Carrier-level high availability
The switch not only supports the traditional STP/RSTP/MSTP spanning tree protocol but also supports the G.8032 International standard ERPS protocol issued by ITU-T. This standard can realize 50ms fast loop recovery under an Ethernet ring network. One switch can connect to multiple aggregation switches through multiple links, significantly improving the reliability of access devices.

Layer3 routing and enhanced multi-service
Support static route
Support dynamic routes such as RIP, OSPF, BGP, IS-IS
Support IPV4/IPV6 dual protocol stack, Support RIPng 、 OSPFv3
Support DHCP Server and DHCP Relay, L2-Tunnel
Support Ethernet OAM protocols such as CFM, EFM

Uninterrupted PoE power supply
When the device restarts, the PoE switch will not interrupt the power supply to the connected camera, VoIP phone, and other powered devices, ensuring that the powered device will not lose power during the restart of the switch, and achieve interruption of the PoE power supply.

Hardware-based ACL control
The hardware-based ACL processing mechanism is adopted to ensure the control requirements of Gigabit high-speed forwarding; it supports ACL access control from the second to the seventh layer, which can be based on the source and destination MAC addresses, source and destination IP addresses, UDP/TCP port numbers, and IP addresses. The protocol type and other information classify the data flow and set the access control rules according to the data classification. You can set permissions or deny, and then apply the rules to VLANs or physical ports; support the global ACL Function, which expands the number of effective ACL entries, which is convenient The use and maintenance of customers.

Enhanced security and authentication technologies
Provides multiple security policies such as user authority/identity authentication, port security, port speed limit, port monitoring, address filtering, loopback detection, 802.1X authentication, etc., to provide multiple protection mechanisms for user access and network security. It has a very good security function design, supports user security policy-based SNMP V3, MAC+IP+VLAN binding, 802.1X authentication and other security strategies, support anti-network storm attacks, anti-DOS/DDOS attacks, and anti-ARP attacks, Security technologies such as anti-network protocol message attacks can effectively prevent attacks and viruses and are more suitable for large-scale, multi-service, and complex traffic access networks

Full QoS policy and Q-in-Q for campus or carrier network
The Switch fully implements the DIFFSERV model, provides up to 8 QoS queues, supports DSCP/TOS/802.1P and other QoS methods, SP, SRR, WRR, WFQ, and hybrid scheduling, and other priority queue scheduling algorithms, which can achieve port speed limit QoS functions such as traffic shaping to meet customer network requirements for data processing priority; support port trust, configurable trust CoS, DSCP, IP priority, port priority, and modify the DSCP and CoS values of data packets; according to the port, VLAN, DSCP, IP priority, and ACL table to classify the traffic, modify the DSCP and IP priority of the data packet, and specify different bandwidths to provide different service quality for voice/data/video transmission in the same network. Support QinQ function, encapsulate the user's private network VLAN tag in the public network VLAN tag so that the message will pass through the backbone network with two layers of VLAN tag to realize the intercommunication of the user's private network.

Simple and easy-to-use network management function
Support CLI based on RS232 serial port, Telnet and SSHv2
Support WEB-based configure operation management, support SNMP V1/V2/V3
Support remote upgrades or equipment through FTP and TFTP