IGS-6325-16P4S – L3 Industrial 16-Port 10/100/1000T 802.3at PoE + 4-Port 100/1000X SFP Managed Ethernet Switch

Physical Port

• 16 10/100/1000BASE-T Gigabit Ethernet RJ45 ports with IEEE 802.3at PoE+ Injector function
• 4 100/1000BASE-X mini-GBIC/SFP slots for SFP type auto detection
• One RJ45 console interface for basic management and setup

Power over Ethernet

• Complies with IEEE 802.3at Power over Ethernet Plus/end-span PSE
• Up to 16 IEEE 802.3af/802.3at devices powered
• Supports PoE power up to 36 watts for each PoE port
• Auto detects powered device (PD)
• Circuit protection prevents power interference between ports
• Remote power feeding up to 100m
• PoE management features

– Total PoE power budget control

– Per port PoE function enable/disable

– PoE admin-mode control

– PoE port power feeding priority

– Per PoE port power limit

– PD classification detection

• Intelligent PoE features

– Temperature threshold control

– PoE usage threshold control

– PD alive check

– PoE schedule

Industrial Protocol

• Modbus TCP for real-time monitoring in the SCADA system
• IEEE 1588v2 PTP (Precision Time Protocol)

Industrial Case and Installation

• IP30 aluminum case
• DIN-rail or wall-mount design
• 48~56V DC, redundant power with polarity reverse protect function
• Supports 6KV DC Ethernet ESD protection
• -40 to 75 degrees C operating temperature

Digital Input and Digital Output

• 2 digital input (DI)
• 2 digital output (DO)
• Integrate sensors into auto alarm system
• Transfer alarm to IP network via email and SNMP trap

Layer 2 Features

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance of Store-and-Forward architecture, and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Storm Control support

– Broadcast/Multicast/Unicast

• Supports VLAN

– IEEE 802.1Q tagged VLAN

– Up to 255 VLANs groups, out of 4094 VLAN IDs

– Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)

– Private VLAN Edge (PVE)

– Protocol-based VLAN

– MAC-based VLAN

– Voice VLAN

– GVRP (GARP VLAN Registration Protocol)

• Supports Spanning Tree Protocol

– IEEE 802.1D Spanning Tree Protocol (STP)

– IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)

– IEEE 802.1s Multiple Spanning Tree Protocol (MSTP), spanning tree by VLAN

– BPDU Guard

• Supports Link Aggregation

– 802.3ad Link Aggregation Control Protocol (LACP)

– Cisco ether-channel (static trunk)

– Maximum 10 trunk groups with 4 ports per trunk group

– Up to 8Gbps bandwidth (duplex mode)

• Provides port mirror (many-to-1)
• Port mirroring to monitor the incoming or outgoing traffic on a particular port
• Loop protection to avoid broadcast loops
• Supports ERPS (Ethernet Ring Protection Switching)
• Compatible with Cisco Uni-directional link detection(UDLD) that monitors a link between two switches and blocks the ports on both ends of the link if the link fails at any point between the two devices
• Link Layer Discovery Protocol (LLDP)

Layer 3 IP Routing Features

• Supports maximum 128 static routes and route summarization
• IPv4 dynamic routing protocol supports OSPFv2
• IPv4/IPv6 hardware static routing
• Routing interface provides per VLAN routing mode

Quality of Service

• Ingress Shaper and Egress Rate Limit per port bandwidth control
• 8 priority queues on all switch ports
• Traffic classification

– IEEE 802.1p CoS

– IP TOS/DSCP/IP precedence

– IP TCP/UDP port number

– Typical network application

• Strict priority and Weighted Round Robin (WRR) CoS policies
• Supports QoS and In/Out bandwidth control on each port
• Traffic-policing on the switch port
• DSCP remarking

Multicast

• Supports IPv4 IGMP snooping v1, v2 and v3
• Supports IPv6 MLD snooping v1 and v2
• Querier mode support
• IPv4 IGMP snooping port filtering
• IPv6 MLD snooping port filtering
• MVR (Multicast VLAN Registration)

Security

• • Authentication

– IEEE 802.1x port-based / MAC-based network access authentication

– Built-in RADIUS client to co-operate with the RADIUS servers

– TACACS+ login users access authentication

– RADIUS / TACACS+ users access authentication

• Access Control List

– IP-based Access Control List (ACL)

– MAC-based Access Control List

• Source MAC / IP address binding
• DHCP Snooping to filter un-trusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• IP address access management to prevent unauthorized intruder

Management

• IPv4 and IPv6 dual stack management
• Switch Management Interfaces

– Console/Telnet Command Line Interface

– Web switch management

– SNMP v1 and v2c switch management

– SSH, TLS, SSL and SNMP v3 secure access

• SNMP Management

– Four RMON groups (history, statistics, alarms, and events)

– SNMP trap for interface Link Up and Link Down notification

• IPv6 IP address/NTP/DNS management
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System Maintenance

– Firmware upload/download via HTTP/TFTP

– Reset button for system reboot or reset to factory default

– Dual Images

• DHCP Relay and DHCP Option 82
• DHCP Server
• User Privilege levels control
• Network Time Protocol (NTP)
• SFP-DDM (Digital Diagnostic Monitor)
• Network Diagnositc

– ICMPv6/ICMPv4 Remote Ping

– Cable diagnostic technology provides the mechanism to detect and report potential cabling issues

• PLANET Smart Discovery Utility for deployment management
• SMTP/Syslog remote alarm
• System Log