Physical Port

• 28-port 10/100/1000BASE-T Gigabit RJ45 copper with 24-port IEEE 802.3at/af PoE injector
• 4 100/1000BASE-X mini-GBIC/SFP slots, shared with port-25 to port-28 compatible with 100BASE-FX SFP
• RJ45 console interface for switch basic management and setup

Power over Ethernet

- Total PoE power budget control

- Per port PoE function enable/disable

- PoE Port power feeding priority

- Per PoE port power limitation

- PD classification detection

- PD alive-check

- PoE schedule

• Complies with IEEE 802.3at Power over Ethernet Plus, end-span PSE
• Backward compatible with IEEE 802.3af Power over Ethernet
• Up to 24 ports of IEEE 802.3af / 802.3at devices powered
• Supports PoE power up to 30.8 watts for each PoE port
• Auto detects powered device (PD)
• Circuit protection prevents power interference between ports
• Remote power feeding up to 100 meters
• PoE management

Layer 2 Features

- IEEE 802.1Q tagged VLAN

- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)

- Protocol VLAN

- Voice VLAN

- Private VLAN

- Management VLAN

- GVRP

- STP (Spanning Tree Protocol)

- RSTP (Rapid Spanning Tree Protocol)

- MSTP (Multiple Spanning Tree Protocol)

- STP BPDU Guard, BPDU filtering and BPDU forwarding

- IEEE 802.3ad Link Aggregation Control Protocol (LACP)

- Cisco ether-channel (static trunk)

- Maximum 8 trunk groups, up to 8 ports per trunk group

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance Store and Forward architecture, broadcast storm control, runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Supports VLAN
• Supports Spanning Tree Protocol
• Supports Link Aggregation
• Provides port mirror (many-to-1)
• Loop protection to avoid broadcast loops

Quality of Service

- Broadcast / Unknown unicast / Unknown multicast

- IEEE 802.1p CoS

- TOS / DSCP / IP precedence of IPv4/IPv6 packets

• Ingress and egress rate limit per port bandwidth control
• Storm control support
• Traffic classification
• Strict priority and Weighted Round Robin (WRR) CoS policies

Multicast

• Supports IPv4 IGMP snooping v2 and v3
• Supports IPv6 MLD snooping v1, v2
• IGMP querier mode support
• IGMP snooping port filtering
• MLD snooping port filtering

Security

- IEEE 802.1X port-based network access authentication

- Built-in RADIUS client to co-operate with the RADIUS servers

- RADIUS / TACACS+ login user access authentication

- IPv4 / IPv6 IP-based ACL

- MAC-based ACL

Static MAC

MAC filtering

• Authentication
• Access control list
• MAC security
• Port security for source MAC address entries filtering
• DHCP snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP source guard prevents IP spoofing attacks
• DoS attack prevention
• SSH/SSL

Management

- Web switch management

- Telnet command line interface

- SNMP v1, v2c and v3

- SSH and SSL secure access

- Firmware upload/download via HTTP / TFTP

- Configuration upload / download through web interface

- Dual images

- Hardware reset button for system reboot or reset to factory default

• IPv4 and IPv6 dual stack management
• Switch management interface
• User privilege levels control
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System maintenance
• SNTP Network Time Protocol
• Cable diagnostics
• Link Layer Discovery Protocol (LLDP) and LLDP-MED
• SNMP trap for interface link up and link down notification
• Event message logging to remote Syslog server
• Four RMON groups (history, statistics, alarms and events)
• PLANET smart discovery utility
• Smart fan with speed control