Physical Port - 28-port 10/100/1000BASE-T Gigabit RJ45 copper with 24-port IEEE 802.3 at/af PoE injector - 4 100/1000BASE-X mini-GBIC/SFP slots, shared with port-25 to port-28 compatible with 100BASE-FX SFP - RJ45 console interface for switch basic management and setup Power over Ethernet - Complies with IEEE 802.3 at Power over Ethernet Plus, end-span PSE - Backward compatible with IEEE 802.3 af Power over Ethernet - Up to 24 ports of IEEE 802.3 af / 802.3 at devices powered - Supports PoE power up to 30.8 watts for each PoE port - Auto detects powered device (PD) - Circuit protection prevents power interference between ports - Remote power feeding up to 100 meters PoE management - Total PoE power budget control - Per port PoE function enable/disable - PoE Port power feeding priority - Per PoE port power limitation - PD classification detection - PD alive-check - PoE schedule Layer 2 Features * Prevents packet loss with back pressure (half-duplex) and IEEE 802.3 x pause frame flow control (full-duplex) * High performance Store and Forward architecture, broadcast storm control, runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth * Supports VLAN - IEEE 802.1Q tagged VLAN - Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1 ad) - Protocol VLAN - Voice VLAN - Private VLAN - Management VLAN - GVRP * Supports Spanning Tree Protocol - STP (Spanning Tree Protocol) - RSTP (Rapid Spanning Tree Protocol) - MSTP (Multiple Spanning Tree Protocol) - STP BPDU Guard, BPDU filtering and BPDU forwarding * Supports Link Aggregation - IEEE 802.3 ad Link Aggregation Control Protocol (LACP) - Cisco ether-channel (static trunk) - Maximum 8 trunk groups, up to 8 ports per trunk group * Provides port mirror (many-to-1) * Loop protection to avoid broadcast loops Quality of Service * Ingress and egress rate limit per port bandwidth control * Storm control support - Broadcast / Unknown unicast / Unknown multicast * Traffic classification - IEEE 802.1 p CoS - TOS / DSCP / IP precedence of IPv4/IPv6 packets * Strict priority and Weighted Round Robin (WRR) CoS policies Multicast * Supports IPv4 IGMP snooping v2 and v3 * Supports IPv6 MLD snooping v1, v2 * IGMP querier mode support * IGMP snooping port filtering * MLD snooping port filtering Security * Authentication - IEEE 802.1X port-based network access authentication - Built-in RADIUS client to co-operate with the RADIUS servers - RADIUS / TACACS+ login user access authentication * Access control list - IPv4 / IPv6 IP-based ACL - MAC-based ACL * MAC security * Static MAC * MAC filtering * Port security for source MAC address entries filtering * DHCP snooping to filter distrusted DHCP messages * Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding * IP source guard prevents IP spoofing attacks * DoS attack prevention * SSH/SSL Management * IPv4 and IPv6 dual stack management * Switch management interface - Web switch management - Telnet command line interface - SNMP v1, v2c and v3 - SSH and SSL secure access * User privilege levels control * Built-in Trivial File Transfer Protocol (TFTP) client * BOOTP and DHCP for IP address assignment * System maintenance - Firmware upload/download via HTTP / TFTP - Configuration upload / download through web interface - Dual images - Hardware reset button for system reboot or reset to factory default * SNTP Network Time Protocol * Cable diagnostics * Link Layer Discovery Protocol (LLDP) and LLDP-MED * SNMP trap for interface link up and link down notification * Event message logging to remote Syslog server * Four RMON groups (history, statistics, alarms and events) * PLANET smart discovery utility * Smart fan with speed control