Networking Solutions for Voip- Netgear

Networking Solutions for VoIP

Table of Contents QoS: The Prime Mover............................................................................................................................................... 3 Benefits of VoIP............................................................................................................................................................ 3 VoIP Network Components and Protocols................................................................................................ 4 CODECs............................................................................................................................................................................... 5 Signaling Protocols................................................................................................................................ 5 The LLDP-MED Protocol.......................................................................................................................... 5 Security............................................................................................................................................................ 5 Network Planning – General Considerations.......................................................................................... 6 Choosing a Switch: Bandwidth & Ports........................................................................................................ 6 Choosing a Switch: Power over Ethernet................................................................................................... 7 Reference Designs....................................................................................................................................................... 8 20 Phones......................................................................................................................................................... 8 200 IP Phones..................................................................................................................................................

10

1000+ IP Phones............................................................................................................................................

12

Managed Infrastructure....................................................................................................................................... 16

Page 2

VoIP has become a mainstream technology. Today, the question for business telephony at any scale is no longer whether to switch to VoIP, but when. This paper focuses on the internal networking aspects of making a successful transition to VoIP, with emphasis on network design and switching technology.

QoS: The Prime Mover The most important factor that has moved VoIP into the mainstream is improved quality of service (QoS)1. Businesses that have held back because of VoIP’s early reputation for poor voice quality need no longer be concerned that important transactions (such as sales) will be impeded by poor QoS, or that their company will make a less than fully professional impression on callers with VoIP. Today, excellent quality of service can always be achieved with VoIP, but it’s not guaranteed. QoS ultimately depends on the switches that control the VoIP traffic, and of course, the network over which that traffic travels. It’s understandable that the focus of attention in a transition to VoIP is typically on the service provider, the delivery model (onsite vs. hosted) and the IP phones, but the switches have the most important impact on the user experience. With NETGEAR switches, VoIP traffic can be automatically prioritized to maintain the desired QoS, even when the network is saturated. The key factors required to ensure a successful VoIP network with reliable QoS are as follows: • Voice packet prioritization. The switch(es) that manage the traffic must be able to prioritize voice traffic when necessary to maintain QoS. • Adequate bandwidth. The network and the switch(es) that control it must be able to handle the additional load imposed by a VoIP deployment. • Resilience. The network switch(es) must have access to an alternate power supply should the main source of power fail. • Security. The network must be protected from hacking, including physical hacking. The first factor – packet prioritization – deserves more explanation. VoIP streams are not forgiving when it comes to dropped packets, signal delay and other factors that don’t affect data traffic. Therefore, to ensure a consistently high level of QoS, the switches must be able to prioritize network traffic, giving voice packets top priority. NETGEAR switches accomplish this automatically.

Benefits of VoIP This guide will help you understand the basics of VoIP so you can successfully plan and specify a VoIP network. It includes reference designs for VoIP networks with 20, 200 and 1,000 IP phones. Before covering design issues, however, it’s worth reviewing just why VoIP has become the solution of choice for organizations of all sizes.

The term “Quality of Service” and its abbreviation, QoS, has long been used in the literal sense of voice quality, i.e. how closely what the user hears matches the original. Recently, however, the term has begun to be used to describe the voice packet prioritization technology that is used to ensure high QoS even during periods of network congestion. In this document, QoS refers only to the original meaning of the term.

1

Page 3

VoIP’s packet-switched solutions are winning the marketing battle over conventional circuit-switched telephony because they offer advantages that conventional POTS (“Plain Old Telephone Service”) just can’t match. These include: • Price. VoIP is substantially less expensive than circuit-switched telephony. In fact, online services like Skype enable individual users to international calls of unlimited duration for free. VoIP for business purposes isn’t free, but it is dramatically cheaper than today’s circuit-switched options. • Quality of service (QoS). In the past, the reduced cost of VoIP came with a penalty: reduced QoS. Today’s VoIP technology can provide voice quality that equals or even exceeds what conventional circuit-switched systems offer. • Complexity. Switching to VoIP typically reduces the complexity of dealing with “the phone company” and its arcane pricing structures, which even highly-paid consultants can’t always understand. • Features. VoIP can now match conventional telephony feature-for-feature, ranging from basics like voice mail to emerging capabilities like presence sensing. • Integration. More and more of today’s business applications, including CRM and call center applications, are grounded in internet-related technical standards. VoIP technology can be integrated with these applications much more easily than the analog technology of conventional telephony. • Ease of administration. Adding, removing or changing internal numbers is a simple process with VoIP’s web-based interfaces, and with auto discovery features, activating a new phone is virtually automatic. • Deployment advantages. VoIP can be piggy-backed on an existing network infrastructure, including the physical cabling. This means lower initial cost (with no new wiring) and lower maintenance cost as well. • No risk of obsolescence. VoIP is the wave of the future. Companies who adopt VoIP have no risk of ending up with a “dinosaur” phone system that can’t operate efficiently in an all-digital world.

VoIP Network Components and Protocols No matter what the size of a VoIP network, it will always include one or more of the following components: • User agents. These may be commercial IP phones, or “soft phones” residing in a desktop or laptop PC. • Voice gateway. The gateway acts as the bridge between a VoIP network and the PSTN network of the “outside world.” • IPBX. The IPBX (sometimes referred to as an IP PBX) replaces the conventional PBX of the past, and performs all its functions (voice mail, call forwarding, conference calling and many, many more). It connects to the PSTN network via the voice gateway. The IPBX is available in three deployment options:

– a dedicated, on-site hardware device

– software that runs on a standard on-site server

– a managed service via the cloud

• Switches to manage network traffic. The switches are crucial, because if they lack the appropriate capabilities or bandwidth capacity, QoS will suffer, leading to user complaints, poor customer service and problems with external telephone communication in general. • Cabling. For adequate performance, Cat5E or better cabling is recommended. Decisions involving these components can directly affect QoS, based on which protocols they support. For example, some IP phones use protocols that deliver higher voice quality, but also require more bandwidth. Before reviewing those protocols, it’s worth taking a moment to examine QoS in a little more detail. QoS is ultimately a subjective measurement, because different individuals will invariably disagree as to how well a system can reproduce a voice that’s known to them. However, one decades-old attempt objectify QoS does exist. Developed initially for evaluating circuit-switched equipment, it provides a measure of quality known as Mean Opinion Score (MOS) based on individuals sitting in quiet rooms and rating voice quality. MOS can range from 1.0 (unintelligible) to 5.0 (ideal). Normally a score above 4.0 is considered to be acceptable, but what’s most important is that QoS can be quantified, and components/protocols can be evaluated based on the MOS score they promise as well as their bandwidth requirements.

Page 4

There are numerous protocols that govern VoIP systems, but three are of primary concern for VoIP networks: • protocols for the CODECs that govern analog/digital conversion and the signal compression that takes place in the VoIP gateway (inbound) and the user IP phones (outbound) • signaling protocols that govern the voice packets and their transmission • The LLDP-MED protocol extension, used by network devices such as IP phones for advertising their identity, capabilities, and neighbors

CODECs Popular protocols include G.711, G.729, G.723.1 and G.722. There are others as well, some of which are proprietary. These protocols are important because they differ in their sensitivity to various frequency ranges (e.g. voice only vs. voice and music), offer different levels of QoS, and impose different bandwidth requirements. It’s not necessary to understand their details, but it is important to know that they represent options. As would be expected, the higher the QoS, the greater the bandwidth required. Many IP phones support multiple protocols, but that is not always the case.

Signaling Protocols The signaling protocols govern the set-up and tear down of calls, as well as many other related call management functions. There are three major signaling protocols: • H.323. This is the “oldest” protocol – it is actually a set of protocols – and it is widely distributed. H.323 was designed for multimedia communication services such as real-time audio, video, and data communications over packet networks, including IP networks. Based on binary encoding, is it considered somewhat harder to program than its “competitor,” SIP. • SIP (Session Initiated Protocol). This slightly younger protocol accomplishes most of the functions available under H.323, but is somewhat lighter (i.e. requires less bandwidth). It is text-based. The industry consensus is that SIP will eventually come to dominate VoIP communication, with the caveat that multiple protocols are likely to exist into the foreseeable future. • SCCP (Skinny Client Control Protocol). This is a proprietary CISCO signaling protocol used by CISCO IP phones and the CISCO call manager. It is a stimulus-based protocol which achieves its “skinniness” by transferring functions to the call manager.

The LLDP-MED Protocol LLDP-MED stands for Link Layer Discovery Protocol with Media Endpoint Discovery. When IP phones are LLDP-MED enabled, NETGEAR switches can automatically configure them so that they “know” which VLAN to join and what their QoS assignment is2. This protocol also enables automated power management of PoE-powered IP phones – virtually all IP phones are powered this way – as well as other convenience features such as device inventory management.

Security A separate, but extremely important consideration that requires some explanation is network security in an IP network. Obviously, any network will be protected through access control, e.g. support for role-based access with authentication and passwords. In addition, IP networks have a physical vulnerability. An attacker could easily disconnect a IP phone and put a PC in its place, thus obtaining unauthorized access to the network. To prevent this, NETGEAR switches make use of the unique Media Access Control or MAC address for each physical IP phone. NETGEAR switches can sense this address, and be programmed to block any unauthorized device. The ultimate in protection can be achieved through the use of the Radius (Remote Authentication Dial-In User Service) protocol associated with an authentication server, or a Windows Server 2008 Network Policy Server (NPS) that can block access to ports even if hackers succeed in spoofing and emulating MAC addresses during an attack. 2

The IP phones must tag their traffic using the correct VLAN tag, and mark their traffic using the correct Layer 2 802.1p or Layer 3 QoS values.

Page 5

Network Planning – General Considerations The planning of a VoIP network has several steps, as show below:

Fast Ethernet vs. Gigabit Business Requirements

IP Phone Configuration

Switching Requirements Number of IP Phones

Business requirements – QoS, number of users, types of user devices and the like – will determine the number of IP phones and their configuration (e.g. presence or absence of a soft phone connection or use of mobile devices). The number of IP phones, combined with the need for a Fast Ethernet vs. Gigabit connection, will in turn determine bandwidth and power requirements for the switches. The following section will focus on the details of choosing the appropriate switch(es).

Choosing a Switch: Bandwidth & Ports NETGEAR recommends two lines of managed switches for VoIP networks:

• The NETGEAR Intelligent Edge M4100 series. These are Fast Ethernet (10/100) and Gigabit Ethernet (GigE) access layer switches with several Gigabit ports for uplink functions.

• The NETGEAR Next-Gen Edge M5300 series. These are Gigabit Ethernet (GigE) switches with embedded 10 Gigabit ports (10GbE) for uplink functions and virtual chassis stacking.

Page 6

Determining which switch within these two families requires answering four questions. 1. Will the IP phones require a Fast Ethernet port (at the switch) or a Gigabit Ethernet port? Most entry-level desktop IP phones have only one port, which is a Fast Ethernet port. In this case, cost-effective NETGEAR Fast Ethernet switches may be adequate, based on the total bandwidth requirement. (See question 4.) Note that these Fast Ethernet switches, in spite of their name, do include a Gigabit port for uplink purposes in a two-tier network. Sometimes, however, even a deployment with only single port Fast Ethernet IP phones may require 10 Gigabit uplink capabilities.

Today’s high-end, state-of-the-art phones often have two ports, one that connects to the switch and another that connects to a co-located PC. If the co-located PCs on the network require Gigabit speed, then of course a Gigabit switch is required.

2. What is the average bandwidth required per IP phone? As explained above, VoIP bandwidth requirements depend on a number of factors, primarily the protocol/compression algorithm used by the codecs (the “G-number”) and, to a lesser extent, the signaling protocol (SIP, H.323 or SCCP). Calculating this figure can be quite complicated, and the best way to determine it is simply to consult with the IP phone vendor. Best practice in calculating the bandwidth load on the network is to assume 100 percent usage by every IP phone. This will ensure that the network will be able to handle peak usage periods. 3 How many IP phones will be on the network? This determines how many ports the switch(es) will need – one port per IP phone. Note that all of the NETGEAR Fast Ethernet switches are equipped with several Gigabit ports for uplink purposes. 4. What is the total bandwidth required per switch? This is a simple calculation: Average bandwidth per IP phone x total number of IP phones = total bandwidth required (Gbps)

The total Gbps that the switch can transfer – the “switching fabric” of that switch – must exceed the answer to this equation. And if the switch must be connected to an upper layer (such as a Core or Distribution Layer), then the uplink connection must support the total bandwidth required for that uplink without creating a bottleneck.

Choosing a Switch: Power over Ethernet Virtually all IP phones are designed to accept Power over Ethernet (PoE). There are two versions available, PoE and PoE+. For IP phones, the 15.4W per port (12.9W to the IP phone) provided by PoE is adequate. To determine which switch in the M4100 or M5300 family is required for a particular installation from a PoE perspective, ask the following questions: 1. How many watts are required per IP phone? This information can easily be obtained from the vendor. 2. How many IP phones will be on the network? 3. What is the total wattage requirement? It can be calculated as follows: Average watts per IP phone x total number of phones = total PoE budget required Obviously, the power capacity of the switch – its “PoE budget” – must exceed the total power requirements of the IP phones on the network.

Page 7

Reference Designs The following reference designs will provide general guidance on how to plan a highly reliable and cost-effective VoIP network. Each network was designed with four criteria in mind: • simplicity, to enable easy installation and management • voice packet prioritization, to ensure that a high level of QoS will always be available • resilience, to ensure the 24/7 coverage that’s a requirement for a business-critical function like telephone service • security

Reference Design: 20 Phones The diagram below shows a typical installation with 20 IP phones. It is a complete solution compatible with all major signaling protocols, and is ideal for a small business or branch office that wants to enjoy the benefits of VoIP with maximum simplicity. The IP phones and the IP PBX/voice gateway are all on the same subnet and same VLAN. All the traffic is managed by a single switch, and that switch automatically applies QoS policies to ensure high QoS at all times, even when the network is congested.

“Rest of the Network”

IP PBX, SIP Server or Call Manager

Voice Gateway

M4100-50-POE PoE

Power

1

SPD

2

3

4

5

6

7

8

9

10

11

12

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

21

20

23

22

24

25

27

26

29

28

31

30

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

M4100-50G-POE+ 50T

47F

48F

49F

50F

Fan

Combo Ports

RPS Max PoE

Reset

USB

1

13

14

15

16

17

18

19

20

21

22

PoE (Max 30W per port): Of f = no PD Green = PoE Powered Yellow = PoE f ault RJ45 SPD mode: Green = Link at 1G Yellow=Link at 10/100M Blink = ACT

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

50T

47F

48F

49F

50F

SFP SPD/Link/ACT mode: Green=Link at 1G Yellow=Link at 100M Blink=ACT

Copper, Gigabit RJ45

Clients

Copper, 10/100 RJ45 Copper, 10/100 RJ45 PoE

IP Phones (20)

The benefits of this design include the following: Simplicity • The switch can be configured with a unique, easy-to-use web-based interface as well as the industry-standard command line interface (CLI). • The IP phones’ IP configuration (including every kind of VoIP DHCP option setting) is automatic via a DHCP server or the NETGEAR switch, with no manual intervention required. • QoS is handled automatically to maintain a constant high level. • A separate cabling system for telephone service is no longer required, which vastly simplifies the process of adding or changing phone service for employees. • The IP phones can keep their default configuration for VLAN and QoS settings. • The switch will automatically set up a voice VLAN and tag the traffic accordingly, without requiring specific manual configuration on the IP phones.

Page 8

Packet Prioritization • The switch handles packet prioritization to deliver high QoS automatically. This Automatic Voice over IP prioritization (Auto-VoIP) feature simplifies the most complex multi-vendor IP telephone deployments, when based on any of the major signaling protocols (SIP, H323 or SCCP) . • Auto-VoIP ensures that both data and signaling VoIP streams receive priority service over other ordinary traffic by classifying that traffic and enabling correct egress queue configuration with automatic 802.1p remarking. Resilience • Redundant Power Supply (RPS) protection. The switch can be connected to a back-up power supply to provide redundancy and ensure 24/7 reliability. Security • The switch provides for MAC-based security to prevent physical hacking, e.g. replacing the phone connection with a connection to a PC. • Assuming the IP phones support the IEEE 802.1x authentication standard for port-based Network Access Control, a higher level of security can be implemented using a RADIUS server, or Windows Server 2008 Network Policy Server (NPS). With this approach, access to ports can be blocked even if hackers succeed in spoofing and emulating MAC addresses during an attack. • The switch also supports MAB bypass for IP phones that don’t support RADIUS 802.x authentication.

Bandwidth and Power Calculations: 20 IP Phones Average bandwidth per per IP phone 64 kbit/s Total bandwidth for twenty phones

64 x 20 = 1.3 Mbit/s

PoE Class

1 (maximum 4W)

Total PoE budget

4 x 20 = 80W

All of these figures are well within the capabilities of the M4100-50-POE switch recommended below

Key NETGEAR Components Switch

M4100-50-POE (48 ports Fast Ethernet PoE 802.3af, Layer 2+)

Redundant Power Supply

RPS5412 (Optimal Power one-to-one RPS unit) or RPS4000 (RPS unit up to four switches)

External Power Supply

RPS4000 (supplemental PoE power up to four switches)

Page 9

Reference Design: 200 IP Phones This 200-phone installation would be typical for a mid-sized business or an enterprise-scale call center. At the access layer, each switch connects forty phones, and also powers them via PoE. At the distribution layer, virtual stacking technology is used to stack two M5300-28GF3 managed switches for high performance, highly redundant distributed link aggregation (one 10 Gigabit link per physical switch) for a 20Gbit/s connection to the rest of the network, where other clients may be located. This installation consists of several IP subnets and associated VLANs, but without Layer 3 routing complexities. The telephony infrastructure components that manage the IP phones (the IP PBX, SIP server or Call Manager, and voice gateway) are all on a dedicated telephony VLAN and in a specified subnet. All the IP phones are also on a dedicated voice VLAN and in a specified subnet. Communication between the various VLANs is accomplished by inter-VLAN routing, i.e. by creating Layer 3 interfaces (IP addresses assigned to VLAN interfaces) and using simple, straight-forward Static Layer 3 Routing on the NETGEAR switches. The phones receive their IP configuration, their VLAN configuration and their QoS priority settings from the infrastructure components, with no need for manual intervention. QoS settings are enforced by the switches across the entire VLAN network. This design delivers a highly available network that provides uninterrupted connectivity. It incorporates a level of redundancy such that there are no points of hardware failure. Further, critical components can be swapped without interruption of service. IP PBX, SIP Server or Call Manager

“Rest of the Network”

Voice Gateway Other Endpoints

M5300-28GF3

M5300-52G3

M5300-28GF3 2

1

Stack ID

2

ACT

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

27

28

29

30

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46 T

45 T

48 T

47 T

46 F

45 F

48 F

47 F

50 F

49 F

4

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

21 F

22 F

23 F

24 F

24 T

23 T

26 F

25 F

26 T

25 T

Combo Ports 2

1

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

21 F

22 F

23 F

24 F

22 T

21 T

24 T

23 T

26 F

25 F

Combo Ports

Combo Ports

51 52

22 T

SFP SPD mode: Green = Link at 1G Yellow = Link at 100M Blink = ACT

Reset

Power

21 T

RJ45 SPD mode: Green = Link at 1G Yellow = Link at 10/100M

28 Fan

50 T

49 T

3

RJ45 ACT Mode: Green = Link Blink = ACT

Power 27

M5300-52G3 SP D 1

Stack ID

26 T

25 T

Green=10G Link Yellow=1G Blink=ACT

Fan 2

1 Reset

4

3

6

5

8

7

10

9

12

11

14

13

16

15

RJ45 SPD Mode: Green = Link at 1G Yellow = Link at 10/100M RJ45 ACT mode: Green = Link Blink = ACT

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46T

45T

48T

47T

SFP SPD mode: Green = Link at 1G Yellow = Link at 100M Blink = Act

46F

45F

48F

47F

50F

49F

Combo Ports

50T

49T


M5300-28GF3 2

1

Stack ID

2

ACT

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

27

28

29

30

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46 T

45 T

48 T

47 T

46 F

45 F

48 F

47 F

50 F

49 F

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22 F

21 F

24 F

23 F

22 T

23 T

24 T

26 F

25 F

26 T

25 T

Combo Ports 2

1

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22 F

21 F

24 F

23 F

Reset

21 T

22 T

23 T

24 T

26 F

25 F

Combo Ports

26 T

25 T


Combo Ports

Stack ID

21 T

SFP SPD mode: Green = Link at 1G Yellow = Link at 100M Blink = ACT

Fan

50 T

49 T

6

5

RJ45 SPD mode: Green = Link at 1G Yellow = Link at 10/100M

28

M5300-52G3 SP D 1

4

3

RJ45 ACT Mode: Green = Link Blink = ACT

Power 27

Power 51 52 Fan 2

1 Reset

3

4

6

5

8

7

10

9

12

11

14

13

16

15

RJ45 SPD Mode: Green = Link at 1G Yellow = Link at 10/100M RJ45 ACT mode: Green = Link Blink = ACT

18

17

20

19

21

22

23

24

25

26

27

28

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46T

45T

48T

47T

SFP SPD mode: Green = Link at 1G Yellow = Link at 100M Blink = Act

46F

45F

48F

47F

50F

49F

Combo Ports

50T

49T


M4100-50-POE 1

2

3

4

5

6

7

8

9

10

11

12

2

3

4

5

6

7

8

9

10

11

12

13

13

14

14

15

15

16

16

17

18

17

18

19

21

20

19

20

23

22

21

22

23

24

24

25

27

26

25

26

29

28

27

28

31

30

30

29

33

32

32

31

35

34

34

33

37

36

36

35

39

38

38

37

41

40

40

39

43

42

42

41

45

44

44

43

47

46

46

45

PoE (Max 15.4W per port): Of f = no PD Green = PoE Powered Yellow = PoE f ault RJ45 SPD mode: Green = Link at 100M Yellow=Link at 10M Blink = ACT

48

SPD

48

47

M4100-50-POE

49T

50T

49T

Link/ACT

50T

49F

50F

PoE

Power

1

SPD

2

3

4

5

6

7

8

9

10

11

12

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

21

20

23

22

24

25

27

26

29

28

31

30

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

SPD

49T

Link/ACT

49F

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49T

1

2

3

4

5

6

7

8

9

10

11

12

2

3

4

5

6

7

8

9

10

11

12

13

50T

49F

13

14

14

15

15

16

16

17

18

17

18

19

21

20

19

20

23

22

21

22

23

24

24

25

27

26

26

25

29

28

27

28

31

30

30

29

33

32

31

32

35

34

33

34

37

36

35

36

37

38

38

39

39

40

41

40

41

42

43

42

45

44

44

43


50F

Ports 49T, 50T SPD: Green=1G Yellow=10/100M

Combo Ports 13


USB

M4100-50-POE 50T

RPS

1

SPD

47

46

48

SPD

M4100-50-POE

49T

50T

Link/ACT

49F

50F


RPS

Reset

Max PoE

USB

1

Fan

Max PoE

Link/ACT mode: Of f =No link Green=Link Blinking=ACT

50F

Fan

Reset

PoE

Power


49F



50F


46

45

48

47

50T

49T

PoE

1

SPD

2

3

4

5

6

7

8

9

10

11

12

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

21

20

23

22

1

SPD

24

27

26

29

28

31

30

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

1

USB

Reset

25

2

3

4

5

6

7

8

9

10

11

12

2

3

4

5

6

7

8

9

10

11

12

48

SPD

49T

1

13

14

15

16

17


18

19

20

21

22

23

24

25

26

27

14

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

14

15

15

16

16

17

18

17

48

49T

18

19

21

20

19

20

23

22

21

22

23

24

24

25

27

26

25

26

29

28

27

28

31

30

29

30

31

32

32

33

33

34

34

35

35

36

36

37

37

38

38

39

39

40

40

41

41

42

42

43

43

44

44

45

45

46

46

47

47

48

48

SPD

49T

49T

M4100-50-POE 50T

Link/ACT

50T

49F

49F

50F

Ports 49T, 50T SPD: Green=1G Yellow=10/100M Link/ACT mode: Of f =No link Green=Link Blinking=ACT

50F


M4100-50-POE 50T

Link/ACT

49F

50F


RPS Max PoE

USB

13


Fan

Reset

13

RPS Max PoE

50F

49F


Power

PoE

Power Fan


Combo Ports

SPD

Combo Ports USB

Combo Ports

1

RPS

Combo Ports

PoE

Power Fan

Max PoE

Reset

50T

49F


50F


Fiber, 1000SX multimode Copper, Gigabit RJ45 Copper, 10/100 RJ45 IP PHONES (40)

IP PHONES (40)

IP PHONES (40)

IP PHONES (40)

Page 10

IP PHONES (40)

Copper, 10GBASE-T RJ45

The benefits of this design include the following: Simplicity • The switches can be configured with a unique, easy-to-use web-based interface as well as the industry-standard command line interface (CLI). • The IP phones’ IP configuration (including every kind of VoIP DHCP option setting) is automatic via a DHCP server or the NETGEAR switch, with no manual intervention required. • The IP phones are auto-discovered and automatically receive their VLAN configuration and QoS priority settings from the IP PBX/SIP Server or Call Manager via the IP telephony vendor-specific mechanisms. • This network design avoids the use of the Spanning Tree Protocol, which is complex and difficult to configure. The network’s highly resilient distribution layer allows for the best of both worlds with redundant links to the servers and access layer switches, as well as advanced load balancing and seamless failover capabilities – made as simple as “trunking.” Packet Prioritization • The switches handle packet prioritization to deliver high QoS. In fact, the network (all the switches) in this reference design is assigned the task of implementing and enforcing the QoS priority settings determined by the telephony infrastructure (at the IP PBX, SIP Server or Call Manager level), so that the voice traffic is prioritized across the entire network. In addition to simplifying administration, the avoidance of the Spanning Tree Protocol also enables more efficient use of bandwidth, since all links are active and load balancing is enabled. Resilience • Redundant Power Supplies (RPSs). In this design the switches are all equipped with an RPS in the unlikely event that a switch power supply should fail. This approach can be implemented on a one-to-one basis with the NETGEAR RPS5412 redundant power supply if all the switches are in different buildings. If the switches are on the same rack, a NETGEAR RPS4000 can be used to provide redundant power to as many as four switches. The internal power supply of the switches at the distribution layer is modular and can be “hot swapped” with no interruption to service. • Redundant Switches. This design features redundant, stacked distribution switches (two M5300-28GF3 switches and two M5300-52G3 switches) with sub-second network failover protection. Security • This design has a dedicated management VLAN for access layer and distribution layer switches, with an additional control plane ACL to better refine the IP/MAC/protocol through which management access to the network is controlled. • MAC-based port security (MAC address table locking) provides a minimum level of security by preventing an attacker from disconnecting a phone and connecting a PC in its place for hacking purposes. • Assuming the phones support the IEEE 802.1x authentication standard for port-based Network Access Control, a higher level of security can be implemented using a RADIUS server or Windows Server 2008 Network Policy Server (NPS) with or without MAC authentication bypass (MAB). With this approach, access to ports can be blocked even if hackers succeed in spoofing and emulating MAC addresses during an attack. • NETGEAR switches support MAB bypass for non-RADIUS-aware phones, and will authenticate such phones when they submit their MAC address to the RADIUS or NPS server.

Page 11

Bandwidth and Power Calculations: Distribution Layer BANDWIDTH Average bandwidth per phone

64 kbit/s

Total bandwidth for 40 phones (per switch)

64 kbit/s x 40 = 2.6 Mbit/s

When there is no bridge on the phone for connected to the users’ PCs, then the overall bandwidth requirement for VoIP streams is very low. POWER PoE Class

1 (maximum 4W)

Total PoE budget per switch

4 x 40 = 160W Key NETGEAR Components

Distribution Layer Switch

M5300-28GF3 (24 ports Gigabit Ethernet Fiber with 10 Gigabit uplinks, Layer 3 )

Access Layer Switch

M4100-50-POE (48 ports Fast Ethernet PoE 802.3af, Layer 2+ )

Rest of the Network Switch

M5300-52G3 (48 ports Gigabit Ethernet with 10 Gigabit uplinks, Layer 3 )


RPS5412 (Optimal Power one-to-one RPS unit) or RPS4000 (RPS unit for up to four switches)

Reference Design: 1000+ IP Phones This 1,000-plus IP phone reference design assumes that telephone service needs to be provided for 12 separate buildings, such as might be the case in a small office complex or a medium-sized campus environment.This design further assumes that each IP phone is equipped with a bridge to the user’s PC. For simplicity and ease of installation, it is configured as a two-tier network. Switches and Cabling Each building is equipped with two stacked 48-port M5300-52G-POE+ Gigabit switches using virtual chassis stacking technology. These stacked switches provide IP connections for 96 IP phones in each building (1,152 phones total), and also power those phones via PoE. Each switch has one 10GB fiber uplink to the distribution layer for a 4.8:1 oversubscription to the rest of the network, which is acceptable for normal to intensive office environments. Fiber optic cabling is used between each building and the aggregation layer due to the relatively long distance separating them. At the distribution layer, virtual stacking technology is also used to stack four XSM7224S 24-port, 10 Gigabit managed switches for high performance, highly redundant distributed link aggregation (one 10 Gigabit link per physical switch) for a 40Gbit/s connection to the rest of the network, where other clients may be located. Network Architecture: VLANs The installation comprises several dedicated VLANs. The telephony infrastructure components that manage the IP phones (the IP PBX, SIP server or Call Manager, and voice gateway) are all on a dedicated telephony VLAN, and in one specified subnet. All the IP phones are also on a dedicated voice VLAN and in another specified subnet. There is a third dedicated management VLAN. The PCs are connected to yet another (existing) VLAN such as a production data VLAN.3 In other words, the PCs and the IP phones are on separate VLANs, even though they are connected to the network via the same port.

It’s assumed that the PCs are unaware of VLAN tagging. The traffic from the PCs will be untagged, but the NETWORK switches will perform this function by adding and removing the production data VLAN tag from packets as appropriate.

3

Page 12

Communication between the various VLANs is accomplished by inter-VLAN routing, i.e. by creating Layer 3 interfaces (IP addresses assigned to VLAN interfaces) and using OSPF for unicast routing on the NETGEAR switches. The phones receive their IP configuration, their VLAN configuration and their QoS priority settings from the infrastructure components, with no need for manual intervention. QoS settings are enforced by the switches across the entire VLAN network (at the VLAN level).4 This design delivers a highly available network that provides uninterrupted, high quality telephone service. NETGEAR switches strictly enforce Layer 2 and Layer 3 QoS parameters throughout the network for perfect VoIP prioritization. This design also incorporates a level of redundancy such that there are no points of hardware failure, and quick fault recovery is ensured. Furthermore, critical components can be swapped without interruption of service. “Rest of the Network”

IP PBX, SIP Server or Call Manager

Voice Gateway

XSM7224S

M5300-52G3

XSM7224S ID

Port 21T-24T

Stack Master

Lef t side LED: Blink=Act Of f =No Link Green=Link at 10G Y ellow=Link at 1G

Fan Power 2 Power 1 US B

2

1

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22 F

21 F

24 F

23 F

21 T

Reset

22 T

23 T

Right side LED: Blink=Act Of f =No Link Y ellow=Link at 10/100M

24 T

Combo Ports

Console 9600,N.8,1

M5300-52G3 2

ACT

SP D 1

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46 T

45 T

48 T

47 T

46 F

45 F

48 F

47 F

50 F

49 F

50 T

49 T

Combo Ports

Stack ID Power 51 52

XSM7224S

Fan 2

1 Reset

ID

4

3

6

5

8

7

10

9

12

11

14

13

16

15

RJ45 SPD Mode: Green = Link at 1G Yellow = Link at 10/100MRJ45ACTmode:Green=LinkBlink=ACT

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46T

45T

48T

47T

SFP SPD mode: Green = Link at 1G Yellow = Link at 100MBlink =Act

46F

45F

48F

47F

50F

49F

Combo Ports

50T

49T

Green=10G Link Yel l ow=1G B l i nk=A CT

Port 21T-24T

Stack Master


Power 2 Power 1 US B

2

1

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22 F

21 F

24 F

23 F

21 T

Reset

22 T

23 T

M5300-52G3 SP D 1


24 T

Combo Ports

2

ACT

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46 T

45 T

48 T

47 T

46 F

45 F

48 F

47 F

49 F

50 F

49 T

50 T

Console 9600,N.8,1 Stack ID

Combo Ports

Fan

Power 51 52 Fan 2

1 Reset

4

3

6

5

8

7

10

9

12

11

14

13

16

15

RJ45 SPD Mode: Green = Link at 1G Yellow = Link at 10/100MRJ45ACTmode:Green=LinkBlink=ACT

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46T

45T

48T

47T

SFP SPD mode: Green = Link at 1G Yellow = Link at 100MBlink =Act

46F

45F

48F

47F

Combo Ports

49F

50F

49T

50T

Green=10G Link Yel l ow=1G B l i nk=A CT

XSM7224S ID

Port 21T-24T

Stack Master



2

1

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22 F

21 F

21 T

24 F

23 F

Reset

22 T

23 T


24 T

Combo Ports

Console 9600,N.8,1

XSM7224S ID

Port 21T-24T

Stack Master



2

1

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22 F

21 F

24 F

23 F

21 T

Reset

22 T

23 T


24 T

Combo Ports

Console 9600,N.8,1

M5300-52G-POE+ 8

10

9

13

12

11

9

10

11

12

9

10

11

12

13

15

14

14

13

14

15

17

16

16

15

16

17

19

18

18

17

18

19

21

20

20

19

23

22

22

21

25

24

24

23

27

26

26

25

29

28

28

27

31

30

30

29

33

32

32

31

35

34

34

33

37

36

36

35

39

38

38

37

41

40

40

39

43

42

42

41

45

44

44

43

47T

46

46

45

M4100-50G-POE+

49T

48T

48T

47T

47F

50T

50T

49T

49F

48F

48F

47F

SPD

1

2

4

3

6

5

8

7

10

9

12

11

13

15

14

17

16

19

18

21

20

23

22

25

24

27

26

29

28

31

30

33

32

35

34

37

36

39

38

41

40

43

42

45

44

47T

46

M4100-50G-POE+

49T

48T

47F

50T

49F

48F

50F

M4100-50G-POE+

Fan RPS

50F

Max PoE

2

1

USB

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46

45

48T

47T

PoE (Max 30W per port): Of f = no PD Green = PoE Powered Yellow = PoE f ault RJ45 SPD mode: Green = Link at 1G Y ellow=Link at 10/100M Blink = AC T

50T

49T

48F

47F

PoE

Power

SPD

1

2

4

3

6

5

8

7

10

9

13

12

11

15

14

17

16

19

18

21

20

23

22

25

24

27

26

29

28

31

30

33

32

35

34

37

36

39

38

41

40

43

42

45

44

47T

46

49T

48T

47F

50T

49F

48F

50F

PoE

Power

Fan

SPD

1

2

4

3

6

5

8

7

10

9

13

12

11

15

14

17

16

19

18

21

20

23

22

25

24

27

26

29

28

31

30

33

32

35

34

37

36

39

38

41

40

43

42

45

44

47T

46

13

14

15

16

17

18

19

20

23

22

21

22

23

24

24

25

26

25

26

27

29

28

27

28

30

29

30

31

31

32

32

33

33

34

34

35

35

36

36

37

37

38

38

39

39

41

40

40

42

42

41

43

45

44

44

43

47T

46

46

45

2

1

USB

Reset

M4100-50G-POE+

49T

48T

48T

47T

47F

50T

49T

50T

47F

48F

48F

49F

49F

PoE

1

SPD

2

3

4

5

6

7

8

9

10

11

12

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

21

20

23

22

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

45

44

47T

46

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46

45


48T

47T

50T

49T

48F

47F

47F

50T

49F

48F

47F

50T

48F

49F

2

1

USB

Reset

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

46

45

48T

47T


50T

49T

48F

47F

1

USB

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

44

43

45

46

48T

47T


50T

49T

47F

48F

49F

PoE

Power

SPD

1

2

3

4

5

6

7

2

3

4

5

6

7

8

9

10

11

12

9

10

11

12

13

14

15

16

17

18

19

21

20

23

22

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

41

40

42

43

45

44

47T

46

M4100-50G-POE+

49T

48T

47F

50T

48F

49F

50F

PoE

Power

Fan

1

2

3

4

5

6

7

2

3

4

5

6

7

SPD

8

9

10

11

12

9

10

11

12

13

14

15

16

17

18

19

21

20

23

22

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

47T

46

1

USB

Reset

8

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

42

41

44

43

46

45

48T

47T


49T

50T

47F

48F

49F

47F

50T

49F

48F

1

USB

Reset

8

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

44

43

46

45


47T

48T

50T

49T

48F

47F

6

5

8

7

10

9

13

12

11

15

14

17

16

19

18

21

20

23

22

25

24

27

26

29

28

31

30

33

32

35

34

37

36

39

38

41

40

43

42

45

44

47T

46

M4100-50G-POE+

49T

48T

47F

50T

48F

49F

50F

PoE

Power

1

SPD

2

4

3

6

5

8

7

10

9

13

12

11

15

14

17

16

19

18

21

20

23

22

25

24

27

26

29

28

31

30

33

32

35

34

37

36

39

38

41

40

43

42

45

44

47T

46

M4100-50G-POE+

49T

48T

47F

50T

48F

49F

50F

4

5

6

7

4

5

6

7

8

7

8

10

9

12

11

9

10

11

12

9

10

11

12

13

14

13

14

15

16

15

16

17

18

17

18

19

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

45

46

48T

47T

50T

49T

47F

48F

49F

13

14

15

16

17

18

19

20

23

22

21

22

23

24

24

25

26

25

26

27

28

27

28

29

30

29

30

31

31

32

32

33

33

34

34

35

35

36

36

37

37

38

38

39

39

40

40

41

41

42

42

43

43

44

44

45

45

46

46

47T

47T

48T

48T

49T

49T

Reset

47F

48F

49F

50F

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

45

46


PoE

Power

2

1

USB

M4100-50G-POE+ 50T

50T

47F

48F

49F

50F

SFP SPD/Link/ACT mode: Green=Link at 1G Y ellow=Link at 100M Blink=AC T

1

SPD

2

3

4

5

6

7

2

3

4

5

6

7

8

9

10

11

12

9

10

11

12

13

14

15

16

17

18

19

48T

47T

50T

49T

47F

48F

49F

23

22

24

25

26

27

29

28

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

Reset

1

SPD

47F

48F

49F

50F

2

4

3

6

5

8

7

10

9

13

12

11

15

14

17

16

19

18

21

20

23

22

25

24

27

26

29

28

31

30

33

32

35

34

37

36

39

38

41

40

43

42

45

44

47T

46

M4100-50G-POE+

49T

48T

47F

50T

48F

49F

50F

Combo Ports 1

8

13

14

15

16

17


18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

50T

47F

48F

49F

50F


1

SPD

6

5

2

3

4

5

6

7

2

3

4

5

6

7

8

7

8

10

9

12

11

9

10

11

12

9

10

11

12

13

14

13

14

15

16

15

16

17

18

17

18

19

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

45

46

48T

47T

50T

49T

47F

48F

49F

23

22

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

Reset

SPD

47F

48F

49F

50F

2

4

3

6

5

1

8

13

14

15

16

17


18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

50T

47F

48F

49F

50F


1

SPD

8

7

6

5

2

3

4

5

6

7

2

3

4

5

6

7

10

9

8

7

8

13

12

11

10

9

12

11

9

10

11

12

9

10

11

12

13

15

14

14

13

14

15

17

16

16

15

16

17

19

18

18

17

18

19

21

20

20

19

23

22

22

21

25

24

24

23

27

26

26

25

29

28

28

27

31

30

30

29

33

32

32

31

35

34

34

33

37

36

36

35

39

38

38

37

41

40

40

39

43

42

42

41

45

44

44

43

47T

46

45

46

M4100-50G-POE+

49T

48T

48T

47T

47F

50T

50T

49T

47F

48F

48F

49F

49F

50F

2

3

4

5

6

7

2

3

4

5

6

7

10

9

8

7

8

12

11

10

9

13

12

11

9

10

11

12

9

10

11

12

13

15

14

14

13

14

15

1

SPD

2

4

3

6

5

8

7

10

9

13

12

11

15

14

17

16

19

18

21

20

23

22

25

24

27

26

29

28

31

30

33

32

35

34

37

36

39

38

14

13

23

22

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

41

40

43

42

45

44

47T

46

15

17

16

16

15

16

16

17

19

18

18

17

18

17

18

19

21

20

20

19

23

22

22

21

25

24

24

23

27

26

26

25

29

28

28

27

31

30

30

29

33

32

32

31

35

34

34

33

37

36

36

35

39

38

38

37

41

40

40

39

43

42

42

41

45

44

44

43

47T

46

46

45

1

8

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35


36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

50T

47F

47F

48F

48F

49F

49F

50F

20

23

22

21

22

23

24

24

25

26

25

26

27

28

27

28

29

30

29

30

31

31

32

32

33

33

34

34

35

35

36

36

37

37

38

38

39

39

40

40

41

43

42

41

42

43

45

44

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

45

46


1

SPD

2

3

4

5

6

7

2

3

4

5

6

7

8

9

10

11

12

9

10

11

12

13

14

15

16

17

18

19

47T

46

48T

49T

48T

47F

50T

48F

49F

48T

47T

49T

47F

50T

50T

49T

47F

48F

48F

49F

49F

4

3

6

5

8

7

10

9

12

11

13

15

14

17

16

19

18

21

20

23

22

25

24

27

26

29

28

31

30

33

32

35

34

37

36

39

38

41

40

43

42

45

44

47T

46

M4100-50G-POE+

49T

48T

47F

50T

48F

49F

50F

Max PoE

50F

2

1

USB

Reset

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

45

46


48T

47T

50T

49T

47F

48F

49F

50F


50F

PoE

1

2

3

4

5

6

7

2

3

4

5

6

7

SPD

8

9

10

11

12

9

10

11

12

13

14

15

16

17

18

19

21

20

23

22

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

M4100-50G-POE+ 50T

47F

48F

49F

50F

RPS

M4100-50G-POE+ 47F

50T

50T

47F

49F

48F

48F

49F

Max PoE

50F

1

USB

Reset

8

13

14

15

16

17


18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

50T

47F

48F

49F

50F


50F


23

22

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

48T

47T

49T

50T

49T

47F

48F

49F

50F

PoE

Power

1

SPD

2

4

3

6

5

8

7

10

9

13

12

11

15

14

17

16

19

18

21

20

23

22

25

24

27

26

29

28

31

30

33

32

35

34

37

36

39

38

41

40

43

42

45

44

47T

46

M4100-50G-POE+

49T

48T

47F

50T

48F

49F

50F

RPS Max PoE

50F

Reset

47F

48F

49F

50F

4

3

6

5

8

7

10

9

12

11

14

13

16

15

18

17

20

19

22

21

24

23

26

25

28

27

30

29

32

31

34

33

36

35

38

37

40

39

42

41

44

43

45

46


PoE

Power

2

1

USB

M4100-50G-POE+ 50T

1

SPD

2

3

4

5

6

7

2

3

4

5

6

7

8

9

10

11

12

9

10

11

12

13

14

15

16

17

18

19

48T

47T

50T

49T

47F

48F

49F

50F


21

20

23

22

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

M4100-50G-POE+ 50T

47F

48F

49F

50F

Fan

USB

1

8

13

14

15

16

17


18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47T

48T

49T

50T

47F

48F

49F

50F


IP phones w/PCs - 96 total per building IP phones w/PCs - 96 total per building

46

45


21

20

RPS Max PoE

Reset

44

Fan

2

1

USB

PoE

Power

50F


2

SPD

RPS

M4100-50G-POE+

49T

48T

47T


21

20

19

M4100-50G-POE+

49T

48T

RPS

Reset

M4100-50G-POE+ 50T

Fan

USB


PoE

Power

8


Max PoE

50F


21

20

RPS Max PoE

Reset

1

USB

Fan

4

3


PoE

Power

2

1

USB

M4100-50G-POE+ 50T

Fan

USB


1

RPS Max PoE

50F


21

20

RPS Max PoE

Reset

PoE

Power Fan

4

3


PoE

Power

2

1

USB

M4100-50G-POE+ 50T

Fan

USB


PoE

Power

Max PoE

50F


21

20

RPS Max PoE

Reset

RPS

Combo Ports

Max PoE

50F


21

20

Combo Ports 8

Combo Ports

6

5

3

3

Fan

RPS

Combo Ports 4

3

2

2

8

7

6

5

Power

SPD

Max PoE

Combo Ports

4

3

Fan

SPD

Fan

1

6

5

4

3

Fan

1

RPS

Combo Ports

2

2


1


4

3

2


PoE

Power Fan

50F

49F


Combo Ports

SPD

1

USB

PoE

USB

Combo Ports

1

RPS

RPS

2

SPD

1

USB

50F

RPS Max PoE

50F


Combo Ports

PoE

Power Fan

Max PoE

Reset

Power Fan

Max PoE

1

RPS

M4100-50G-POE+

49T

48T

Fan

RPS Max PoE

50F


SFP SPD/Link/ACT mode: Green=Link at 1G Y ellow=Link at 100M Blink=AC T Reset

Reset

PoE

Power Fan

Max PoE

50F

49F


50F

RPS Max PoE

50F

1

Fan

50F

RPS Max PoE

50F

49F


M4100-50G-POE+

49T

48T

Fan

50F

PoE

Power

M4100-50G-POE+

49T

48T

Fan

RPS Max PoE

50F

49F


50F

49F


21

20

Combo Ports 8

Combo Ports

7

7

Combo Ports

6

6

Combo Ports

5

5

Combo Ports

4

4

Combo Ports

12

11

Combo Ports 8

7

Reset

3

3

Combo Ports

10

9

Reset

2

2

Reset

1

Combo Ports

8

7

6

5

Power

SPD

1


RPS

Combo Ports

6

5

4

3


PoE

RPS

USB

Combo Ports

4

3

2

1

USB

Combo Ports

2

Combo Ports

SPD

1

RPS

Combo Ports

PoE

Power

PoE

Power Fan

Max PoE

Reset

Power Fan

Max PoE

Reset

Max PoE

Reset

USB

1

8

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40


41

42

43

44

45

46

47T

48T

49T

50T

47F

48F

49F

50F




Fiber, 1000SX multimode Copper, Gigabit RJ45 Copper, 10/100/1000 RJ45 PoE Copper, 10GBASE-T RJ45 Fiber, 10GBASE-LR single mode Fiber, 10GSFP +CU DAC

Voice traffic packets can be classified with either Layer 2 802.1p priority or Layer 3 DiffServ priority. If the IP phones support both, we advise using Layer 3 DiffServ prioritization.

4

Page 13

The benefits of this design include the following: Simplicity • The switches can be configured with a unique, easy-to-use web-based interface as well as the industry-standard command line interface (CLI). • The IP phones’ IP configuration is automatic via a DHCP server or a NETGEAR switch with no manual intervention required, and including every kind of VoIP DHCP option settings. • The IP phones’ IP configuration (including every kind of VoIP DHCP option setting) is automatic via a DHCP server or the NETGEAR switch, with no manual intervention required. • Without any manual intervention, the IP phones know which VLAN tag and which QoS tag they must use for VoIP streams. • This network design avoids the use of the Spanning Tree Protocol, which is complex and difficult to configure. The network’s highly resilient distribution layer allows for the best of both worlds with redundant links to the servers and access layer switches, as well as advanced load balancing and seamless, sub-second failover capabilities – made as simple as “trunking”. Packet Prioritization • The switches handle packet prioritization to deliver high QoS. In fact, the network (all the switches) in this reference design is assigned the task of implementing and enforcing the QoS priority settings determined by the telephony infrastructure (at the IP PBX, SIP Server or Call Manager level), so that the voice traffic is prioritized across the entire network. • In addition to simplifying administration, the avoidance of the Spanning Tree Protocol also enables more efficient use of bandwidth, since all links are active and load balancing is enabled. Resilience • Switch redundancy. In every building, the two M5300-52G-POE+ switches connect to a different XSM7224S switch at the distribution layer for perfect redundancy in the unlikely event of a switch failure at either the access or distribution layer. The two switches in each access layer stack at the various buildings are connected to different physical switches at the distribution layer so there is complete redundancy at both layers in the unlikely event that a switch should fail. The four stacked distribution layer switches provide redundancy with < one second failover. • Redundant Power Supplies (RPSs). This design assumes that each two-switch stack in the access subnet is deployed in a different location. Therefore, each stack is provided with a separate RPS – the NETGEAR RPS4000 – in the unlikely event that a switch power supply should fail. (Each RPS4000 can provide redundant power to as many as four switches.) The internal power supply of the four stacked switches at the distribution layer is augmented with an additional APS300W power module for server-like redundancy. It can be hot swapped if required. • Redundant links. There are two 10 Gigabit links from each access layer stack to the distribution layer switches, and one of them alone has adequate bandwidth to carry all the aggregated voice streams. Adding a second enables load balancing and also provides redundancy should one of the access layer or distribution layer switches fail – an unlikely event. Security • This design has a dedicated management VLAN for access layer and distribution layer switches, with an additional control plane ACL to better refine the IP/MAC/protocol through which management access to the network is controlled. • MAC-based port security (MAC address table locking) provides a minimum level of security by preventing an attacker from disconnecting a phone and connecting a PC in its place for hacking purposes.

Page 14

• Assuming the phones support the IEEE 802.1x authentication standard for port-based Network Access Control, a higher level of security can be implemented using a RADIUS server or Windows Server 2008 Network Policy Server (NPS) with or without MAC authentication bypass (MAB). With this approach, access to ports can be blocked even if hackers succeed in spoofing and emulating MAC addresses during an attack. • IMPORTANT: If the phones support RADIUS or NPS authentication but the PCs connected to them don’t, NETGEAR switches will authenticate the PCs by submitting their MAC addresses to the Radius or NPS server using MAB. NETGEAR switches support up to 48 different RADIUS authentications per port, but for this application only two are needed. • NETGEAR switches support MAB bypass for non-RADIUS-aware phones, and will authenticate such phones when they submit their MAC address to the RADIUS or NPS server.

Bandwidth and Power Calculations: Access Subnet BANDWIDTH Average bandwidth per phone

64 kbit/s

Total bandwidth for 40 phones (per switch)

64 kbit/s x 40 = 2.6 Mbit/s

POWER PoE Class

1 (maximum 4W)

Total PoE budget per switch

4 x 40 = 160W Key NETGEAR Components

Distribution Layer Switch

XSM7224S (M7300-24XF 24 ports 10 Gigabit SFP+ with 10GBASE-T uplinks, Layer 2+) and its XSM7224L Layer 3 license upgrade

Access Layer Switch

M5300-52G-POE+ (48 ports Gigabit Ethernet with 10 Gigabit uplinks, Layer 2+) and its GSM7252PL Layer 3 license upgrade

Rest of the network Switch

M5300-52G3 (48 ports Gigabit Ethernet with 10 Gigabit uplinks, Layer 3)


RPS4000 (RPS unit up to four switches)

Page 15

Managed Infrastructure NETGEAR Managed Switches offer a secure, future-proof networking infrastructure for VoIP deployments in mid-size organizations and campus networks. NETGEAR Managed Switches come with industry-leading lifetime warranties; lifetime advanced technical support; and included 3-year onsite advance replacement service in most of North America, Europe and Australia cities. More detailed information is available at www.netgear.com/managed.

L2+

L3

Chassis 1G/10G

M8800

L3

Stackable 10G

M7300

L2+

L2+ L2+

L3

series

series

Standalone 10G

M7100

Stackable 1G/10G

M5300

Standalone 100M/1G

M4100

Page 16

Core

10G Aggregation

series

series series

Access

NETGEAR Switching Solutions Product Name

M8800-06

M8800-10

M7300-24XF

M7100-24X

M5300-28G

M5300-52G

Order Number

XCM8806

XCM8810

XSM7224S

XSM7224

GSM7228S

GSM7252S

RJ45 Ports

Up to 240 x 10/100/1000

Up to 432 x 10/100/1000

4 x 10GBASE-T

24 x 10GBASE-T

24 x 10/100/100 2 x 10GBASE-T (Max: 4)

48 x 10/100/100 2 x 10GBASE-T (Max: 4)

Fiber SFP+ (1000/10G)

Up to 40 x XFP

Up to 72 x XFP

24 x SFP+

4 x SFP+

2 x SFP+ (Max: 4)

2 x SFP+ (Max: 4)

Fiber SFP (100/1000)

Up to 128 x SFP

Up to 224 x SFP

-

-

4 x SFP

4 x SFP

Power over Ethernet

Up to 240 x PoE 802.3af

Up to 432 x PoE 802.3af

-

-

-

PoE Budget (Watts)

Up to 5,000W

Up to 5,000W

-

-

-

N+1 modular PSUs

N+1 modular PSUs

Dual hot swap PSUs

Dual hot swap PSUs

RPS + Modular PSU

RPS + Modular PSU

Full Layer 3

Full Layer 3

Layer 2+ (static routing)



Optional Core License

Optional Core License

Optional Full L3 License


Chassis 10U

Chassis 14U

Rack 1U Stackable

Rack 1U Standalone

Rack 1U Stackable

Rack 1U Stackable

M5300-28G-POE+

M5300-52G-POE+

M5300-28G3

M5300-52G3

M5300-28GF3

M4100-D10-POE


Feature Set

Form Factor

Product Name



GSM7228PS

GSM7252PS

GSM7328S

GSM7352S

GSM7328FS

FSM5210P

RJ45 Ports

24 x 10/100/100 2 x 10GBASE-T (Max: 4)

48 x 10/100/100 2 x 10GBASE-T (Max: 4)

24 x 10/100/100 2 x 10GBASE-T (Max: 4)

48 x 10/100/100 2 x 10GBASE-T (Max: 4)

4 x 10/100/100 2 x 10GBASE-T (Max: 4)

8 x 10/100 2 x 10/100/1000

Fiber SFP+(1000/10G)

2 x SFP+ (Max: 4)

2 x SFP+ (Max: 4)

2 x SFP+ (Max: 4)

2 x SFP+ (Max: 4)

2 x SFP+ (Max: 4)

Fiber SFP (100/1000)

4 x SFP

4 x SFP

4 x SFP

4 x SFP

24 x SFP

2 x SFP

Power over Ethernet

24 x PoE+ 802.3at

48 x PoE+ 802.3at

-

-

8 x PoE 802.3af

PoE Budget (Watts)

380W/720W EPS

380W/1,440W EPS

-

-

66W


RPS + Modular PSU

RPS + Modular PSU

RPS + Modular PSU

RPS + Modular PSU

RPS + Modular PSU

-





Full Layer 3

Full Layer 3

Full Layer 3


Rack 1U Stackable

Rack 1U Stackable

Rack 1U Stackable

Rack 1U Stackable

Rack 1U Stackable

Desktop

Order Number

Feature Set

Form Factor

Page 17

Product Name

M4100-26-POE

M4100-50-POE

M4100-D12G

M4100-D12G-POE+

M4100-12GF

M4100-12G-POE+

Order Number

FSM7226P

FSM7250P

GSM5212

GSM5212P

GSM7212F

GSM7212P

24 x 10/100 2 x 10/100/1000

48 x 10/100 2 x 10/100/1000

12 x10/100/1000

12 x 10/100/1000

12 x 10/100/1000

12 x 10/100/1000

2 x SFP

2 x SFP

2 x SFP

4 x SFP

12 x SFP

4 x SFP

Power over Ethernet (PoE/PoE+)

24 x PoE 802.3af

48 x PoE 802.3af

10 x PoE+ 802.3at out

4 x PoE+ 802.3at

12 x PoE+ 802.3at

PoE Budget (Watts)

380W

380W/740W EPS

125W

150W

380W

RPS

RPS

PD Mode

PD Mode

RPS

RPS

-

-

1 x PoE+ 30W port in

2 x PoE+ 30W ports in Can redistribute 25W

-

-

Feature Set







Form Factor

Rack 1U Standalone

Rack 1U Standalone

Desktop

Desktop

Rack 1U Standalone

Rack 1U Standalone

Product Name

M4100-26G

M4100-50G

M4100-26G-POE

M4100-24G-POE+

M4100-50G-POE+

RPS/EPS Unit

Order Number

GSM7224

GSM7248

GSM7226LP

GSM7224P

GSM7248P

RPS4000

26 x 10/100/1000

50 x 10/100/1000

26 x 10/100/1000

24 x 10/100/1000

50 x 10/100/1000

For up to 4 switches

4 x SFP

4 x SFP

4 x SFP

4 x SFP

4 x SFP

For up to 4 switches

Power over Ethernet (PoE/PoE+)

24 x PoE 802.3af

24 x PoE+ 802.3at

48 x PoE+ 802.3at

APS1000W combination

PoE Budget (Watts)

192W/380W EPS

380W/720W EPS

380W/1,440W EPS

Up to 2,8880W budget

RJ45 Ports Fiber SFP (100/1000)

Redundant Power Supply Powered by PoE+ (Passthrough)

RJ45 Ports Fiber SFP (100/1000)


RPS

RPS

RPS

RPS

RPS

RPS EPS

Feature Set






Connects M4100 series and M5300 series

Form Factor

Rack 1U Standalone

Rack 1U Standalone

Rack 1U Standalone

Rack 1U Standalone

Rack 1U Standalone

Rack 1U Four Slots

NETGEAR and the NETGEAR logo are trademarks and/or registered trademarks of NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Other brand names mentioned herein are for identification purposes only and may be trademarks of their respective holder(s). Information is subject to change without notice. ©2013 NETGEAR, Inc. All rights reserved.

Page 18