Product description
Built-in security features protect your network from unauthorized access by allowing you to segment traffic and define access to each area of the network. And all of this is included in the price of the hardware - there are no hidden subscription or licensing fees.
Product features
- TPM-based security
Includes a Trusted Platform Module (TPM) for secure hardwarebased generation and storage of cryptographic keys used for secure connection to the instant on cloud portal. - IEEE 802.1Q VLAN support
Support for up to 256 VLANs with a VLAN ID range of 2-4093 IEEE 802.1X access control Authentication of network users on a per port basis prior to permitting network access. Port authentication includes RADIUS assigned VLAN, dynamic VLAN creation, guest VLAN or into an unauthenticated VLAN. Automatic denial-of-service protection Monitors for malicious attacks and protects the network by blocking the attacks. - Packet storm protection
Protects against unknown unicast, broadcast and multicast storms with user-defined thresholds. - RADIUS
The switch supports RADIUS authentication with primary and backup server configuration. - RADIUS accounting
A robust set of attributes and statistics are available for collecting information from the switch. - Management VLAN ID
Provides secure management access to administrators in the specified VLAN. - Link flap prevention
Minimizes the network disruption by automatically detecting and disabling ports that experience link flap events. - Energy Efficient Ethernet (EEE)
Compliant with IEEE 802.3az standard requirements to save energy during periods of low data activity. - Auto-port shut down
The switch saves power by automatically shutting down power to inactive ports. Power is restored on a port upon link detection. - Energy savings status
The switch provides an estimated cumulative energy savings due to green Ethernet features being enabled. - Energy-efficient cooling
Includes variable speed fans operating only at the speed necessary to maintain operating temperature to reduce excess noise and power consumption. - IEEE 802.3x flow control
Provides a flow-throttling mechanism propagated through the network to prevent packet loss at a congested node. - Spanning Tree Protocol (STP)
Supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and IEEE 802.1s Multiple Spanning Tree Protocol (MSTP on local web). - Loop protection
If the switch detects a loop, it disables the source port from forwarding data packets originating from the switch to avoid broadcast storms. - BPDU filtering
Drops BPDU packets when STP is enabled globally but disabled on a specific port. - Jumbo frame support
Supports up to 9216 bytes frame size to improve the performance of large data transfers. - IGMP snooping v1/v2
Improves network performance through multicast filtering, instead of flooding traffic on all ports. - Link aggregation
Groups together multiple ports up to a maximum of eight (8) ports per trunk automatically using Link Aggregation Control Protocol (LACP), or manually, to form a high-bandwidth connection to the network backbone that helps prevent traffic bottlenecks. The 8-port models support 4 trunks, 24-port models support 8 trunks, and 48-port models support 16 trunks. - LLDP/LLDP-MED (Media Endpoint Discovery)
Defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN for automatic configuration of network devices such as IP phones. - Address Resolution Protocol (ARP)
The ARP table displays all of the IP addresses that have been resolved to MAC addresses, either dynamically or through static entry configuration. - Static IPv4 routing
Supports manual routing configuration of up to 32 static routes. - Auto-voice VLAN
Recognizes IP phones and automatically assigns voice traffic to dedicated VLAN for IP phones. - Access Control Lists (ACLs)
Enables network traffic filtering by creating an ACL, adds rules and matches criteria to an ACL, and applies the ACL to permit or deny on one or more interfaces or a VLAN. Supports for 50 inbound IPv4 and MAC ACLs with up to 480 ACEs. - IPv6 host
Enables switches to be managed and deployed at the IPv6 network's edge. - Rate limiting
Sets and enforces per-port ingress traffic limits based on percentages or packets per second. - ARP Attack prevention
Dynamic ARP protection blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data. - DHCP snooping
Provides network security by filtering untrusted DHCP messages. - Port security
Ports in a port isolation group are restricted from forwarding Layer 2 traffic between ports in that group, providing data privacy and security. - SCP and TFTP file transfer
Provides different mechanisms for secure file transfer through SCP (Secure Copy Protocol) or TFTP. - Dual image support
Provide independent primary and secondary software images for backup while upgrading. - User account management
Password strength checking and aging feature provides enhanced security to user account administration to the local web management interface. - Secure Sockets Layer (SSL)
Encrypts all HTTP traffic, secures access to the local browserbased management of the switch. - SNMPv1, v2c, and v3
Facilitate management of the switch, as the device can be discovered and monitored from an SNMP management station. - Remote monitoring (RMON)
Remote monitoring (RMON) provides advanced monitoring and reporting capabilities for statistics, history, alarms and events. RMON data is retrieved from the switch through a network management platform over SNMP.
