Physical Port

• 16 10/100/1000BASE-T Gigabit Ethernet RJ45 ports with IEEE 802.3at PoE+ Injector function
• 4 100/1000/2500BASE-X mini-GBIC/SFP slots for SFP type auto detection
• One RJ45 console interface for basic management and setup

Power over Ethernet 

• Complies with IEEE 802.3at Power over Ethernet Plus/end-span PSE
• Up to 16 IEEE 802.3af/802.3at devices powered
• Supports PoE power up to 36 watts for each PoE port
• Auto detects powered device (PD)
• Circuit protection prevents power interference between ports
• Remote power feeding up to 100m
• PoE management features
  • Total PoE power budget control
  • Per port PoE function enable/disable
  • PoE admin-mode control 
  • PoE port power feeding priority
  • Per PoE port power limit
  • PD classification detection
  • PoE extend mode control to support power feeding up to a distance of up to 160 meters
• Intelligent PoE features
  • Temperature threshold control
  • PoE usage threshold control
  • PD alive check
  • PoE schedule

Industrial Protocol

• Modbus TCP for real-time monitoring in the SCADA system
• IEEE 1588v2 PTP (Precision Time Protocol) 

Industrial Case and Installation

• IP30 aluminum case 
• DIN-rail or wall-mount design
• 48~56V DC, redundant power with reverse polarity protection
• Supports 6KV DC Ethernet ESD protection
• -40 to 75 degrees C operating temperature 

Digital Input and Digital Output

• 2 digital input (DI)
• 2 digital output (DO)
• Integrate sensors into auto alarm system
• Transfer alarm to IP network via email and SNMP trap

Layer 2 Features

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance of Store-and-Forward architecture, and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Storm Control support
  • Broadcast/Multicast/Unicast
• Supports VLAN
  • IEEE 802.1Q tagged VLAN
  • Up to 4K VLANs groups, out of 4094 VLAN IDs
  • Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad) 
  • Private VLAN Edge (PVE)
  • Protocol-based VLAN
  • MAC-based VLAN
  • Voice VLAN 
  • GVRP (GARP VLAN Registration Protocol)
• Supports Spanning Tree Protocol
  • IEEE 802.1D Spanning Tree Protocol (STP)
  • IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
  • IEEE 802.1s Multiple Spanning Tree Protocol (MSTP), spanning tree by VLAN
  • BPDU Guard
• Supports Link Aggregation
  • 802.3ad Link Aggregation Control Protocol (LACP)
  • Cisco ether-channel (static trunk)
  • Maximum 10 trunk groups with 4 ports per trunk group 
  • Up to 8Gbps bandwidth (duplex mode) 
• Provides port mirror (many-to-1)
• Port mirroring to monitor the incoming or outgoing traffic on a particular port 
• Loop protection to avoid broadcast loops
• Supports ERPS (Ethernet Ring Protection Switching)
• Compatible with Cisco Uni-directional link detection(UDLD) that monitors a link between two switches and blocks the ports on both ends of the link if the link fails at any point between the two devices
• Link Layer Discovery Protocol (LLDP) 

Layer 3 IP Routing Features

• Supports maximum 128 static routes and route summarization
• IPv4 dynamic routing protocol supports OSPFv2
• IPv4/IPv6 hardware static routing
• Routing interface provides per VLAN routing mode

Quality of Service

• Ingress Shaper and Egress Rate Limit per port bandwidth control
• 8 priority queues on all switch ports
• Traffic classification
  • IEEE 802.1p CoS
  • IP TOS/DSCP/IP precedence
  • IP TCP/UDP port number
  • Typical network application
• Strict priority and Weighted Round Robin (WRR) CoS policies
• Supports QoS and In/Out bandwidth control on each port
• Traffic-policing on the switch port
• DSCP remarking

Multicast

• Supports IPv4 IGMP snooping v1, v2 and v3
• Supports IPv6 MLD snooping v1 and v2
• Querier mode support
• IPv4 IGMP snooping port filtering
• IPv6 MLD snooping port filtering
• MVR (Multicast VLAN Registration)

Security

• Authentication
  • IEEE 802.1x port-based / MAC-based network access authentication
  • Built-in RADIUS client to co-operate with the RADIUS servers
  • TACACS+ login users access authentication
  • RADIUS / TACACS+ users access authentication
• Access Control List
  • IP-based Access Control List (ACL)
  • MAC-based Access Control List
• Source MAC / IP address binding
• DHCP Snooping to filter un-trusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• IP address access management to prevent unauthorized intruder

Management

• IPv4 and IPv6 dual stack management
• Switch Management Interfaces
  • Console/Telnet Command Line Interface 
  • Web switch management
  • SNMP v1 and v2c switch management
  • SSH, TLS, SSL and SNMP v3 secure access
• SNMP Management
  • Four RMON groups (history, statistics, alarms, and events) 
  • SNMP trap for interface Link Up and Link Down notification
• IPv6 IP address/NTP/DNS management
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System Maintenance
  • Firmware upload/download via HTTP/TFTP
  • Reset button for system reboot or reset to factory default
  • Dual Images
• DHCP Relay and DHCP Option 82
• DHCP Server 
• User Privilege levels control
• Network Time Protocol (NTP)
• SFP-DDM (Digital Diagnostic Monitor)
• Network Diagnositc
  • ICMPv6/ICMPv4 Remote Ping
  • Cable diagnostic technology provides the mechanism to detect and report potential cabling issues
• PLANET NMS System and Smart Discovery Utility for deployment management
• SMTP/Syslog remote alarm
• System Log