Physical Port

• 24 100/1000Base-X mini-GBIC/SFP slots
• 8-port 10/100/1000Base-T Gigabit Ethernet RJ-45, shared with Port-1 to Port-8
• RJ45 to RS-232 DB9 console interface for basic management and setup

Layer 2 Features

- Broadcast / Unicast / Unknown Unicast

- STP, IEEE 802.1D Spanning Tree Protocol

- RSTP, IEEE 802.1w Rapid Spanning Tree Protocol

- MSTP, IEEE 802.1s Multiple Spanning Tree Protocol, spanning tree by VLAN

- BPDU Guard

- 802.3ad Link Aggregation Control Protocol (LACP)

- Cisco ether-channel (Static Trunk)

- Maximum 12 trunk groups, up to 8 ports per trunk group

- Up to 16Gbps bandwidth (full duplex mode)

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance of Store-and-Forward architecture and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Storm Control support
• Supports VLAN

  - IEEE 802.1Q tagged VLAN

  - Up to 255 VLANs groups, out of 4095 VLAN IDs

  - Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)

  - Private VLAN Edge (PVE)

  - Protocol-based VLAN

  - MAC-based VLAN

  - IP Subnet-based VLAN

  - Voice VLAN

• Supports Spanning Tree Protocol
• Supports Link Aggregation
• Provides Port Mirror (many-to-1)
• Port Mirroring to monitor the incoming or outgoing traffic on a particular port
• Loop protection to avoid broadcast loops

Layer 3 IP Routing Features

• Supports maximum 128 static routes and route summarization

Quality of Service

- IEEE 802.1p CoS

- TOS / DSCP / IP Precedence of IPv4/IPv6 packets

- IP TCP/UDP port number

- Typical network application

• Ingress Shaper and Egress Rate Limit per port bandwidth control
• 8 priority queues on all switch ports
• Traffic classification
• Strict priority and Weighted Round Robin (WRR) CoS policies
• Traffic-policing policies on the switch port
• DSCP remarking

Multicast

• Supports IGMP Snooping v1, v2 and v3
• Supports MLD Snooping v1 and v2
• Querier mode support
• IGMP Snooping port filtering
• MLD Snooping port filtering
• MVR (Multicast VLAN Registration)

Security

• IEEE 802.1X Authentication with Guest VLAN
• Built-in RADIUS client to cooperate with the RADIUS servers
• RADIUS / TACACS+ users access authentication
• IP-based Access Control List (ACL)
• MAC-based Access Control List (ACL)
• Source MAC / IP address binding
• DHCP Snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• IP address access management to prevent unauthorized intruder

Management

- Console / Telnet Command Line Interface

- Web switch management

- SNMP v1, v2c, and v3 switch management

- SSH / SSL secure access

• Switch Management Interfaces
• Four RMON groups (history, statistics, alarms and events)
• IPv6 Address / NTP management
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• Firmware upload / download via HTTP / TFTP
• DHCP Relay and Option 82
• User Privilege levels control
• NTP (Network Time Protocol)
• Link Layer Discovery Protocol (LLDP)
• SFP-DDM (Digital Diagnostic Monitor)
• Cable Diagnostic technology provides the mechanism to detect and report potential cabling issues for TP ports
• ICMPv6 / ICMPv4 Remote Ping
• Reset button for system reboot or reset to factory default
• SMTP / Syslog / SNMP Trap remote alarm
• System Log
• PLANET Smart Discovery Utility for deploy management

Redundant Power System (GS-5220-16S8CR)

• Redundant 100~240V AC / 36-60V DC dual power
• Active-active redundant power failure protection
• Backup of catastrophic power failure on one supply
• Fault tolerance and resilience