The NETGEAR® Intelligent Edge M4100 series consists of 9 fully managed switches, ranging from 12-port to 50-port Fast and Gigabit Ethernet. They are ideal for all organizations considering reliable, affordable and simple access layer switching with CLI, advanced scripting capabilities and Layer 3 routing.

As a cost-effective component of converged voice, video and data networking solutions, NETGEAR M4100 series delivers a secure edge in commercial buildings and campus LAN environments: PoE (802.3af) and PoE+ (802.3at) versions of M4100 series are perfect for Wireless access points, IP telephony and IP surveillance deployments.

Layer 2+ with static routingM4100 series comes with Port-based / VLAN-based / Subnet-based "static routing" Layer 2+ versions L3 fixed routes to the next hop towards the destination network are added to the routing tableL3 routing is wire-speed in M4100 series hardware with 64 static routes (IPv4)

Engineered for convergenceAutomatic multi-vendor Voice over IP prioritization based on SIP, H323 and SCCP protocolsVoice VLAN and LLDP-MED for automatic IP phones QoS and VLAN configurationAdvanced classifier-based hardware for L2, L3, L4 security and prioritizationAdvanced Multicast filtering with IGMP and MLD snooping and querier modes

High-value performance and IPv6 ready16K MAC addresses; up to 100Gbps switching fabric; 9K jumbo frames; Green EthernetIPv4/IPv6 ingress traffic filtering (ACLs) and prioritization (QoS - DiffServ)

High availability and PoE/PoE+ full power capabilityRedundant power supply option for uninterruptible operation (RPS) External power supply option for PoE and PoE+ full power applications (EPS up to 1,440W)

Industry standard managementIndustry standard command line interface (CLI), functional NETGEAR web interface (GUI), SNMP, sFlow and RSPAN Single-pane-of-glass NMS300 management platform with centralized firmware updates and mass-configuration support

Industry leading warrantyNETGEAR M4100 series is covered under NETGEAR ProSafe Lifetime Hardware Warranty*90 days of Technical Support via phone and email, Lifetime Technical Support through online chat and Lifetime Next Business Day hardware replacement

Models at a glance Product brief Modern access layer features highlights Target application & why M4100 series? Accessories & modules Technical specifications & ordering information

Data Sheet

M4100 series

ProSAFE® Intelligent Edge Managed Switches

Hardware at a glance

FRONT REAR

Model name Form-Factor Model number

M4100-50-POE 48 2 2 (shared)

1 x USB

Internal / No 1 (RPS or EPS) 380W Up to 740W (EPS) FSM7250PM4100-D12G Desktop - 12 2 (shared) - PD mode - - GSM5212M4100-D12G-POE+ Desktop - 12 4 (shared) PD mode 120W / 25W -M4100-12GF - 12 12 (shared) Internal / No 1 (RPS) 150W -M4100-26G - 26 4 (shared) - Internal / No 1 (RPS) - -M4100-50G - 50 4 (shared) - Internal / No 1 (RPS) - -M4100-26G-POE - 26 4 (shared) Internal / No 1 (RPS or EPS) 192W Up to 380W (EPS) GSM7226LPM4100-24G-POE+ - 24 4 (shared) Internal / No 1 (RPS or EPS) 380W Up to 720W (EPS)M4100-50G-POE+ - 50 4 (shared) Internal / No 1 (RPS or EPS) 380W Up to 1,440W (EPS) GSM7248P

Software at a glance

LAYER 2+ PACKAGE

Model Name Management Convergence Model number

Yes (all models)

Performance at a glance

TABLE SIZE

10/100Base-T

RJ45 ports

10/100/1000Base-TRJ45 ports

100/1000XFiber SFP

ports

PoE 802.3afPoE+ 802.3at

Storage(image, config)

Power Supply / Powered by PoE

RPS(connector)

PoE budget(PSU / Passthrough)

PoE budget(with EPS)

Managementconsole

Rackmount 48 PoE 802.3af

1 x RS232 DB9,

1 x Mini-USB

(selectable)

External / Yes10 PoE+ 802.3at Internal / Yes GSM5212P v1h2

Rackmount 4 PoE+ 802.3at GSM7212F v1h2Rackmount GSM7224 v2h2Rackmount GSM7248 v2h2Rackmount 24 PoE 802.3afRackmount 24 PoE+ 802.3at GSM7224P v1h2Rackmount 48 PoE+ 802.3at

IPv4 / IPv6ACL and QoS,

DiffServ

IPv4 / IPv6Multicastfiltering

Auto-VoIPGreen

EthernetVLANs

IPv4Unicast

Static Routing

M4100 series(all models)

Web GUI; HTTPs

CLI; Telnet; SSH

SNMP, MIBsRSPAN

L2, L3, L4,ingress1 Kbps

IGMP and MLD Snooping,IGMP and MLD Querier,

MVR

EEE (802.3az) or Energy

Detect Mode

Static, Dynamic,Voice, MAC, Subnet,

Protocol-based,QinQ, Private VLANs

LLDP-MED,RADIUS, 802.1X,

timer

Yes(Port-based,

Subnet,VLANs,

Loopback)

Powered by PoE

PoE "passthrough"technology

M4100-D12G is a desktop 12 x 1000Base-T version, Layer 2+2 shared SFPExternal PSU; fanlessCan be powered by PoE+

M4100-D12G-POE+ is a desktop 12 x 1000Base-T version, Layer 2+4 shared SFP; 2 ports PoE+ "in" and 10 ports PoE+ "out"Internal PSU with low acoustics; 120W budgetCan be powered by PoE+ and redistribute 25W PoE budget

M4100-50-POE is a 48 x 100Base-T PoE version, Layer 2+2 Gigabit ports with 2 shared SFPInternal PSU with RPS/EPS380W budget and up to 740W with EPS

M4100-12GF is a 12 x SFP version for aggregation, Layer 2+12 shared 1000Base-TInternal PSU with RPS4 ports PoE+ with 150W budget

M4100-26G is a 26 x 1000Base-T version, Layer 2+4 shared SFPInternal PSU with RPS

M4100-50G is a 50 x 1000Base-T version, Layer 2+4 shared SFPInternal PSU with RPS

M4100-24G-POE+ is a 24 x 1000Base-T PoE+ version, Layer 2+4 shared SFPInternal PSU with RPS/EPS380W budget and up to 720W with EPS

M4100-50G-POE+ is a 48 x 1000Base-T PoE+ version, Layer 2+2 x 1000Base-T and 4 shared SFPInternal PSU with RPS/EPS380W budget and up to 1,440W with EPS

M4100-26G-POE is a 24 x 1000Base-T PoE version, Layer 2+2 x 1000Base-T and 4 shared SFPInternal PSU with RPS/EPS192W budget and up to 380W with EPS

M4100 seriesProSAFE® Intelligent Edge Managed Switches

Model Name Packet buffer CPU Fabric Latency Model number

12 Mb 1K (all models)

ACLs

MAC address tableARP/NDP table

VLANsDHCP server

Static RoutesIP interfaces

MulticastIGMP Groupmembership

sFlow

M4100 series(all models)

600Mhz128M RAM32M Flash

50 ACLs512 rules(ingress)

16K MAC512 ARP/NDP

VLANs: 1KDHCP: 16 pools

1,024 max leases

Up to 100Gbps

all modelsline-rate

1G <3.91 μs

100M <10.194 μs

64 static routes64 IP interfaces

IPv4

32 samplers52 pollers8 receivers

Product brief

The Intelligent Edge M4100 series switches are NETGEAR fully managed switches for 100M/1G access layer in SMB, Small Enterprise and Campus networks.

The M4100 series delivers the best combination of performance, security and convergence at a high-value price point - unlike competitive, entry-level "SMB" solutions.

Redundant power supply options (RPS), full PoE+ external power supply options (EPS), Private VLANs, LLDP-MED and MVR take a scalable, future-proof approach to delivering network services for Wireless access points, IP phones and IP cameras infrastructures.  

NETGEAR Intelligent Edge M4100 series key features:Broad portfolio of access layer solutions, ranging from 12 ports to 50 ports Fast and Gigabit Ethernet802.3af PoE and 802.3at PoE+ best fit, ranging from 120W to 1,440W power budget per switchIPv4 routing in Layer 2+ package (L3 static routing) with IPv4/IPv6 ACLs and QoSHigh value L2/L3 tables with 16K MAC, 512 ARP/NDP, 9K jumbo frames, 1K VLANs, 64 static L3 routesRedundant power supply option for uninterruptible operation (RPS) External power supply option for PoE and PoE+ full-power applications (EPS)Green Ethernet compliance for maximum power efficiency

NETGEAR Intelligent Edge M4100 series software features:Automatic multi-vendor Voice over IP prioritization based on SIP, H323 and SCCP protocol detectionVoice VLAN and LLDP-MED for automatic IP phones QoS and VLAN configuration IPv4/IPv6 Multicast filtering with IGMP and MLD snooping, Querier mode and MVR for simplified video deploymentsAdvanced classifier-based hardware implementation for L2 (MAC), L3 (IP) and L4 (UDP/TCP transport ports) inbound security and prioritization

NETGEAR Intelligent Edge M4100 series link aggregation and channeling features:Flexible Port-Channel / LAG (802.3ad) implementation for maximum compatibility, fault tolerance and load sharing with any type of Ethernet channelingIncluding static (selectable hashing algorithms) or dynamic LAGs (LACP)

NETGEAR Intelligent Edge M4100 series management features:DHCP/BootP innovative auto-installation including firmware and configuration file upload automationIndustry standard SNMP, RMON, MIB, LLDP, AAA, sFlow and RSPAN implementationSelectable serial RS232 DB9 and Mini-USB port for management consoleStandard USB port for local storage, configuration or image filesDual firmware image and configuration file for updates with minimum service interruptionIndustry standard command line interface (CLI) for IT admins used to other vendors commandsFully functional Web console (GUI) for IT admins who prefer an easy to use graphical interfaceSingle-pane-of-glass NMS300 management platform with mass-configuration support

NETGEAR Intelligent Edge M4100 series warranty and support:NETGEAR ProSafe Lifetime Hardware Warranty*Included Lifetime Online Chat Technical SupportIncluded Lifetime Next Business Day Hardware Replacement  

M4100 seriesProSAFE® Intelligent Edge Managed Switches

Modern access layer features highlights

Layer 3 hardware with L2+ software affordability:M4100 series models are built upon L3 hardware platform while Layer 2+ software package allows for better budget optimizationM4100 series uses latest generation silicon low-power 40-nanometer technologyM4100 series L2 and L3 switching features (access control list, classification, filtering, IPv4 routing) are performed in hardware at interface line rate for voice, video, and data convergenceM4100 series Layer 2+ software package provides straight forward IP static routing capabilities for physical interfaces, VLANs and subnets:Fast Ethernet 802.3af PoE: M4100-50-POE (48 ports)Gigabit: M4100-D12G (12 ports desktop); M4100-12GF (12 ports Fiber); M4100-26G (26 ports); M4100-50G (50 ports)Gigabit 802.3af PoE: M4100-26G-POE (24 ports)Gigabit 802.3at PoE+: M4100-D12G-POE+ (12 ports desktop); M4100-24G-POE+ (24 ports); M4100-50G-POE+ (48 ports)At the edge of campus networks or in the server room, static routes are often preferred for simplicity (L3 fixed routes to the next hop towards the destination network are manually added to the routing table), without any impact on performance because L3 routing is wire-speed in M4100 series hardware

High-value switching performance:16K MAC address table, 1K concurrent VLANs and 64 static routes for SMB and small enterprise access layers80 PLUS certified power supplies for energy high efficiency Green Ethernet with Energy Efficient Ethernet (EEE) defined by IEEE 802.3az Energy Efficient Ethernet Task ForceM4100-D12G; M4100-26G; M4100-50G; M4100-26G-POE; M4100-50G-POE+Green Ethernet with Energy Detect Mode (unused ports automatic power off) M4100-50-POE; M4100-D12G-POE+; M4100-12GF; M4100-24G-POE+Increased packet buffering with up to 12 Mb dynamically shared across all interfaces for most intensive applicationsLow latency at all network speedsJumbo frames support of up to 9Kb accelerating storage performance for backup and cloud applications

Ease of deployment:Placement outside the wiring closet (conference rooms, offices, class rooms, sales floor in retail stores, etc…)For secure deployment in open areas , desktop versions come with a Wall Mount Kit with four bracketsM4100-D12G (GSM5212)M4100-D12G-POE+ (GSM5212P)As an option, a Rack Mount Kit is orderable (420-10043-01)

Select desktop versions also come with a set of strong magnets for mounting on any metal surfaceM4100-D12G (GSM5212)

Automatic configuration with DHCP and BootP Auto Install eases large deployments with a scalable configuration files management capability, mapping IP addresses and host names and providing individual configuration files to multiple switches as soon as they are initialized on the networkBoth the Switch Serial Number and Switch primary MAC address are reported by a simple "show" command in the CLI - facilitating discovery and remote configuration operationsAutomatic Voice over IP prioritization with Auto-VoIP simplifies most complex multi-vendor IP telephones deployments either based on protocols (SIP, H323 and SCCP) or on OUI bytes (default database and user-based OUIs) in the phone source MAC address; providing the best class of service to VoIP streams (both data and signaling) over other ordinary traffic by classifying traffic, and enabling correct egress queue configurationAn associated Voice VLAN can be easily configured with Auto-VoIP for further traffic isolation When deployed IP phones are LLDP-MED compliant, the Voice VLAN will use LLDP-MED to pass on the VLAN ID, 802.1P priority and DSCP values to the IP phones, accelerating convergent deployments

Versatile connectivity including "PoE Passthrough":IEEE 802.3af Power over Ethernet (PoE) provides up to 15.4W per port (M4100-50-POE; M4100-26G-POE)IEEE 802.3at Power over Ethernet Plus (PoE+) provides up to 30W per port (M4100-D12G-POE+; M4100-24G-POE+; M4100-50G-POE+)Desktop versions can be powered by upstream PoE+ switch using their Port-1 (PD, PoE+ 30W): M4100-D12G and M4100-D12G-POE+M4100-D12G-POE+ can even redistribute PoE power from the upstream PoE+ switch to VoIP phones or other devices in meeting rooms, retail sales floors or other challenging environments without outletBoth IEEE 802.3at Layer 2 LLDP method and 802.3at 2-event classification methods are supported for compatibility with all PoE+ PD devicesAutomatic MDIX and Auto-negotiation on all ports select the right transmission modes (half or full duplex) as well as data transmission for crossover or straight-through cables dynamically for the admin100Mbps backward compatiblity on all SFP portsIPv6 support with multicasting (MLD for IPv6 filtering), ACLs and QoS

Installing M4100 desktop series using Magnets

Installing M4100 desktop series on a Wall

M4100 series

Layer 3 hardware with L2+ software affordability:M4100 series models are built upon L3 hardware platform while Layer 2+ software package allows for better budget optimizationM4100 series uses latest generation silicon low-power 40-nanometer technologyM4100 series L2 and L3 switching features (access control list, classification, filtering, IPv4 routing) are performed in hardware at interface line rate for voice, video, and data convergenceM4100 series Layer 2+ software package provides straight forward IP static routing capabilities for physical interfaces, VLANs and subnets:Fast Ethernet 802.3af PoE: M4100-50-POE (48 ports)Gigabit: M4100-D12G (12 ports desktop); M4100-12GF (12 ports Fiber); M4100-26G (26 ports); M4100-50G (50 ports)Gigabit 802.3af PoE: M4100-26G-POE (24 ports)Gigabit 802.3at PoE+: M4100-D12G-POE+ (12 ports desktop); M4100-24G-POE+ (24 ports); M4100-50G-POE+ (48 ports)At the edge of campus networks or in the server room, static routes are often preferred for simplicity (L3 fixed routes to the next hop towards the destination network are manually added to the routing table), without any impact on performance because L3 routing is wire-speed in M4100 series hardware

High-value switching performance:16K MAC address table, 1K concurrent VLANs and 64 static routes for SMB and small enterprise access layers80 PLUS certified power supplies for energy high efficiency Green Ethernet with Energy Efficient Ethernet (EEE) defined by IEEE 802.3az Energy Efficient Ethernet Task ForceM4100-D12G; M4100-26G; M4100-50G; M4100-26G-POE; M4100-50G-POE+Green Ethernet with Energy Detect Mode (unused ports automatic power off) M4100-50-POE; M4100-D12G-POE+; M4100-12GF; M4100-24G-POE+Increased packet buffering with up to 12 Mb dynamically shared across all interfaces for most intensive applicationsLow latency at all network speedsJumbo frames support of up to 9Kb accelerating storage performance for backup and cloud applications

Ease of deployment:Placement outside the wiring closet (conference rooms, offices, class rooms, sales floor in retail stores, etc…)For secure deployment in open areas , desktop versions come with a Wall Mount Kit with four bracketsM4100-D12G (GSM5212)M4100-D12G-POE+ (GSM5212P)As an option, a Rack Mount Kit is orderable (420-10043-01)

Select desktop versions also come with a set of strong magnets for mounting on any metal surfaceM4100-D12G (GSM5212)

Automatic configuration with DHCP and BootP Auto Install eases large deployments with a scalable configuration files management capability, mapping IP addresses and host names and providing individual configuration files to multiple switches as soon as they are initialized on the networkBoth the Switch Serial Number and Switch primary MAC address are reported by a simple "show" command in the CLI - facilitating discovery and remote configuration operationsAutomatic Voice over IP prioritization with Auto-VoIP simplifies most complex multi-vendor IP telephones deployments either based on protocols (SIP, H323 and SCCP) or on OUI bytes (default database and user-based OUIs) in the phone source MAC address; providing the best class of service to VoIP streams (both data and signaling) over other ordinary traffic by classifying traffic, and enabling correct egress queue configurationAn associated Voice VLAN can be easily configured with Auto-VoIP for further traffic isolation When deployed IP phones are LLDP-MED compliant, the Voice VLAN will use LLDP-MED to pass on the VLAN ID, 802.1P priority and DSCP values to the IP phones, accelerating convergent deployments

Versatile connectivity including "PoE Passthrough":IEEE 802.3af Power over Ethernet (PoE) provides up to 15.4W per port (M4100-50-POE; M4100-26G-POE)IEEE 802.3at Power over Ethernet Plus (PoE+) provides up to 30W per port (M4100-D12G-POE+; M4100-24G-POE+; M4100-50G-POE+)Desktop versions can be powered by upstream PoE+ switch using their Port-1 (PD, PoE+ 30W): M4100-D12G and M4100-D12G-POE+M4100-D12G-POE+ can even redistribute PoE power from the upstream PoE+ switch to VoIP phones or other devices in meeting rooms, retail sales floors or other challenging environments without outletBoth IEEE 802.3at Layer 2 LLDP method and 802.3at 2-event classification methods are supported for compatibility with all PoE+ PD devicesAutomatic MDIX and Auto-negotiation on all ports select the right transmission modes (half or full duplex) as well as data transmission for crossover or straight-through cables dynamically for the admin100Mbps backward compatiblity on all SFP portsIPv6 support with multicasting (MLD for IPv6 filtering), ACLs and QoS

Tier 1 availability:Rapid Spanning Tree (RSTP) and Multiple Spanning Tree (MSTP) allow for rapid transitioning of the ports to the Forwarding state and the suppression of Topology Change NotificationIP address conflict detection performed by the embedded DHCP server prevents accidental IP address duplicates from perturbing the overall network stabilityPower redundancy for higher availability when mission critical, including hot-swap PSUs and Fans

Ease of management and control:Dual firmware image and dual configuration file for transparent firmware updates / configuration changes with minimum service interruptionFlexible Port-Channel / LAG (802.3ad) implementation for maximum compatibility, fault tolerance and load sharing with any type of Ethernet channeling from other vendors switch, server or storage devices conforming to IEEE 802.3ad - including static (selectable hashing algorithms) or dynamic LAGs (highly tunable LACP Link Aggregation Control Protocol ) Port names feature allows for descriptive names on all interfaces and better clarity in real word admin daily tasksLoopback interfaces management for routing protocols administrationPrivate VLANs and local Proxy ARP help reduce broadcast with added security Management VLAN ID is user selectable for best convenienceIndustry-standard VLAN management in the command line interface (CLI) for all common operations such as VLAN creation; VLAN names; VLAN "make static" for dynamically created VLAN by GRVP registration; VLAN trunking; VLAN participation as well as VLAN ID (PVID) and VLAN tagging for one interface, a group of interfaces or all interfaces at onceSimplified VLAN configuration with industry-standard Access Ports for 802.1Q unaware endpoints and Trunk Ports for switch-to-switchs links with Native VLANSystem defaults automatically set per-port broadcast, multicast, and unicast storm control for typical, robust protection against DoS attacks and faulty clients which can, with BYOD, often create network and performance issuesIP Telephony administration is simplified with consistent Voice VLAN capabilities per the industry standards and automatic functions associated Comprehensive set of "system utilities" and "Clear" commands help troubleshoot connectivity issues and restore various configurations to their factory defaults for maximum admin efficiency: traceroute (to discover the routes that packets actually take when traveling on a hop-by-hop basis and with a synchronous response when initiated from the CLI), clear dynamically learned MAC addresses, counters, IGMP snooping table entries from the Multicast forwarding database etc... All major centralized software distribution platforms are supported for central software upgrades and configuration files management (HTTP, TFTP), including in highly secured versions (HTTPS, SFTP, SCP)Simple Network Time Protocol (SNTP) can be used to synchronize network resources and for adaptation of NTP, and can provide synchronized network timestamp either in broadcast or unicast mode (SNTP client implemented over UDP - port 123)Embedded RMON (4 groups) and sFlow agents permit external network traffic analysis Remote mirroring (RSPAN) can transport packets captured on an interface on a source switch across the network to a destination on a possibly different destination switch

Engineered for convergence:Audio (Voice over IP) and Video (multicasting) comprehensive switching, filtering, routing and prioritizationAuto-VoIP, Voice VLAN and LLDP-MED support for IP phones QoS and VLAN configurationIGMP Snooping for IPv4, MLD Snooping for IPv6 and Querier mode facilitate fast receivers joins and leaves for multicast streams and ensure multicast traffic only reaches interested receivers without the need of a Multicast routerMulticast VLAN Registration (MVR) uses a dedicated Multicast VLAN to forward multicast streams and avoid duplication for clients in different VLANs Schedule enablement

Enterprise security:Traffic control MAC Filter and Port Security help restrict the traffic allowed into and out of specified ports or interfaces in the system in order to increase overall security and block MAC address flooding issuesDHCP Snooping monitors DHCP traffic between DHCP clients and DHCP servers to filter harmful DHCP message and builds a bindings database of (MAC address, IP address, VLAN ID, port) tuples that are considered authorized in order to prevent DHCP server spoofing attacks IP source guard and Dynamic ARP Inspection use the DHCP snooping bindings database per port and per VLAN to drop incoming packets that do not match any binding and to enforce source IP / MAC addresses for malicious users traffic eliminationTime-based Layer 2 / Layer 3-v4 / Layer 3-v6 / Layer 4 Access Control Lists (ACLs) can be binded to ports, Layer 2 interfaces, VLANs and LAGs (Link Aggregation Groups or Port channel) for fast unauthorized data prevention and right granularity Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology consistent and predictable - unauthorized devices or switches behind the edge ports that have BPDU enabled will not be able to influence the overall STP topology by creating loopsSpanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance, unauthorized or unexpected new equipment in the network may accidentally become a root bridge for a given VLAN Dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN / Unauthenticated VLAN are supported for rigorous user and equipment RADIUS policy server enforcement Up to 48 clients (802.1x) per port are supported, including the authentication of the users domain, in order to facilitate convergent deployments: for instance when IP phones connect PCs on their bridge, IP phones and PCs can authenticate on the same switch port but under different VLAN assignment policies (Voice VLAN versus data VLAN) 802.1x MAC Address Authentication Bypass (MAB) is an alternative method for non-Radius clientsA list of authorized MAC addresses of client NICs is maintained on the RADIUS server for MAB purposeMAB can be configured on a per-port basis on the switchMAB initiates only after the dot1x authentication process times out, and only when clients don't respond to any of the EAPOL packets sent by the switchWhen 802.1x unaware clients try to connect, the switch sends the MAC address of each client to the authentication server The RADIUS server checks the MAC address of the client NIC against the list of authorized addressesThe RADIUS server returns the access policy and VLAN assignment to the switch for each clientDouble VLANs (DVLAN - QinQ) pass traffic from one customer domain to another through the "metro core" in a multi-tenancy environment: customer VLAN IDs are preserved and a service provider VLAN ID is added to the traffic so the traffic can pass the metro core in a simple, secure mannerPrivate VLANs (with Primary VLAN, Isolated VLAN, Community VLAN, Promiscuous port, Host port, Trunks) provide Layer 2 isolation between ports that share the same broadcast domain, allowing a VLAN broadcast domain to be partitioned into smaller point-to-multipoint subdomains across switches in the same Layer 2 networkPrivate VLANs are useful in DMZ when servers are not supposed to communicate with each other but need to communicate with a router; they remove the need for more complex port-based VLANs with respective IP interface/subnets and associated L3 routingAnother Private VLANs typical application are carrier-class deployments when users shouldn't see, snoop or attack other users' traffic Secure Shell (SSH) and SNMPv3 (with or without MD5 or SHA authentication) ensure SNMP and Telnet sessions are securedTACACS+ and RADIUS enhanced administrator management provides strict "Login" and "Enable" authentication enforcement for the switch configuration, based on latest industry standards: exec authorization using TACACS+ or RADIUS; command authorization using TACACS+ and RADIUS Server; user exec accounting for HTTP and HTTPS using TACACS+ or RADIUS; and authentication based on user domain in addition to user ID and password

Superior quality of service:Advanced classifier-based hardware implementation for Layer 2 (MAC), Layer 3 (IP) and Layer 4 (UDP/TCP transport ports) prioritization8 queues for priorities and various QoS policies based on 802.1p (CoS) and DiffServ can be applied to interfaces and VLANs Advanced rate limiting down to 1 Kbps granularity and mininum-guaranteed bandwidth can be associated with ACLs for best granularityAutomatic Voice over IP prioritization with Auto-VoIP

Advanced Layer 2+ routing package: Static Routes/ECMP Static Routes for IPv4   Static and default routes are configurable with next IP address hops to any given destination   64 static routes are configurable for IPv4  Permitting additional routes creates several options for the network administrator   The admin can configure multiple next hops to a given destination, intending for the router to load share across the next hopsThe admin distinguishes static routes by specifying a route preference value: a lower preference value is a more preferred static route   A less preferred static route is used if the more preferred static route is unusable (down link, or next hop cannot be resolved to a MAC address)   Advanced Static Routing functions for administrative traffic controlStatic Reject Routes are configurable to control the traffic destined to a particular network so that it is not forwarded through the router   Such traffic is discarded and the ICMP destination unreachable message is sent back to the source   Static reject routes can be typically used to prevent routing loopsDefault routes are configurable as a preference option   In order to facilitate VLAN creation and VLAN routing using Web GUI, a VLAN Routing Wizard offers following automated capabilitiesCreate a VLAN and generate a unique name for VLAN   Add selected ports to the newly created VLAN and remove selected ports from the default VLAN   Create a LAG, add selected ports to a LAG, then add this LAG to the newly created VLAN Enable tagging on selected ports if the port is in another VLAN Disable tagging if a selected port does not exist in another VLAN Exclude ports that are not selected from the VLAN Enable routing on the VLAN using the IP address and subnet mask entered as logical routing interface DHCP Relay Agents relay DHCP requests from any routed interface, including VLANs, when DHCP server doesn’t reside on the same IP network or subnet   The agent relays requests from a subnet without a DHCP server to a server or next-hop agent on another subnet   Unlike a router which switches IP packets transparently, a DHCP relay agent processes DHCP messages and generates new DHCP messages   Supports DHCP Relay Option 82 circuit-id and remote-id for VLANs Multiple Helper IPs feature allows to configure a DHCP relay agent with multiple DHCP server addresses per routing interface and to use different server addresses for client packets arriving on different interfaces on the relay agent server addresses for client packets arriving on different interfaces on the relay agent

Flow Control:802.3x Flow Control implementation per IEEE 802.3 Annex 31 B specifications with Symmetric flow control, Asymmetric flow control or No flow controlAsymmetric flow control allows the switch to respond to received PAUSE frames, but the ports cannot generate PAUSE framesSymmetric flow control allows the switch to both respond to, and generate MAC control PAUSE framesAllows traffic from one device to be throttled for a specified period of time: a device that wishes to inhibit transmission of data frames from another device on the LAN transmits a PAUSE frame

Enterprise security:Traffic control MAC Filter and Port Security help restrict the traffic allowed into and out of specified ports or interfaces in the system in order to increase overall security and block MAC address flooding issuesDHCP Snooping monitors DHCP traffic between DHCP clients and DHCP servers to filter harmful DHCP message and builds a bindings database of (MAC address, IP address, VLAN ID, port) tuples that are considered authorized in order to prevent DHCP server spoofing attacks IP source guard and Dynamic ARP Inspection use the DHCP snooping bindings database per port and per VLAN to drop incoming packets that do not match any binding and to enforce source IP / MAC addresses for malicious users traffic eliminationTime-based Layer 2 / Layer 3-v4 / Layer 3-v6 / Layer 4 Access Control Lists (ACLs) can be binded to ports, Layer 2 interfaces, VLANs and LAGs (Link Aggregation Groups or Port channel) for fast unauthorized data prevention and right granularity Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology consistent and predictable - unauthorized devices or switches behind the edge ports that have BPDU enabled will not be able to influence the overall STP topology by creating loopsSpanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance, unauthorized or unexpected new equipment in the network may accidentally become a root bridge for a given VLAN Dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN / Unauthenticated VLAN are supported for rigorous user and equipment RADIUS policy server enforcement Up to 48 clients (802.1x) per port are supported, including the authentication of the users domain, in order to facilitate convergent deployments: for instance when IP phones connect PCs on their bridge, IP phones and PCs can authenticate on the same switch port but under different VLAN assignment policies (Voice VLAN versus data VLAN) 802.1x MAC Address Authentication Bypass (MAB) is an alternative method for non-Radius clientsA list of authorized MAC addresses of client NICs is maintained on the RADIUS server for MAB purposeMAB can be configured on a per-port basis on the switchMAB initiates only after the dot1x authentication process times out, and only when clients don't respond to any of the EAPOL packets sent by the switchWhen 802.1x unaware clients try to connect, the switch sends the MAC address of each client to the authentication server The RADIUS server checks the MAC address of the client NIC against the list of authorized addressesThe RADIUS server returns the access policy and VLAN assignment to the switch for each clientDouble VLANs (DVLAN - QinQ) pass traffic from one customer domain to another through the "metro core" in a multi-tenancy environment: customer VLAN IDs are preserved and a service provider VLAN ID is added to the traffic so the traffic can pass the metro core in a simple, secure mannerPrivate VLANs (with Primary VLAN, Isolated VLAN, Community VLAN, Promiscuous port, Host port, Trunks) provide Layer 2 isolation between ports that share the same broadcast domain, allowing a VLAN broadcast domain to be partitioned into smaller point-to-multipoint subdomains across switches in the same Layer 2 networkPrivate VLANs are useful in DMZ when servers are not supposed to communicate with each other but need to communicate with a router; they remove the need for more complex port-based VLANs with respective IP interface/subnets and associated L3 routingAnother Private VLANs typical application are carrier-class deployments when users shouldn't see, snoop or attack other users' traffic Secure Shell (SSH) and SNMPv3 (with or without MD5 or SHA authentication) ensure SNMP and Telnet sessions are securedTACACS+ and RADIUS enhanced administrator management provides strict "Login" and "Enable" authentication enforcement for the switch configuration, based on latest industry standards: exec authorization using TACACS+ or RADIUS; command authorization using TACACS+ and RADIUS Server; user exec accounting for HTTP and HTTPS using TACACS+ or RADIUS; and authentication based on user domain in addition to user ID and password

Superior quality of service:Advanced classifier-based hardware implementation for Layer 2 (MAC), Layer 3 (IP) and Layer 4 (UDP/TCP transport ports) prioritization8 queues for priorities and various QoS policies based on 802.1p (CoS) and DiffServ can be applied to interfaces and VLANs Advanced rate limiting down to 1 Kbps granularity and mininum-guaranteed bandwidth can be associated with ACLs for best granularityAutomatic Voice over IP prioritization with Auto-VoIP

Advanced Layer 2+ routing package: Static Routes/ECMP Static Routes for IPv4   Static and default routes are configurable with next IP address hops to any given destination   64 static routes are configurable for IPv4  Permitting additional routes creates several options for the network administrator   The admin can configure multiple next hops to a given destination, intending for the router to load share across the next hopsThe admin distinguishes static routes by specifying a route preference value: a lower preference value is a more preferred static route   A less preferred static route is used if the more preferred static route is unusable (down link, or next hop cannot be resolved to a MAC address)   Advanced Static Routing functions for administrative traffic controlStatic Reject Routes are configurable to control the traffic destined to a particular network so that it is not forwarded through the router   Such traffic is discarded and the ICMP destination unreachable message is sent back to the source   Static reject routes can be typically used to prevent routing loopsDefault routes are configurable as a preference option   In order to facilitate VLAN creation and VLAN routing using Web GUI, a VLAN Routing Wizard offers following automated capabilitiesCreate a VLAN and generate a unique name for VLAN   Add selected ports to the newly created VLAN and remove selected ports from the default VLAN   Create a LAG, add selected ports to a LAG, then add this LAG to the newly created VLAN Enable tagging on selected ports if the port is in another VLAN Disable tagging if a selected port does not exist in another VLAN Exclude ports that are not selected from the VLAN Enable routing on the VLAN using the IP address and subnet mask entered as logical routing interface DHCP Relay Agents relay DHCP requests from any routed interface, including VLANs, when DHCP server doesn’t reside on the same IP network or subnet   The agent relays requests from a subnet without a DHCP server to a server or next-hop agent on another subnet   Unlike a router which switches IP packets transparently, a DHCP relay agent processes DHCP messages and generates new DHCP messages   Supports DHCP Relay Option 82 circuit-id and remote-id for VLANs Multiple Helper IPs feature allows to configure a DHCP relay agent with multiple DHCP server addresses per routing interface and to use different server addresses for client packets arriving on different interfaces on the relay agent server addresses for client packets arriving on different interfaces on the relay agent

Flow Control:802.3x Flow Control implementation per IEEE 802.3 Annex 31 B specifications with Symmetric flow control, Asymmetric flow control or No flow controlAsymmetric flow control allows the switch to respond to received PAUSE frames, but the ports cannot generate PAUSE framesSymmetric flow control allows the switch to both respond to, and generate MAC control PAUSE framesAllows traffic from one device to be throttled for a specified period of time: a device that wishes to inhibit transmission of data frames from another device on the LAN transmits a PAUSE frame

Target Application

M4100 seriesProSAFE® Intelligent Edge Managed Switches

Why M4100 series for the edge of small enterprise networks?

Because the M4100 series offers up to 3x better value:

Combining superior resiliency and advanced security, NETGEAR Intelligent Edge managed switches feature comprehensive Layer 2, Lite Layer 3 and Layer 4 switching; including fiber aggregation capabilities. Unlike other 'cost conscious' products from competitors, the NETGEAR Intelligent Edge series has been designed from the ground up for organizations requiring intelligence at the network edge.

Affordable and reliable, these access layer switches win as a proficient component of secure, converged voice, video and data networking solutions.

Three reasons to get started today with NETGEAR M4100 series 

1/ Versatile, Protected and Expendable Power  The M4100 series are the first affordable managed switches with both redundant and external power supply capabilities - key for critical applications such as VoIP, IP surveillance and Wireless access points. PoE devices gobble increasing amounts of PoE power, yet existing SMB switching solutions from other vendors don’t scale to full power. Although most servers in SMB networks have dual power supplies, switches in SMB networks have not – until now. Select desktop switches in the M4100 series can be powered by PoE as a cost-effective solution when there is no existing electrical wiring or power outlets, as the switch can draw power directly from the wiring closet. The flexibility of a PoE switch is also convenient for meeting rooms and open spaces where visible electrical wiring is unsightly or impractical. One PoE+ downlink (30W) from the upstream switch is sufficient for the standard operation of the M4100-D12G and M4100-D12G-POE+ switches. This also increases resiliency for critical installations: the Power over Ethernet PD connection on these switches also doubles as a redundant power supply (RPS) should the switch be locally powered.

Innovative PoE passthrough technology even lets M4100-D12G-POE+ power local PoE PD devices - redistributing PoE budget from the upstream switch. Up to 25W of power can be available for local PD devices - extending the reach of PoE deployments beyond the 100-meter or 328-feet bar: the M4100-D12G-POE+ can function as a "PoE repeater" for powering remote IP cameras, Wireless access points, etc.

For all other rackmount Power over Ethernet models in the NETGEAR Intelligent Edge M4100 series, in addition to their built-in PSU providing more PoE power than competitive solutions at a similar price point, the NETGEAR Intelligent Edge M4100 series is the only one allowing for an additional PoE power "upgrade" via external power supply; immediately or at later times.

Short story, all rackmount switches in the NETGEAR M4100 series are either PoE Full Power capable already or PoE Full Power capable when drawing external power from the RPS4000. All 24-port and 48-port models can scale up to 802.3af PoE full power or 802.3at PoE+ full power simultaneously for all ports. This is real investment protection.

2/ Security and Control Enhanced security includes network access control and isolation for improved convergence of voice, video and data: dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN / Unauthenticated VLAN are supported for rigorous user and equipment policy enforcement from a RADIUS server. The RADIUS server can also be the Network Policy Server (NPS) in Microsoft® Windows Server™ 2008 or 2012, when in an Active Directory domain.

Up to 48 clients (802.1x) per port are supported, including the authentication of a user's domain, in order to facilitate convergent deployments. When IP phones connect PCs on their bridge, IP phones and PCs authenticate on the same switch port but under different VLAN assignment policies (Voice VLAN versus data VLAN) - providing administrators with greater flexibility during deployment and policy enforcement.

For 802.1x unaware clients, 802.1x MAC Address Authentication Bypass (MAB) is a great alternative: when 802.1x unaware clients try to connect, the switch sends their MAC addresses to the authentication server. When checked, the RADIUS server returns the access policy and VLAN assignment to the switch for each client.

Enhanced security also includes better network isolation with Private VLANs, providing Layer 2 isolation between ports that share the same broadcast domain. A VLAN broadcast domain can be partitioned into smaller point-to-multipoint subdomains across switches in the same Layer 2 network. This is useful for IP camera deployments, or in the DMZ when servers are not supposed to communicate with each other but need to communicate with a router. Private VLANs remove the need for more complex port-based VLANs with respective IP interface/subnets and associated L3 routing.

3/ Reliability

Learn how the NETGEAR M4100 series delivers more for less: all models provide much longer MTBF (average lifetime) thanks to better/higher quality components and circuitry.

For instance, the desktop 12-port PoE+ Gigabit Ethernet M4100-D12G-POE+ (GSM5212P) is predicted to have an average mean time between failure of 766,618 hours, more than 87 years at an ambient standard 25°C temperature (77°F). The rackmount 24-port PoE Gigabit Ethernet M4100-26G-POE (GSM7226LP) is to predicted to have an average mean time between failure of 437,199 hours, more than 49 years. This is nearly double the reliability of the closest competitive solutions in this price band.

Conclusion

The M4100 series delivers an unbeatable combination of performance, security and convergence for voice, video and data networking solutions.

Due to the wide adoption of virtualization, the convergence of voice, video, and data and the rapid proliferation of bandwidth-intensive applications, small and mid-sized businesses, hospitals and schools today have security, control and reliability needs similar to those of large enterprises.

For approximately the same price as low-end solutions currently on the market aimed at SMBs, NETGEAR is offering high-end features that have so far been reserved only for enterprise-class offerings available at double or triple the price point.

Accessories

RPS4000RPS/EPS unit for up to 4 concurrent switches

Front viewRPS4000 is 1RU unit with four (4) empty slotsPower modules (APS1000W) are sold separatelyAPS1000W requirement depends on RPS, EPS, PoE application

Rear viewFour (4) embedded RPS connectorsSwitch selectors for RPS/EPS power modesSwitch selectors for power modules two-by-two bridging

Included:Four (4) RPS cables - 60cm each (~2 ft)Rack mount kitPower cord

RPS mode: provide power backup for up to four switches concurrentlyWith same level of protection as with four dedicated, "one-to-one" RPS units

EPS mode: provide supplemental PoE power up to four switches concurrentlyUp to 2,880W shared PoE+ budgetWhen in EPS mode, RPS4000 supersedes each switch main PSUSwitch main PSU system power reverts to redundant power supply (RPS) function

The RPS4000 RPS/EPS unit supports following key features:

The RPS4000 can be connected to a maximum of four switches (any combination of rackmount M4100 series switches) using RPS switch connectors and RPS cablesThe RPS4000 provides protection against electrical issues such as high-voltage (input, output) or short circuits for maximum securityThe RPS4000 can accommodate up to four hot-swap APS1000W power modulesEither one, two, three or four APS1000W power modules are required, depending on RPS or EPS application (see combinations in "Number of APS1000W" table)In RPS mode with only one APS1000W power module, RPS4000 can protect up to four (4) non-PoE rackmout M4100 series switches In case of a general switches power feed failure, powering all four switches simultaneously for 12V DC system powerRPS4000 takes over and delivers adequate power without any service interruption (continuous monitoring)When the switch internal power is restored, the RPS4000 stops supplying power to the switch automatically, again without any service interruptionIn RPS mode with multiple APS1000W power module combinations, RPS4000 can protect up to four (4) PoE M4100 series switches In case of a general switches power feed failure, powering all four switches simultaneously (12V DC system power and -56V DC PoE) Same RPS functionality as with non-PoE switches including PoE power budget protectionOne-to-one mode (one APS1000W power module / one PoE M4100 switch) provides 720W PoE budget protection for each switchOne APS1000W power module can be used for two (2) PoE M4100 series switches instead, providing 380W PoE budget protection for each switchIn EPS mode with one or multiple APS1000W power module combinations, RPS4000 allows for various PoE 802.3af and 802.3at "full power" applicationsSupports M4100-50-POE, M4100-26G-POE; M4100-24G-POE+ and M4100-50G-POE+ Superseding switches main PSU for PoE budget and switch poweringDelivering -56V DC for PoE power and 12V for switch powerSwitch main PSU system acts as built-in RPS for both switch power and PoE budget protectionIn EPS mode, power slots can be organized into groups of two (Group 1 and Group 2) allowing for APS1000W power modules bridgingTwo APS1000W power modules can be bridged and deliver 1,440W PoE budget to one 48-port switch M4100-50G-POE+ Power slots can be configured for RPS or EPS modeAll four power slots can be combined together with only one APS1000W power module for four (4) 12V switches RPS applicationPower slots can be utilized in one-to-one mode for PoE switches RPS or EPS applicationsPower slots can be combined two by two for PoE switches RPS or EPS applications

Ordering informationAmericas, Europe: RPS4000-200NESAsia Pacific: RPS4000-200AJSWarranty: 5 years

M4100 seriesProSAFE® Intelligent Edge Managed Switches

Number of APS1000W 1 power module 2 power modules 3 power modules 4 power modules

RPS mode (Redundant Power Supply) M4100-50-POE or M4100-12GF M4100-50-POE or M4100-12GF M4100-50-POE or M4100-12GF

M4100-26G-POE or M4100-24G-POE+ M4100-26G-POE or M4100-24G-POE+ M4100-26G-POE or M4100-24G-POE+Complete protection

12V system power

Or:Complete protection Complete protection Complete protection

M4100-50-POE or M4100-12GF M4100-26G-POE or M4100-24G-POE+

EPS mode (External Power Supply)

M4100-50-POE or M4100-26G-POE M4100-50-POE or M4100-26G-POE M4100-50-POE or M4100-26G-POE M4100-50-POE or M4100-26G-POEM4100-24G-POE+ or M4100-50G-POE+ M4100-24G-POE+ or M4100-50G-POE+ M4100-24G-POE+ or M4100-50G-POE+ M4100-24G-POE+ or M4100-50G-POE+

One M4100-50-POE Two M4100-50-POE Three M4100-50-POE Four M4100-50-POE(802.3af full power) providing 720W providing 720W each providing 720W each providing 720W each

One M4100-24G-POE+ One M4100-50G-POE+ One M4100-24G-POE+ providing 720W Two M4100-50G-POE+(802.3at full power) providing 720W providing 1,440W One M4100-50G-POE+ providing 1,440W providing 1,440W each

Up to 4 switches (non-PoE versions) Up to 4 switches (PoE versions) Up to 4 switches (PoE versions) 4 switches (PoE versions)M4100-26G or M4100-50G or M4100-12GF

or M4100-50G-POE+ or M4100-50G-POE+ or M4100-50G-POE+

Up to 2 switches (PoE versions)12V system power and -56V PoE power 12V system power and -56V PoE power 12V system power and -56V PoE power

or M4100-50G-POE+

720W PoE budget available (total) 1,440W PoE budget available (total) 2,160W PoE budget available (total) 2,880W PoE budget available (total)for up to 2 switches (PoE versions) for up to 4 switches (PoE versions) for up to 4 switches (PoE versions) for up to 4 switches (PoE versions)

Example for PoE applications:

46 ports full power 802.3af PoE 92 ports full power 802.3af PoE 138 ports full power 802.3af PoE 192 ports full power 802.3af PoE

Example for PoE+ applications:

24 ports full power 802.3at PoE+ 48 ports full power 802.3at PoE+ 72 ports full power 802.3at PoE+ 96 ports full power 802.3at PoE+

APS1000WPower Module for RPS4000 Capacity:

110V-240V AC power inputUp to 960W DC 12V output power for up to 4 switches (RPS)Up to 720W DC -56V PoE budget output power for up to 2 PoE switches (EPS)

Ordering informationAmericas, Europe: APS1000W-100NESAsia Pacific: APS1000W-100AJSWarranty: 5 years

Inserting one APS1000W into RPS4000 power slot #1(front view)

RPS4000 equipped with 4 APS1000W power modules(front view)

GBIC SFP Optics for M4100 series

Single mode Fiber (SMF)

OM1 or OM2 OM3 or OM4 9/125µm62.5/125µm 50/125µm

AGM731F AGM731F AGM732F1000Base-LX long range single mode

LC duplex connector LC duplex connector LC duplex connector

up to 275m (902 ft) OM3: up to 550m (1,804 ft) up to 10km (6.2 miles)OM4: up to 1,000m (3,280 ft)

AGM731F (1 unit) AGM731F (1 unit) AGM732F (1 unit)

AFM735 AFM735100Base-FX IEEE 802.3 100Base-FX IEEE 802.3LC duplex connector LC duplex connector

up to 2km (1.24 miles) up to 2km (1.24 miles)

AFM735-10000S (1 unit) AFM735-10000S (1 unit)

Multimode Fiber (MMF)

1000Base-SX short range multimode 1000Base-SX short range multimode

Ordering informationWorldwide: see table belowWarranty: 5 years

RPS5412RPS unit for 1 switch by Optimal Power®

Ordering informationAmericas: RPS5412-100NASEurope: RPS5412-100EUSAsia Pacific: RPS5412-100AJSWarranty: 3 years

Optimal Power® RPS unit certified by NETGEAR for M4100 seriesIncludes the RPS cable for the switch RPS connectorProvides seemless "one-to-one" redundant power to the Switch-56V DC power limited to 300W (maximum PoE budget)

Gigabit SFP

Fits into M4100 series SFP interfaces (front)

Fast Ethernet SFP

Fits into M4100 series SFP interfaces (front)

420-10043-01Rack mount kit for M4100 series desktop versions

Ordering informationWorldwide: 420-10043-01Warranty: 5 years

M4100 series desktop switches come with wall mount kit onlyThis optional rack mount kit contains two brackets for standard 19’’ rack mountCompatible with:M4100-D12G (GSM5212)M4100-D12G-POE+ (GSM5212P)

Technical Specifications

Model Name Description Model numberM4100-50-POE FSM7250PM4100-D12G GSM5212M4100-D12G-POE+ GSM5212P v1h2M4100-12GF GSM7212F v1h2M4100-26G GSM7224 v2h2

Technical Documentation and USB console driver software: M4100-50G GSM7248 v2h2M4100-26G-POE GSM7226LPM4100-24G-POE+ GSM7224P v1h2M4100-50G-POE+ GSM7248P

Physical interfaces

Front Console port (selectable) Storage Port

M4100-50-POE 48 2 2 (shared) -M4100-D12G - 12 2 (shared) -M4100-D12G-POE+ - 12 4 (shared)M4100-12GF - 12 12 (shared)M4100-26G - 26 4 (shared) -M4100-50G - 50 4 (shared) -M4100-26G-POE - 26 4 (shared) -M4100-24G-POE+ - 24 4 (shared)M4100-50G-POE+ - 50 4 (shared) -

Rear Power Supply RPS/EPS connector Console port (selectable) Physical security

M4100-50-POE Fixed, internal 1M4100-D12G External -M4100-D12G-POE+ Fixed, internal - Serial RS232 DB9M4100-12GF Fixed, internal 1 Serial RS232 DB9M4100-26G Fixed, internal 1M4100-50G Fixed, internal 1M4100-26G-POE Fixed, internal 1M4100-24G-POE+ Fixed, internal 1 Serial RS232 DB9M4100-50G-POE+ Fixed, internal 1Total Port Count Fast EthernetM4100-50-POE 48 ports total 2 ports totalM4100-D12G - 12 ports totalM4100-D12G-POE+ - 12 ports totalM4100-12GF - 12 ports totalM4100-26G - 26 ports totalM4100-50G - 50 ports totalM4100-26G-POE - 26 ports totalM4100-24G-POE+ - 24 ports totalM4100-50G-POE+ - 50 ports total

Power over Ethernet

PSE CapacityM4100-D10-POE 8 - 66W -M4100-26-POE 24 - 380W -M4100-50-POE 48 - 380W 740W with EPS (RPS4000)M4100-D12G-POE+ - 10 120W when AC power -M4100-12GF - 4 150W -M4100-12G-POE+ - 12 380W -M4100-26G-POE 24 - 192W 380W with EPS (RPS4000)M4100-24G-POE+ - 24 380W 720W with EPS (RPS4000)M4100-50G-POE+ - 48 380W 1,440W with EPS (RPS4000)PD CapacityM4100-D12G -M4100-D12G-POE+

48 ports Fast Ethernet PoE 802.3af, Layer 2+ software packageDesktop 12 ports Gigabit, Layer 2+ software packageDesktop 12 ports Gigabit PoE+ 802.3at, Layer 2+ software package12 ports Gigabit Fiber, Layer 2+ software package26 ports Gigabit, Layer 2+ software package50 ports Gigabit, Layer 2+ software package

http://www.netgear.com/business/products/switches/managed/m4100.aspx#tab-support 24 ports Gigabit PoE 802.3af, Layer 2+ software package24 ports Gigabit PoE+ 802.3at, Layer 2+ software package48 ports Gigabit PoE+ 802.3at, Layer 2+ software package

Auto-sensing RJ45 10/100

Auto-sensing RJ45 10/100/1000

Auto-sensing SFP ports100/1000Base-X

Mini-USBMini-USB

Mini-USB

Serial RS232 DB9, Mini-USBSerial RS232 DB9, Mini-USB

Serial RS232 DB9, Mini-USBSerial RS232 DB9, Mini-USBSerial RS232 DB9, Mini-USB

Serial RS232 DB9, Mini-USBGigabit

PoE ports 802.3af PoE+ ports 802.3at Internal PoE budget PoE budget with EPS

Powered by PoE+ PoE "Passthrough" TechnologyYes with one link PoE+ 30W (PD Port 1)Yes with one link PoE+ 30W (PD Port 1) Yes when second link PoE+ 30W (PD Port 2): 25W PoE budget can be redistributed by Port 3-12

Requirements based on 10.x software releaseLayer 2+ package includes Layer 3 static routing

M4100 seriesProSAFE® Intelligent Edge Managed Switches

Features SupportIEEE 802.3af (up to 15.4W per port) Yes (M4100-50-POE ; M4100-26G-POE)IEEE 802.3at (up to 30W per port) Yes (M4100-D12G-POE+ ; M4100-12GF ; M4100-24G-POE+ ; M4100-50G-POE+)IEEE 802.3at Layer 2 (LLDP) method Yes (M4100-D12G-POE+ ; M4100-12GF ; M4100-24G-POE+ ; M4100-50G-POE+)IEEE 802.3at 2-event classification Yes (M4100-D12G-POE+ ; M4100-12GF ; M4100-24G-POE+ ; M4100-50G-POE+)

Yes for all 802.3af and 802.3at models Convenient for Wireless Access Points schedules

Processor / MemoryProcessor (CPU)System memory (RAM) 128 MBCode storage (flash) 32 MB Dual firmware image, dual configuration filePacket Buffer MemoryAll models 12 Mb Dynamically shared across only used ports

PoE timer / schedule (week, days, hours)

Broadcom BCM53003 @ 600MHz

Performance SummarySwitching fabricM4100-50-POEM4100-D12GM4100-D12G-POE+M4100-12GFM4100-26GM4100-50GM4100-26G-POEM4100-24G-POE+M4100-50G-POE+ThroughputM4100-50-POEM4100-D12GM4100-D12G-POE+M4100-12GFM4100-26GM4100-50GM4100-26G-POEM4100-24G-POE+M4100-50G-POE+Green EthernetEnergy Efficient Ethernet (EEE) IEEE 802.3az Energy Efficient Ethernet Task Force compliance Deactivated by defaultOther MetricsForwarding mode Store-and-forward

Addressing 48-bit MAC addressAddress database size 16,000 MAC addresses

1K

8 queuesNumber of static routes (IPv4) 64Number of IP interfaces (port or VLAN) 64Jumbo frame support up to 9K packet sizeAcoustic noise (ANSI-S10.12) @ 25 °C ambient (77 °F)M4100-D10-POE

Fan speed control

M4100-26-POE <37.3 dBM4100-50-POE <38.9 dBM4100-D12GM4100-D12G-POE+ <19.8 dB below typical acoustic office ambientM4100-12GF <30 dBM4100-12G-POE+ <35.8 dBM4100-26G <35.6 dBM4100-50G <37.2dBM4100-26G-POE <36.6 dBM4100-24G-POE+ <33.8 dBM4100-50G-POE+ <47.7 dBHeat Dissipation (BTU) (Maximum)M4100-50-POE 1,661 Btu/hrM4100-D12G 64 Btu/hrM4100-D12G-POE+ 569 Btu/hrM4100-12GF 548 Btu/hrM4100-26G 108 Btu/hrM4100-50G 169 Btu/hrM4100-26G-POE 932 Btu/hrM4100-24G-POE+ 1,820 Btu/hrM4100-50G-POE+ 1,896 Btu/hrMean Time Between Failures (MTBF) @ 25 °C ambient (77 °F) @ 40 °C ambient (104 °F) @ 55 °C ambient (131 °F)M4100-50-POE 163,019 hours (~18.6 years) 99,803 hours (~11.4 years) 49,668 hours (~5.7 years)M4100-D12G 214,142 Hours (~24.4 years) 116,421 hours (~13.3 years) 67,633 hours (~7.7 years)M4100-D12G-POE+ 766,618 hours (~87.5 years) TBD 99,094 hours (~11.3 years)M4100-12GF 670,956 hours (~76.6 years) TBD 190,562 hours (~21.8 years)M4100-26G 702,785 hours (~80.2 years) 379,058 hours (~43.3 years) 197,792 hours (~22.6 years)M4100-50G 489,311 hours (~55.9 years) 281,498 hours (~32.1 years) 152,639 hours (~17.4 years)M4100-26G-POE 437,199 hours (~49.9 years) 230,676 hours (~26.3 years) 117,763 hours (~13.4 years)M4100-24G-POE+ 394,619 hours (~45.0 years) TBD 106,405 hours (~12.1 years)M4100-50G-POE+ 239,298 hours (~27.3 years) 117,927 hours (~13.5 years) 65,978 hours (~7.5 years)

13.6 Gbps24 Gbps24 Gbps24 Gbps52 Gbps100 Gbps52 Gbps48 Gbps100 Gbps

10.119 Mpps17.857 Mpps17.857 Mpps17.857 Mpps38.690 Mpps74.405 Mpps38.690 Mpps35.714 Mpps74.405 Mpps

Latency (64-byte frames, 100 Mbps, Copper) <10.194 μsLatency (64-byte frames, 1 Gbps, Copper) <3.91 μs

Number of VLANs 1,024 VLANs (802.1Q) simultaneouslyNumber of multicast groups filtered (IGMP)Number of Link Aggregation Groups (LAGs - 802.3ad) 12 LAGs with up to 8 ports per groupNumber of hardware queues for QoS

0 dB (fanless)

0 dB (fanless)

L2 Services - Availability

L3 Services - DHCP

L2 Services - VLANs

L2 Services - Multicast Filtering

L3 Services - IPv4 Routing

Network Monitoring and Discovery Services

Security

Quality of Service (QoS) - Summary

QoS - ACL Feature Support

QoS - DiffServ Feature Support

QoS - COS Feature Support

IEEE Network Protocols

IETF RFC Standards and MIBs

Management

User Admin Management

M4100 series - Platform Constants

LEDs

Physical Specifications

Power Consumption (all ports used, line-rate traffic, max PoE)

Environmental Specifications

Electromagnetic Emissions and Immunity

Safety

Package Content

Optional Modules and Accessories

Warranty and Support

ProSupport Service Packs

Ordering Information