L2 and L3 switching features (access control list, classification, filtering, IPv4 routing) are performed in hardware at interface line rate for voice, video, and data convergence
Layer 2+ software package provides straight forward IP static routing capabilities for physical interfaces, VLANs and subnets
16K MAC address table, 1K concurrent VLANs and 64 static routes for SMB and small enterprise access layers
Increased packet buffering with up to 12 Mb dynamically shared accross all interfaces for most intensive applications
Low latency at all network speeds
Jumbo frames support of up to 9Kb accelerating storage performance for backup and cloud applications
Broad portfolio of access layer solutions, ranging from 8 ports Fast Ethernet to 50 ports Gigabit Ethernet
Connectivity
Large 10 Gigabit choice for access with 10GBase-T ports for legacy Cat6 RJ45 short connections (up to 300m) and Cat6A / Cat 7 connections up to 100m; and SFP+ ports for fiber optic uplinks or short, low-latency copper DAC cables
Automatic MDIX and Auto-negotiation on all ports select the right transmission modes (half or full duplex) as well as data transmission for crossover or straight-through cables dynamically
100Mbps and 1000Mbps backward compatiblity on all 10GBase-T RJ45 ports
1000Mbps backward compatibility on all SFP+ fiber port
IPv6 support with multicasting (MLD for IPv6 filtering), ACLs and QoS
Ease of Use
Fully functional Web console (GUI) for IT admins who prefer an easy to use graphical interface
Placement outside the wiring closet (conference rooms, offices, class rooms, sales floor in retail stores, etc
For secure deployment in open areas , desktop versions come with a Wall Mount Kit with four bracket
Select desktop versions also come with a set of strong magnets for mounting on any metal surface
Automatic configuration with DHCP and BootP Auto Install
Both the Switch Serial Number and Switch primary MAC address are reported by a simple "show" command in the CLI
Automatic Voice over IP prioritization with Auto-VoIP
An associated Voice VLAN can be easily configured with Auto-VoIP for further traffic isolation
When deployed IP phones are LLDP-MED compliant, the Voice VLAN will use LLDP-MED to pass on the VLAN ID, 802.1P priority and DSCP values to the IP phones, accelerating convergent deployments
DHCP/BootP innovative auto-installation including firmware and configuration file upload automation
Dual firmware image and configuration file for updates with minimum service interruption
Security
Traffic control MAC Filter and Port Security
DHCP Snooping monitors DHCP traffic between DHCP clients and DHCP servers to filter harmful DHCP message and prevent DHCP spoofing attacks
IP source guard and Dynamic ARP Inspection for malicious users traffic elimination
Layer 2 / Layer 3-v4 / Layer 3-v6 / Layer 4 Access Control Lists (ACLs) can be binded to ports, Layer 2 interfaces, VLANs and LAGs (Link Aggregation Groups or Port channel) for fast unauthorized data prevention and right granularity
Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology consistent and predictable - unauthorized devices or switches behind the edge ports that have BPDU enabled will not be able to influence the overall STP topology by creating loops
Spanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance, unauthorized or unexpected new equipment in the network may accidentally become a root bridge for a given VLAN
Dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN / Unauthenticated VLAN are supported for rigorous user and equipment RADIUS policy server enforcement
802.1x MAC Address Authentication Bypass (MAB)
Double VLANs (DVLAN - QoQ) pass traffic from one customer domain to another through the "metro core" in a multi-tenancy environment
Private VLANs (with Primary VLAN, Isolated VLAN, Community VLAN, Promiscuous port, Host port, Trunks) provide Layer 2 isolation between ports that share the same broadcast domain
Secure Shell (SSH) and SNMPv3 (with or without MD5 or SHA authentication) ensure SNMP and Telnet sessions are secured
TACACS+ and RADIUS enhanced administrator management provides strict "Login" and "Enable" authentication enforcement for the switch configuration and authentication based on user domain in addition to user ID and password
