Description

Physical Ports

• 8 10/100/1000Mbps Gigabit Ethernet ports with auto-MDI/MDI-X supported
• 2 100/1000Base-X mini-GBIC/SFP slots

Layer 2 Features

• • Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
  • High performance Store and Forward architecture, broadcast storm control, runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
  • Supports VLAN

– IEEE 802.1Q tagged VLAN- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)- Protocol VLAN- Voice VLAN- Private VLAN- Management VLAN- GVRP

• • Supports Spanning Tree Protocol

– STP (Spanning Tree Protocol)- RSTP (Rapid Spanning Tree Protocol)- MSTP (Multiple Spanning Tree Protocol)- STP BPDU Guard, BPDU Filtering and BPDU Forwarding

• • Supports Link Aggregation

– IEEE 802.3ad Link Aggregation Control Protocol (LACP)- Cisco ether-channel (Static Trunk)- Maximum 8 trunk groups, up to 8 ports per trunk group

• Provides Port Mirror (many-to-1)
• Loop protection to avoid broadcast loops

Quality of Service

• • Ingress / Egress Rate Limit per port bandwidth control
  • Storm Control support

– Broadcast / Unknown-Unicast / Unknown-Multicast

• • Traffic classification:

– IEEE 802.1p CoS- TOS / DSCP / IP Precedence of IPv4/IPv6 packets

• Strict priority and Weighted Round Robin (WRR) CoS policies

Multicast

• Supports IGMP Snooping v2 and v3
• Supports MLD Snooping v1, v2
• IGMP Querier mode support
• IGMP Snooping port filtering
• MLD Snooping port filtering

Security

• • Authentication

– IEEE 802.1X Port-based network access authentication- Built-in RADIUS client to co-operate with the RADIUS servers- RADIUS / TACACS+ login user access authentication

• • Access Control List

– IPv4 / IPv6 IP-based ACL- MAC-based ACL

• • MAC Security

– Static MAC- MAC Filtering

• Port Security for Source MAC address entries filtering
• DHCP Snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• DoS Attack Prevention
• SSH/SSL

Management

• • IPv4 and IPv6 dual stack management
  • Switch Management Interface

– Web switch management- Telnet Command Line Interface- SNMP v1, v2c and v3- SSH / SSL secure access

• • User Privilege Levels Control
  • Built-in Trivial File Transfer Protocol (TFTP) client
  • BOOTP and DHCP for IP address assignment
  • System Maintenance

– Firmware upload / download via HTTP / TFTP- Configuration upload / download through Web interface- Hardware reset button for system reboot or reset to factory default

• SNTP Network Time Protocol
• Cable Diagnostics
• Link Layer Discovery Protocol (LLDP) Protocol and LLDP-MED
• SNMP trap for interface Link Up and Link Down notification
• Event message logging to remote Syslog server
• Four RMON groups (history, statistics, alarms, and events)
• PLANET Smart Discovery Utility