Wireless AP Managed Switch with 24-Port 10/100/1000T 802.3at PoE + 4-Port 10G SFP+ + LCD Touch Screen and 48VDC Redundant Power (400W PoE Budget, ERPS Ring, ONVIF, Cybersecurity features, Hardware Layer3 OSPFv2 and IPv4/IPv6 Static Routing)

Features:

Physical Port

• 24 10/100/1000BASE-T Gigabit RJ45 copper ports with 24-port IEEE 802.3af/at PoE+ injector
• 4 10GBASE-SR/LR SFP+ slots, compatible with 1000BASE-SX/LX/BX SFP
• RS-232 RJ45 console interface for switch basic management and setup

Wireless LAN AP Management

• Dashboard: provides at-a-glance view of system and wireless network status
• AP Discovery: one key to discover the managed APs on the managed LAN
• Customized Profile: allows multiple wireless profiles creation and maintenance
• Auto Provision: multi-AP provisioning with one click
• Cluster Management: simplifies high-density AP management
• Zone Plan: optimizes AP deployment with actual signal coverage
• Analysis: real-time AP status monitoring
• Scalability: free system upgrade and AP firmware bulk upgrade capability

Power over Ethernet

• Up to 24 ports of IEEE 802.3af/802.3at devices powered
• Supports PoE Power up to 36 watts for each PoE port
• Auto detects powered device (PD)
• Circuit protection prevents power interference between ports
• Remote power feeding up to 100 meters
• PoE Management
• - PoE Port Status monitoring

• - Total PoE power budget control

• - Over temperature protection

• - PoE usage threshold

• - Temperature threshold

• - Per port PoE function enable/disable

• - PoE Port Power feeding priority

• - Per PoE port power limit

• - PD classification detection

• - Sequence port PoE

Layer 2 Features

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance of Store-and-Forward architecture and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Storm Control support
• - Broadcast/Multicast/Unknown unicast

• Supports VLAN
• - IEEE 802.1Q tagged VLAN

• - Up to 255 VLANs groups, out of 4095 VLAN IDs

• - Supports provider bridging (VLAN Q-in-Q, IEEE 802.1ad)

• - Private VLAN Edge (PVE)

• - Protocol-based VLAN

• - MAC-based VLAN

• - Voice VLAN
•  Supports Spanning Tree Protocol
• - IEEE 802.1D Spanning Tree Protocol

• - IEEE 802.1w Rapid Spanning Tree Protocol

• - EEE 802.1s Multiple Spanning Tree Protocol, spanning tree by VLAN

• - BPDU Guard
• Supports Link Aggregation
• - 802.3ad Link Aggregation Control Protocol (LACP)

• - Cisco ether-channel (static trunk)

• - Maximum 14 trunk groups, up to 4 ports per trunk group

• - Up to 80Gbps bandwidth (full duplex mode)
• Provides port mirror (many-to-1)
• Port mirroring to monitor the incoming or outgoing traffic on a particular port
• Loop protection to avoid broadcast loops
• Supports ERPS (Ethernet Ring Protection Switching)

Layer 3 IP Routing Features

• Supports maximum 128 static routes and route summarization
• IP dynamic routing protocol supports OSPFv2
• Routing interface provides per VLAN routing mode 

Quality of Service

• Ingress Shaper and Egress Rate Limit per port bandwidth control
• 8 priority queues on all switch ports
• Traffic classification
• - IEEE 802.1p CoS

• - TOS/DSCP/IP Precedence of IPv4/IPv6 packets

• - IP TCP/UDP port number

• - Typical network application
• Strict priority and Weighted Round Robin (WRR) CoS policies
• Supports QoS and In/Out bandwidth control on each port
• Traffic policing on the switch port
• DSCP remarking

Multicast 

• Supports IGMP Snooping v1, v2 and v3
• Supports MLD Snooping v1 and v2
• Querier mode support
• IGMP Snooping port filtering
• MLD Snooping port filtering
• Multicast VLAN Registration (MVR) support

Security

• Authentication
• - IEEE 802.1x Port-based/MAC-based network access authentication

• - Built-in RADIUS client to co-operate with the RADIUS servers

• - TACACS+ login users access authentication

• - RADIUS/TACACS+ users access authentication

• Access Control List
• - IP-based Access Control List (ACL)

• - MAC-based Access Control List
• Source MAC/IP address binding
• DHCP Snooping to filter un-trusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• Auto DoS rule to defend DoS attack
• IP address access management to prevent unauthorized intruder

Management

• IPv4 and IPv6 dual stack management
• Switch Management Interfaces
• - Console/Telnet Command Line Interface

• -  2.4” inch LCD touch screen

• - Web switch management

• - SNMP v1, v2c, and v3 switch management

• - SSH/SSL secure access
• IPv6 IP Address/NTP/DNS management
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System Maintenance
• - Firmware upload/download via HTTP/TFTP

• - Reset button for system reboot or reset to factory default

• - Dual Images

• DHCP Relay
• DHCP Option82
• User Privilege levels control
• NTP (Network Time Protocol)
• Link Layer Discovery Protocol (LLDP) and LLDP-MED
• Network Diagnostic
• - ICMPv6/ICMPv4 Remote Ping

• - Cable Diagnostic technology provides the mechanism to detect and report potential cabling issues

• SMTP/Syslog remote alarm
• Four RMON groups (history, statistics, alarms and events) 
• SNMP trap for interface Linkup and Linkdown notification
• System Log
• PLANET Smart Discovery Utility for deployment management