Archive Home arrow Reviews: arrow Network arrow NETGEAR ProSafe GS110T Gigabit SmartSwitch








NETGEAR ProSafe GS110T Gigabit SmartSwitch E-mail
Reviews - Featured Reviews: Network
Written by Bruce Normann   
Tuesday, 08 January 2013
Table of Contents: Page Index
NETGEAR ProSafe GS110T Gigabit SmartSwitch
Closer Look: NETGEAR GS110T
Detailed Features
Technology Details
Features and Specifications
SmartSwitch Setup
SmartSwitch Security Settings
Network Switch Testing Methodology
TestResults
Final Thoughts
Conclusion

ProSafe SmartSwitch Security Settings

NETGEAR Security Features

DHCP Filtering is a very basic technique for protection against an unauthorized DHCP server snooping traffic for passwords or employing a man-in-the-middle attack. By configuring each port as either a trusted port or an untrusted port, only the authorized DHCP server is allowed to forward DCHP responses; any responses on the untrusted ports are discarded.

NETGEAR_ProSafe_GS110T_SmartSwitch_DCHP_Filtering_Screen_01.png

Access Control Lists are a popular way of granting access only to known users, which is prudent whether the network is wired or wireless. The GS110T can perform this function using either the MAC address of the known user, or their IP address. There are separate sections of the menu for setting each of these up manually, and there is also an ACL Wizard to simplify configuration.

NETGEAR_ProSafe_GS110T_SmartSwitch_ACL_Wizard_Screen_01.png

Port Authentication is another powerful technique for blocking out unknown, unauthorized, and unwanted users from the network. The GS110T, as well as all the other switches in the NETGEAR ProSafe product line, uses the 802.1X protocol in tandem with a RADIUS server to perform third-party authentication for every device that tries to access the network. There are nearly a dozen different settings that can be applied in this mode, in order to make access control as tight or as loose as you want it. For instance, a "Guest VLAN" can be set up on the authentication server, which restricts access to other resources on the network. You can make certain resources available on the guest VLAN, such as printers, while segregating all the other devices onto another VLAN. One nice feature is the summary page which you can view, without actually going into the configuration screen. This makes it easier to see how the switch is configured, without worrying about accidentally making an unwanted change.

NETGEAR_ProSafe_GS110T_SmartSwitch_Port_Summary_Authentication.png

Traffic control comes in a couple different forms. MAC filtering, dynamic or static port locking, and Storm Control all work in slightly different ways to keep unwanted traffic off your network. MAC filtering links MAC addresses to VLAN IDs, and looks for a match with the relationship that's entered in the filter table. Port locking has a convenient dynamic mode, where one or more devices can be connected to a port, which then interrogates the device and stores its MAC address as "allowed". You control how many devices can go through this process on each port, from zero to 600. A value of zero effectively disables the dynamic capability, and you have to manually enter the MAC address of the device you want to allow access to that particular port. However, once the port is configured in the dynamic mode, you can then convert the port to static mode and keep the address that was loaded dynamically.

NETGEAR_ProSafe_GS110T_SmartSwitch_MAC_Convert_Screen_01.png

Storm control prevents a large number of broadcast messages from being transmitted to all other ports simultaneously. It blocks the messages coming into to the port that is being monitored for this kind of activity. Think of it like a spam filter that stops the unwanted message at the source, before it gets sent to everyone else on your network.

NETGEAR_ProSafe_GS110T_SmartSwitch_Storm_Control_Screen_01.png

There are a number of additional security features available on the GS110T, such as setting up HTTPS access, TACACS+ control, etc. I covered most of the security features above, but only in a cursory way. There's a 240 page software manual that explains things in a lot more detail than I can convey here. It should be very clear by now that smart switches like the NETGEAR ProSafe line offer the opportunity for a substantial security upgrade for your network.



 

Comments 

 
# Teamingjcgeny 2013-02-05 11:12
the switch is nearly the same than the one i just buy: the GS108T-v2
i am very happy to see you gave more than 9/10

i wonder what can be results of udp and tcp if you use 2 network cards in a teaming configuration
Report Comment
 
 
# RE: TeamingBruce 2013-02-05 11:13
Teaming, 802.3ad, Link Aggregation, LACP... they're all very fickle functions. They all promise a faster "pipe", but only deliver a wider one. My experience with NAS devices and Win 7 workstations has been very frustrating. Linux and Win Server are probably better equipped to use this functionality in a straightforward way.

I will keep investigating, as new equipment is added to the test bench, but ultimately 10GbE or another standard that is faster than GbE will take over.
Report Comment
 
 
# Literature about computersLeonid1427 2013-02-05 11:58
на вышеприведенном интернет-ресурсе собран громадный выбор умных статей про спутниковый ресивер gs 8304
Report Comment
 
 
# computer BooksZinovii8685 2013-02-05 11:59
на вышеприведенном интернет-блоге собран большой выбор интересных статей про Полный набор StreamReader.dll
Report Comment
 
 
# Power ConsumptionCraig 2013-02-25 00:06
Nice thorough technical review.

I am particularly concerned with energy consumption of all my computing infrastructure since much of it is left on 24/7 (SOHO).

Specifically for a "switch" I like to know power usage and power factor ratings at the wall plug with all ports in use and zero ports in use. Some switches like my DLINK DGS-1024G drop power usage to 2.5W when none of the 24 ports are in use, and detect cable lengths and reduce individual port power levels on shorter cable runs. Does the NETGEAR GS110T have any of these "Green" features? How about adding a "Green" rating to your reviews?

My application is home use. At any one time there may be 30+ active IP's. This covers VoIP, Media Centers, TV, MP3 players, Cell Phones, PVR's, Computers, Laptops, Printer... most are wired, but about 5 are wireless. I have 4 "green" gigabit switches running continuously, 1 "primary" and 3 "secondary" in high density drop locations.

With this much equipment running, "green" is an important purchase consideration to me. And I do spend more to get power conserving "green" equipment. For the NETGEAR GS110T, it appears the "Green" rating wasn't a design consideration and is N/A. Obviously if I need the NETGEAR GS110T features, this won't matter much, unless there is a competitor offering a "green" alternative with the product features I need.

Otherwise, a great review... Thanks!
Craig
Report Comment
 
 
# It's Green....Bruce Normann 2013-02-25 09:42
Thanks for the feedback Craig,

The GS110T does support Auto Power-Down of unused ports, and Short Cable Mode. They are both configurable in the device management software. To access these settings, click System > Management > Green Ethernet Configuration.

Youre right about the Green features not being very prominently described in the Features and Specifications, I had to go to the 244 page Software Administration Manual to find the details. At this point, not every product in the NETGEAR line supports both of those energy-saving features, so it's important to do the research and get an explicit answer, if it's important to you.

I'll try and see if I can get the power measurements you're looking for... I have another switch on the testbed right now, a new, low cost 10GbE model. I'll try to pay more attention to the power usage while testing it.
Report Comment
 
 
# Energy Efficient EthernetCraig 2013-02-28 18:32
Here's an interesting link on the "green" idea which also provides compelling arguments which could be used in a review (hint)...

#en.wikipedia.org/wiki/Energy_Efficient_Eth ernet

As it points out, just the network controller part of computing uses 5.3 terawatt-hours of electricity in the US as of 2005. I doubt this figure has gotten any better. ;)
Report Comment
 
 
# RE: NETGEAR ProSafe GS110T Gigabit SmartSwitchJerry Suppan 2013-07-29 05:18
Hello I am a newcomer to the world of network smart switches. I am not sure what would really be the appropriate switch for me to consider for my home network. The home network consists of up to about five computers and 2 networked printers and one synology NAS device. One of the computers, and Mac Mini, is connected to my Front room TV will be streaming video content from my synology NAS device in the back room. So, I am thinking link aggregation is one important feature. Can this product do link aggregation? In other words using two ports each having a 1 Gb per second throughput in combination? I recently acquired the Synology 1513+ NAS device and it has 4 Gb ports on the back. I can use a couple of these or all of these in combination but to make any use out of that, the switch has to support aggregation. Thanks much.
Report Comment
 
 
# LACPBruce 2013-07-29 06:14
Hi Jerry, Yes, this product does support link aggregation. It might not behave the way you are thinking, though. You will get more throughput from the NAS when you have multiple clients hitting it. For instance, if two PCs were doing their nightly backup to the NAS at the same time you were streaming video, you are less likely to interfere with the video stream than if you just had one GbE connection going to the NAS.

You have 11 ports listed in your tally, so I would suggest a 12 port switch, or maybe even a 16 port, if you think your needs will expand. I don't see any devices that can take advantage of the fiber optic connections that the NETGEAR GS110T offers, so perhaps another model in their product line will be best for you.
Report Comment
 
 
# Aggregation and Media PlayersCraig 2013-07-30 19:26
Jerry,
I have a home network setup similar to what you are describing; Media Centers, VoIP, networked MP3 players, computers, server, etc. All running on vanilla gigabit. When playing a 12GB 1080p with 6-channel DTS or AAC audio the media players work fine even when using 100BaseT. The server (or NAS) needs to be gigabit to handle multiple streams. It doesn't take a lot of imagination to see if each player works with 100BaseT that one gigabit connection will probably support something close to 10 of these media players.

My equipment: DLink DGS-1024D "green" 24 port unmanaged switch, server 8-core Linux with 12TB storage and 1 gigabit ethernet channel, all gigabit cable is CAT5e or CAT6. Media Players are a mix of WD-Live and ASUS. I have 30 active IP's on my network; 4 computers, 5 networked MP3 players, 4 DVR's (which also share video programming over the local network), 5 VoIP, 1 X-Box, 1 WiFi router for I-Pods and Android phones, and probably a few other devices I'm forgetting and transient networked equipment which comes and goes.

In my experience, a properly configured home system doesn't need more than gigabit speeds for multiple media players operating against local NAS sources. Part of "properly configured" is do -not- stack switches more than 2 between your device and DHCP server.

For different reasons, I agree with Bruce, a different switch may better serve your needs. If I were looking again, I might look for a "Green" managed switch.

I had a longer response typed, but this site caused my browser to "refresh" and I lost my original response.
Report Comment
 

Comments have been disabled by the administrator.

Search Benchmark Reviews

Like Benchmark Reviews on FacebookFollow Benchmark Reviews on Twitter