Modifying a Wired Network

To modify a wired, perform the following steps:

  1. Click the Networks tile on the Instant On web application home page, or click Networks from the navigation pane on the left.
  2. Select the wired network from the list of Networks.

The following section provides details of the Overview tab.

Identification

The Overview > Identification setting allows you to change the name and status of the network. To modify the network name and status, perform the following steps:

  1. Enter a new name under Name to change the main network name.
  2. Select the Enabled checkbox to activate the network. To disable the network, deselect the checkbox.

The default wired network is used to manage the Instant On device and does not have the option to be enabled or disabled.

If the selected wired network is a default network, then you cannot modify your Management VLAN.

The Identification setting also displays the Health, Status, and Network Usage details of the network.

Important Points to Note:

  • Deactivating the wired network means that no wired network station will be able to connect. The network will be shut down at the port level and would not be able to pass traffic anymore. The network is removed from all the wired ports.
  • Deactivating a wired-network that has one or more associated wireless-network(s) displays a dialog box indicating that all the wireless networks and associated clients will be disconnected from the network. Click Deactivate to continue this operation.
  • Re-activating a wireless-network on a wired-network that was previously deactivated displays a dialog box indicating that the associated wired-network will also be activated. Click Activate to continue this operation.
  • Re-activating a wired-network that has one or more associated wireless-networks, activates the associated-wireless networks as well. Click Activate to continue this operation.

Properties

The Properties setting allows you to configure the VLAN and network options. To modify these settings, perform the following steps:

  1. Enter a new VLAN to change the VLAN ID.
  2. Under Network Options, select the IGMP snooping check box.

Security

The Security option in the Instant On web application, allows you to configure security protection against DHCP and ARP attacks.

DHCP Snooping

DHCP snooping provides network security by filtering DHCP messages from untrusted sources in the network. It differentiates between ports connected to untrusted end user devices and ports connected to trusted DHCP servers or other Instant On devices. To take effect, security protections must be enabled both at the network and at the port level. Uplink ports as well as ports interconnecting Instant On devices together are automatically configured to trust the devices connected.

ARP Attack Protection

ARP attack protection is a security feature that validates ARP packets in a network and discards ARP packets with invalid IP-to-MAC address bindings. The system automatically learns the IP to MAC bindings from the DHCP exchanges in the network and it protects the network from certain man-in-the-middle and impersonation attacks.

The option to enable DHCP Snooping and ARP Attack security protection only apply to Instant On switch ports and is displayed when the site has at least one Instant On switch in the device inventory. The following procedure enables Network Security on the Instant On network:

  1. Click the Networks tile on the Instant On web application home page, or click Networks from the navigation pane on the left.
  2. Under Networks > Overview, click Create Network.
  3. Under Network Identification, configure the following:
    1. Name—Enter a name for the employee network. This will also be broadcast as the SSID for the WLAN network.
    2. Network Type—Select the Wired option. The wireless option appears only when your site has both wired and wireless networks.
    3. Click Next.
  4. Under Network Properties > VLAN, enter a new VLAN ID.
  5. Under Network Properties > Security, enable the DHCP and ARP Attack Protections checkbox.
  6. Ensure that the Security protections setting is also enabled in the Port Details page for the port on which the network is configured. For more information on Security protections, see Switch Details.
  7. Click Update to save the configurations.

Delete Network

Follow these steps to delete a network:

  1. Click the Networks tile on the Instant On web application home page, or click Networks from the navigation pane on the left.
  2. Under Networks > Overview, use one of the following methods to view the network details:
    1. Click the Network name and follow Step 3.
    2. Hover the cursor over the network you want to delete, click the button, and select Delete from the drop-down list.
  3. Click the Delete button, next to Delete Network.
  4. Click Delete Network from the popup window.

Energy Efficient Ethernet

Energy Efficient Ethernet (EEE) or Green Port Management reduces power consumption on switch ports when data activity is low or idle. Regular heartbeats are sent to gauge port activity. Ports are fully enabled when data activity resumes. This function operates in the background and does not display a configurable option or activity status in the Instant On web application.

Instant On currently supports only a subset of the EEE feature (802.3az). The ability to detect copper and optical link length and reduce power accordingly is not supported.