Physical Port
- 28 10/100/1000BASE-T RJ45 copper ports with 24-Port IEEE 802.3af PoE/802.3at PoE+/802.3bt PoE++ injector
- 4 100/1000BASE-X mini-GBIC/SFP slots, shared with port-25 to port-28 compatible with 100BASE-FX SFP
- RJ45 console interface for switch basic management and setup
Power over Ethernet
- Complies with IEEE 802.3bt Power over Ethernet Plus Plus
- Backward compatible with IEEE 802.3at Power over Ethernet Plus
- Up to 24 ports of IEEE 802.3at/IEEE 802.3bt PoE devices powered
- 8 PoE ports with built-in 802.3bt type-4 PoE 90W or ultra PoE 95-watt injector function (Ports 1 to 8)
- 16 PoE ports with built-in 802.3bt type-3 PoE 60W or ultra PoE 72-watt injector function (Ports 9 to 24)
- All PoE ports support 802.3at end-span/mid-span PoE 36W injector function
- Auto detects powered device (PD)
- Circuit protection prevents power interference between ports
- Remote power feeding up to 100 meters in standard mode and 250m in extend mode
- PoE management
- PoE Legacy mode option
- Temperature threshold control
- PoE Chipset temperature display
- Per port PoE function enable/disable
- Per port PoE Inline mode option
- PoE port power feeding priority
- PD classification detection - Intelligent PoE features
- PD alive check
- PoE schedule
- PoE extension
Layer 2 Features
- Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
- High performance Store and Forward architecture, broadcast storm control, and runt/CRC filtering that eliminates erroneous packets to optimize the network bandwidth
- Supports VLAN
- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)
- Protocol VLAN
- Voice VLAN
- Private VLAN
- Management VLAN
- GVRP - Supports Spanning Tree Protocol
- STP (Spanning Tree Protocol)
- RSTP (Rapid Spanning Tree Protocol)
- MSTP (Multiple Spanning Tree Protocol)
- STP BPDU Guard, BPDU filtering and BPDU forwarding - Supports Link Aggregation
- IEEE 802.3ad Link Aggregation Control Protocol (LACP)
- Cisco ether-channel (static trunk) - Provides port mirror (many-to-1)
- Loop protection to avoid broadcast loops
Quality of Service
- Ingress and egress rate limit per port bandwidth control
- Storm control support
- TOS/DSCP/IP precedence of IPv4/IPv6 packets - Strict priority and Weighted Round Robin (WRR) CoS policies
Multicast
- Supports IPv4 IGMP snooping v2 and v3
- Supports IPv6 MLD snooping v1, v2
- IGMP querier mode support
- IGMP snooping port filtering
- MLD snooping port filtering
Security
- Authentication
- Built-in RADIUS client to cooperate with the RADIUS servers
- RADIUS/TACACS+ login user access authentication - Access control list
- IPv4/IPv6 IP-based ACL
- MAC-based ACL - MAC security
- Static MAC
- MAC filtering - Port security for source MAC address entries filtering
- DHCP snooping to filter distrusted DHCP messages
- Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
- IP source guard prevents IP spoofing attacks
- DoS attack prevention
- IP address access management to prevent unauthorized intruder
Management
- IPv4 and IPv6 dual stack management
- Switch management interface
- Console and telnet command line interface
- SNMP v1 and v2c switch management
- SSHv2, TLSv1.2 and SNMP v3 secure access - SNMP Management
- Four RMON groups (history, statistics, alarms and events)
- SNMP trap for interface link up and link down notification - User privilege levels control
- Built-in Trivial File Transfer Protocol (TFTP) client
- BOOTP and DHCP for IP address assignment
- System maintenance
- Firmware upload/download via HTTP/TFTP
- Configuration upload/download through web interface
- Dual images
- Hardware reset button for system reboot or reset to factory default - SNTP Network Time Protocol
- Network Diagnostic
- SFP-DDM (digital diagnostic monitor)
- Cable diagnostics
- ICMPv4/ICMPv6 remote ping
- Link Layer Discovery Protocol (LLDP) and LLDP-MED
- Event message logging to remote syslog server
- Smart fan with speed control
- PLANET UNI-NMS (Universal Network Management) and Smart Discovery Utility for deployment management