Physical Port

• 8 10/100/1000BASE-T Gigabit RJ45 copper ports with 8-port IEEE 802.3at/af PoE injector function
• 2 100/1000BASE-X mini-GBIC/SFP slots

Power over Ethernet

• Complies with IEEE 802.3at Power over Ethernet Plus, end-span PSE
• Backward compatible with IEEE 802.3af Power over Ethernet
• Up to 8 ports of IEEE 802.3af / 802.3at devices powered
• Supports PoE power up to 36 watts for each PoE port
• Auto detects powered device (PD)
• Circuit protection prevents power interference between ports
• Remote power feeding up to 100 meters in standard mode and 250m in extend mode
• PoE management
- Total PoE power budget control

- Per port PoE function enable/disable

- PoE port power feeding priority

- Per PoE port power limitation

- PD classification detection

- PD alive check

- PoE schedule

Layer 2 Features

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance Store and Forward architecture, broadcast storm control, runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Supports VLAN
- IEEE 802.1Q tagged VLAN

- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)

- Protocol VLAN

- Voice VLAN

- Private VLAN

- Management VLAN

- GVRP
• Supports Spanning Tree Protocol
- STP (Spanning Tree Protocol)

- RSTP (Rapid Spanning Tree Protocol)

- MSTP (Multiple Spanning Tree Protocol)

- STP BPDU Guard, BPDU filtering and BPDU forwarding
• Supports Link Aggregation
- IEEE 802.3ad Link Aggregation Control Protocol (LACP)

- Cisco ether-channel (static trunk)
• Provides port mirror (many-to-1)
• Loop protection to avoid broadcast loops

Quality of Service

• Ingress and egress rate limit per port bandwidth control
• Storm control support
- Broadcast / Unknown unicast / Unknown multicast
• Traffic classification
- IEEE 802.1p CoS

- TOS / DSCP / IP precedence of IPv4/IPv6 packets
• Strict priority and Weighted Round Robin (WRR) CoS policies

Multicast

• Supports IPv4 IGMP snooping v2 and v3
• Supports IPv6 MLD snooping v1, v2
• IGMP querier mode support
• IGMP snooping port filtering
• MLD snooping port filtering

Security

• Authentication
- IEEE 802.1X port-based network access authentication

- Built-in RADIUS client to co-operate with the RADIUS servers

- RADIUS / TACACS+ login user access authentication
• Access control list
- IPv4 / IPv6 IP-based ACL

- MAC-based ACL
• MAC security
- Static MAC

- MAC filtering
• Port security for source MAC address entries filtering
• DHCP snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP source guard prevents IP spoofing attacks
• DoS attack prevention
• SSH/SSL

Management

• IPv4 and IPv6 dual stack management
• Switch management interface
- Web switch management

- Telnet command line interface

- SNMP v1 and v2c switch management

- SSH/TLS and SNMP v3 secure access

• User privilege levels control
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System maintenance
- Firmware upload/download via HTTP / TFTP

- Configuration upload / download through web interface

- Dual images

- Hardware reset button for system reboot or reset to factory default

• SNTP Network Time Protocol
• Cable diagnostics
• Link Layer Discovery Protocol (LLDP) and LLDP-MED
• SNMP trap for interface link up and link down notification
• Event message logging to remote Syslog server
• Four RMON groups (history, statistics, alarms and events) 
• PLANET smart discovery utility
• Smart fan with speed control