Interfaces
- 10/100/1000BASE-T (RJ-45) - 8
-
10/100/1000BASE-T/1000BASE-X/100BASE-FX Combo - 2
-
Console port RS-232 (RJ-45) - 1
Performance
- Bandwidth - 20 Gbps
-
Throughput - 14.9 MPPS
-
Buffer memory - 1.5 MB
-
RAM (DDR3) - 512 MB
-
ROM (RAW NAND) - 512 MB
-
MAC table - 16384
-
ARP table1 - 820
-
VLAN table - 4094
-
L2 Multicast groups - 2046
-
SQinQ rules - 360 (ingress) / 72 (egress)
-
ACL rules - 958
-
L3 IPv4 Unicast2 - 818
-
L3 IPv6 Unicast2 - 210
-
L3 IPv4 Multicast (IGMP Proxy, PIM)2 - 412
-
L3 IPv6 Multicast (IGMP Proxy, PIM)2 - 103
-
VRRP switches - 50
-
Maximum size of ECMP groups - 8
-
L3 interfaces - 130
-
Link Aggregation Groups (LAG) - 48, up to 8 ports per LAG
-
Quality of Service (QoS) - 8 egress queues per port
-
Jumbo frames size - 10240 bytes
-
Stacking - 8 devices
Interface functions
- Head-of-line blocking (HOL) protection
-
Back pressure
-
Auto MDI/MDIX
-
Jumbo frames
-
Flow control (IEEE 802.3X)
-
Port mirroring (SPAN, RSPAN)
-
Stacking
MAC table functions
- Independent learning mode per VLAN
-
MAC Multicast Support
-
Configurable aging time of MAC addresses
-
Static MAC Entries
-
MAC Flapping logging
VLAN functions
- Voice VLAN
-
802.1Q
-
Q-in-Q
-
Selective Q-in-Q
-
GVRP
L2 Multicast functions
- Multicast profiles
-
Static Multicast groups
-
IGMP Snooping v1,2,3
-
Port/host-based IGMP Snooping Fast Leave
-
Pim-Snooping
-
IGMP proxy-report
-
IGMP authorization via RADIUS
-
MLD Snooping v1,2
-
IGMP Querier
-
MVR
L2 functions
- STP (Spanning Tree Protocol, IEEE 802.1d)
-
RSTP (Rapid Spaning Tree protocol, IEEE 802.1w)
-
MSTP (Multiple Spanning Tree, IEEE 802.1s)
-
STP Multiprocess
-
PVSTP+
-
RPVSTP+
-
Spanning Tree Fast Link option
-
STP Root Guard
-
STP Loop Guard
-
BPDU Filtering
-
STP BPDU Guard
-
VLAN-based Loopback Detection (LBD)
-
ERPS (G.8032v2)
-
Flex-link
-
Private VLAN, Private VLAN Trunk
-
Layer 2 Protocol Tunneling (L2PT)
L3 functions
- Static IP routes
-
Dynamic routing protocols RIPv2, OSPFv2, OSPFv3, IS-IS (IPv4 Unicast), BGP3 (IPv4 Unicast, IPv4 Multicast)
-
BFD (for BGP)
-
Address Resolution Protocol (ARP)
-
Proxy ARP
-
Policy-Based Routing (IPv4)
-
VRRP
-
PIM SM, PIM DM, IGMP Proxy, MSDP
-
IP Unnumbered
-
ECMP Load Balancing
Link Aggregation functions
- Static LAG
-
Dynamic LAG (LACP)
-
LAG Balancing Algorithm
-
Multi-Switch Link Aggregation Group (MLAG)
IPv6 functions
Service functions
- Virtual Cable Testing (VCT)
-
Optical transceiver diagnostics
-
Green Ethernet
Security functions
- DHCP Snooping
-
DHCP Option 82
-
IP Source Guard
-
Dynamic ARP Inspection
-
First Hop Security
-
sFlow
-
MAC-based authentication, Port Security, Static MAC entries
-
Port-based authentication IEEE 802.1x
-
Guest VLAN
-
DoS attack prevention
-
Traffic segmentation
-
Protection against non-authorized DHCP servers
-
DHCP clients filtering
-
BPDU attacks prevention
-
NetBIOS/NetBEUI filtering
-
PPPoE Intermediate Agent
ACL (Access Control List)
- L2-L3-L4 ACL
-
Time-Based ACL
-
IPv6 ACL
-
ACL based on:
-
Physical port number
-
IEEE 802.1p
-
VLAN ID
-
EtherType
-
DSCP
-
Protocol type
-
TCP/UDP port number
-
User Defined Bytes
Quality of Service (QoS) and rate limiting
- QoS statistics
-
Shaping, Policing
-
IEEE 802.1p Class of Service (CoS)
-
Storm Control for different types of traffic (broadcast, multicast, unknown unicast)
-
Bandwidth management
-
Scheduling algorithms: Strict Priority/Weighted Round Robin (WRR)
-
Three marking colors
-
ACL-based CoS/DSCP mark assignment
-
Setting the IEEE 802.1p priority for management VLAN
-
DSCP to CoS/CoS to DSCP remarking
-
ACL-based VLAN assignment
-
802.1p, DSCP mark assignment for IGMP
ОАМ/CFM
- 802.3ah Ethernet Link OAM
-
Dying Gasp
-
802.1ag Connectivity Fault Management (CFM)
-
802.3ah Unidirectional Link Detection (UDLD)
Main management functions
- Download and upload of configuration file via TFTP/SCP
-
Redirecting the output of CLI commands to an arbitrary file on ROM
-
SNMP
-
Command Line Interface (CLI)
-
Web interface
-
Syslog
-
SNTP (Simple Network Time Protocol)
-
Traceroute
-
LLDP (802.1ab) + LLDP MED
-
Processing traffic management with two 802.1Q headers
-
Authorization of entered commands using TACACS+ server
-
Access control – privilege levels
-
Management interface blocking
-
Local authentication
-
IP addresses filtering for SNMP
-
RADIUS, TACACS+ (Terminal Access Controller Access Control System) clients
-
Change of Authorization (CoA)
-
SSH server, Telnet server
-
SSH client, Telnet client
-
Remote start of commands via SSH
-
SSL
-
Macrocommands
-
CLI commands logging
-
System log
-
DHCP autoprovision
-
DHCP Relay (Option 82)
-
DHCP Option 12
-
DHCP Relay, DHCPv6 LDRA (Option 18, 37)
-
PPPoE Circuit-ID tag
-
Flash File System
-
Debugging commands
-
Rate limit of traffic to CPU
-
Password encryption
-
Password recovery
-
Ping (IPv4/IPv6 support)
-
DNS server (Resolver)
Monitoring functions
- Statistics on interfaces
-
RMON/SMON
-
IP SLA
-
CPU utilization monitoring per task and per traffic type
-
RAM utilization monitoring
-
Temperature monitoring
-
TCAM utilization monitoring
MIB/IETF
- RFC 1065, 1066, 1155, 1156, 2578 MIB Structure
-
RFC 1212 Concise MIB Definitions
-
RFC 1213 MIB II
-
RFC 1215 MIB Traps Convention
-
RFC 1493, 4188 Bridge MIB
-
RFC 1157, 2571-2576 SNMP MIB
-
RFC 1901-1908, 3418, 3636, 1442, 2578 SNMPv2 MIB
-
RFC 1271,1757, 2819 RMON MIB
-
RFC 2465 IPv6 MIB
-
RFC 2466 ICMPv6 MIB
-
RFC 2737 Entity MIB
-
RFC 4293 IPv6 SNMP Mgmt Interface MIB
-
Private MIB
-
RFC 3289 DIFFSERV MIB
-
RFC 2021 RMONv2 MIB
-
RFC 1398, 1643, 1650, 2358, 2665, 3635 Ether-like MIB
-
RFC 2668 802.3 MAU MIB
-
RFC 2674, 4363 802.1p MIB
-
RFC 2233, 2863 IF MIB
-
RFC 2618 RADIUS Authentication Client MIB
-
RFC 4022 MIB for TCP
-
RFC 4113 MIB for UDP
-
RFC 2620 RADIUS Accounting Client MIB
-
RFC 2925 Ping & Traceroute MIB
-
RFC 768 UDP
-
RFC 791 IP
-
RFC 792 ICMPv4
-
RFC 2463, 4443 ICMPv6
-
RFC 4884 Extended ICMP for Multi-Part messages support
-
RFC 793 TCP
-
RFC 2474, 3260 DS field definition in IPv4 and IPv6 headers
-
RFC 1321, 2284, 2865, 3580, 3748 Extensible Authentication Protocol (EAP)
-
RFC 2571, RFC2572, RFC2573, RFC2574 SNMP
-
RFC 826 ARP
-
RFC 854 Telnet
1 For each host in the ARP table, an entry is created in the routing table — the device complies with CE requirements
2 Pv4/IPv6 Unicast/Multicast routes share hardware resources
3 BGP protocol support is provided under license