
Page 2 - 4 Models at a glance
Page 5 Product brief
Page 6 - 10 Modern access layer features highlights
Page 11 - 12 Target application and why M4100 series
Page 13 - 16 Accessories and modules
Page 17 - 35 Technical specifications and ordering information
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 1 of 35
Highlights
The NETGEAR
®
Intelligent Edge M4100 series consists of 9 fully managed
switches, ranging from 12-port to 50-port Fast and Gigabit Ethernet. They are
ideal for all organizations considering reliable, aordable and simple access layer
switching with CLI, advanced scripting capabilities and Layer 3 routing.
As a cost-eective component of converged voice, video and data networking
solutions, NETGEAR M4100 series delivers a secure edge in commercial
buildings and campus LAN environments: PoE (802.3af) and PoE+ (802.3at)
versions of M4100 series are perfect for Wireless access points, IP telephony
and IP surveillance deployments.
Layer 2+ with static routing
•M4100seriescomeswithPort-based/
VLAN-based/Subnet-based“staticrouting”
Layer2+versions
•L3xedroutestothenexthoptowards
thedestinationnetworkareaddedtothe
routingtable
•L3routingiswire-speedinM4100series
hardwarewith64staticroutes(IPv4)
Engineered for convergence
•Automaticmulti-vendorVoiceoverIP
prioritizationbasedonSIP,H323and
SCCPprotocols
•VoiceVLANandLLDP-MEDforautomatic
IPphonesQoSandVLANconguration
•Advancedclassier-basedhardwareforL2,
L3,L4securityandprioritization
•AdvancedMulticastlteringwithIGMPand
MLDsnoopingandqueriermodes
High-value performance and IPv6 ready
•16KMACaddresses;upto100Gbps
switchingfabric;9Kjumboframes;Green
Ethernet
•IPv4/IPv6ingresstracltering(ACLs)and
prioritization(QoS-DiServ)
High availability and PoE/PoE+ full power
capability
•Redundantpowersupplyoptionfor
uninterruptibleoperation(RPS)
•ExternalpowersupplyoptionforPoEand
PoE+fullpowerapplications(EPSupto
1,440W)
Industry standard management
•Industrystandardcommandlineinterface
(CLI),functionalNETGEARwebinterface
(GUI),SNMP,sFlowandRSPAN
•Single-pane-of-glassNMS300
managementplatformwithcentralized
rmwareupdatesandmass-conguration
support
Industry leading warranty
•NETGEARM4100seriesiscoveredunder
NETGEARProSAFELifetimeHardware
Warranty*
•90daysofTechnicalSupportviaphoneand
email,LifetimeTechnicalSupportthrough
onlinechatandLifetimeNextBusinessDay
hardwarereplacement

ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page2of35
FRONT REAR
Model
Name
Form
Factor
10/100
Base-T
RJ45
ports
10/100/
1000
Base-T
RJ45
ports
100/
1000X
FiberSFP
ports
PoE
802.3af
PoE+
802.3at
Storage
(image,
cong)
Power
Supply/
Powered
byPoE
RPS
(connec-
tor)
PoE
budget
(PSU/
Pass
through)
PoE
budget
(with
EPS)
Man-
age-
ment
console
Model
number
M4100-50-POE
Rack
mount
48 2 2 (shared)
48 PoE
802.3af
1 x USB
Internal/
No
1 (RPS or
EPS)
380W
Up to
740W
(EPS)
1x
RS232
DB9,
1x
Mini-USB
(select-
able)
FSM7250P
M4100-D12G Desktop - 12 2 (shared) -
External/
Yes
PD mode - - GSM5212
M4100-D12G-POE+ Desktop - 12 4 (shared)
10 PoE+
802.3at
Internal/
Yes
PD mode
120W/
25W
-
GSM5212P
v1h2
M4100-12GF
Rack
mount
- 12 12 (shared)
4 PoE+
802.3at
Internal/
No
1 (RPS) 150W -
GSM7212F
v1h2
M4100-26G
Rack
mount
- 26 4 (shared) -
Internal/
No
1 (RPS) - -
GSM7224
v2h2
M4100-50G
Rack
mount
- 50 4 (shared) -
Internal/
No
1 (RPS) - -
GSM7248
v2h2
M4100-26G-POE
Rack
mount
- 26 4 (shared)
24 PoE
802.3af
Internal/
No
1 (RPS or
EPS)
192W
Up to
380W
(EPS)
GSM7226LP
M4100-24G-POE+
Rack
mount
- 24 4 (shared)
24 PoE+
802.3at
Internal/
No
1 (RPS or
EPS)
380W
Up to
720W
(EPS)
GSM7224P
v1h2
M4100-50G-POE+
Rack
mount
- 50 4 (shared)
48 PoE+
802.3at
Internal/
No
1 (RPS or
EPS)
380W
Up to
1,440W
(EPS)
GSM7248P
Hardware at a Glance

ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 3 of 35
M4100-D12G isadesktop12x1000Base-T
version,Layer2+
•2sharedSFP
•ExternalPSU;fanless
•CanbepoweredbyPoE+
M4100-D12G-POE+isadesktop12x
1000Base-Tversion,Layer2+
•4sharedSFP;2portsPoE+“in”and10
portsPoE+“out”
•InternalPSUwithlowacoustics;120W
budget
•CanbepoweredbyPoE+andredistribute
25WPoEbudget
M4100-26G-POEisa24x1000Base-TPoE
version,Layer2+
•2x1000Base-Tand4sharedSFP
•InternalPSUwithRPS/EPS
•192Wbudgetandupto380WwithEPS
M4100-12GFisa12xSFPversionfor
aggregation,Layer2+
•12shared1000Base-T
•InternalPSUwithRPS
•4portsPoE+with150Wbudget
M4100-26Gisa26x1000Base-Tversion,
Layer2+
•4sharedSFP
•InternalPSUwithRPS
M4100-24G-POE+isa24x1000Base-TPoE+
version,Layer2+
•4sharedSFP
•InternalPSUwithRPS/EPS
•380Wbudgetandupto720WwithEPS
M4100-50-POEisa48x100Base-TPoE
version,Layer2+
•2Gigabitportswith2sharedSFP
•InternalPSUwithRPS/EPS
•380Wbudgetandupto720WwithEPS
M4100-50Gisa50x1000Base-Tversion,
Layer2+
•4sharedSFP
•InternalPSUwithRPS
M4100-50G-POE+isa48x1000Base-TPoE+
version,Layer2+
•2x1000Base-Tand4sharedSFP
•InternalPSUwithRPS/EPS
•380Wbudgetandupto1,440WwithEPS
Hardware at a Glance
Powered by PoE
PoE “passthrough” technology

ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page4of35
LAYER 2+ PACKAGE
Model
Name
Management
IPv4/IPv6
ACLandQoS,
DiServ
IPv4/IPv6
Multicast
Filtering
Auto-VoIP
Green
Ethernet
VLANs Convergence
IPv4
UnicastStatic
Routing
Model
Number
M4100
series
WebGUI;HTTPs
CLI;Telnet;SSH
SNMP,MIBs
RSPAN
L2,L3,L4,
ingress
1Kbps
IGMPandMLD
Snooping,IGMPand
MLDQuerier,MVR
Yes
EEE
(802.3az)
or
Energy
Detect
Mode
Static,Dynamic,
Voice,MAC,Subnet,
Protocol-based,
QinQ,PrivateVLANs
LLDP-MED,
RADIUS,
802.1X,timer
Yes
(Port-based,
Subnet,VLANs,
Loopback)
all
models
TABLE SIZE
Model
Name
Packet
buer
CPU ACLs
MACaddresstable
ARP/NDPtable
VLANs
DHCPserver
Fabric Latency
StaticRoutes
IPinterfaces
Multicast
IGMPGroup
membership
sFlow
Model
number
M4100
series
all
models
12Mb
600Mhz
128MRAM
32MFlash
50ACLs
512rules
(ingress)
16KMAC
512ARP/NDP
VLANs:1K
DHCP:16pools
1,024maxleases
Upto
100Gbps
allmodels
line-rate
1G
<3.91μs
100M
<10.194μs
64staticroutes
64IPinterfaces
IPv4
1K
32samplers
52pollers
8receivers
all
models
Software at a Glance
Performance at a Glance

The Intelligent Edge M4100 series switches are NETGEAR fully managed switches for 100M/1G access layer in SMB, Small Enterprise
and Campus networks. The M4100 series delivers the best combination of performance, security and convergence at a high-value price
point—unlike competitive, entry-level “SMB” solutions. Redundant power supply options (RPS), full PoE+ external power supply options
(EPS), Private VLANs, LLDP-MED and MVR take a scalable, future-proof approach to delivering network services for Wireless access points,
IP phones and IP cameras infrastructures.
NETGEAR Intelligent Edge M4100 series key features:
•Broadportfolioofaccesslayersolutions,rangingfrom12portsFastEthernetto50portsGigabitEthernet
•802.3afPoEand802.3atPoE+bestt,rangingfrom120Wto1,440Wpowerbudgetperswitch
•IPv4routinginLayer2+package(L3staticrouting)withIPv4/IPv6ACLsandQoS
•HighvalueL2/L3tableswith16KMAC,512ARP/NDP,9Kjumboframes,1KVLANs,64staticL3routes
•Redundantpowersupplyoptionforuninterruptibleoperation(RPS)
•ExternalpowersupplyoptionforPoEandPoE+full-powerapplications(EPS)
•GreenEthernetcomplianceformaximumpowereciency
NETGEAR Intelligent Edge M4100 series soware features:
•Automaticmulti-vendorVoiceoverIPprioritizationbasedonSIP,H323andSCCPprotocoldetection
•VoiceVLANandLLDP-MEDforautomaticIPphonesQoSandVLANconguration
•IPv4/IPv6MulticastlteringwithIGMPandMLDsnooping,QueriermodeandMVRforsimpliedvideodeployments
•Advancedclassier-basedhardwareimplementationforL2(MAC),L3(IP)andL4(UDP/TCPtransportports)inboundsecurityandprioritization
NETGEAR Intelligent Edge M4100 series link aggregation and channeling features:
•FlexiblePort-Channel/LAG(802.3ad)implementationformaximumcompatibility,faulttoleranceandloadsharingwithanytypeof
Ethernet channeling
•Includingstatic(selectablehashingalgorithms)ordynamicLAGs(LACP)
NETGEAR Intelligent Edge M4100 series management features:
•DHCP/BootPinnovativeauto-installationincludingrmwareandcongurationleuploadautomation
•IndustrystandardSNMP,RMON,MIB,LLDP,AAA,sFlowandRSPANimplementation
•SelectableserialRS232DB9andMini-USBportformanagementconsole
•StandardUSBportforlocalstorage,congurationorimageles
•Dualrmwareimageandcongurationleforupdateswithminimumserviceinterruption
•Industrystandardcommandlineinterface(CLI)forITadminsusedtoothervendorscommands
•FullyfunctionalWebconsole(GUI)forITadminswhopreferaneasytousegraphicalinterface
•Single-pane-of-glassNMS300managementplatformwithmass-congurationsupport
NETGEAR Intelligent Edge M4100 series warranty and support:
•NETGEARProSafeLifetimeHardwareWarranty*
•IncludedLifetimeOnlineChatTechnicalSupport
•IncludedLifetimeNextBusinessDayHardwareReplacement
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 5 of 35
Product Brief

ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page6of35
Layer 3 hardware with L2+ soware aordability
M4100 series models are built upon L3 hardware
platform while Layer 2+ soware package allows for
better budget optimization
• M4100 series uses latest generation silicon low-power 40-nanometer technology
• M4100 series L2 and L3 switching features (access control list, classification, filtering, IPv4 routing)
are performed in hardware at interface line rate for voice, video, and data convergence
M4100 series Layer 2+ soware package provides
straight forward IP static routing capabilities for
physical interfaces, VLANs and subnets
• Fast Ethernet 802.3af PoE: M4100-50-POE (48 ports)
• Gigabit: M4100-D12G (12 ports desktop); M4100-12GF (12 ports Fiber); M4100-26G (26 ports);
M4100-50G (50 ports)
• Gigabit 802.3af PoE: M4100-26G-POE (24 ports)
• Gigabit 802.3at PoE+: M4100-D12G-POE+ (12 ports desktop); M4100-24G-POE+ (24 ports);
M4100-50G-POE+ (48 ports)
• At the edge of campus networks or in the server room, static routes are oen preferred for simplicity
(L3 fixed routes to the next hop towards the destination network are manually added to the routing table),
without any impact on performance because L3 routing is wire-speed in M4100 series hardware
High-value switching performance
16KMACaddresstable,1KconcurrentVLANsand64staticroutesforSMBandsmallenterpriseaccesslayers
80PLUScertiedpowersuppliesforenergyhigheciency
GreenEthernetwithEnergyEcientEthernet(EEE)
denedbyIEEE802.3azEnergyEcientEthernet
Task Force
• M4100-D12G; M4100-26G; M4100-50G; M4100-26G-POE; M4100-50G-POE+
Green Ethernet with Energy Detect Mode
(unused ports automatic power o)
• M4100-50-POE; M4100-D12G-POE+; M4100-12GF; M4100-24G-POE+
Increased packet buering with up to 12 Mb dynamically shared accross all interfaces for most intensive virtualization applications
Low latency at all network speeds
Jumboframessupportofupto9Kbacceleratingstorageperformanceforbackupandcloudapplications
Ease of deployment
Placement outside the wiring closet (conference
rooms,oces,classrooms,salesoorinretail
stores, etc…)
• Forsecuredeploymentinopenareas,desktopversionscomewithaWallMountKitwithfourbrack-
ets
• M4100-D12G (GSM5212)
• M4100-D12G-POE+ (GSM5212P)
• Asanoption,aRackMountKitisorderable(420-10043-01)
Select desktop versions also come with a set of
strong magnets for mounting on any metal surface
• M4100-D12G (GSM5212)
Modern access layer features highlights
Installing M4100 desktop series on a Wall
Installing M4100 desktop series using Magnets

ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page7of35
AutomaticcongurationwithDHCPandBootPAutoInstalleaseslargedeploymentswithascalablecongurationlesmanagementcapability,mappingIPaddresses
and host names and providing individual configuration files to multiple switches as soon as they are initialized on the network
Both the Switch Serial Number and Switch primary MAC address are reported by a simple "show" command in the CLI - facilitating discovery and remote
configuration operations
AutomaticVoiceoverIPprioritizationwithAuto-VoIPsimpliesmostcomplexmulti-vendorIPtelephonesdeploymentseitherbasedonprotocols(SIP,H323and
SCCP) or on OUI bytes (default database and user-based OUIs) in the phone source MAC address; providing the best class of service to VoIP streams (both data and
signaling)overotherordinarytracbyclassifyingtrac,andenablingcorrectegressqueueconguration
AnassociatedVoiceVLANcanbeeasilyconguredwithAuto-VoIPforfurthertracisolation
When deployed IP phones are LLDP-MED compliant, the Voice VLAN will use LLDP-MED to pass on the VLAN ID, 802.1P priority and DSCP values to the IP phones,
accelerating convergent deployments
Versatile connectivity including “PoE Passthrough”
IEEE 802.3af Power over Ethernet (PoE) provides up to 15.4W per port (M4100-50-POE; M4100-26G-POE)
IEEE 802.3at Power over Ethernet Plus (PoE+) provides up to 30W per port (M4100-D12G-POE+; M4100-24G-POE+; M4100-50G-POE+)
Desktop versions can be powered by upstream PoE+ switch using their Port-1 (PD, PoE+ 30W): M4100-D12G and M4100-D12G-POE+
M4100-D12G-POE+canevenredistributePoEpowerfromtheupstreamPoE+switchtoVoIPphonesorotherdevicesinmeetingrooms,retailsalesoorsorother
challenging environments without outlet
Both IEEE 802.3at Layer 2 LLDP method and 802.3at 2-event classification methods are supported for compatibility with all PoE+ PD devices
Automatic MDIX and Auto-negotiation on all ports select the right transmission modes (half or full duplex) as well as data transmission for crossover or straight-
through cables dynamically for the admin
100Mbps backward compatiblity on all SFP ports
IPv6supportwithmulticasting(MLDforIPv6ltering),ACLsandQoS
Tier 1 availability
Rapid Spanning Tree (RSTP) and Multiple Spanning Tree (MSTP) allow for rapid transitionning of the ports to the Forwarding state and the suppression of Topology
Change Notification
IPaddressconictdetectionperformedbytheembeddedDHCPserverpreventsaccidentalIPaddressduplicatesfromperturbingtheoverallnetworkstability
Power redundancy for higher availability when mission critical, including hot-swap PSUs and Fans
Ease of management and control
Dual firmware image and dual configuration file for transparent firmware updates/configuration changes with minimum service interruption
Flexible Port-Channel /LAG (802.3ad) implementation for maximum compatibility, fault tolerance and load sharing with any type of Ethernet channeling from other
vendors switch, server or storage devices conforming to IEEE 802.3ad - including static (selectable hashing algorithms) or dynamic LAGs (highly tunable LACP Link
Aggregation Control Protocol )
Port names feature allows for descriptive names on all interfaces and better clarity in real word admin daily tasks
Loopback interfaces management for routing protocols administration
Private VLANs and local Proxy ARP help reduce broadcast with added security
Management VLAN ID is user selectable for best convenience
Industry-standard VLAN management in the command line interface (CLI) for all common operations such as VLAN creation; VLAN names; VLAN "make static"
for dynamically created VLAN by GRVP registration; VLAN trunking; VLAN participation as well as VLAN ID (PVID) and VLAN tagging for one interface, a group of
interfaces or all interfaces at once
SimpliedVLANcongurationwithindustry-standardAccessPortsfor802.1QunawareendpointsandTrunkPortsforswitch-to-switchlinkswithNativeVLAN
Modern access layer features highlights

ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 8 of 35
Modern access layer features highlights
System defaults automatically set per-port broadcast, multicast, and unicast storm control for typical, robust protection against DoS attacks and faulty clients which
can, with BYOD, oen create network and performance issues
IP Telephony administration is simplified with consistent Voice VLAN capabilities per the industry standards and automatic functions associated
Comprehensive set of "system utilities" and "Clear" commands help troubleshoot connectivity issues and restore various configurations to their factory defaults for
maximumadmineciency:traceroute(todiscovertheroutesthatpacketsactuallytakewhentravelingonahop-by-hopbasisandwithasynchronousresponse
when initiated from the CLI), clear dynamically learned MAC addresses, counters, IGMP snooping table entries from the Multicast forwarding database etc.
Allmajorcentralizedsowaredistributionplatformsaresupportedforcentralsowareupgradesandcongurationlesmanagement(HTTP,TFTP),includinginhighly
securedversions(HTTPS,SFTP,SCP)
Simple Network Time Protocol (SNTP) can be used to synchronize network resources and for adaptation of NTP, and can provide synchronized network timestamp
either in broadcast or unicast mode (SNTP client implemented over UDP - port 123)
EmbeddedRMON(4groups)andsFlowagentspermitexternalnetworktracanalysis
Remote mirroring (RSPAN) can transport packets captured on an interface on a source switch across the network to a destination on a possibly dierent
destination switch
Engineered for convergence
Audio (Voice over IP) and Video (multicasting) comprehensive switching, filtering, routing and prioritization
Auto-VoIP,VoiceVLANandLLDP-MEDsupportforIPphonesQoSandVLANconguration
IGMPSnoopingforIPv4,MLDSnoopingforIPv6andQueriermodefacilitatefastreceiversjoinsandleavesformulticaststreamsandensuremulticasttraconly
reaches interested receivers without the need of a Multicast router
Multicast VLAN Registration (MVR) uses a dedicated Multicast VLAN to forward multicast streams and avoid duplication for clients in dierent VLANs
Schedule enablement
Enterprise security
TraccontrolMACFilterandPortSecurityhelprestrictthetracallowedintoandoutofspeciedportsorinterfacesinthesysteminordertoincreaseoverall
securityandblockMACaddressoodingissues
DHCPSnoopingmonitorsDHCPtracbetweenDHCPclientsandDHCPserverstolterharmfulDHCPmessageandbuildsabindingsdatabaseof(MACaddress,
IPaddress,VLANID,port)tuplesthatareconsideredauthorizedinordertopreventDHCPserverspoongattacks
IPsourceguardandDynamicARPInspectionusetheDHCPsnoopingbindingsdatabaseperportandperVLANtodropincomingpacketsthatdonotmatchany
bindingandtoenforcesourceIP/MACaddressesformalicioususerstracelimination
Time-based Layer 2/Layer 3-v4/Layer 3-v6/Layer 4 Access Control Lists (ACLs) can be binded to ports, Layer 2 interfaces, VLANs and LAGs (Link Aggregation
Groups or Port channel) for fast unauthorized data prevention and right granularity
Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology
consistentandpredictable-unauthorizeddevicesorswitchesbehindtheedgeportsthathaveBPDUenabledwillnotbeabletoinuencetheoverallSTPtopology
by creating loops
Spanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance, unauthorized or
unexpectednewequipmentinthenetworkmayaccidentallybecomearootbridgeforagivenVLAN
Dynamic 802.1x VLAN assignment mode, including
Dynamic VLAN creation mode and Guest VLAN/
Unauthenticated VLAN are supported for rigorous user
andequipmentRADIUSpolicyserverenforcement
• Up to 48 clients (802.1x) per port are supported, including the authentication of the users domain, in
order to facilitate convergent deployments: for instance when IP phones connect PCs on their bridge, IP
phones and PCs can authenticate on the same switch port but under dierent VLAN assignment policies
(Voice VLAN versus data VLAN)

ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page9of35
802.1x MAC Address Authentication Bypass (MAB)
is an alternative method for non-Radius clients
• A list of authorized MAC addresses of client NICs is maintained on the RADIUS server for MAB pur-
pose
• MAB can be configured on a per-port basis on the switch
• MAB initiates only aer the dot1x authentication process times out, and only when clients don’t respond
to any of the EAPOL packets sent by the switch
• When 802.1x unaware clients try to connect, the switch sends the MAC address of each client to the
authentication server
• The RADIUS server checks the MAC address of the client NIC against the list of authorized addresses
• The RADIUS server returns the access policy and VLAN assignment to the switch for each client
DoubleVLANs(DVLAN-QinQ)passtracfromonecustomerdomaintoanotherthroughthe“metrocore”inamulti-tenancyenvironment:customerVLANIDsare
preservedandaserviceproviderVLANIDisaddedtothetracsothetraccanpassthemetrocoreinasimple,securemanner
Private VLANs (with Primary VLAN, Isolated VLAN,
CommunityVLAN,Promiscuousport,Hostport,
Trunks) provide Layer 2 isolation between ports
that share the same broadcast domain, allowing a
VLAN broadcast domain to be partitioned into smaller
point-to-multipoint subdomains across switches in
the same Layer 2 network
• Private VLANs are useful in DMZ when servers are not supposed to communicate with each other but
need to communicate with a router; they remove the need for more complex port-based VLANs with
respective IP interface/subnets and associated L3 routing
• Another Private VLANs typical application are carrier-class deployments when users shouldn’t see, snoop
orattackotherusers’trac
SecureShell(SSH)andSNMPv3(withorwithoutMD5orSHAauthentication)ensureSNMPandTelnetsessionsaresecured
TACACS+ and RADIUS enhanced administrator management provides strict "Login" and "Enable" authentication enforcement for the switch configuration, based on
latestindustrystandards:execauthorizationusingTACACS+orRADIUS;commandauthorizationusingTACACS+andRADIUSServer;userexecaccountingforHTTP
andHTTPSusingTACACS+orRADIUS;andauthenticationbasedonuserdomaininadditiontouserIDandpassword
Superior quality of service
Advanced classifier-based hardware implementation for Layer 2 (MAC), Layer 3 (IP) and Layer 4 (UDP/TCP transport ports) prioritization
8queuesforprioritiesandvariousQoSpoliciesbasedon802.1p(CoS)andDiServcanbeappliedtointerfacesandVLANs
Advancedratelimitingdownto1Kbpsgranularityandmininum-guaranteedbandwidthcanbeassociatedwithACLsforbestgranularity
Automatic Voice over IP prioritization with Auto-VoIP
Advanced Layer 2+ routing package
Static Routes/ECMP Static Routes for IPv4
• Static and default routes are configurable with next IP address hops to any given destination
• 64 static routes are configurable for IPv4
• Permitting additional routes creates several options for the network administrator
• The admin can configure multiple next hops to a given destination, intending for the router to load share
across the next hops
• The admin distinguishes static routes by specifying a route preference value: a lower preference value is a
more preferred static route
• A less preferred static route is used if the more preferred static route is unusable (down link, or next hop
cannot be resolved to a MAC address)
Modern access layer features highlights

ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page10of35
Modern access layer features highlights
Advanced Static Routing functions for administrative
traccontrol
• StaticRejectRoutesarecongurabletocontrolthetracdestinedtoaparticularnetworksothatitisnot
forwarded through the router
• SuchtracisdiscardedandtheICMPdestinationunreachablemessageissentbacktothesource
• Staticrejectroutescanbetypicallyusedtopreventroutingloops
• Default routes are configurable as a preference option
In order to facilitate VLAN creation and VLAN routing
using Web GUI, a VLAN Routing Wizard oers follow-
ing automated capabilities
• CreateaVLANandgenerateauniquenameforVLAN
• Add selected ports to the newly created VLAN and remove selected ports from the default VLAN
• Create a LAG, add selected ports to a LAG, then add this LAG to the newly created VLAN
• Enable tagging on selected ports if the port is in another VLAN
• Disable tagging if a selected port does not exist in another VLAN
• Exclude ports that are not selected from the VLAN
• Enable routing on the VLAN using the IP address and subnet mask entered as logical routing interface
DHCPRelayAgentsrelayDHCPrequestsfromany
routedinterface,includingVLANs,whenDHCPserver
doesn’t reside on the same IP network or subnet
• TheagentrelaysrequestsfromasubnetwithoutaDHCPservertoaserverornext-hopagentonanother
subnet
• UnlikearouterwhichswitchesIPpacketstransparently,aDHCPrelayagentprocessesDHCPmessages
andgeneratesnewDHCPmessages
• SupportsDHCPRelayOption82circuit-idandremote-idforVLANs
• MultipleHelperIPsfeatureallowstocongureaDHCPrelayagentwithmultipleDHCPserveraddresses
per routing interface and to use dierent server addresses for client packets arriving on dierent inter-
faces on the relay agent server addresses for client packets arriving on dierent interfaces on the relay
agent
Flow Control
802.3x Flow Control implementation per IEEE 802.3
Annex31BspecicationswithSymmetricow
control,AsymmetricowcontrolorNoowcontrol
AsymmetricowcontrolallowstheswitchtorespondtoreceivedPAUSEframes,buttheportscannot
generate PAUSE frames
Symmetricowcontrolallowstheswitchtobothrespondto,andgenerateMACcontrolPAUSEframes
Allowstracfromonedevicetobethrottledforaspeciedperiodoftime:adevicethatwishestoinhibittransmissionofdataframesfromanotherdeviceonthe
LAN transmits a PAUSE frame

WhyM4100seriesforthe
edgeofsmallenterprise
networks?
BecausetheM4100seriesoersupto3x
bettervalue:
•Combiningsuperiorresiliencyandadvanced
security, NETGEAR Intelligent Edge managed
switches feature comprehensive Layer 2,
Lite Layer 3 and Layer 4 switching; including
fiber aggregation capabilities. Unlike other
‘cost conscious’ products from competitors,
the NETGEAR Intelligent Edge series has
been designed from the ground up for
organizationsrequiringintelligenceatthe
network edge.
•Aordableandreliable,theseaccesslayer
switches win as a proficient component of
secure, converged voice, video and data
networking solutions.
1
2
3
NET GEAR
ProSAFE
M6100-3S
XCM892 4X
Reset
SFP SPD/Link/ ACT Mode: Green = Link at 10G Yellow = Link at 1G
Blink = ACT
Green =
Link at 10G
Yellow=
USB
OOB
Consol e
100M/1G
Blink=ACT
Supervisor
PWR /
Status
1F
2F
1T
2T
3F
4F
3T
4T
5F
6F
5T
6T
7F
8F
7T
8T
9F
10F
9T
10T
11F
12F
11T
12T
13F
14F
13T
14T
15F
16F
15T
16T
RJ45 SP D/ Link /AC T Mode: Green = Li nk at 10G Yellow = Li nk at 100M/1G Blink = ACT
23
24
21
22
19
20
17
18
Link at
XCM892 4X
Reset
SFP SPD/Link/ ACT Mode: Green = Link at 10G Yellow = Link at 1G
Blink = ACT
Green =
Link at 10G
Yellow=
USB
OOB
Consol e
100M/1G
Blink=ACT
Supervisor
PWR /
Status
1F
2F
1T
2T
3F
4F
3T
4T
5F
6F
5T
6T
7F
8F
7T
8T
9F
10F
9T
10T
11F
12F
11T
12T
13F
14F
13T
14T
15F
16F
15T
16T
RJ45 SP D/ Link /AC T Mode: Green = Li nk at 10G Yellow = Li nk at 100M/1G Blink = ACT
23
24
21
22
19
20
17
18
Link at
XCM8944F
Reset
43T
44T
Link
Green= 10G
Yellow=
USB
OOB
Consol e
100M/1G
Blink=ACT
Supervisor
PWR /
Status
Link
Green= 10G
Yellow=1G
Blink=ACT
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41F
42F
SFP SPD/Li nk /ACT Mode : G re en = Lin k at 1G Yellow = Lin k a t 100 M Blin k = AC T
SPD/Link/ACT
GSM5212P
Power
Reset
Fan
PD
SPD/Link/ACT
SFP SPD/Link/ACT mode:
Green = Link at 1G
Yellow = Link at 100M
Blink = ACT
MaxPoE
PoE
1 3 5 7 9T 10T8642 11T 12T 11F 12F9F 10F
PoE (Max 30W per port):
Off = No PD
Green = PoE Powered
Yellow = PoE Fault
Off = No PSE
Green = PSE 30w
Yellow = PSE 15.4w
PoE-PD (Port 1,2):
Blink = ACT
Yellow = 10/100M
RJ45 SPD/Link/ACT mode:
Green = 1G
USB
115200,N,8,1
Console(USB)
USB DB9
P
RO
S
AFE
GSM7212F
SPD/Link/ACT
SPD:
Green = 1G
Yellow = 10/100M
115200,N,8,1
Console(USB)
USB DB9
P
RO
S
AFE
Power
Reset
Fan
RPS
MaxPoE
USB
Link/Act mode:
OFF = No Link
Green = Link
Blinking = ACT
1F 2F 3F 4F 5F 6F 7F 8F 9F 10F 11F 12F1T 2T 3T 4T 5T 6T 7T 8T 9T 10T 11T 12T
SPD/Link/ACT
SFP Link/Act mode:
Green = Link at 1G
Yellow = Link at 100M
Blink = ACT
PoE (Max 30W per port):
Off = No PD
Green = PoE Powered
Yellow = PoE Fault
RJ45 Link/Act mode:
Green = Link at 1G
Yellow = Link at 10/100M
Blink = ACT
PoE SPD/Link/ACT SPD Link/ACT
M4100-24G-POE+
M4100-26G-POE
M6100 Chassis Switch series
MDF – BUILDING 1
2.4
GHz GHz
5
Meeting Room
2.4
GHz GHz
5
MDF – BUILDING 2
M4100-12GF
M4100-D12G-POE+
M4100-24G-POE+
M4100-48G-POE+
IDF – BUILDING 2
Fiber, 1000SX multimode
Fiber, 1000LX single mode
Copper, Gigabit PoE+
Powering desktop switches
Copper, Gigabit PoE / PoE+
2.4
GHz GHz
5
Copper, Gigabit
SERVER ROOM – BUILDING 1
1 2 3 4
actbackup
1 2 3 4
1 2 3 4
actbackup
1 2 3 4
M4100-26G
M4100-50G
M4100-50-POE
IDF – BUILDING 2
PoE
Passthrough
mode
SPD/Link/ACT
GSM5212P
Power
Reset
Fan
PD
SPD/Link/ACT
SFP SPD/Link/ACT mode:
Green = Link at 1G
Yellow = Link at 100M
Blink = ACT
MaxPoE
PoE
1 3 5 7 9T 10T8642 11T 12T 11F 12F9F 10F
PoE (Max 30W per port):
Off = No PD
Green = PoE Powered
Yellow = PoE Fault
Off = No PSE
Green = PSE 30w
Yellow = PSE 15.4w
PoE-PD (Port 1,2):
Blink = ACT
Yellow = 10/100M
RJ45 SPD/Link/ACT mode:
Green = 1G
USB
115200,N,8,1
Console(USB)
USB DB9
PROSAFE
Meeting Room
M4100-D12G
Powered
By
PoE
Meeting Room
M4100-D12G-POE+
M4100-50G
Power
Reset
Fan
RPS
USB
SFP SPD/Link/ACT mode: Green=Link at 1G Yellow=Link at 100M Blink =ACT
49F
50F
47F
48F26
25
28
27
30
29
32
31
34
33
36
35
38
37
40
39
42
41
44
43
46
45
48T
47T
2
1
4
3
6
5
8
7
10
9
12
11
14
13
16
15
18
17
20
19
22
12
24
23
RJ45 SPD/Link/ACT mode: Green=1G Yellow=10/100M Blink=AC T
50T
49T
Combo Ports
M4100-26G-POE
SFP SPD mode: Green=Link at 1G Yellow=Link at 100M Blink=ACT
13 15 17 19 21
2220181614
25F
26F
23F
24F
P
RO
S
AFE
Power
Reset
Fan
RPS
Max
USB
1 3 5 7 9
108642
PoE (Max 15.4 W per port):
Off = No PD
Green = PoE Powered
Yellow = PoE Fault
Blink = ACT
Yellow = Link at 10/100M
RJ45 SPD mode:
Green = Link at 1G
23T
24T
11
12
PoE
Combo Ports
PoE SPD
12
11
10
9
8
7
6
5
4
3
2
1 25T
26T
25F
26F
SPO Link/Act
25T
26T
23F
24F
13
24T
23T
22
21
20
19
18
17
16
15
14
GSM7224P
SPD/Link/ACT
SFP SPD/Link/ACT mode:
Green = Link at 1G
Yellow = Link at 100M
Blink = ACT
13
15
17
19
21T
22T20181614
23F
24F21F
22F
115200,N,8,1
Console(USB)
USB DB 9
P
RO
S
AFE
Power
Reset
Fan
RPS
MaxPoE
USB
SPD/Link/ACTPoE
1
3
5
7
9T
10T8642
PoE (Max 30W per port):
Off = No PD
Green = PoE Powered
Yellow = PoE Fault
Blink = ACT
Yellow = 10/100M
RJ45 SPD/Link/ACT mode:
Green = 1G
11T
12T 23T
24T
M4100-50G-POE+
Power
Reset
Fan
RPS
USB
49F
50F
PoE (Max 30W per port): Of f = no PD Green = PoE Powered Y ellow = PoE f ault RJ45 SPD mode: Green = Link at 1G Yellow=Link at 10/100M Blink = ACT
2
1
4
3
6
5
8
7
10
9
12
11
14
13
16
15
18
17
20
19
22
21
24
23
26
25
28
27
30
29
32
31
34
33
36
35
38
37
40
39
42
41
44
43 45
48T
47T
46
Combo Ports
49T
50T
47F
48F
Max
PoE
SFP SPD/Link/ACT mode: Green=Link at 1G Y ellow=Link at 100M Blink=ACT
PoE
SPD
13
14
15
16
17
18
19
20
21
22
23
24
12
11
10
9
8
7
6
5
4
3
2
1
36
35
34
33
32
31
29
28
27
26
25
30
48T
47T
46
45
44
43
41
40
39
38
37
42
50T
49T
48F
47F
50F
49F
M4100-50-POE
Power
Reset
Fan
RPS
USB
PoE (Max 15.4W per port): Of f = no PD Green = PoE Powered Yellow = PoE fault RJ45 SPD mode: Green = Link at 100M Yellow=Link at 10M Blink = ACT
2
1
4
3
6
5
8
7
10
9
12
11
14
13
16
15
18
17
20
19
22
21
24
23
26
25
28
27
30
29
32
31
34
33
36
35
38
37
40
39
42
41
44
43 45
48
47
46
Combo Ports
49T
50T
49F
50F
Max
PoE
SFP SPD/Link/ACT mode: Green=Link at 1G Y ellow=Link at 100M Blink =ACT
PoE SPD
13
14
15
16
17
18
19
20
21
22
23
24
12
11
10
9
8
7
6
5
4
3
2
1 36
35
34
33
32
3129
28
27
26
25
30 48
47
46
45
44
4341
40
39
38
37
42 50T
49T
50F
49F
Ports 49T, 50T
SPD: Green=1G
Yellow=10/100M
Link/ACT mode:
Off=No link
Green=Link
Blinking=ACT
SPD Link/ACT
GSM7224P
SPD/Link/ACT
SFP SPD/Link/ACT mode:
Green = Link at 1G
Yellow = Link at 100M
Blink = ACT
13 15 17 19 21 T 22T20181614 23F 24F21F 22F
115200,N,8,1
Console(USB)
USB DB 9
P
RO
S
AFE
Power
Reset
Fan
RPS
MaxPoE
USB
SPD/Link/ACTPoE
1 3 5 7 9T 10T8642
PoE (Max 30W per port):
Off = No PD
Green = PoE Powered
Yellow = PoE Fault
Blink = ACT
Yellow = 10/100M
RJ45 SPD/Link/ACT mode:
Green = 1G
11T 12T 23T 24T
M4100-26G
Power
Reset
Fan
RPS
USB
SFP SPD/Link/ACT mode: Green = Link at 1G Yellow = Link at 100M Blink = ACT
25F
26F
RJ45 SPD/Link/ACT mode:
23F
24F2
1
4
3
6
5
8
7
10
9
12
11
14
13
16
15
18
17
20
19
22
21
24T
23T
Green = 1G
Yellow = 10/100M
Blink = ACT
26T
25T
Combo Ports
SPD/Link/ACT
GSM5212P
Power
Reset
Fan
PD
SPD/Link/ACT
SFP SPD/Link/ACT mode:
Green = Link at 1G
Yellow = Link at 100M
Blink = ACT
MaxPoE
PoE
1 3 5 7 9T 10T8642 11 T 12T 11F 12F9F 10F
PoE (Max 30W per port):
Off = No PD
Green = PoE Powered
Yellow = PoE Fault
Off = No PSE
Green = PSE 30w
Yellow = PSE 15.4w
PoE-PD (Port 1,2):
Blink = ACT
Yellow = 10/100M
RJ45 SPD/Link/ACT mode:
Green = 1G
USB
115200,N,8,1
Console(USB)
USB DB9
P
RO
S
AFE
PoE
Passthrough
mode
M4100-50G-POE+
Power
Reset
Fan
RPS
USB
49F
50F
PoE (Max 30W per port): Of f = no PD Green = PoE Powered Y ellow = PoE f ault RJ45 SPD mode: Green = Link at 1G Yellow=Link at 10/100M Blink = ACT
2
1
4
3
6
5
8
7
10
9
12
11
14
13
16
15
18
17
20
19
22
21
24
23
26
25
28
27
30
29
32
31
34
33
36
35
38
37
40
39
42
41
44
43 45
48T
47T
46
Combo Ports
49T
50T
47F
48F
Max
PoE
SFP SPD/Link/ACT mode: Green=Link at 1G Y ellow=Link at 100M Blink=ACT
PoE
SPD
13
14
15
16
17
18
19
20
21
22
23
24
12
11
10
9
8
7
6
5
4
3
2
1
36
35
34
33
32
31
29
28
27
26
25
30
48T
47T
46
45
44
43
41
40
39
38
37
42
50T
49T
48F
47F
50F
49F
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 11 of 35
Target Application

1. Versatile, Protected and Expendable Power
The M4100 series are the first aordable managed switches with
both redundant and external power supply capabilities - key for critical
applications such as VoIP, IP surveillance and Wireless access points.
PoE devices gobble increasing amounts of PoE power, yet existing
SMB switching solutions from other vendors don’t scale to full power.
Although most servers in SMB networks have dual power supplies,
switches in SMB networks have not – until now.
Select desktop switches in the M4100 series can be powered by PoE
as a cost-eective solution when there is no existing electrical wiring or
power outlets, as the switch can draw power directly from the wiring
closet.TheexibilityofaPoEswitchisalsoconvenientformeeting
rooms and open spaces where visible electrical wiring is unsightly or
impractical. One PoE+ downlink (30W) from the upstream switch
issucientforthestandardoperationoftheM4100-D12Gand
M4100-D12G-POE+ switches. This also increases resiliency for critical
installations: the Power over Ethernet PD connection on these switches
also doubles as a redundant power supply (RPS) should the switch be
locally powered.
Innovative PoE passthrough technology even lets M4100-D12G-
POE+ power local PoE PD devices - redistributing PoE budget from
the upstream switch. Up to 25W of power can be available for local
PD devices - extending the reach of PoE deployments beyond the
100-meter or 328-feet bar: the M4100-D12G-POE+ can function
as a “PoE repeater” for powering remote IP cameras, Wireless access
points, etc.
For all other rackmount Power over Ethernet models in the NETGEAR
Intelligent Edge M4100 series, in addition to their built-in PSU providing
more PoE power than competitive solutions at a similar price point, the
NETGEAR Intelligent Edge M4100 series is the only one allowing for an
additional PoE power “upgrade” via external power supply; immediately
or at later times.
Short story, all rackmount switches in the NETGEAR M4100 series are
either PoE Full Power capable already or PoE Full Power capable when
drawing external power from the RPS4000. All 24-port and 48-port
models can scale up to 802.3af PoE full power or 802.3at PoE+ full
power simultaneously for all ports. This is real investment protection.
2. Security and Control
Enhanced security includes network access control and isolation for
improved convergence of voice, video and data: dynamic 802.1x VLAN
assignment mode, including Dynamic VLAN creation mode and Guest
VLAN / Unauthenticated VLAN are supported for rigorous user and
equipmentpolicyenforcementfromaRADIUSserver.TheRADIUS
server can also be the Network Policy Server (NPS) in Microso®
Windows Server™ 2008 or 2012, when in an Active Directory domain.
Up to 48 clients (802.1x) per port are supported, including the
authentication of a user’s domain, in order to facilitate convergent
deployments. When IP phones connect PCs on their bridge, IP phones
and PCs authenticate on the same switch port but under dierent
VLAN assignment policies (Voice VLAN versus data VLAN) - providing
administratorswithgreaterexibilityduringdeploymentandpolicy
enforcement.
For 802.1x unaware clients, 802.1x MAC Address Authentication
Bypass (MAB) is a great alternative: when 802.1x unaware clients try
to connect, the switch sends their MAC addresses to the authentication
server. When checked, the RADIUS server returns the access policy and
VLAN assignment to the switch for each client.
Enhanced security also includes better network isolation with Private
VLANs, providing Layer 2 isolation between ports that share the same
broadcast domain. A VLAN broadcast domain can be partitioned into
smaller point-to-multipoint subdomains across switches in the same
Layer 2 network. This is useful for IP camera deployments, or in the
DMZ when servers are not supposed to communicate with each other
but need to communicate with a router. Private VLANs remove the
need for more complex port-based VLANs with respective IP interface/
subnets and associated L3 routing.
3. Reliability
Learn how the NETGEAR M4100 series delivers more for less: all models
provide much longer MTBF (average lifetime) thanks to better/higher
qualitycomponentsandcircuitry.
For instance, the desktop 8-port PoE Fast Ethernet M4100-D10-
POE (FSM5210P) is predicted to have an average mean time between
failure of 579,985 hours, or 66 years at an ambient standard 25°C
temperature (77°F). The rackmount 24-port PoE Gigabit Ethernet
M4100-26G-POE (GSM7226LP) is to predicted to have an average
mean time between failure of 437,199 hours, more than 49 years. This
is nearly double the reliability of the closest competitive solutions in this
price band.
Conclusion
The M4100 series delivers an unbeatable combination of performance,
security and convergence for voice, video and data networking solutions.
Due to the wide adoption of virtualization, the convergence of voice,
video, and data and the rapid proliferation of bandwidth-intensive
applications, small and mid-sized businesses, hospitals and schools
today have security, control and reliability needs similar to those of large
enterprises. For approximately the same price as low-end solutions
currently on the market aimed at SMBs, NETGEAR is oering high-
end features that have so far been reserved only for enterprise-class
oerings available at double or triple the price point.
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page12of35
Three Reasons to Get Started Today with the NETGEAR M4100 series

• The RPS4000 can be connected to a maximum of four switches (any combination
of M5300 series switches is supported) using RPS switch connectors and RPS cables
• The RPS4000 provides protection against electrical issues such as high-voltage
(input, output) or short circuits for maximum security
• The RPS4000 can accommodate up to four hot-swap APS1000W power
modules
– Eitherone,two,threeorfourAPS1000Wpowermodulesarerequired,
depending on RPS or EPS application (see combinations in “Number of
APS1000W” table)
• In RPS mode with only one APS1000W power module, RPS4000 can protect up
to four (4) non-PoE or PoE M4100 series switches
– In case of a general switches power feed failure, powering all four switches
simultaneously for 12V DC system power
– RPS4000takesoveranddeliversadequatepowerwithoutanyservice
interruption (continuous monitoring)
– When the switch internal power is restored, the RPS4000 stops supplying
power to the switch automatically, again without any service interruption
• In RPS mode with multiple APS1000W power module combinations, RPS4000
can protect up to four (4) PoE M4100 series switches
– In case of a general switches power feed failure, powering all four switches
simultaneously (12V DC system power and -56V DC PoE)
– Same RPS functionality as with non-PoE switches including PoE power budget
protection
– One-to-one mode (one APS1000W power module / one PoE M4100
switch) provides 720W PoE budget protection for each switch
– One APS1000W power module can be used for two (2) PoE M4100 series
switches instead, providing 380W PoE budget protection for each switch
• In EPS mode with multiple APS1000W power module combinations, RPS4000
allows for various PoE 802.3af and 802.3at “full power” applications
– Supports M4100-50-POE, M4100-26G-POE; M4100-24G-POE+ and
M4100-50G-POE+
– Superseding switches main PSU for PoE budget and switch powering
– Delivering -56V DC for PoE power and 12V for switch power
– Switch main PSU system acts as built-in RPS for both switch power and PoE
budget protection
• In EPS mode, power slots can be organized into groups of two (Group 1 and Group
2) allowing for APS1000W power modules bridging
– Two APS1000W power modules can be bridged and deliver 1,440W PoE
budget to one 48-port switch M4100-50G-POE+
• Power slots can be configured for RPS or EPS mode
– All four power slots can be combined together with only one APS1000W
power module for four (4) 12V switches RPS application
– Power slots can be utilized in one-to-one mode for PoE switches RPS or
EPS applications
– Power slots can be combined two by two for PoE switches RPS or
EPS applications
The RPS4000 RPS/EPS unit supports the following key features:
•RPS mode: provide power backup for up to four switches concurrently
– With same level of protection as with four dedicated, “one-to-one” RPS units
•EPS mode: provide supplemental PoE power up to four switches concurrently
– Up to 2,880W shared PoE+ budget
– When in EPS mode, RPS4000 supersedes each switch main PSU
– Switch main PSU system power reverts to redundant power supply (RPS) function
RPS4000
RPS/EPS unit for up to 4 concurrent switches
Ordering information
•Americas, Europe: RPS4000-200NES
•Asia Pacific: RPS4000-200AJS
•Warranty: 5 years
Front view
• RPS4000 is 1RU unit with four (4) empty slots
• Power modules (APS1000W) are sold separately
• APS1000WrequirementdependsonRPS,EPS,PoEapplication
Rear view
• Four (4) embedded RPS connectors
• Switch selectors for RPS/EPS power modes
• Switch selectors for power modules two-by-two bridging
Included:
• Four (4) RPS cables - 60cm each (~2 )
• Rack mount kit
• Power cord
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 13 of 35
Accessories

Number of APS1000W 1 POWER MODULE 2 POWER MODULES 3 POWER MODULES 4 POWER MODULES
RPS mode
(Redundant Power Supply)
Up to 4 switches
(non-PoEversions)
M4100-26Gor
M4100-50Gor
M4100-12GF
Complete protection
12Vsystempower
Or:
Up to 2 switches (PoE versions)
M4100-50-POEor
M4100-12GF
M4100-26G-POEor
M4100-24G-POE+
orM4100-50G-POE+
Up to 4 switches (PoE versions)
M4100-50-POEor
M4100-12GF
M4100-26G-POEor
M4100-24G-POE+
orM4100-50G-POE+
Complete protection
12Vsystempowerand
-56VPoEpower
Up to 4 switches (PoE versions)
M4100-50-POEor
M4100-12GF
M4100-26G-POEor
M4100-24G-POE+
orM4100-50G-POE+
Complete protection
12Vsystempower
and-56VPoEpower
4 switches (PoE versions)
M4100-50-POEor
M4100-12GF
M4100-26G-POEor
M4100-24G-POE+
orM4100-50G-POE+
Complete protection
12Vsystempower
and-56VPoEpower
EPS mode
(External Power Supply)
720WPoEbudgetavailable(total)
forup to 2 switches
(PoEversions)
M4100-50-POEor
M4100-26G-POE
M4100-24G-POE+or
M4100-50G-POE+
1,440WPoEbudgetavailable
(total)forup to 4 switches
(PoEversions)
M4100-50-POEor
M4100-26G-POE
M4100-24G-POE+or
M4100-50G-POE+
2,160WPoEbudgetavailable
(total)forup to 4 switches
(PoEversions)
M4100-50-POEor
M4100-26G-POE
M4100-24G-POE+or
M4100-50G-POE+
2,880WPoEbudgetavailable
(total)forup to 4 switches
(PoEversions)
M4100-50-POEor
M4100-26G-POE
M4100-24G-POE+or
M4100-50G-POE+
Example for PoE
applications:
(802.3af full power)
OneM4100-50-POE
providing720W
46portsfullpower
802.3afPoE
TwoM4100-50-POE
providing720Weach
96portsfullpower
802.3afPoE
ThreeM4100-50-POE
providing720Weach
138portsfullpower
802.3afPoE
FourM4100-50-POE
providing720Weach
192portsfullpower
802.3afPoE
Example for PoE+
applications:
(802.3at full power)
OneM4100-24G-POE+
providing720W
24portsfullpower
802.3atPoE+
OneM4100-50G-POE+
providing1,440W
48portsfullpower
802.3atPoE+
OneM4100-24G-POE+
providing720W
OneM4100-50G-POE+
providing1,440W
72portsfullpower
802.3atPoE+
TwoM4100-50G-POE+
providing1,440Weach
96portsfullpower
802.3atPoE+
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page14of35
Accessories

Inserting one APS1000W
in RPS4000 power slot #1
(front view)
RPS4000equippedwith
4 APS1000W power modules
(front view)
Capacity:
– 110V-240V AC power input
– Up to 960W DC 12V output power for up to 4 switches (RPS)
– Up to 720W DC -56V PoE budget output power for up to 2
PoE switches (EPS)
•Optimal Power® RPS unit certified by NETGEAR for
M4100 series
•Includes the RPS cable for the switch RPS connector
•Provides seemless “one-to-one” redundant power to the Switch
•56V DC power limited to 308W (maximum PoE budget)
•M4100 series desktop switches come with wall mount kit only
•This optional rack mount kit contains two brackets for standard
19’’ rack mount
•Compatible with:
– M4100-D12G (GSM5212)
– M4100-D12G-POE+ (GSM5212P)
APS1000W
Power Module for RPS4000
RPS5412
RPS unit for 1 switch
by Optimal Power®
420-10043-01
Rack mount kit for M4100
series desktop versions
Ordering information
•Americas, Europe:
APS1000W-100NES
•Asia Pacific: APS1000W-100AJS
•Warranty: 5 years
Ordering information
•Americas: RPS5412-100NAS
•Europe: RPS5412-100EUS
•Asia Pacific: RPS5412-100AJS
•Warranty: 3 years
Ordering information
•Worldwide: 420-10043-01
•Warranty: 5 years
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 15 of 35
Accessories

ORDERING INFORMATION
WORLDWIDE: SEETABLEBELOW
WARRANTY: 5 YEARS
Multimode Fiber (MMF)
Single mode Fiber
(SMF)
OM1orOM2
62.5/125µm
OM3orOM4
50/125µm
9/125µm
Gigabit SFP
AGM731F
1000Base-SX short range multimode
LC duplex connector
up to 275m (902 )
AGM731F (1 unit)
AGM731F
1000Base-SX short range
multimode
LC duplex connector
OM3: up to 550m (1,804 )
OM4: up to 1,000m (3,280 )
AGM731F (1 unit)
AGM732F
1000Base-LX long range single mode
LC duplex connector
up to 10km (6.2 miles)
AGM732F (1 unit)
Fast Ethernet SFP
AFM735
100Base-FX IEEE 802.3
LC duplex connector
up to 2km (1.24 miles)
AFM735-10000S (1 unit)
AFM735
100Base-FX IEEE 802.3
LC duplex connector
up to 2km (1.24 miles)
AFM735-10000S (1 unit)
• FitsintoM4100seriesSFP
interfaces(front)
• FitsintoM4100seriesSFP
interfaces(front)
Accessories
GBIC SFP Optics for M4100 series
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page16of35

• Requirementsbasedon10.x
soware release
• Layer 2+ package includes
Layer 3 static routing
Model Name Description Model number
M4100-50-POE
48portsFastEthernetPoE802.3af,Layer2+sowarepackage FSM7250P
M4100-D12G
Desktop12portsGigabit,Layer2+sowarepackage GSM5212
M4100-D12G-POE+
Desktop12portsGigabitPoE+802.3at,Layer2+sowarepackage GSM5212Pv1h2
M4100-12GF
12portsGigabitFiber,Layer2+sowarepackage GSM7212Fv1h2
M4100-26G
26portsGigabit,Layer2+sowarepackage GSM7224v2h2
M4100-50G
50portsGigabit,Layer2+sowarepackage GSM7248v2h2
M4100-26G-POE
24portsGigabitPoE802.3af,Layer2+sowarepackage GSM7226LP
M4100-24G-POE+
24portsGigabitPoE+802.3at,Layer2+sowarepackage GSM7224Pv1h2
M4100-50G-POE+
48portsGigabitPoE+802.3at,Layer2+sowarepackage GSM7248P
TECHNICALSPECIFICATIONS
PHYSICAL INTERFACES
Front
Auto-sensing RJ45
10/100
Auto-sensing RJ45
10/100/1000
Auto-sensing SFP ports
100/1000Base-X
Console port
(selectable)
Storage Port
M4100-50-POE 48 2 2(shared) -
1xUSB
Firmware,
Conguration
Files
M4100-D12G - 12 2(shared) -
M4100-D12G-POE+ - 12 4(shared) Mini-USB
M4100-12GF - 12 12(shared) Mini-USB
M4100-26G - 26 4(shared) -
M4100-50G - 50 4(shared) -
M4100-26G-POE - 26 4(shared) -
M4100-24G-POE+ - 24 4(shared) Mini-USB
M4100-50G-POE+ - 50 4(shared) -
Rear Power Supply RPS/EPS connector Console port (selectable) Physical security
M4100-50-POE
Fixed,internal 1
SerialRS232DB9,Mini-USB
1KensingtonLockSlot
M4100-D12G External - SerialRS232DB9,Mini-USB
M4100-D12G-POE+ Fixed,internal - SerialRS232DB9
M4100-12GF Fixed,internal 1 SerialRS232DB9
M4100-26G Fixed,internal 1 SerialRS232DB9,Mini-USB
M4100-50G Fixed,internal 1 SerialRS232DB9,Mini-USB
M4100-26G-POE Fixed,internal 1 SerialRS232DB9,Mini-USB
M4100-24G-POE+ Fixed,internal 1 SerialRS232DB9
M4100-50G-POE+ Fixed,internal 1 SerialRS232DB9,Mini-USB
Total Port Count Fast Ethernet Gigabit
M4100-50-POE 48portstotal 2portstotal
M4100-D12G
- 12portstotal
M4100-D12G-POE+ - 12portstotal
M4100-12GF - 12portstotal
M4100-26G - 26portstotal
M4100-50G - 50portstotal
M4100-26G-POE - 26portstotal
M4100-24G-POE+ - 24portstotal
M4100-50G-POE+ - 50portstotal
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page17of35
Technical Specifications

PoweroverEthernet
PSECapacity PoEports802.3af PoE+ports802.3at InternalPoEbudget PoEbudgetwithEPS
M4100-50-POE 48 - 380W 740WwithEPS(RPS4000)
M4100-D12G-POE+ - 10
120WwhenAC
power
-
M4100-12GF - 4 150W -
M4100-26G-POE 24 - 192W 380WwithEPS(RPS4000)
M4100-24G-POE+ - 24 380W 720WwithEPS(RPS4000)
M4100-50G-POE+ - 48 380W 1,440WwithEPS(RPS4000)
PDCapacity PoweredbyPoE+ PoE“Passthrough”Technology
M4100-D12G YeswithonelinkPoE+30W(PDPort1)
M4100-D12G-POE+ YeswithonelinkPoE+30W(PDPort1)
YeswhensecondlinkPoE+30W(PDPort2):25WPoEbudgetcanbe
redistributedbyPort3-12
FeaturesSupport
IEEE802.3af(upto15.4Wperport) Yes(M4100-50-POE;M4100-26G-POE)
IEEE802.3at(upto30Wperport) Yes(M4100-D12G-POE+;M4100-12GF;M4100-24G-POE+;M4100-50G-POE+)
IEEE802.3atLayer2(LLDP)method Yes(M4100-D12G-POE+;M4100-12GF;M4100-24G-POE+;M4100-50G-POE+)
IEEE802.3at2-eventclassication Yes(M4100-D12G-POE+;M4100-12GF;M4100-24G-POE+;M4100-50G-POE+)
PoEtimer/schedule(week,days,hours) Yesforall802.3afand802.3atmodels ConvenientforWirelessAccessPointsschedules
Processor/Memory
Processor(CPU) BroadcomBCM53003@600MHz
Systemmemory(RAM) 128MB
Codestorage(ash) 32MB Dualrmwareimage,dualcongurationle
PacketBuerMemory
Allmodels 12Mb Dynamicallysharedacrossonlyusedports
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 18 of 35

PerformanceSummary
Switchingfabric
M4100-50-POE 13.6Gbps
M4100-D12G 24Gbps
M4100-D12G-POE+ 24Gbps
M4100-12GF 24Gbps
M4100-26G 52Gbps
M4100-50G 100Gbps
M4100-26G-POE 52Gbps
M4100-24G-POE+ 48Gbps
M4100-50G-POE+ 100Gbps
Throughput
M4100-50-POE 10.119Mpps
M4100-D12G 17.857Mpps
M4100-D12G-POE+ 17.857Mpps
M4100-12GF 17.857Mpps
M4100-26G 38.690Mpps
M4100-50G 74.405Mpps
M4100-26G-POE 38.690Mpps
M4100-24G-POE+ 35.714Mpps
M4100-50G-POE+ 74.405Mpps
GreenEthernet
EnergyEcientEthernet(EEE)
IEEE802.3azEnergyEcientEthernetTaskForcecompliance
(M4100-D12G;M4100-26G;M4100-50G;M4100-26G-POE;M4100-50G-POE+)
OtherMetrics
Forwardingmode Store-and-forward
Latency(64-byteframes,100Mbps,Copper) <10.194μs
Latency(64-byteframes,1Gbps,Copper) <3.91μs
Addressing 48-bitMACaddress
Addressdatabasesize 16,000MACaddresses
NumberofVLANs 1,024VLANs(802.1Q)simultaneously
Numberofmulticastgroupsltered(IGMP) 1K
NumberofLinkAggregationGroups(LAGs-
802.3ad)
12LAGswithupto8portspergroup
NumberofhardwarequeuesforQoS 8queues
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page19of35

Numberofstaticroutes(IPv4) 64
NumberofIPinterfaces(portorVLAN) 64
Jumboframesupport upto9Kpacketsize
Acousticnoise(ANSI-S10.12)@25°Cambient(77°F)
M4100-50-POE <38.9dB
M4100-D12G 0dB(fanless)
M4100-D12G-POE+ <19.8dBbelowtypicalacousticoceambient
M4100-12GF <30dB
M4100-26G <35.6dB
M4100-50G <37.2dB
M4100-26G-POE <36.6dB
M4100-24G-POE+ <33.8dB
M4100-50G-POE+ <47.7dB
HeatDissipation(BTU)(Maximum)
M4100-50-POE 1,661Btu/hr
M4100-D12G 64Btu/hr
M4100-D12G-POE+ 569Btu/hr
M4100-12GF 548Btu/hr
M4100-26G 108Btu/hr
M4100-50G 169Btu/hr
M4100-26G-POE 932Btu/hr
M4100-24G-POE+ 1,820Btu/hr
M4100-50G-POE+ 1,896Btu/hr
MeanTimeBetweenFailures(MTBF) @25°Cambient(77°F)@55°Cambient(131°F)
M4100-50-POE 163,019hours(~18.6years)49,668hours(~5.7years)
M4100-D12G 214,142hours(~24.4years)67,633hours(~7.7years)
M4100-D12G-POE+ 766,618hours(~87.5years)99,094hours(~11.3years)
M4100-12GF 670,956hours(~76.6years)190,562hours(~21.8years)
M4100-26G 702,785hours(~80.2years)197,792hours(~22.6years)
M4100-50G 489,311hours(~55.9years)152,639hours(~17.4years)
M4100-26G-POE 437,199hours(~49.9years)117,763hours(~13.4years)
M4100-24G-POE+ 394,619hours(~45.0years)106,405hours(~12.1years)
M4100-50G-POE+ 239,298hours(~27.3years)65,978hours(~7.5years)
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page20of35

L2Services-VLANs
IEEE802.1QVLANTagging Yes Upto1,024VLANs-802.1QTagging
ProtocolBasedVLANs
IPsubnet
ARP
IPX
Yes
Yes
Yes
Yes
StaticVLANs AccessPortsfor802.1QunawareendpointsandTrunkPortsforswitch-to-switchslinkswithNativeVLAN
SubnetbasedVLANs Yes
MACbasedVLANs Yes
VoiceVLAN Yes
PrivateEdgeVLAN Yes
PrivateVLAN Yes
IEEE802.1x
GuestVLAN
RADIUSbasedVLANassignmentvia.1x
RADIUSbasedFilterIDassignmentvia.1x
MAC-based.1x
UnauthenticatedVLAN
Yes
Yes
Yes
Yes
Yes
Yes
IPphonesandPCscanauthenticateonthe
sameportbutunderdierentVLANassignment
policies
DoubleVLANTagging(QinQ)
Enablingdvlan-tunnelmakesinterface
Globalethertype(TPID)
Interfaceethertype(TPID)
CustomerIDusingPVID
Yes
Yes
Yes
Yes
Yes
GARPwithGVRP/GMRP Yes
AutomaticregistrationformembershipinVLANs
orinmulticastgroups
MVR(MulticastVLANregistration) Yes
L2Services-Availability
IEEE802.3ad-LAGs
LACP
StaticLAGs
Yes
Yes
Yes
Upto12LAGsand
upto8physicalportsperLAG
LAGHashing Yes
StormControl Yes
IEEE802.3x(FullDuplexandowcontrol)
PerportFlowControl
Yes
Yes
AsymmetricandSymmetricFlowControl
IEEE802.1DSpanningTreeProtocol Yes
IEEE802.1wRapidSpanningTree Yes
IEEE802.1sMultipleSpanningTree Yes
STPLoopGuard Yes
STPRootGuard Yes
BPDUGuard Yes
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page21of35

L2Services-MulticastFiltering
IGMPv2SnoopingSupport Yes
IGMPv3SnoopingSupport Yes
MLDv1SnoopingSupport Yes
MLDv2SnoopingSupport Yes
ExpeditedLeavefunction Yes
StaticL2MulticastFiltering Yes
IGMPSnooping
EnableIGMPSnoopingperVLAN
SnoopingQuerier
Yes
MLDQuerier Yes
MulticastVLANregistration(MVR) Yes
L3Services-DHCP
DHCPIPv4/DHCPIPv6Client Yes
DHCPIPv4Server Yes
DHCPSnoopingIPv4 Yes
DHCPRelayIPv4 Yes
DHCPBootPIPv4 Yes
AutoInstall(DHCPoptions66,67,150) Yes
L3Services-IPv4Routing
StaticRouting Yes
PortBasedRouting Yes
VLANRouting
802.3ad(LAG)forrouterports
Yes
Yes
IPHelper
MaxIPHelperentries
Yes
512
IPSourceGuard Yes
ECMP Yes
ProxyARP Yes
Multinetting Yes
ICMPredirectdetectioninhardware Yes
DNSv4 Yes
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page22of35

NetworkMonitoringandDiscoveryServices
ISDP(IndustryStandardDiscoveryProtocol) Yes inter-operateswithdevicesrunningCDP
802.1abLLDP Yes
802.1abLLDP-MED Yes
SNMP V1,V2,V3
RMON1,2,3,9 Yes
sFlow Yes
Security
NetworkStormProtection,DoS
Broadcast,Unicast,MulticastDoSProtection
DenialofServiceProtection(controlplane)
DenialofServiceProtection(dataplane)
Yes
Yes
Yes
SwitchCPUprotection
SwitchTracprotection
DoSattacks SIPDIP
SMACDMAC
FIRSTFRAG
TCPFRAG
TCPFLAG
TCPPORT
UDPPORT
TCPFLAGSEQ
TCPOFFSET
TCPSYN
TCPSYNFIN
TCPFINURGPSH
L4PORT
ICMPV4
ICMPV6
ICMPFRAG
ICMPthrottling Yes
RestrictICMP,PINGtrac
forICMP-basedDoSattacks
Management
Radiusaccounting Yes RFC2565andRFC2866
TACACS+ Yes
NetworkTrac
AccessControlLists(ACLs) L2/L3/L4 MAC,IPv4,IPv6,TCP,UDP
Time-basedACLs Yes
Protocol-basedACLs Yes
ACLoverVLANs Ye s
DynamicACLs Yes
IEEE802.1xRadiusPortAccessAuthentication Yes
Upto48clients(802.1x)perportaresupported,
includingtheauthenticationoftheusersdomain
802.1xMABAddressAuthenticationBypass
(MAB)
Yes
Supplementalauthenticationmechanismfornon-
802.1xdevices,basedontheirMACaddressonly
PortSecurity Yes
IPSourceGuard Yes
DHCPSnooping Ye s
DynamicARPInspection Yes
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page23of35

MACFiltering Yes
PortMACLocking Yes
PrivateEdgeVLAN Yes
Aprotectedportdoesn'tforwardanytrac
(unicast,multicast,orbroadcast)toanyother
protectedport-sameswitch
PrivateVLANs Yes
ScalesPrivateEdgeVLANsbyprovidingLayer2
isolationbetweenportsaccrossswitchesinsame
Layer2network
QualityofService(QoS)-Summary
AccessLists
L2MAC,L3IPandL4PortACLs
Ingress
802.3ad(LAG)forACLassignment
BindingACLstoVLANs
ACLLogging
SupportforIPv6elds
Yes
Yes
Yes
Yes
Yes
Yes
Yes
DiServQoS
EdgeNodeapplicability
InteriorNodeapplicability
802.3ad(LAG)forserviceinterface
SupportforIPv6elds
Ingress
Yes
Yes
Yes
Yes
Yes
Yes
IEEE802.1pCOS
802.3ad(LAG)forCOSconguration
WRED(WeightedDecitRoundRobin)
StrictPriorityqueuetechnology
Yes
Yes
Yes
Yes
Auto-VoIP
Yes,basedonprotocols(SIP,H323andSCCP)oronOUIbytes(default
databaseanduser-basedOUIs)inthephonesourceMACaddress
QoS-ACLFeatureSupport
ACLSupport(includeL3IPandL4TCP/UDP) Yes
MACACLSupport Yes
IPRuleMatchFields
DestIP
DestIPv6IP
DestL4Port
EveryPacket
IPDSCP
IPPrecedence
IPTOS
Protocol
SourceIP(forMasksupportseebelow)
SourceIPv6IP
L3IPv6FlowLabel
SourceL4Port
SupportsMasking
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page24of35

MACRuleMatchFields
COS
DestMAC
DestMACMask
Ethertype
SourceMAC
SourceMACMask
VLANID
VLANID2(SecondaryVLAN)
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Yes
Rulesattributes
AssignQueue
Logging--denyrules
Mirror(tosupportedinterfacetypesonly)
Redirect(tosupportedinterfacetypesonly)
Inbound
Inbound
Inbound
Inbound
Interface
Inbounddirection
SupportsLAGinterfaces
MultipleACLsperinterface,inbound
Mixed-typeACLsperinterface,inbound
MixedL2/IPv4ACLsperinterface,inbound
Yes
Yes
Yes
Yes
Yes
QoS-DiServFeatureSupport
DiServSupported Yes
ClassType
All Yes
ClassMatchCriteria
COS
DestIP(forMasksupportseebelow)
DestIPv6IP
DestL4Port
DestMAC(forMasksupportseebelow)
Ethertype
EveryPacket
IPDSCP
IPPrecedence
IPTOS(forMasksupportseebelow)
Protocol
ReferenceClass
SourceIP(forMasksupportseebelow)
SourceIPv6IP
L3IPv6FlowLabel
SourceL4Port
SourceMAC(forMasksupportseebelow)
VLANID(SourceVID)
SupportsMasking
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
Inbound
PolicyAttributes--Inbound
AssignQueue
Drop
MarkCOS
MarkIPDSCP
MarkIPPrecedence
Mirror(tosupportedinterfacetypesonly)
PoliceSimple
PoliceColorAwareMode
Inbound
Yes
Yes
Yes
Yes
Inbound
Yes
Yes
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page25of35

ServiceInterface
InboundSlot.Portcongurable
Inbound'All'Portscongurable
SupportsLAGinterfaces
MixedL2/IPv4matchcriteria,inbound
Yes
Yes
Yes
Yes
PHBSupport
EF
AF4x
AF3x
AF2x
AF1x
CS
Yes
Yes
Yes
Yes
Yes
Yes
Statistics--PolicyInstance
Oered
Discarded
packets
packets
QoS-COSFeatureSupport
COSSupport
SupportsLAGinterfaces
COSMappingCong
Yes
Yes
Yes
Congurableper-interface
IPDSCPMapping
Yes
Yes
COSQueueCong
QueueParmscongurableper-interface
DropParmscongurableper-interface
InterfaceTracShaping(forwholeegress
interface)
MinimumBandwidth
WeightedDecitRoundRobin(WDRR)Support
MaximumQueueWeight
WREDSupport
Yes
Yes
Yes
Yes
Yes
127
Yes
IEEENetworkProtocols
IEEE802.3Ethernet
IEEE802.3azEnergyEcientEthernet
(selectmodels)
IEEE802.1sMultipleSpanningTree(MSTP)
IEEE802.1v
Protocol-basedVLAN
IEEE802.3u100BASE-T IEEE802.3adTrunking(LACP) IEEE802.1wRapidSpanningTree(RSTP)
IEEE802.1p
QualityofService
IEEE802.3ab1000BASE-T
IEEE802.1ABLLDPwithANSI/TIA-1057
(LLDP-MED)
IEEE802.1XRadiusnetworkaccesscontrol
IEEE802.3x
Flowcontrol
IEEE802.3zGigabitEthernet1000BASE-SX/LX IEEE802.1DSpanningTree(STP) IEEE802.1QVLANtagging
IEEE802.3af/IEEE
802.3at
IETFRFCStandardsandMIBs
SystemFacilities
RFC768–UDP RFC2131–DHCPClient/Server
RFC783–TFTP RFC2132–DHCPoptions&BOOTPvendorextensions
RFC791–IP RFC2030–SimpleNetworkTimeProtocol(SNTP)Version4forIPv4,IPv6andOSI
RFC792–ICMP RFC2865–RADIUSClient(bothSwitchandManagementaccess)
RFC793–TCP RFC2866–RADIUSAccounting
RFC826–EthernetARP RFC2868–RADIUSAttributesforTunnelProtocolsupport
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page26of35

RFC894–TransmissionofIPdatagramsoverEthernetnetworks RFC2869–RADIUSExtensions
RFC896–CongestioncontrolinIP/TCPNetworks RFC2869bis–RADIUSSupportforExtensibleAuthenticationProtocol(EAP)
RFC951–BOOTP RFC3164–TheBSDSyslogProtocol
RFC1321–Message-digestalgorithm
RFC3580–802.1XRADIUSusageguidelines(VLANassignmentviaRADIUS,dynamicVLAN)
RFC1534–InteroperationbetweenBOOTPandDHCP
SwitchingMIB
RFC1213–MIB-II RFC2620–RADIUSAccountingMIB
RFC1493–BridgeMIB RFC2737–EntityMIBversion2
RFC1643–Ethernet-likeMIB RFC2819–RMONGroups1,2,3&9
RFC2233–TheInterfacesGroupMIBusingSMIv2 IEEE802.1XMIB(IEEE802.1-PAE-MIB2004Revision)
RFC2674–VLANMIB IEEE802.1AB–LLDPMIB
RFC2613–SMONMIB ANSI/TIA1057–LLDP-MEDMIB
RFC2618–RADIUSAuthenticationClientMIB PrivateEnterpriseMIBssupportingswitchingfeatures
IPv4Routing
RFC1027–UsingARPtoimplementtransparentsubnetGateways(Proxy
ARP)
RFC2131–DHCPrelay
RFC1256–ICMPRouterDiscoveryMessages RFC3046–DHCPRelayAgentInformationoption
RFC1812–RequirementsforIPVersion4routers VLANrouting
IPv4RoutingMIB
RFC2096–IPForwardingTableMIB PrivateenterpriseMIBsupportingroutingfeatures
Multicast
RFC1112–HostextensionsforIPMulticasting RFC2710–MulticastListenerDiscovery(MLD)forIPv6
RFC2236–InternetGroupManagementProtocol,Version2 RFC3376–InternetGroupManagementProtocol,Version3
RFC2365–AdministrativelyScopedIPMulticast RFC3810–MulticastListenerDiscoveryVersion2(MLDv2)forIPv6
MulticastMIB
Dra-ietf-magma-mgmd-mib-05MulticastGroupMembershipDiscovery
MIB
PrivateEnterpriseMIBsupportingMulticastfeatures
IPv6Routing
RFC1981–PathMTUforIPv6 RFC3484–DefaultAddressSelectionforIPv6
RFC2460–IPv6Protocolspecication RFC3493–BasicSocketInterfaceforIPv6
RFC2461–NeighborDiscovery RFC3542–AdvancedSocketsAPIforIPv6
RFC2462–StatelessAutoConguration RFC3587–IPv6GlobalUnicastAddressFormat
RFC2464–IPv6overEthernet RFC3736–StatelessDHCPv6
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page27of35

IPv6RoutingMIB
RFC2465–IPv6MIB
RFC2466–ICMPv6MIB
QoS
RFC2474–DenitionofDierentiatedServicesField(DSField)intheIPv4
andIPv6Headers
RFC3260–NewTerminologyandClaricationsforDiServ
RFC2475–AnArchitectureforDierentiatedServices RFC3289–ManagementInformationBasefortheDierentiatedServicesArchitecture(read-only)
RFC2597–AssuredForwardingPHBGroup
PrivateMIBsforfullcongurationofDiServ,ACLandCoSfunctionality
RFC3246–AnExpeditedForwardingPHB(Per-HopBehavior)
Management
RFC854–Telnet RFC3412–MessageProcessing&Dispatching
RFC855–TelnetOption RFC3413–SNMPApplications
RFC1155–SMIv1 RFC3414–User-BasedSecurityModel
RFC1157–SNMP RFC3415–View-basedAccessControlModel
RFC1212–ConciseMIBDenitions RFC3416–Version2ofSNMPProtocolOperations
RFC1867–HTML/2.0Formswithleuploadextensions RFC3417–TransportMappings
RFC1901–Community-basedSNMPv2
RFC3418–ManagementInformationBase(MIB)fortheSimpleNetworkManagementProtocol
(SNMP)
RFC1908–CoexistencebetweenSNMPv1&SNMPv2
SSL3.0andTLS1.0
-RFC2246–TheTLSProtocol,Version1.0
-RFC2818–HTTPoverTLS
-RFC2346–AESCiphersuitesforTransportLayerSecurity
RFC2068–HTTP/1.1protocolasupdatedby
dra-ietf-http-v11-spec-rev-03
RFC2271–SNMPFrameworkMIB
RFC2295–TransparentContentNegotiation
RFC2296–RemoteVariantSelection;RSVA/1.0State
Management“cookies”–dra-ietf-http-state-mgmt-05
SSH1.5and2.0
-RFC4253–SSHTransportLayerProtocol
-RFC4252–SSHAuthenticationProtocol
-RFC4254–SSHConnectionProtocol
-RFC4251–SSHProtocolArchitecture
-RFC4716–SECSHPublicKeyFileFormat
-RFC4419–Die-HellmanGroupExchangefortheSSHTransportLayerProtocol
RFC2576–CoexistencebetweenSNMPv1,v2andv3
RFC2578–SMIv2
RFC2579–TextualConventionsforSMIv2
RFC2580–ConformancestatementsforSMIv2
RFC3410–IntroductionandApplicabilityStatementsforInternetStandard
ManagementFramework
RFC3411–AnArchitectureforDescribingSNMPManagementFrameworks
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page28of35

Management
Passwordmanagement Yes
CongurableManagementVLAN Yes
AutoInstall(BOOTPandDHCPoptions66,67,
150and55,125)
Yes Scalabledeploymentprocess(rmware,cong)
AdminaccesscontrolviaRadiusandTACACS+ Yes Policies,Enable
IndustrystandardCLI(IS-CLI) Yes CommandLineinterface
CLIcommandsloggedtoaSyslogserver Yes
Web-basedgraphicaluserinterface(GUI) Yes FullyfunctionalGUI
Telnet Yes
IPv6management Yes
DualSoware(rmware)image Ye s Allowsnondisruptivermwareupgradeprocess
DualCongurationle Yes Text-based(CLIcommands)congurationle
IS-CLIScripting Ye s
IndustrystandardCLIcommandsscriptsfor
automation
Portdescriptions Yes
SNTPclientoverUDPport123 Yes
Providessynchronizednetworktimestampeither
inbroadcastorunicastmode
XMODEM Yes
SNMPv1/v2 Yes
SNMPv3withmultipleIPaddresses Ye s
RMON1,2,3,9
MaxHistoryentries
MaxbucketsperHistoryentry
MaxAlarmentries
MaxEvententries
MaxLogentriesperEvententry
Yes
3*(portcount+LAG+10)
10
3*(portcount+LAG+10)
3*(portcount+LAG+10)
10
PortMirroring
Numberofmonitorsessions
Tx/Rx
ManytoOnePortMirroring
LAGsupportedassourceports
Maxsourceportsinasession
Yes
1
Yes
Yes
Yes
Totalswitchportcount
RemotePortMirroring(RSPAN) Yes
Whenaparticularsessionisenabled,anytracenteringorleavingthe
sourceportsofthatsessioniscopied(mirrored)ontoaRemoteSwitched
PortAnalyzer(RSPAN)VLAN
Flowbasedmirroring Ye s
CableTestutility Ye s CLI,WebGUI
Traceroutefeature Yes
OutboundTelnet Yes
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page29of35

SSH
SSHSessionConguration
v1/v2
Yes
SecureShell
SSL/HTTPSandTLSv1.0forweb-basedaccess Yes
Filetransfers(uploads,downloads) TFTP/HTTP
Securedprotocolsforletransfers SCP/SFTP/HTTPS
HTTPMaxSessions 16
SSL/HTTPSMaxSessions 16
HTTPDownload(rmware) Yes
Syslog(RFC3164) Yes
Persistentlogsupported Yes
UserAdminManagement
UserIDconguration Ye s
Maxnumberofconguredusers 6
SupportmultipleREADWRITEUsers Yes
MaxnumberofIASusers(internaluserdatabase) 100
Authenticationloginlists Yes
AuthenticationEnablelists Yes
AuthenticationHTTPlists Yes
AuthenticationHTTPSlists Yes
AuthenticationDot1xlists Yes
AccountingExeclists Ye s
AccountingCommandslists Ye s
LoginHistory 50
M4100series-PlatformConstants
MaximumnumberofremoteTelnetconnections 5
MaximumnumberofremoteSSHconnections 5
NumberofMACAddresses 16K
NumberofVLANs 1K
VLANIDRange 1-4093
Numberof802.1pTracClasses 8classes
IEEE802.1x
Numberof.1xclientsperport
48
NumberofLAGs 12LAGswithupto8portspergroup
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page30of35

Maximummultiplespanningtreeinstances 32
MACbasedVLANS
Numbersupported
Yes
256
Numberoflogmessagesbuered 200
Staticlterentries
UnicastMACandsourceport
MulticastMACandsourceport
MulticastMACanddestinationport(only)
20
20
256
SubnetbasedVLANs
Numbersupported
Yes
128
ProtocolBasedVLANs
Maxnumberofgroups
Maxprotocols
Yes
128
16
MaximumMulticastMACAddressesentries 1K
JumboFrameSupport
MaxSizeSupported
Yes
9k
NumberofDHCPsnoopingbindings 16K
NumberofDHCPsnoopingstaticentries 1024
LLDP-MEDnumberofremotenodes 48
PortMACLocking
Dynamicaddressesperport
Staticaddressesperport
Yes
4096
48
sFlow
Numberofsamplers
Numberofpollers
Numberofreceivers
32
52
8
Radius
MaxAuthenticationservers
MaxAccountingservers
5
1
Numberofroutinginterfaces(includingport/vlan) 64
Numberofstaticroutes(v4) 64
RoutingHeapsize
IPv4
256K
DHCPServer
Maxnumberofpools
Totalmaxleases
16
1024
DNSClient
Concurrentrequests
Nameserverentries
Seachlistentries
Statichostentries
Cacheentries
Domainsearchlistentries
16
8
6
64
128
32
NumberofHostEntries(ARP/NDP)
IPv4build
Staticv4ARPEntries
512
16
including509usercongurableentries
NumberofECMPNextHopsperRoute 1
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 31 of 35

ACLLimits
MaximumNumberofACLs(anytype)
MaximumNumberCongurableRulesperList
MaximumACLRulesperInterfaceandDirection
(IPv4/L2)
MaximumACLRulesperInterfaceandDirection
(IPv6)
MaximumACLRules(system-wide)
MaximumACLLoggingRules(system-wide)
50
509
509
509
4K
32
COSDeviceCharacteristics
CongurableQueuesperPort
CongurableDropPrecedenceLevels
8queues
3
DiServDeviceLimits
NumberofQueues
RequiresTLVtocontainallpolicyinstances
combined
MaxRulesperClass
MaxInstancesperPolicy
MaxAttributesperInstance
MaxServiceInterfaces
MaxTableEntries
ClassTable
ClassRuleTable
PolicyTable
PolicyInstanceTable
PolicyAttributeTable
MaxNestedClassChainRuleCount
8queues
Yes
6
28
3
50interfaces
32
192
64
768
2304
12
AutoVoIPnumberofvoicecalls 16
LEDs
Perport Speed,Link,Activity,PoE
Perdevice Power,Fan,RPSorPDMode,MaxPoE
PhysicalSpecications
Dimensions(WidthxDepthxHeight)
M4100-50-POE 440x310x43.2mm(17.32x12.20x1.7in)
M4100-D12G 328x169x43.2mm(12.91x6.65x1.7in)
M4100-D12G-POE+ 331x208x43.2mm(13.03x8.19x1.7in)
M4100-12GF 440x257x43.2mm(17.3x10.12x1.7in)
M4100-26G 440x257x43.2mm(17.3x10.12x1.7in)
M4100-50G 440x257x43.2mm(17.3x10.12x1.7in)
M4100-26G-POE 440x257x43.2mm(17.3x10.12x1.7in)
M4100-24G-POE+ 440x257x43.2mm(17.3x10.12x1.7in)
M4100-50G-POE+ 440x310x43.2mm(17.32x12.20x1.7in)
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page32of35

Weight
M4100-50-POE 4.96kg(10.9lb)
M4100-D12G 1.33kg(2.9lb)
M4100-D12G-POE+ 2.596kg(5.73lb)
M4100-12GF 3.665kg(8.08lb)
M4100-26G 3.24kg(7.1lb)
M4100-50G 3.63kg(8.0lb)
M4100-26G-POE 3.79kg(8.36lb)
M4100-24G-POE+ 4.368kg(9.63lb)
M4100-50G-POE+ 4.96kg(10.9lb)
PowerConsumption(allportsused,line-ratetrac,maxPoE)
M4100-50-POE 486.64Wmax
M4100-D12G 18.80Wmax
M4100-D12G-POE+ 166.60Wmax
M4100-12GF 160.60Wmax
M4100-26G 31.60Wmax
M4100-50G 49.50Wmax
M4100-26G-POE 272.90Wmax
M4100-24G-POE+ 533Wmax
M4100-50G-POE+ 555.50Wmax
EnvironmentalSpecications
Operating:
Temperature
Humidity
Altitude
32°to122°F(0°to50°C)
90%maximumrelativehumidity,non-condensing
10,000(3,000m)maximum
Storage:
Temperature
Humidity
Altitude
–4°to158°F(–20°to70°C)
95%maximumrelativehumidity,non-condensing
10,000(3,000m)maximum
ElectromagneticEmissionsandImmunity
Certications CEmark,commercial
FCCPart15ClassA,VCCIClassA
ClassAEN55022(CISPR22)ClassA
ClassAC-Tick
EN50082-1
EN55024
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 33 of 35

Safety
Certications CEmark,commercial
CSAcertied(CSA22.2#950)
ULlisted(UL1950)/cULIEC950/EN60950
CB
CCC
PackageContent
All models ProSAFE®M4100seriesswitch
Powercord
Rubberfootpadsfortabletopinstallation
RubbercapsfortheSFPsockets
Mini-USBconsolecablewithoneMiniBconnectorandonetypeAconnector
ResourceCDwithlinkstoonlinedocumentation:USB drivers for the Mini-USB console; Switch MIB; ProSAFE M4100 Managed
Switch Quick Installation Guide, ProSAFE M4100 Hardware Installation Guide; ProSAFE Managed Switch Command-Line Interface
(CLI) User Manual; ProSAFE M4100 and M7100 Managed Switches Administration Manual
TechnicalDocumentationonlinerepository:http://www.downloads.netgear.com/docs/m4100/enu/202-11161-01/
Rackmount models
M4100-50-POE,M4100-12GF;M4100-26G;M4100-50G
M4100-26G-POE;M4100-24G-POE+;M4100-50G-POE+
Rack-mountingkit
Desktopmodels
M4100-D12G;M4100-D12G-POE+
Wall-mountingkit
Desktopmodels
M4100-D12G
ACexternalpoweradapter
magneticmountingkit(setofmagnets)
OptionalModulesandAccessories
All models:
AFM735
AGM731F
AGM732F
100Base-FXSFPGBIC(Multimode)
1000Base-SXSFPGBIC(Multimode)
1000Base-LXSFPGBIC(Singlemode)
OrderingSKU:
AFM735-10000S
AGM731F
AGM732F
All rackmount models:
RPS5412
RPS4000
APS1000W
OptimalPower®RedundantPowerSupply(oneswitch-RPSmodeonly)
External/RedundantPowerSupply(uptofourswitches-RPSorEPSmode)
PowerModuleforRPS4000
RPS5412-100NAS/-100EUS/-100AJS
RPS4000-200NES/-200AJS
APS1000W-100NES/-100AJS
All desktop models:
420-10043-01 RackmountkitforM4100seriesdesktopversions 420-10043-01
WarrantyandSupport
ProSafeLifetimeHardwareWarranty* Included,lifetime
90daysofTechnicalSupportviaphoneandemail* Included,90daysaerpurchase
LifetimeTechnicalSupportthroughonlinechat* Included,lifetime
LifetimeNextBusinessDayhardwarereplacement* Included,lifetime
ProSupportServicePacks
Installationcontracts
PSB0304-10000S RemoteInstallationSetupandCongurationServiceContract
PSP1104-10000S OnsiteInstallationSetupandCongurationServiceContract
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page34of35

Supplementalsupportcontracts
PMB0332-10000S
OnCall24x73-yearCAT2
M4100-50-POE;M4100-D12G;M4100-D12G-POE+;M4100-12GF
M4100-26G;M4100-26G-POE;
OnCall24x7extendsthe90-daywarranty
entitledtechnicalsupport(phoneandemail)
forstandardandadvancedfeaturestothe
lengthofthecontractterm
PMB0333-10000S
OnCall24x73-yearCAT3
M4100-50G;M4100-50G-POE+
PacksOrderingInformation
M4100-50-POE
Americas,Europe
AsiaPacic
China
48 ports Fast Ethernet PoE 802.3af, Layer 2+ soware package
FSM7250P-100NES
FSM7250P-100AJS
FSM7250P-100PRS
M4100-D12G
Americas,Europe
AsiaPacic
China
Desktop 12 ports Gigabit, Layer 2+ soware package
GSM5212-100NES
GSM5212-100AJS
GSM5212-100PRS
M4100-D12G-POE+
Americas,Europe
AsiaPacic
China
Desktop 12 ports Gigabit PoE+ 802.3at, Layer 2+ soware package
GSM5212P-100NES
GSM5212P-100AJS
GSM5212P-100PRS
V1H2
V1H2
V1H2
M4100-12GF
Americas,Europe
AsiaPacic
China
12 ports Gigabit Fiber, Layer 2+ soware package
GSM7212F-100NES
GSM7212F-100AJS
GSM7212F-100PRS
V1H2
V1H2
V1H2
M4100-26G
Americas
Europe
AsiaPacic
China
26 ports Gigabit, Layer 2+ soware package
GSM7224-200NAS
GSM7224-200EUS
GSM7224-200AJS
GSM7224-200PRS
V2H2
V2H2
V2H2
V2H2
M4100-50G
Americas
Europe
AsiaPacic
China
50 ports Gigabit, Layer 2+ soware package
GSM7248-200NAS
GSM7248-200EUS
GSM7248-200AJS
GSM7248-200PRS
V2H2
V2H2
V2H2
V2H2
M4100-26G-POE
Americas,Europe
AsiaPacic
China
24 ports Gigabit PoE 802.3af, Layer 2+ soware package
GSM7226LP-100NES
GSM7226LP-100AJS
GSM7226LP-100PRS
M4100-24G-POE+
Americas,Europe
AsiaPacic
vChina
24 ports Gigabit PoE+ 802.3at, Layer 2+ soware package
GSM7224P-100NES
GSM7224P-100AJS
GSM7224P-100PRS
V1H2
V1H2
V1H2
M4100-50G-POE+
Americas,Europe
AsiaPacic
China
48 ports Gigabit PoE+ 802.3at, Layer 2+ soware package
GSM7248P-100NES
GSM7248P-100AJS
GSM7248P-100PRS
ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 35 of 35
*ThisproductcomeswithalimitedwarrantythatisvalidonlyifpurchasedfromaNETGEARauthorizedresellerandmodificationstoproductmayvoidthewarranty;covershardware,fansand
internal power supplies - not software or external power supplies See http://www.netgear.com/about/warranty/ for details. Lifetime technical support includes basic phone support for 90 days
from purchase date and lifetime online chat support when purchased from a NETGEAR authorized reseller.
NETGEAR, the NETGEAR Logo, and ProSAFE are trademarks of NETGEAR, Inc. in the United States and/or other countries. Other brand names mentioned herein are for identification purposes only
andmaybetrademarksoftheirrespectiveholder(s).Informationissubjecttochangewithoutnotice.©2015NETGEAR,Inc.Allrightsreserved.D-M4100-1

