> Physical Port

> 24 100/1000Base-X mini-GBIC/SFP slots

> 8-port 10/100/1000Base-T Gigabit Ethernet RJ-45, shared with Port-1 to Port-8

> RJ45 to RS-232 DB9 console interface for basic management and setup

> Layer 2 Features

> Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)

> High performance of Store-and-Forward architecture and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth

> Storm Control support

> Broadcast / Unicast / Unknown Unicast

> Supports VLAN- IEEE 802.1Q tagged VLAN- Up to 255 VLANs groups, out of 4095 VLAN IDs- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)- Private VLAN Edge (PVE)- Protocol-based VLAN- MAC-based VLAN- IP Subnet-based VLAN- Voice VLAN

> Supports Spanning Tree Protocol

> STP, IEEE 802.1D Spanning Tree Protocol- RSTP, IEEE 802.1w Rapid Spanning Tree Protocol- MSTP, IEEE 802.1s Multiple Spanning Tree Protocol, spanning tree by VLAN- BPDU Guard

> Supports Link Aggregation

> 802.3ad Link Aggregation Control Protocol (LACP)- Cisco ether-channel (Static Trunk)- Maximum 12 trunk groups, up to 8 ports per trunk group- Up to 16Gbps bandwidth (full duplex mode)

> Provides Port Mirror (many-to-1)

> Port Mirroring to monitor the incoming or outgoing traffic on a particular port

> Loop protection to avoid broadcast loops

> Layer 3 IP Routing Features

> Supports maximum 128 static routes and route summarization

> Quality of Service

> Ingress Shaper and Egress Rate Limit per port bandwidth control

> 8 priority queues on all switch ports

> Traffic classification

> IEEE 802.1p CoS- TOS / DSCP / IP Precedence of IPv4/IPv6 packets- IP TCP/UDP port number- Typical network application

> Strict priority and Weighted Round Robin (WRR) CoS policies

> Traffic-policing policies on the switch port

> DSCP remarking

> Multicast

> Supports IGMP Snooping v1, v2 and v3

> Supports MLD Snooping v1 and v2

> Querier mode support

> IGMP Snooping port filtering

> MLD Snooping port filtering

> MVR (Multicast VLAN Registration)

> Security

> IEEE 802.1X Authentication with Guest VLAN

> Built-in RADIUS client to cooperate with the RADIUS servers

> RADIUS / TACACS+ users access authentication

> IP-based Access Control List (ACL)

> MAC-based Access Control List (ACL)

> Source MAC / IP address binding

> DHCP Snooping to filter distrusted DHCP messages

> Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding

> IP Source Guard prevents IP spoofing attacks

> IP address access management to prevent unauthorized intruder