Physical Ports

• 8 10/100/1000Mbps Gigabit Ethernet ports with auto-MDI/MDI-X supported
• 1 port (Port 8) supports 802.3af/at PoE 48~56V DC in-line power
• 2 100/1000Base-X mini-GBIC/SFP slots

Installation

• Dual Power Design
- 802.3af/at PoE In
- 12V DC power adapter acceptable

Layer 2 Features

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance Store and Forward architecture, broadcast storm control, runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Supports VLAN
- IEEE 802.1Q tagged VLAN
- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)
- Protocol VLAN
- Voice VLAN
- Private VLAN
- Management VLAN
- GVRP
• Supports Spanning Tree Protocol
- STP (Spanning Tree Protocol)
- RSTP (Rapid Spanning Tree Protocol)
- MSTP (Multiple Spanning Tree Protocol)
- STP BPDU Guard, BPDU Filtering and BPDU Forwarding
• Supports Link Aggregation
- IEEE 802.3ad Link Aggregation Control Protocol (LACP)
- Cisco ether-channel (Static Trunk)
- Maximum 8 trunk groups, up to 8 ports per trunk group
• Provides Port Mirror (many-to-1)
• Loop protection to avoid broadcast loops

Quality of Service

• Ingress / Egress Rate Limit per port bandwidth control
• Storm Control support
- Broadcast / Unknown-Unicast / Unknown-Multicast
• Traffic classification
- IEEE 802.1p CoS
- TOS / DSCP / IP Precedence of IPv4/IPv6 packets
• Strict priority and Weighted Round Robin (WRR) CoS policies

Multicast

• Supports IGMP Snooping v2 and v3
• Supports MLD Snooping v1 and v2
• IGMP Querier mode support
• IGMP Snooping port filtering
• MLD Snooping port filtering

Security

• Authentication
- IEEE 802.1X Port-based network access authentication
- Built-in RADIUS client to co-operate with the RADIUS servers
- RADIUS / TACACS+ login user access authentication
• Access Control List
IPv4 / IPv6 IP-based ACL
MAC-based ACL
• MAC Security
- Static MAC
- MAC Filtering
• Port Security for Source MAC address entries filtering
• DHCP Snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• DoS Attack Prevention
• SSH / SSL

Management

• IPv4 and IPv6 dual stack management
• Switch Management Interface
- Web switch management
- Telnet Command Line Interface
- SNMP v1, v2c and v3
- SSH / SSL secure access
• User Privilege Levels Control
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System Maintenance
- Firmware upload/download via HTTP / TFTP
- Configuration upload / download through Web interface
- Hardware reset button for system reboot or reset to factory default
• SNTP Network Time Protocol
• Cable Diagnostics
• Link Layer Discovery Protocol (LLDP) Protocol and LLDP-MED
• SNMP trap for interface Link Up and Link Down notification
• Event message logging to remote Syslog server
• Four RMON groups (history, statistics, alarms, and events)
• PLANET Smart Discovery Utility