PTP Telecom Profile
|
- Supports IEEE 1588v2 (T-GM, T-BC / OC, T-TC, T-TSC) Transparent Clock / Boundary Clock / Ordinary Clock / Grandmaster
- Supports Telecom Profile G.8275.1, G.8275.2, and G.8265.1
- Supports G.8262 / G.8262.1 SyncE
- Supports G.8264 SyncE ESMC
- Integrated Stratum 3E OCXO with optional hold over performances
- Rich timing input / output interfaces: ToD, 1PPS, BITS and 10MHz
- Internal GNSS receiver for master clock implementations
- Supports FlexE for flexible bandwidth utilization
- Nanosecond-level Accuracy with G.8273.2 and G.8273.3 standards compatibility
- Supports Time Sensitive Networking (TSN) for low packet loss and low delay variation
|
Time Synchronization
|
- IEEE 1588v2 PTP (GM, BC / OC, and TC)
- Supports E2E / P2P: End-to-End and Peer-to-Peer mode
- Supports two steps PTP
- Supports L2 multicast and L3 (IPv4) multicast UDP transport mechanism
- Industrial / Automation Profile 802.1AS-2020 (gPTP)
- Power Profile IEC 61850-9-3 and IEEE C37.238-2017
- AES67 and SMPTE ST 2110 for AV-over-IP Dante network*
- Nanosecond-level (ns) Accuracy
|
Stacking
|
- Up to 4x10 GbE stacking ports
- Supports stackable up to 4 units, a total of 40 Gb stacking bandwidth
- Up to 48 ports in a single stack
- Supports spine and leaf line-rate topologies
|
Layer 3 IPv4 / 6 Routing (IPv6 ready)
|
- Inter VLAN routing
- Unicast routing RIPv1 / v2, OSPFv1 / v2, BGP4*, RIPng, OSPFv3, BGP4+*
- Multicast routing DVMRP, PIM-SM, PIM-DM, PIM-SSM, PIMv6
- Redundant VRRP, VRRPv3
- Static Routing From Day One
- Supports MLD v1 / v2
|
NAT (Network Address Translation)
|
- Hardware NAT Translations: Wire-speed performance
- One-to-One NAT
- Port Forwarding
- Dynamic NAT
- Port Overload (PAT-Port Address Translation): TCP Timeout (sec.), UDP Timer (sec.)
|
Link Aggregation
|
- Maximum 8 groups (LAGs) and max 8 member ports per LAG
|
Broadcast / Multicast / Unicast Storm Suppression
|
- Storm suppression based on port bandwidth percentage & PPS*
|
MAC Address Table
|
- Static & Blackhole MAC address
- MAC learning limit
|
VLAN
|
- IEEE 802.1Q Tag VLAN (up to 4094 VLANs)
- Port-based VLAN (up to 4094 VLANs)
- Protocol-based / IP subnet-based / MAC-based VLAN
- VLAN Mapping (VLAN Translation)*
- MVRP
|
Spanning Tree
|
- Supports STP / RSTP / MSTP
- Supports Root Guard, BPDU Guard
|
Loop Protect
|
- Loopback detection and prevention
|
Redundancy Protocols
|
- ITU-T G.8032 Ring, STP, RSTP, MSTP
|
DHCP
|
- DHCP Client including option 66
- DHCP Snooping including option 82 / 66*
- DHCP Relay including option 82
- DHCP Server
- MAC-based can assign IP address by specific host
- Port-based can assign IP address by specific port
|
Mirroring
|
- Local port mirroring (SPAN Sessions): Ingress, Egress or both direction per port, vlan, and interface
- Remote port mirroring: RSPAN*
|
Quality of Service
|
- Supports classification and scheduling as per IEEE 802.1P on all ports
- Automatic QoS
- Support strict priority queuing
- Port-based priority with 802.1p CoS priority override*
- 802.1p CoS priority and IPv4 DSCP priority
- 8 Hardware egress queues per port
- Flexible queue scheduling algorithms including SP, WRR, and SP + WRR*
|
Bandwidth Control (Rate Limit)
|
- Bi-directional Rate limit in percentage (Ingress and Egress)
- In the ingress direction, packet type (Broadcast / Multicast / Unicast packet) combination rules are allowed
- Traffic shaping in egress*
|
ACL
|
- Layer 2 to Layer 4 packet filtering
- Traffic classification based on source MAC, destination MAC, source IP, destination IP, TCP / UDP port, and VLAN*
- Bi-directional ACLs (Ingress and Egress)*
- Time range-based bi-directional ACLs (Ingress and Egress)*
- VLAN-based ACL issuing*
|
Discovery Protocol
|
- CDP (Cisco Discovery Protocol)
|
Multicast
|
- Supports IGMP v1 / v2 / v3
- Supports IGMP Snooping v1 / v2 / v3
- Supports IGMP Filtering
- Supports IGMP Querier
- Supports MLD Snooping v1 / v2
|
Layer 2 Switching
|
- LLDP (Link Layer Discovery Protocol)
- Unicast MAC Filter
- IEEE 802.3ad Link Aggregation (LACP)
- Private VLAN
- Voice VLAN
- VLAN Double tagging (QinQ)
- RFC 3176: sFlow
- CIP Ethernet
|
Security
|
- TACACS+
- RADIUS
- Dynamic ARP Inspection (DAI) including ARP Spoofing prevention
- IP Source Guard
- Supports IEEE 802.1ae MACsec with 128-bit and 256-bit cipher suites (GCM-AES-256)
- MAB (MAC Authentication Bypass)
- 802.1X
- 802.1X with VLAN assignment*
- 802.1X dynamic access control list (ACL) based on RADIUS attributes*
- Secure boot
- Hierarchical user management and password protection*
- Supports up to 10 IP addresses to access the switch
- HTTPS for secure access to the web interface
- SSH 2.0 for secure shell to command line interface
- MAC-based authentication
- Guest VLAN*
- Supports Port Isolation*
- AAA Authentication*
|
SNMP & MIB
|
- SNMP v1 / v2c / v3 and Trap
- SNMP v1 / v2 providing light security by means of the community strings*
- SNMP v3 providing User-based Security Model (USM) and Transport Security Model (TSM)*
- Remote Monitoring (RMON) alarm, event, and history recording
- Remote Monitoring (RMON) (RFC2819) Group 1 (Statistics), Group 2 (History), Group 3 (Alarm), Group 9 (Event)
- RFC 1213 MIB II, RFC 1157 SNMP MIB, RFC 1573 IF MIB, RFC 1757 RMON, Private MIB
|
IP Stack for Managed Interface
|
- Both IPv4 and IPv6 stack simultaneously
|
IPv6 for Managed Interface
|
- IPv6-Ping, IPv6-Tracert, IPv6-Telnet, and IPv6-TFTP*
|
Configuration Import and Export
|
- Readable text configuration file for system quick installation
- Supports HTTP / HTTPs / FTP / FTP-SSL / SFTP / TFTP backup and restore config file*
|
Firmware
|
- Upgrading via HTTP / HTTPs / FTP / FTP-SSL / SFTP / TFTP*
|
Management
|
- Console Port
- Telnet
- SSHv2
- UDLD (UniDirectional Link Detection)
- Dying Gasp
- System log (Syslog), alarming based on severity*
- WEB UI management through HTTP / HTTPS
- NTP, SNTP, NTS
- Ping, Tracert
|
IPv6
|
- 128-Bit Wide Unicast Addresses
- DNS for IPv6
- ICMPv6
- Neighbor Discovery
- IPv6 Stateless Address Autoconfiguration
- Duplicate Address Detection (DAD)
- SNMP and Syslog Over IPv6
- HTTP over IPv6
|
DHCP for IPv6
|
- DHCPv6 Client (RFC 3315)
- DHCPv6 Snooping (RFC 3315) including option 18 / 37
- DHCPv6 Relay (RFC 3315) including option 18 / 37
- DHCPv6 Server (RFC 3315)
- MAC-based can assign IP address by specific host
- Port-based can assign IP address by specific port
- Relay-based option (18 / 37) can assign IP address by specific host or port
|
Remote Management
|
|