoE versions)

M4100-50-POEor M4100-12GF


orM4100-50G-POE+


and-56VPoEpower

EPS mode (External Power Supply)

720WPoEbudgetavailable(total)forup to 2 switches

(PoEversions)

M4100-50-POEor M4100-26G-POE

M4100-24G-POE+orM4100-50G-POE+

1,440WPoEbudgetavailable(total)forup to 4 switches

(PoEversions)

M4100-50-POEor M4100-26G-POE



(PoEversions)

M4100-50-POEor M4100-26G-POE



(PoEversions)

M4100-50-POEor M4100-26G-POE


Example for PoE applications:

(802.3af full power)

OneM4100-50-POE providing720W

46portsfullpower 802.3afPoE

TwoM4100-50-POE providing720Weach


ThreeM4100-50-POE providing720Weach


FourM4100-50-POE providing720Weach


Example for PoE+ applications:

(802.3at full power)

OneM4100-24G-POE+ providing720W

24portsfullpower 802.3atPoE+

OneM4100-50G-POE+ providing1,440W


OneM4100-24G-POE+ providing720W

OneM4100-50G-POE+ providing1,440W


TwoM4100-50G-POE+ providing1,440Weach



M4100 series

Page14of35

Accessories

Inserting one APS1000W in RPS4000 power slot #1

(front view)

RPS4000equippedwith 4 APS1000W power modules

(front view)

Capacity: – 110V-240V AC power input

– Up to 960W DC 12V output power for up to 4 switches (RPS)

– Up to 720W DC -56V PoE budget output power for up to 2 PoE switches (EPS)

•Optimal Power® RPS unit certified by NETGEAR for M4100 series

•Includes the RPS cable for the switch RPS connector

•Provides seemless “one-to-one” redundant power to the Switch

•56V DC power limited to 308W (maximum PoE budget)

•M4100 series desktop switches come with wall mount kit only

•This optional rack mount kit contains two brackets for standard 19’’ rack mount

•Compatible with: – M4100-D12G (GSM5212)

– M4100-D12G-POE+ (GSM5212P)

APS1000WPower Module for RPS4000

RPS5412RPS unit for 1 switch by Optimal Power®

420-10043-01Rack mount kit for M4100 series desktop versions

Ordering information•Americas, Europe:

APS1000W-100NES

•Asia Pacific: APS1000W-100AJS


Ordering information•Americas: RPS5412-100NAS

•Europe: RPS5412-100EUS

•Asia Pacific: RPS5412-100AJS


Ordering information•Worldwide: 420-10043-01



M4100 series

of 35

Accessories

ORDERING INFORMATIONWORLDWIDE: SEETABLEBELOW

WARRANTY: 5 YEARS

Multimode Fiber (MMF) Single mode Fiber (SMF)

OM1orOM2 62.5/125µm

OM3orOM4 50/125µm 9/125µm

Gigabit SFP

AGM731F

1000Base-SX short range multimode LC duplex connector

up to 275m (902 ft)

AGM731F (1 unit)

AGM731F

1000Base-SX short range multimode

LC duplex connector

OM3: up to 550m (1,804 ft)OM4: up to 1,000m (3,280 ft)

AGM731F (1 unit)

AGM732F

1000Base-LX long range single mode LC duplex connector

up to 10km (6.2 miles)

AGM732F (1 unit)

Fast Ethernet SFP

AFM735

100Base-FX IEEE 802.3

LC duplex connector up to 2km (1.24 miles)

AFM735-10000S (1 unit)

AFM735

100Base-FX IEEE 802.3

LC duplex connector up to 2km (1.24 miles)

AFM735-10000S (1 unit)

•FitsintoM4100seriesSFPinterfaces(front)

•FitsintoM4100seriesSFPinterfaces(front)

Accessories

GBIC SFP Optics for M4100 series


M4100 series

Page16of35

• Requirementsbasedon10.xsoftware release

• Layer 2+ package includes Layer 3 static routing

Model Name Description Model number

M4100-50-POE 48portsFastEthernetPoE802.3af,Layer2+softwarepackage FSM7250P

M4100-D12G Desktop12portsGigabit,Layer2+softwarepackage GSM5212

M4100-D12G-POE+ Desktop12portsGigabitPoE+802.3at,Layer2+softwarepackage GSM5212Pv1h2

M4100-12GF 12portsGigabitFiber,Layer2+softwarepackage GSM7212Fv1h2

M4100-26G 26portsGigabit,Layer2+softwarepackage GSM7224v2h2

M4100-50G 50portsGigabit,Layer2+softwarepackage GSM7248v2h2

M4100-26G-POE 24portsGigabitPoE802.3af,Layer2+softwarepackage GSM7226LP

M4100-24G-POE+ 24portsGigabitPoE+802.3at,Layer2+softwarepackage GSM7224Pv1h2

M4100-50G-POE+ 48portsGigabitPoE+802.3at,Layer2+softwarepackage GSM7248P

TECHNICALSPECIFICATIONS

PHYSICAL INTERFACES

Front Auto-sensing RJ45 10/100

Auto-sensing RJ45 10/100/1000

Auto-sensing SFP ports100/1000Base-X

Console port (selectable) Storage Port

M4100-50-POE 48 2 2(shared) -

1xUSBFirmware,

ConfigurationFiles

M4100-D12G - 12 2(shared) -

M4100-D12G-POE+ - 12 4(shared) Mini-USB

M4100-12GF - 12 12(shared) Mini-USB

M4100-26G - 26 4(shared) -

M4100-50G - 50 4(shared) -

M4100-26G-POE - 26 4(shared) -

M4100-24G-POE+ - 24 4(shared) Mini-USB

M4100-50G-POE+ - 50 4(shared) -

Rear Power Supply RPS/EPS connector Console port (selectable) Physical security

M4100-50-POE Fixed,internal 1 SerialRS232DB9,Mini-USB

1KensingtonLockSlot

M4100-D12G External - SerialRS232DB9,Mini-USB

M4100-D12G-POE+ Fixed,internal - SerialRS232DB9

M4100-12GF Fixed,internal 1 SerialRS232DB9

M4100-26G Fixed,internal 1 SerialRS232DB9,Mini-USB

M4100-50G Fixed,internal 1 SerialRS232DB9,Mini-USB

M4100-26G-POE Fixed,internal 1 SerialRS232DB9,Mini-USB

M4100-24G-POE+ Fixed,internal 1 SerialRS232DB9

M4100-50G-POE+ Fixed,internal 1 SerialRS232DB9,Mini-USB

Total Port Count Fast Ethernet Gigabit

M4100-50-POE 48portstotal 2portstotal

M4100-D12G - 12portstotal

M4100-D12G-POE+ - 12portstotal

M4100-12GF - 12portstotal

M4100-26G - 26portstotal

M4100-50G - 50portstotal

M4100-26G-POE - 26portstotal

M4100-24G-POE+ - 24portstotal

M4100-50G-POE+ - 50portstotal


M4100 series

Page17of35

Technical Specifications

PoweroverEthernet

PSECapacity PoEports802.3af PoE+ports802.3at InternalPoEbudget PoEbudgetwithEPS

M4100-50-POE 48 - 380W 740WwithEPS(RPS4000)

M4100-D12G-POE+ - 10 120WwhenACpower -

M4100-12GF - 4 150W -

M4100-26G-POE 24 - 192W 380WwithEPS(RPS4000)

M4100-24G-POE+ - 24 380W 720WwithEPS(RPS4000)

M4100-50G-POE+ - 48 380W 1,440WwithEPS(RPS4000)

PDCapacity PoweredbyPoE+ PoE“Passthrough”Technology

M4100-D12G YeswithonelinkPoE+30W(PDPort1)

M4100-D12G-POE+ YeswithonelinkPoE+30W(PDPort1) YeswhensecondlinkPoE+30W(PDPort2):25WPoEbudgetcanberedistributedbyPort3-12

FeaturesSupport

IEEE802.3af(upto15.4Wperport) Yes(M4100-50-POE;M4100-26G-POE)

IEEE802.3at(upto30Wperport) Yes(M4100-D12G-POE+;M4100-12GF;M4100-24G-POE+;M4100-50G-POE+)

IEEE802.3atLayer2(LLDP)method Yes(M4100-D12G-POE+;M4100-12GF;M4100-24G-POE+;M4100-50G-POE+)

IEEE802.3at2-eventclassification Yes(M4100-D12G-POE+;M4100-12GF;M4100-24G-POE+;M4100-50G-POE+)

PoEtimer/schedule(week,days,hours) Yesforall802.3afand802.3atmodels ConvenientforWirelessAccessPointsschedules

Processor/Memory

Processor(CPU) BroadcomBCM53003@600MHz

Systemmemory(RAM) 128MB

Codestorage(flash) 32MB Dualfirmwareimage,dualconfigurationfile

PacketBufferMemory

Allmodels 12Mb Dynamicallysharedacrossonlyusedports


M4100 series

of 35

PerformanceSummary

Switchingfabric

M4100-50-POE 13.6Gbps

M4100-D12G 24Gbps

M4100-D12G-POE+ 24Gbps

M4100-12GF 24Gbps

M4100-26G 52Gbps

M4100-50G 100Gbps

M4100-26G-POE 52Gbps

M4100-24G-POE+ 48Gbps

M4100-50G-POE+ 100Gbps

Throughput

M4100-50-POE 10.119Mpps

M4100-D12G 17.857Mpps

M4100-D12G-POE+ 17.857Mpps

M4100-12GF 17.857Mpps

M4100-26G 38.690Mpps

M4100-50G 74.405Mpps

M4100-26G-POE 38.690Mpps

M4100-24G-POE+ 35.714Mpps

M4100-50G-POE+ 74.405Mpps

GreenEthernet

EnergyEfficientEthernet(EEE) IEEE802.3azEnergyEfficientEthernetTaskForcecompliance (M4100-D12G;M4100-26G;M4100-50G;M4100-26G-POE;M4100-50G-POE+)

OtherMetrics

Forwardingmode Store-and-forward

Latency(64-byteframes,100Mbps,Copper) <10.194μs

Latency(64-byteframes,1Gbps,Copper) <3.91μs

Addressing 48-bitMACaddress

Addressdatabasesize 16,000MACaddresses

NumberofVLANs 1,024VLANs(802.1Q)simultaneously

Numberofmulticastgroupsfiltered(IGMP) 1K

NumberofLinkAggregationGroups(LAGs-802.3ad) 12LAGswithupto8portspergroup

NumberofhardwarequeuesforQoS 8queues


M4100 series

Page19of35

Numberofstaticroutes(IPv4) 64

NumberofIPinterfaces(portorVLAN) 64

Jumboframesupport upto9Kpacketsize

Acousticnoise(ANSI-S10.12)@25°Cambient(77°F)

M4100-50-POE <38.9dB

M4100-D12G 0dB(fanless)

M4100-D12G-POE+ <19.8dBbelowtypicalacousticofficeambient

M4100-12GF <30dB

M4100-26G <35.6dB

M4100-50G <37.2dB

M4100-26G-POE <36.6dB

M4100-24G-POE+ <33.8dB

M4100-50G-POE+ <47.7dB

HeatDissipation(BTU)(Maximum)

M4100-50-POE 1,661Btu/hr

M4100-D12G 64Btu/hr

M4100-D12G-POE+ 569Btu/hr

M4100-12GF 548Btu/hr

M4100-26G 108Btu/hr

M4100-50G 169Btu/hr

M4100-26G-POE 932Btu/hr

M4100-24G-POE+ 1,820Btu/hr

M4100-50G-POE+ 1,896Btu/hr

MeanTimeBetweenFailures(MTBF) @25°Cambient(77°F)@55°Cambient(131°F)

M4100-50-POE 163,019hours(~18.6years)49,668hours(~5.7years)

M4100-D12G 214,142hours(~24.4years)67,633hours(~7.7years)

M4100-D12G-POE+ 766,618hours(~87.5years)99,094hours(~11.3years)

M4100-12GF 670,956hours(~76.6years)190,562hours(~21.8years)

M4100-26G 702,785hours(~80.2years)197,792hours(~22.6years)

M4100-50G 489,311hours(~55.9years)152,639hours(~17.4years)

M4100-26G-POE 437,199hours(~49.9years)117,763hours(~13.4years)

M4100-24G-POE+ 394,619hours(~45.0years)106,405hours(~12.1years)

M4100-50G-POE+ 239,298hours(~27.3years)65,978hours(~7.5years)


M4100 series

Page20of35

L2Services-VLANs

IEEE802.1QVLANTagging Yes Upto1,024VLANs-802.1QTagging

ProtocolBasedVLANsIPsubnetARPIPX

YesYesYesYes

StaticVLANs AccessPortsfor802.1QunawareendpointsandTrunkPortsforswitch-to-switchslinkswithNativeVLAN

SubnetbasedVLANs Yes

MACbasedVLANs Yes

VoiceVLAN Yes

PrivateEdgeVLAN Yes

PrivateVLAN Yes

IEEE802.1xGuestVLANRADIUSbasedVLANassignmentvia.1xRADIUSbasedFilterIDassignmentvia.1xMAC-based.1xUnauthenticatedVLAN

YesYesYesYesYesYes

IPphonesandPCscanauthenticateonthesameportbutunderdifferentVLANassignment

policies

DoubleVLANTagging(QinQ)Enablingdvlan-tunnelmakesinterfaceGlobalethertype(TPID)Interfaceethertype(TPID)CustomerIDusingPVID

YesYesYesYesYes

GARPwithGVRP/GMRP Yes AutomaticregistrationformembershipinVLANsorinmulticastgroups

MVR(MulticastVLANregistration) Yes

L2Services-Availability

IEEE802.3ad-LAGsLACPStaticLAGs

YesYesYes

Upto12LAGsand upto8physicalportsperLAG

LAGHashing Yes

StormControl Yes

IEEE802.3x(FullDuplexandflowcontrol)PerportFlowControl

YesYes

AsymmetricandSymmetricFlowControl

IEEE802.1DSpanningTreeProtocol Yes

IEEE802.1wRapidSpanningTree Yes

IEEE802.1sMultipleSpanningTree Yes

STPLoopGuard Yes

STPRootGuard Yes

BPDUGuard Yes


M4100 series

Page21of35

L2Services-MulticastFiltering

IGMPv2SnoopingSupport Yes

IGMPv3SnoopingSupport Yes

MLDv1SnoopingSupport Yes

MLDv2SnoopingSupport Yes

ExpeditedLeavefunction Yes

StaticL2MulticastFiltering Yes

IGMPSnoopingEnableIGMPSnoopingperVLANSnoopingQuerier

Yes

MLDQuerier Yes

MulticastVLANregistration(MVR) Yes

L3Services-DHCP

DHCPIPv4/DHCPIPv6Client Yes

DHCPIPv4Server Yes

DHCPSnoopingIPv4 Yes

DHCPRelayIPv4 Yes

DHCPBootPIPv4 Yes

AutoInstall(DHCPoptions66,67,150) Yes

L3Services-IPv4Routing

StaticRouting Yes

PortBasedRouting Yes

VLANRouting802.3ad(LAG)forrouterports

YesYes

IPHelperMaxIPHelperentries

Yes512

IPSourceGuard Yes

ECMP Yes

ProxyARP Yes

Multinetting Yes

ICMPredirectdetectioninhardware Yes

DNSv4 Yes


M4100 series

Page22of35

NetworkMonitoringandDiscoveryServices

ISDP(IndustryStandardDiscoveryProtocol) Yes inter-operateswithdevicesrunningCDP

802.1abLLDP Yes

802.1abLLDP-MED Yes

SNMP V1,V2,V3

RMON1,2,3,9 Yes

sFlow Yes

Security

NetworkStormProtection,DoS

Broadcast,Unicast,MulticastDoSProtectionDenialofServiceProtection(controlplane)DenialofServiceProtection(dataplane)

YesYesYes

SwitchCPUprotectionSwitchTrafficprotection

DoSattacks SIPDIPSMACDMACFIRSTFRAGTCPFRAGTCPFLAGTCPPORT

UDPPORTTCPFLAGSEQTCPOFFSET

TCPSYNTCPSYNFIN

TCPFINURGPSH

L4PORTICMPV4ICMPV6

ICMPFRAG

ICMPthrottling Yes RestrictICMP,PINGtraffic forICMP-basedDoSattacks

Management

Radiusaccounting Yes RFC2565andRFC2866

TACACS+ Yes

NetworkTraffic

AccessControlLists(ACLs) L2/L3/L4 MAC,IPv4,IPv6,TCP,UDP

Time-basedACLs Yes

Protocol-basedACLs Yes

ACLoverVLANs Yes

DynamicACLs Yes

IEEE802.1xRadiusPortAccessAuthentication Yes Upto48clients(802.1x)perportaresupported,includingtheauthenticationoftheusersdomain

802.1xMABAddressAuthenticationBypass(MAB) Yes Supplementalauthenticationmechanismfornon-

802.1xdevices,basedontheirMACaddressonly

PortSecurity Yes

IPSourceGuard Yes

DHCPSnooping Yes

DynamicARPInspection Yes


M4100 series

Page23of35

MACFiltering Yes

PortMACLocking Yes

PrivateEdgeVLAN YesAprotectedportdoesn'tforwardanytraffic

(unicast,multicast,orbroadcast)toanyotherprotectedport-sameswitch

PrivateVLANs YesScalesPrivateEdgeVLANsbyprovidingLayer2isolationbetweenportsaccrossswitchesinsame

Layer2network

QualityofService(QoS)-Summary

AccessListsL2MAC,L3IPandL4PortACLsIngress802.3ad(LAG)forACLassignmentBindingACLstoVLANsACLLoggingSupportforIPv6fields

YesYesYesYesYesYesYes

DiffServQoSEdgeNodeapplicabilityInteriorNodeapplicability802.3ad(LAG)forserviceinterfaceSupportforIPv6fieldsIngress

YesYesYesYesYesYes

IEEE802.1pCOS802.3ad(LAG)forCOSconfigurationWRED(WeightedDeficitRoundRobin)StrictPriorityqueuetechnology

YesYesYesYes

Auto-VoIP Yes,basedonprotocols(SIP,H323andSCCP)oronOUIbytes(defaultdatabaseanduser-basedOUIs)inthephonesourceMACaddress

QoS-ACLFeatureSupport

ACLSupport(includeL3IPandL4TCP/UDP) Yes

MACACLSupport Yes

IPRuleMatchFieldsDestIPDestIPv6IPDestL4PortEveryPacketIPDSCPIPPrecedenceIPTOSProtocolSourceIP(forMasksupportseebelow)SourceIPv6IPL3IPv6FlowLabelSourceL4PortSupportsMasking

InboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInbound


M4100 series

Page24of35

MACRuleMatchFieldsCOSDestMACDestMACMaskEthertypeSourceMACSourceMACMaskVLANIDVLANID2(SecondaryVLAN)

InboundInboundInboundInboundInboundInboundInbound

Yes

RulesattributesAssignQueueLogging--denyrulesMirror(tosupportedinterfacetypesonly)Redirect(tosupportedinterfacetypesonly)

InboundInboundInboundInbound

InterfaceInbounddirectionSupportsLAGinterfacesMultipleACLsperinterface,inboundMixed-typeACLsperinterface,inboundMixedL2/IPv4ACLsperinterface,inbound

YesYesYesYesYes

QoS-DiffServFeatureSupport

DiffServSupported Yes

ClassTypeAll Yes

ClassMatchCriteriaCOSDestIP(forMasksupportseebelow)DestIPv6IPDestL4PortDestMAC(forMasksupportseebelow)EthertypeEveryPacketIPDSCPIPPrecedenceIPTOS(forMasksupportseebelow)ProtocolReferenceClassSourceIP(forMasksupportseebelow)SourceIPv6IPL3IPv6FlowLabelSourceL4PortSourceMAC(forMasksupportseebelow)VLANID(SourceVID)SupportsMasking

InboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInboundInbound

PolicyAttributes--InboundAssignQueueDropMarkCOSMarkIPDSCPMarkIPPrecedenceMirror(tosupportedinterfacetypesonly)PoliceSimplePoliceColorAwareMode

Inbound

YesYesYesYes

InboundYesYes


M4100 series

Page25of35

ServiceInterfaceInboundSlot.PortconfigurableInbound'All'PortsconfigurableSupportsLAGinterfacesMixedL2/IPv4matchcriteria,inbound

YesYesYesYes

PHBSupportEFAF4xAF3xAF2xAF1xCS

YesYesYesYesYesYes

Statistics--PolicyInstanceOfferedDiscarded

packetspackets

QoS-COSFeatureSupport

COSSupportSupportsLAGinterfacesCOSMappingConfig

YesYesYes

Configurableper-interfaceIPDSCPMapping

YesYes

COSQueueConfigQueueParmsconfigurableper-interfaceDropParmsconfigurableper-interfaceInterfaceTrafficShaping(forwholeegress interface)MinimumBandwidthWeightedDeficitRoundRobin(WDRR)SupportMaximumQueueWeightWREDSupport

YesYesYes

YesYes127Yes

IEEENetworkProtocols

IEEE802.3Ethernet IEEE802.3azEnergyEfficientEthernet (selectmodels) IEEE802.1sMultipleSpanningTree(MSTP) IEEE802.1v

Protocol-basedVLAN

IEEE802.3u100BASE-T IEEE802.3adTrunking(LACP) IEEE802.1wRapidSpanningTree(RSTP) IEEE802.1p QualityofService

IEEE802.3ab1000BASE-T IEEE802.1ABLLDPwithANSI/TIA-1057(LLDP-MED) IEEE802.1XRadiusnetworkaccesscontrol IEEE802.3x

Flowcontrol

IEEE802.3zGigabitEthernet1000BASE-SX/LX IEEE802.1DSpanningTree(STP) IEEE802.1QVLANtagging IEEE802.3af/IEEE802.3at

IETFRFCStandardsandMIBs

SystemFacilities

RFC768–UDP RFC2131–DHCPClient/Server

RFC783–TFTP RFC2132–DHCPoptions&BOOTPvendorextensions

RFC791–IP RFC2030–SimpleNetworkTimeProtocol(SNTP)Version4forIPv4,IPv6andOSI

RFC792–ICMP RFC2865–RADIUSClient(bothSwitchandManagementaccess)

RFC793–TCP RFC2866–RADIUSAccounting

RFC826–EthernetARP RFC2868–RADIUSAttributesforTunnelProtocolsupport


M4100 series

Page26of35

RFC894–TransmissionofIPdatagramsoverEthernetnetworks RFC2869–RADIUSExtensions

RFC896–CongestioncontrolinIP/TCPNetworks RFC2869bis–RADIUSSupportforExtensibleAuthenticationProtocol(EAP)

RFC951–BOOTP RFC3164–TheBSDSyslogProtocol

RFC1321–Message-digestalgorithmRFC3580–802.1XRADIUSusageguidelines(VLANassignmentviaRADIUS,dynamicVLAN)

RFC1534–InteroperationbetweenBOOTPandDHCP

SwitchingMIB

RFC1213–MIB-II RFC2620–RADIUSAccountingMIB

RFC1493–BridgeMIB RFC2737–EntityMIBversion2

RFC1643–Ethernet-likeMIB RFC2819–RMONGroups1,2,3&9

RFC2233–TheInterfacesGroupMIBusingSMIv2 IEEE802.1XMIB(IEEE802.1-PAE-MIB2004Revision)

RFC2674–VLANMIB IEEE802.1AB–LLDPMIB

RFC2613–SMONMIB ANSI/TIA1057–LLDP-MEDMIB

RFC2618–RADIUSAuthenticationClientMIB PrivateEnterpriseMIBssupportingswitchingfeatures

IPv4Routing

RFC1027–UsingARPtoimplementtransparentsubnetGateways(ProxyARP) RFC2131–DHCPrelay

RFC1256–ICMPRouterDiscoveryMessages RFC3046–DHCPRelayAgentInformationoption

RFC1812–RequirementsforIPVersion4routers VLANrouting

IPv4RoutingMIB

RFC2096–IPForwardingTableMIB PrivateenterpriseMIBsupportingroutingfeatures

Multicast

RFC1112–HostextensionsforIPMulticasting RFC2710–MulticastListenerDiscovery(MLD)forIPv6

RFC2236–InternetGroupManagementProtocol,Version2 RFC3376–InternetGroupManagementProtocol,Version3

RFC2365–AdministrativelyScopedIPMulticast RFC3810–MulticastListenerDiscoveryVersion2(MLDv2)forIPv6

MulticastMIB

Draft-ietf-magma-mgmd-mib-05MulticastGroupMembershipDiscoveryMIB PrivateEnterpriseMIBsupportingMulticastfeatures

IPv6Routing

RFC1981–PathMTUforIPv6 RFC3484–DefaultAddressSelectionforIPv6

RFC2460–IPv6Protocolspecification RFC3493–BasicSocketInterfaceforIPv6

RFC2461–NeighborDiscovery RFC3542–AdvancedSocketsAPIforIPv6

RFC2462–StatelessAutoConfiguration RFC3587–IPv6GlobalUnicastAddressFormat

RFC2464–IPv6overEthernet RFC3736–StatelessDHCPv6


M4100 series

Page27of35

IPv6RoutingMIB

RFC2465–IPv6MIB

RFC2466–ICMPv6MIB

QoS

RFC2474–DefinitionofDifferentiatedServicesField(DSField)intheIPv4andIPv6Headers RFC3260–NewTerminologyandClarificationsforDiffServ

RFC2475–AnArchitectureforDifferentiatedServices RFC3289–ManagementInformationBasefortheDifferentiatedServicesArchitecture(read-only)

RFC2597–AssuredForwardingPHBGroupPrivateMIBsforfullconfigurationofDiffServ,ACLandCoSfunctionality

RFC3246–AnExpeditedForwardingPHB(Per-HopBehavior)

Management

RFC854–Telnet RFC3412–MessageProcessing&Dispatching

RFC855–TelnetOption RFC3413–SNMPApplications

RFC1155–SMIv1 RFC3414–User-BasedSecurityModel

RFC1157–SNMP RFC3415–View-basedAccessControlModel

RFC1212–ConciseMIBDefinitions RFC3416–Version2ofSNMPProtocolOperations

RFC1867–HTML/2.0Formswithfileuploadextensions RFC3417–TransportMappings

RFC1901–Community-basedSNMPv2 RFC3418–ManagementInformationBase(MIB)fortheSimpleNetworkManagementProtocol(SNMP)

RFC1908–CoexistencebetweenSNMPv1&SNMPv2

SSL3.0andTLS1.0-RFC2246–TheTLSProtocol,Version1.0

-RFC2818–HTTPoverTLS-RFC2346–AESCiphersuitesforTransportLayerSecurity

RFC2068–HTTP/1.1protocolasupdatedby draft-ietf-http-v11-spec-rev-03

RFC2271–SNMPFrameworkMIB

RFC2295–TransparentContentNegotiation

RFC2296–RemoteVariantSelection;RSVA/1.0State Management“cookies”–draft-ietf-http-state-mgmt-05

SSH1.5and2.0-RFC4253–SSHTransportLayerProtocol-RFC4252–SSHAuthenticationProtocol-RFC4254–SSHConnectionProtocol-RFC4251–SSHProtocolArchitecture

-RFC4716–SECSHPublicKeyFileFormat -RFC4419–Diffie-HellmanGroupExchangefortheSSHTransportLayerProtocol

RFC2576–CoexistencebetweenSNMPv1,v2andv3

RFC2578–SMIv2

RFC2579–TextualConventionsforSMIv2

RFC2580–ConformancestatementsforSMIv2

RFC3410–IntroductionandApplicabilityStatementsforInternetStandardManagementFramework

RFC3411–AnArchitectureforDescribingSNMPManagementFrameworks


M4100 series

Page28of35

Management

Passwordmanagement Yes

ConfigurableManagementVLAN Yes

AutoInstall(BOOTPandDHCPoptions66,67,150and55,125) Yes Scalabledeploymentprocess(firmware,config)

AdminaccesscontrolviaRadiusandTACACS+ Yes Policies,Enable

IndustrystandardCLI(IS-CLI) Yes CommandLineinterface

CLIcommandsloggedtoaSyslogserver Yes

Web-basedgraphicaluserinterface(GUI) Yes FullyfunctionalGUI

Telnet Yes

IPv6management Yes

DualSoftware(firmware)image Yes Allowsnondisruptivefirmwareupgradeprocess

DualConfigurationfile Yes Text-based(CLIcommands)configurationfile

IS-CLIScripting Yes IndustrystandardCLIcommandsscriptsforautomation

Portdescriptions Yes

SNTPclientoverUDPport123 Yes Providessynchronizednetworktimestampeitherinbroadcastorunicastmode

XMODEM Yes

SNMPv1/v2 Yes

SNMPv3withmultipleIPaddresses Yes

RMON1,2,3,9MaxHistoryentriesMaxbucketsperHistoryentryMaxAlarmentriesMaxEvententriesMaxLogentriesperEvententry

Yes3*(portcount+LAG+10)

103*(portcount+LAG+10)3*(portcount+LAG+10)

10

PortMirroringNumberofmonitorsessionsTx/RxManytoOnePortMirroringLAGsupportedassourceportsMaxsourceportsinasession

Yes1

YesYesYes

Totalswitchportcount

RemotePortMirroring(RSPAN) Yes Whenaparticularsessionisenabled,anytrafficenteringorleavingthe

sourceportsofthatsessioniscopied(mirrored)ontoaRemoteSwitchedPortAnalyzer(RSPAN)VLAN

Flowbasedmirroring Yes

CableTestutility Yes CLI,WebGUI

Traceroutefeature Yes

OutboundTelnet Yes


M4100 series

Page29of35

SSHSSHSessionConfiguration

v1/v2Yes

SecureShell

SSL/HTTPSandTLSv1.0forweb-basedaccess Yes

Filetransfers(uploads,downloads) TFTP/HTTP

Securedprotocolsforfiletransfers SCP/SFTP/HTTPS

HTTPMaxSessions 16

SSL/HTTPSMaxSessions 16

HTTPDownload(firmware) Yes

Syslog(RFC3164) Yes

Persistentlogsupported Yes

UserAdminManagement

UserIDconfiguration Yes

Maxnumberofconfiguredusers 6

SupportmultipleREADWRITEUsers Yes

MaxnumberofIASusers(internaluserdatabase) 100

Authenticationloginlists Yes

AuthenticationEnablelists Yes

AuthenticationHTTPlists Yes

AuthenticationHTTPSlists Yes

AuthenticationDot1xlists Yes

AccountingExeclists Yes

AccountingCommandslists Yes

LoginHistory 50

M4100series-PlatformConstants

MaximumnumberofremoteTelnetconnections 5

MaximumnumberofremoteSSHconnections 5

NumberofMACAddresses 16K

NumberofVLANs 1K

VLANIDRange 1-4093

Numberof802.1pTrafficClasses 8classes

IEEE802.1xNumberof.1xclientsperport

48

NumberofLAGs 12LAGswithupto8portspergroup


M4100 series

Page30of35

Maximummultiplespanningtreeinstances 32

MACbasedVLANSNumbersupported

Yes256

Numberoflogmessagesbuffered 200

StaticfilterentriesUnicastMACandsourceportMulticastMACandsourceportMulticastMACanddestinationport(only)

2020256

SubnetbasedVLANsNumbersupported

Yes128

ProtocolBasedVLANsMaxnumberofgroupsMaxprotocols

Yes12816

MaximumMulticastMACAddressesentries 1K

JumboFrameSupportMaxSizeSupported

Yes9k

NumberofDHCPsnoopingbindings 16K

NumberofDHCPsnoopingstaticentries 1024

LLDP-MEDnumberofremotenodes 48

PortMACLockingDynamicaddressesperportStaticaddressesperport

Yes409648

sFlowNumberofsamplersNumberofpollersNumberofreceivers

32528

RadiusMaxAuthenticationserversMaxAccountingservers

51

Numberofroutinginterfaces(includingport/vlan) 64

Numberofstaticroutes(v4) 64

RoutingHeapsizeIPv4

256K

DHCPServerMaxnumberofpoolsTotalmaxleases

16

1024

DNSClientConcurrentrequestsNameserverentriesSeachlistentriesStatichostentriesCacheentriesDomainsearchlistentries

16866412832

NumberofHostEntries(ARP/NDP)IPv4buildStaticv4ARPEntries

51216

including509userconfigurableentries

NumberofECMPNextHopsperRoute 1


M4100 series

of 35

ACLLimitsMaximumNumberofACLs(anytype)MaximumNumberConfigurableRulesperListMaximumACLRulesperInterfaceandDirection (IPv4/L2)MaximumACLRulesperInterfaceandDirection (IPv6)MaximumACLRules(system-wide)MaximumACLLoggingRules(system-wide)

50509509

509

4K32

COSDeviceCharacteristicsConfigurableQueuesperPortConfigurableDropPrecedenceLevels

8queues

3

DiffServDeviceLimitsNumberofQueuesRequiresTLVtocontainallpolicyinstances combinedMaxRulesperClassMaxInstancesperPolicyMaxAttributesperInstanceMaxServiceInterfacesMaxTableEntriesClassTableClassRuleTablePolicyTablePolicyInstanceTablePolicyAttributeTableMaxNestedClassChainRuleCount

8queuesYes

6283

50interfaces

3219264768230412

AutoVoIPnumberofvoicecalls 16

LEDs

Perport Speed,Link,Activity,PoE

Perdevice Power,Fan,RPSorPDMode,MaxPoE

PhysicalSpecifications

Dimensions(WidthxDepthxHeight)

M4100-50-POE 440x310x43.2mm(17.32x12.20x1.7in)

M4100-D12G 328x169x43.2mm(12.91x6.65x1.7in)

M4100-D12G-POE+ 331x208x43.2mm(13.03x8.19x1.7in)

M4100-12GF 440x257x43.2mm(17.3x10.12x1.7in)

M4100-26G 440x257x43.2mm(17.3x10.12x1.7in)

M4100-50G 440x257x43.2mm(17.3x10.12x1.7in)

M4100-26G-POE 440x257x43.2mm(17.3x10.12x1.7in)

M4100-24G-POE+ 440x257x43.2mm(17.3x10.12x1.7in)

M4100-50G-POE+ 440x310x43.2mm(17.32x12.20x1.7in)


M4100 series

Page32of35

Weight

M4100-50-POE 4.96kg(10.9lb)

M4100-D12G 1.33kg(2.9lb)

M4100-D12G-POE+ 2.596kg(5.73lb)

M4100-12GF 3.665kg(8.08lb)

M4100-26G 3.24kg(7.1lb)

M4100-50G 3.63kg(8.0lb)

M4100-26G-POE 3.79kg(8.36lb)

M4100-24G-POE+ 4.368kg(9.63lb)

M4100-50G-POE+ 4.96kg(10.9lb)

PowerConsumption(allportsused,line-ratetraffic,maxPoE)

M4100-50-POE 486.64Wmax

M4100-D12G 18.80Wmax

M4100-D12G-POE+ 166.60Wmax

M4100-12GF 160.60Wmax

M4100-26G 31.60Wmax

M4100-50G 49.50Wmax

M4100-26G-POE 272.90Wmax

M4100-24G-POE+ 533Wmax

M4100-50G-POE+ 555.50Wmax

EnvironmentalSpecifications

Operating:TemperatureHumidityAltitude

32°to122°F(0°to50°C)90%maximumrelativehumidity,non-condensing

10,000ft(3,000m)maximum

Storage:TemperatureHumidityAltitude

–4°to158°F(–20°to70°C)95%maximumrelativehumidity,non-condensing

10,000ft(3,000m)maximum

ElectromagneticEmissionsandImmunity

Certifications CEmark,commercialFCCPart15ClassA,VCCIClassA

ClassAEN55022(CISPR22)ClassAClassAC-TickEN50082-1EN55024


M4100 series

of 35

Safety

Certifications CEmark,commercialCSAcertified(CSA22.2#950)

ULlisted(UL1950)/cULIEC950/EN60950CBCCC

PackageContent

All models ProSAFE®M4100seriesswitchPowercord

RubberfootpadsfortabletopinstallationRubbercapsfortheSFPsockets

Mini-USBconsolecablewithoneMiniBconnectorandonetypeAconnectorResourceCDwithlinkstoonlinedocumentation:USB drivers for the Mini-USB console; Switch MIB; ProSAFE M4100 Managed

Switch Quick Installation Guide, ProSAFE M4100 Hardware Installation Guide; ProSAFE Managed Switch Command-Line Interface (CLI) User Manual; ProSAFE M4100 and M7100 Managed Switches Administration Manual

TechnicalDocumentationonlinerepository:http://www.downloads.netgear.com/docs/m4100/enu/202-11161-01/

Rackmount modelsM4100-50-POE,M4100-12GF;M4100-26G;M4100-50G M4100-26G-POE;M4100-24G-POE+;M4100-50G-POE+

Rack-mountingkit

DesktopmodelsM4100-D12G;M4100-D12G-POE+

Wall-mountingkit

DesktopmodelsM4100-D12G

ACexternalpoweradapter magneticmountingkit(setofmagnets)

OptionalModulesandAccessories

All models:AFM735AGM731FAGM732F

100Base-FXSFPGBIC(Multimode)1000Base-SXSFPGBIC(Multimode)1000Base-LXSFPGBIC(Singlemode)

OrderingSKU:AFM735-10000S

AGM731FAGM732F

All rackmount models:RPS5412RPS4000APS1000W

OptimalPower®RedundantPowerSupply(oneswitch-RPSmodeonly)External/RedundantPowerSupply(uptofourswitches-RPSorEPSmode)

PowerModuleforRPS4000

RPS5412-100NAS/-100EUS/-100AJSRPS4000-200NES/-200AJS

APS1000W-100NES/-100AJS

All desktop models:420-10043-01 RackmountkitforM4100seriesdesktopversions 420-10043-01

WarrantyandSupport

ProSafeLifetimeHardwareWarranty* Included,lifetime

90daysofTechnicalSupportviaphoneandemail* Included,90daysafterpurchase

LifetimeTechnicalSupportthroughonlinechat* Included,lifetime

LifetimeNextBusinessDayhardwarereplacement* Included,lifetime

ProSupportServicePacks

Installationcontracts

PSB0304-10000S RemoteInstallationSetupandConfigurationServiceContract

PSP1104-10000S OnsiteInstallationSetupandConfigurationServiceContract


M4100 series

Page34of35

http://www.downloads.netgear.com/docs/m4100/enu/202-11161-01/

Supplementalsupportcontracts

PMB0332-10000SOnCall24x73-yearCAT2

M4100-50-POE;M4100-D12G;M4100-D12G-POE+;M4100-12GF M4100-26G;M4100-26G-POE; OnCall24x7extendsthe90-daywarranty

entitledtechnicalsupport(phoneandemail) forstandardandadvancedfeaturestothe

lengthofthecontracttermPMB0333-10000SOnCall24x73-yearCAT3

M4100-50G;M4100-50G-POE+

PacksOrderingInformation

M4100-50-POEAmericas,EuropeAsiaPacificChina

48 ports Fast Ethernet PoE 802.3af, Layer 2+ software packageFSM7250P-100NESFSM7250P-100AJSFSM7250P-100PRS

M4100-D12GAmericas,EuropeAsiaPacificChina

Desktop 12 ports Gigabit, Layer 2+ software packageGSM5212-100NESGSM5212-100AJSGSM5212-100PRS

M4100-D12G-POE+Americas,EuropeAsiaPacificChina

Desktop 12 ports Gigabit PoE+ 802.3at, Layer 2+ software packageGSM5212P-100NESGSM5212P-100AJSGSM5212P-100PRS

V1H2V1H2V1H2

M4100-12GFAmericas,EuropeAsiaPacificChina

12 ports Gigabit Fiber, Layer 2+ software packageGSM7212F-100NESGSM7212F-100AJSGSM7212F-100PRS

V1H2V1H2V1H2

M4100-26GAmericasEuropeAsiaPacificChina

26 ports Gigabit, Layer 2+ software packageGSM7224-200NASGSM7224-200EUSGSM7224-200AJSGSM7224-200PRS

V2H2V2H2V2H2V2H2

M4100-50GAmericasEuropeAsiaPacificChina

50 ports Gigabit, Layer 2+ software packageGSM7248-200NASGSM7248-200EUSGSM7248-200AJSGSM7248-200PRS

V2H2V2H2V2H2V2H2

M4100-26G-POEAmericas,EuropeAsiaPacificChina

24 ports Gigabit PoE 802.3af, Layer 2+ software packageGSM7226LP-100NESGSM7226LP-100AJSGSM7226LP-100PRS

M4100-24G-POE+Americas,EuropeAsiaPacificvChina

24 ports Gigabit PoE+ 802.3at, Layer 2+ software packageGSM7224P-100NESGSM7224P-100AJSGSM7224P-100PRS

V1H2V1H2V1H2

M4100-50G-POE+Americas,EuropeAsiaPacificChina

48 ports Gigabit PoE+ 802.3at, Layer 2+ software packageGSM7248P-100NESGSM7248P-100AJSGSM7248P-100PRS


M4100 series

of 35

*ThisproductcomeswithalimitedwarrantythatisvalidonlyifpurchasedfromaNETGEARauthorizedresellerandmodificationstoproductmayvoidthewarranty;covershardware,fansandinternal power supplies - not software or external power supplies See http://www.netgear.com/about/warranty/ for details. Lifetime technical support includes basic phone support for 90 days from purchase date and lifetime online chat support when purchased from a NETGEAR authorized reseller.

NETGEAR, the NETGEAR Logo, and ProSAFE are trademarks of NETGEAR, Inc. in the United States and/or other countries. Other brand names mentioned herein are for identification purposes only andmaybetrademarksoftheirrespectiveholder(s).Informationissubjecttochangewithoutnotice.©2015NETGEAR,Inc.Allrightsreserved.D-M4100-1

prosafe® intelligent edge managed switches - · pdf fileprosafe® intelligent edge...

Documents