Physical Port

• 4 10/100/1000BASE-T Gigabit Ethernet RJ45 ports with IEEE 802.3at PoE+ Injector
• 2 100/1000BASE-X mini-GBIC/SFP slots for SFP type auto detection
• One RJ45 console interface for basic management and setup

Power over Ethernet

• Complies with IEEE 802.3at Power over Ethernet Plus/end-span PSE
• Up to 4 IEEE 802.3af/802.3at devices powered
• Supports PoE power up to 36 watts for each PoE port
• Auto detects powered device (PD)
• Circuit protection prevents power interference between ports
• Remote power feeding up to 100m
• PoE management features
       - Total PoE power budget control

       - Per port PoE function enable/disable

       - PoE admin-mode control

       - PoE port power feeding priority

       - Per PoE port power limit

       - PD classification detection

• Intelligent PoE features
       - Temperature threshold control

       - PoE usage threshold control

       - PD alive check

       - PoE schedule

Industrial Protocol

• Modbus TCP for real-time monitoring in a SCADA system
• IEEE 1588v2 PTP (Precision Time Protocol) 

Industrial Case and Installation

• IP40 metal case 
• DIN-rail and wall-mount designs
• 48~56V DC, redundant power with polarity reverse protect function
• Supports 6000V DC Ethernet ESD protection
• -40 to 75 degrees C operating temperature

 Layer 2 Features

• High performance of Store-and-Forward architecture, and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Storm Control support
       - Broadcast/Multicast/Unicast
• Supports VLAN
       - IEEE 802.1Q tagged VLAN

       - Up to 255 VLANs groups, out of 4094 VLAN IDs

       - Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad) 

       - Private VLAN Edge (PVE)

       - Protocol-based VLAN

       - MAC-based VLAN

       - Voice VLAN

       - GVRP (GARP VLAN Registration Protocol)

• Supports Spanning Tree Protocol
- IEEE 802.1D Spanning Tree Protocol (STP)

- IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)

- IEEE 802.1s Multiple Spanning Tree Protocol (MSTP), spanning tree by VLAN

- BPDU Guard
• Supports Link Aggregation
       - 802.3ad Link Aggregation Control Protocol (LACP)

       - Cisco ether-channel (static trunk)

       - Maximum 2 trunk groups with 2 ports per trunk group

       - Up to 4Gbps bandwidth (duplex mode)

• Provides port mirror (many-to-1)
• Port mirroring to monitor the incoming or outgoing traffic on a particular port 
• Loop protection to avoid broadcast loops
• Supports ERPS (Ethernet Ring Protection Switching)
• Compatible with Cisco Uni-directional link detection(UDLD) that monitors a link between two switches and blocks the ports on both ends of the link if the link fails at any point between the two devices
• Link Layer Discovery Protocol (LLDP) 

Layer 3 IP Routing Features

• Supports maximum 32 static routes and route summarization

Quality of Service

• Ingress Shaper and Egress Rate Limit per port bandwidth control
• 8 priority queues on all switch ports
• Traffic classification
       - IEEE 802.1p CoS

       - IP TOS/DSCP/IP precedence

       - IP TCP/UDP port number

       - Typical network application

• Strict priority and Weighted Round Robin (WRR) CoS policies
• Supports QoS and In/Out bandwidth control on each port
• Traffic policing on the switch port
• DSCP remarking

Multicast

• Supports IPv4 IGMP snooping v1, v2 and v3
• Supports IPv6 MLD snooping v1 and v2
• Querier mode support
• IGMP snooping port filtering
• MLD snooping port filtering
• MVR (Multicast VLAN Registration)

 Security

• Authentication
       - IEEE 802.1x Port-based/MAC-based network access authentication

       - Built-in RADIUS client to cooperate with the RADIUS servers

       - TACACS+ login users access authentication

       - RADIUS/TACACS+ users access authentication
• Access Control List
       - IP-based Access Control List (ACL)

       - MAC-based Access Control List

• Source MAC/IP address binding
• DHCP snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• IP address access management to prevent unauthorized intruder

Management

• IPv4 and IPv6 dual stack management
• Switch Management Interfaces
        - Console/Telnet Command Line Interface 

       - Web switch management

       - SNMP v1 and v2c switch management

       - SSH/SSL and SNMP v3 secure access
• SNMP Management
       - Four RMON groups (history, statistics, alarms, and events)

       - SNMP trap for interface Link Up and Link Down notification

• IPv6 IP address/NTP/DNS management
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System Maintenance
       - Firmware upload/download via HTTP/TFTP

       - Reset button for system reboot or reset to factory default

       - Dual Images

• DHCP Relay and DHCP Option 82
• DHCP Server 
• User Privilege levels control
• Network Time Protocol (NTP)
• SFP-DDM (Digital Diagnostic Monitor)
• Network Diagnositc
       - ICMPv6/ICMPv4 Remote Ping

       - Cable diagnostic technology provides the mechanism to detect and report potential cabling issues
• PLANET Smart Discovery Utility for deployment management