Physical Port

• 48-port 10/100/1000BASE-T Gigabit RJ45 copper
• 4 100/1000BASE-X mini-GBIC/SFP slots
• Reset button for system factory default

Layer 2 Features

- IEEE 802.1Q tagged VLAN

- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)

- Protocol VLAN

- Voice VLAN

- Private VLAN (Protected port)

- Management VLAN

- GVRP

- STP (Spanning Tree Protocol)

- RSTP (Rapid Spanning Tree Protocol)

- MSTP (Multiple Spanning Tree Protocol)

- STP BPDU Guard, BPDU Filtering and BPDU Forwarding

- IEEE 802.3ad Link Aggregation Control Protocol (LACP)

- Cisco ether-channel (static trunk)

- Maximum 8 trunk groups, up to 8 ports per trunk group

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance Store and Forward architecture, runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Supports VLAN
• Supports Spanning Tree Protocol
• Supports Link Aggregation
• Provides port mirror (many-to-1)
• Loop protection to avoid broadcast loops

Quality of Service

- Broadcast / Unknown unicast / Unknown multicast

- IEEE 802.1p CoS

- TOS / DSCP / IP precedence of IPv4/IPv6 packets

• Ingress and egress rate limit per port bandwidth control
• Storm control support
• Traffic classification
• Strict priority and Weighted Round Robin (WRR) CoS policies

Multicast

• Supports IPv4 IGMP snooping v2 and v3
• Supports IPv6 MLD snooping v1, v2
• IGMP querier mode support
• IGMP snooping port filtering
• MLD snooping port filtering

Security

- IEEE 802.1X port-based network access authentication

- Built-in RADIUS client to co-operate with the RADIUS servers

- DHCP Option 82

- RADIUS / TACACS+ authentication

- IPv4 / IPv6 IP-based ACL

- IPv4 / IPv6 IP-based ACE

- MAC-based ACL

- MAC-based ACE

- Static MAC

- MAC Filtering

• Authentication
• Access Control List
• MAC Security
• Port security for source MAC address entries filtering
• DHCP snooping to filter distrusted DHCP messages
• Dynamic ARP inspection discards ARP packets with invalid MAC address to IP address binding
• IP source guard prevents IP spoofing attacks
• DoS attack prevention
• SSH/SSL

Management

- IPv4 / IPv6 Web switch management

- Telnet Command Line Interface

- SNMP v1, v2c and v3

- HTTPs secure access

- Firmware upload / download via HTTP / TFTP

- Configuration upload / download through HTTP / TFTP

- Dual images

- Hardware reset button for system reset to factory default

• IPv4 and IPv6 dual stack management
• Switch Management Interface
• Built-in Trivial File Transfer Protocol (TFTP) client
• User privilege levels control
• Static and DHCP for IP address assignment
• System Maintenance
• SNTP Network Time Protocol
• Cable diagnostics
• Link Layer Discovery Protocol (LLDP) and LLDP-MED
• SNMP trap for interface Link Up and Link Down notification
• Event message logging to remote Syslog server
• Four RMON groups (history, statistics, alarms and events)
• PLANET Smart Discovery Utility