16-Port Managed 802.3at POE+ Gigabit Ethernet Switch + 4-Port Gigabit Combo

Physical Port

• 20-port 10/100/1000BASE-T Gigabit RJ45 copper with 16-port IEEE 802.3at/af PoE injector
• 4 100/1000BASE-X mini-GBIC/SFP slots, shared with port-17 to port-20 compatible with 100BASE-FX SFP
• RJ45 console interface for switch basic management and setup

Power over Ethernet

• Complies with IEEE 802.3at Power over Ethernet Plus, end-span PSE
• Backward compatible with IEEE 802.3af Power over Ethernet
• Up to 16 ports of IEEE 802.3af/802.3at devices powered
• Supports PoE power up to 30.8 watts for each PoE port
• Auto detects powered device (PD)
• Circuit protection prevents power interference between ports
• Remote power feeding up to 100 meters
• PoE management
• - Total PoE power budget control

• - Per port PoE function enable/disable

• - PoE Port power feeding priority

• - Per PoE port power limitation

• - PD classification detection

• - PD alive-check

• -PoE schedule

Layer 2 Features

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance Store and Forward architecture, broadcast storm control, runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Supports VLAN
• - IEEE 802.1Q tagged VLAN

• - Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)

• - Protocol VLAN

• - Voice VLAN

• - Private VLAN

• - Management VLAN

• - GVRP
• Supports Spanning Tree Protocol
• - STP (Spanning Tree Protocol)

• - RSTP (Rapid Spanning Tree Protocol)

• - MSTP (Multiple Spanning Tree Protocol)

• - STP BPDU Guard, BPDU filtering and BPDU forwarding
• Supports Link Aggregation
• - EEE 802.3ad Link Aggregation Control Protocol (LACP)

• - Cisco ether-channel (static trunk)

• - Maximum 4 trunk groups, up to 8 ports per trunk group
• Provides port mirror (many-to-1)
• Loop protection to avoid broadcast loops

Quality of Service

• Ingress and egress rate limit per port bandwidth control
• Storm control support
• - Broadcast/Unknown unicast/Unknown multicast
• Traffic classification
• - IEEE 802.1p CoS- TOS/DSCP/IP precedence of IPv4/IPv6 packets
• Strict priority and Weighted Round Robin (WRR) CoS policies

Multicast

• Supports IPv4 IGMP snooping v2 and v3
• Supports IPv6 MLD snooping v1 and v2
• IGMP querier mode support
• IGMP snooping port filtering
• MLD snooping port filtering

Security

• Authentication
• - IEEE 802.1X port-based network access authentication

• - Built-in RADIUS client to cooperate with the RADIUS servers

• - RADIUS/TACACS+ login user access authentication
• Access control list
• - IPv4/IPv6 IP-based ACL

• - MAC-based ACL
• MAC security
• - Static MAC

• - MAC filtering
• Port security for source MAC address entries filtering
• DHCP snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP source guard prevents IP spoofing attacks
• DoS attack prevention
• SSH/SSL

Management

• IPv4 and IPv6 dual stack management
• Switch management interface
• - Web switch management

• - Telnet command line interface

• - SNMP v1, v2c and v3

• - SSH and SSL secure access
• User privilege levels control
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System maintenance
• - Firmware upload/download via HTTP / TFTP

• - Configuration upload / download through web interface

• - Dual images

• - Hardware reset button for system reboot or reset to factory default
• SNTP Network Time Protocol
• Cable diagnostics
• Link Layer Discovery Protocol (LLDP) and LLDP-MED
• SNMP trap for interface link up and link down notification
• Event message logging to remote Syslog server
• Four RMON groups (history, statistics, alarms and events)
• PLANET smart discovery utility
• Smart fan with speed control