2 10/100/1000BASE-TRJ45 copper ports, shared with port-1 to port-2
4 10GBASE-SR/LR SFP+slots, compatible with 1000BASE-SX/LX/BX SFP
RJ45 to RS232 DB9 console interface for basic management and setup
Layer 2 Features
Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
High performance of Store-and-Forward architecture, and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
Storm control support
- Broadcast / Unicast / Unknown-unicast
SupportsVLAN
- IEEE 802.1Q tagged VLAN- Up to 255 VLANs groups, out of 4095 VLAN IDs- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)- Private VLAN Edge (PVE)- Protocol-based VLAN- MAC-based VLAN- IP Subnet-based VLAN- Voice VLAN
SupportsSpanning Tree Protocol
- STP, IEEE 802.1D Spanning Tree Protocol- RSTP, IEEE 802.1w Rapid Spanning Tree Protocol- MSTP, IEEE 802.1s Multiple Spanning Tree Protocol, spanning tree by VLAN- BPDU Guard
SupportsLink Aggregation
- 802.3ad Link Aggregation Control Protocol (LACP)- Cisco ether-channel (Static Trunk)- Maximum 26 trunk groups, up to 8 ports per trunk group- Up to 16Gbps bandwidth (full duplex mode)
Provides port mirror (many-to-1)
Port mirroring to monitor the incoming or outgoing traffic on a particular port
Loop protection to avoid broadcast loops
Layer 3 IP Routing Features
Supports maximum 32 static routes and route summarization
Quality of Service
Ingress shaper and egress rate limit per port bandwidth control
8 priority queues on all switch ports
Traffic classification
- IEEE 802.1p CoS- ToS / DSCP / IP Precedence of IPv4/IPv6 packets- IP TCP/UDP port number- Typical network application
Strict priority and Weighted Round Robin (WRR) CoS policies
Traffic-policing policies on the switch port
DSCP remarking
Multicast
Supports IGMP snooping v1, v2 and v3
Supports MLD snooping v1 and v2
Querier mode support
IGMP snooping port filtering
MLD snooping port filtering
MVR (Multicast VLAN Registration)
Security
Authentication
- IEEE 802.1x port-based / MAC-based network access authentication- IEEE 802.1x authentication with guest VLAN- Built-in RADIUS client to cooperate with the RADIUS servers- RADIUS / TACACS+ users access authentication
Access Control List
- IP-based Access Control List (ACL)- MAC-based Access Control List (ACL)
Source MAC / IP address binding
DHCP Snoopingto filter distrusted DHCP messages
Dynamic ARP Inspectiondiscards ARP packets with invalid MAC address to IP address binding
IP Source Guardprevents IP spoofing attacks
IP address access management to prevent unauthorized intruder
Management
IPv4 and IPv6 dual stack management
Switch Management Interfaces
- Console / Telnet command line interface- Web switch management- SNMP v1, v2c, and v3 switch management- SSH / SSL secure access
IPv6Address / NTP management
Built-in Trivial File Transfer Protocol (TFTP) client
BOOTP and DHCP for IP address assignment
System Maintenance
- Firmware upload / download via HTTP / TFTP- Reset button for system reboot or reset to factory default- Dual images
DHCP relay and option 82
User privilege levels control
NTP (Network Time Protocol)
Link Layer Discovery Protocol (LLDP) and LLDP-MED
Network diagnostic
- SFP-DDM (Digital Diagnostic Monitor)- Cable diagnostic technology provides the mechanism to detect and report potential cabling issues- ICMPv6 / ICMPv4 remote ping
SMTP / Syslog remote alarm
Four RMON groups (history, statistics, alarms and events)
SNMP trap for interface link up and link down notification
System Log
PLANET Smart Discovery Utility for deploy management