24G + 4 x 10G SFP, L2+ Fully Managed Switch, 370W PoE Power with NMS

DMS-24G4XFPP L2+ managed GbE PoE+ switch is the next-generation Ethernet Switches offering full suite of L2 features, additional 10GbE uplink connections, better PoE functionality and usability, including advanced L3 features such as Static Route. In addition to the extensive management features, DMS-24G4XFPP also provides carrier Ethernet features such as ERPS/EPS/PTPv2, which make them suitable for carrier Ethernet applications.

DMS-24G4XFPP delivers 24 (10M/100M/1G) RJ45 with 24 PoE+ (Support 802.3at/af, and total up to 370W) ports, 4 10GbE SFP+ ports and RJ45 Console port. DMS-24G4XFPP provides high HW performance and environment flexibility for SMBs and Enterprises.

The embedded Device Managed System (DMS) features provide users with the benefits of easy-to-use/configure/install/troubleshoot in the video surveillance, wireless access, and other SMBs and Enterprises applications. DMS-24G4XFPP is ideal to deliver management simplicity, better user experience, and lowest total cost of ownership.

Key Features

  • L2+ Managed features provide easier manageability, robust security and QoS.
  • Built-in Device Management System (DMS)
  • ITU-T G.8031 Ethernet Linear Protection Switching (EPS)
  • ITU-T G.8032 Ethernet Ring Protection Switching (ERPS)
  • IEEE 1588v2 PTP
  • DHCP ServerIPv4/IPv6 Management
  • PoE Port configuration and scheduling
  • 802.3at high power PoE plus standard
  • IEEE 802.3az EEE Energy Efficient Ethernet standard for green Ethernet




  • Feature-rich Ethernet Switch for Enterprise-class

The switch delivers advanced functionality in L2+ managed switch including Layer 3 static route, DHCP server, IPv6 support, LLDP, etc. It also has comprehensive security features such as IP source guard and ACL to guard your network from unauthorized access.

It helps users to build on the market-leading price/performance with L2+ Managed GbE PoE switch, and provide secure, reliable and ease of use for enterprise/SMB deployments.

  • Easy to Install, Configure and Troubleshoot by Device Management System

The DMS provides embedded functions to facilitate device management at any time and anywhere. Its user-friendly interface helps users to manage devices intuitively.
It supports various IP device types (e.g. IP-phone, IP-camera, WiFi-AP) for end users to enhance manageability and save time/cost during installation/maintenance stages.

  • Lower Total Cost of Ownership (TCO) with Energy-efficient Design

It is designed to help customers to reduce power consumption and lower the TCO by Energy Efficient Ethernet (IEEE 802.3az) features. It can be used for customers to build a green Ethernet networking environment.

  • Advanced Power over Ethernet Management

The model includes PoE+ options to power IP devices with power-saving features like Power scheduling and PoE configuration.


ITU-T G.8031 Supports ITU-T G.8031 Ethernet Linear Protection Switching
ITU-T G.8032 Supports ITU-T G.8032 Ethernet Ring Protection Switching
Layer 2 Switching
VLAN 802.1Q tag-based VLAN: Supports up to 4K VLANs simultaneously (out of 4096 VLAN IDs)
Port-based VLAN: A port member of a VLAN can be isolated to other isolated ports on the same VLAN and Private VLAN
Private VLAN Edge (PVE): Private VLANs are based on the source port mask, and there are no connections to VLANs. This means that VLAN IDs and Private VLAN IDs can be identical
Voice VLAN: The Voice VLAN feature enables voice traffic forwarding on the Voice VLAN
Guest VLAN: The IEEE 802.1X Guest VLAN feature allows a guest VLAN to be configured for each 802.1X port on the device to provide limited services to non-802.1X-compliant clients
Q-in-Q (double tag) VLAN: Business customers of service providers often have specific requirements for VLAN IDs and the number of VLANs to be supported
802.1v Protocol VLAN: Classifying multiple protocols into a single VLAN often imposes VLAN boundaries that are inappropriate for some of the protocols, requiring the presence of a non-standard entity to relay between VLANs the frames bearing the protocols for which the VLAN boundaries are inappropriate
MAC-based VLAN: The MAC-based VLAN feature allows incoming untagged packets to be assigned to a VLAN and thus classify traffic based on the source MAC address of the packet
IP Subnet-Based VLAN: In an IP subnet–based VLAN, all the end workstations in an IP subnet are assigned to the same VLAN. In this VLAN, users can move their workstations without reconfiguring their network addresses
Management VLAN: Management VLAN is used for managing the switch from a remote location by using protocols such as telnet, SSH, SNMP, Syslog, etc
LACP Trunking Link Aggregation Control Protocol (LACP) IEEE 802.3ad: Controls whether LACP is enabled on this switch port. LACP will form an aggregation when 2 or more ports are connected to the same partner
Up to 14 groups
Up to 16 ports per group
GARP VLAN Registration Protocol (GVRP) GVRP stands for GARP (Generic Attribute Registration Protocol) VLAN Registration Protocol. It’s a Layer 2 network protocol, for automatic configuration of switches in a VLAN network
DHCP Relay Relay of DHCP traffic to DHCP server in different VLAN
Works with DHCP Option 82
IGMP v1/v2/v3 Snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters. Supports 1024 multicast groups
IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router
IGMP Proxy IGMP snooping with proxy reporting or report suppression actively filters IGMP packets in order to reduce load on the multicast router
MLD v1/v2 Snooping Delivers IPv6 multicast packets only to the required receivers
Multicast VLAN Registration (MVR) It uses a dedicated manually configured VLAN, called the multicast VLAN, to forward multicast traffic over Layer 2 network in conjunction with IGMP snooping
Layer 3 Switching
IPv4 Static Routing IPv4 Unicast: Static Routing
IPv6 Static Routing IPv6 Unicast: Static Routing
Quality of Service
Hardware Queue Supports 8 hardware queues
Classification Port-based: Traffic QoS by Port
802.1p: VLAN priority based Layer 2 CoS QoS, Class of service is a parameter used in data and voice protocols to differentiate the types of payloads contained in the packet being transmitted
DSCP based Differentiated Services (DiffServ) Layer 3 DSCP QoS: IP packets can carry either an IP precedence (IPP) value or a Differentiated Services Code Point (DSCP) value. QoS supports the use of either value because DSCP values are backward-compatible with IP precedence values
Classification and re-marking TCP/IP ACLs: QoS by ACL
Rate Limiting Ingress policer
Egress shaping and rate control
Scheduling Strict priority and weighted round-robin (WRR): Weighted Round Robin is a scheduling algorithm that uses weights assigned to queues to determine how much data will be emptied from a queue before moving to the next queue
ACLs Supports up to 512 entries. Drop or rate limitation based on:
Source and destination MAC, VLAN ID or IP address, protocol, port
Differentiated services code point (DSCP) / IP precedence
TCP/ UDP source and destination ports
802.1p priority
Ethernet type
Internet Control Message Protocol (ICMP) packets
TCP flag
Port Security Locks MAC addresses to ports, and limits the number of learned MAC address
IP Source Guard Prevents illegal IP address from accessing to specific port in the switch
Storm Control Prevents traffic on a LAN from being disrupted by a broadcast, multicast, or unicast storm on a port
IEEE 802.1X IEEE802.1X: RADIUS authentication, authorization and accounting, MD5 hash, guest VLAN, single/multiple host mode and single/multiple sessions
Supports IGMP-RADIUS based 802.1X
Dynamic VLAN assignment
TACACS+ Supports TACACS+ authentication. Switch as a client
Secure Shell (SSH) SSH secures Telnet traffic in or out of the switch, SSH v1 and v2 are supported
Secure Sockets Layer (SSL) SSL encrypts the http traffic, allowing advanced secure access to the browser-based management GUI in the switch
HTTPs and SSL (Secured Web) HyperText Transfer Protocol Secure (HTTPS) is the secure version of HTTP
BPDU Guard The BPDU guard, an enhancement to STP, removes a node that reflects BPDUs back in the network. It enforces the STP domain borders and keeps the active topology predictable by not allowing any network devices behind a BPDU guard-enabled port to participate in STP
DHCP Snooping A feature acts as a firewall between untrusted hosts and trusted DHCP servers
Loop Protection To prevent unknown unicast, broadcast and multicast loops in Layer 2 switching configurations.
IEEE 1588v2 PTP Support IEEE 1588 v2 PTP (Precision Time Protocol)
DHCP DHCP Server: Support DHCP server to assign IP to DHCP clients
DHCP client: The Dynamic Host Configuration Protocol (DHCP) is a standardized network protocol used on Internet Protocol (IP) networks for dynamically distributing network configuration parameters, such as IP addresses for interfaces and services
Event/Error Log Support SNMP Trap/Syslog/SMTP
SNMP SNMP version1, 2c and 3 with support for traps, and SNMP version 3 user-based security model (USM)
Remote Monitoring (RMON) Embedded RMON agent supports RMON groups 1,2,3,9 (history, statistics, alarms, and events) for enhanced traffic management, monitoring and analysis
Firmware Upgrade Web browser upgrade (HTTP/ HTTPs) and TFTP
Upgrade through console port as well
Configuration Export/Import update of the firmware controlling the switch
Port Mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to N-1 (N is Switch’s Ports) ports can be mirrored to single destination port. A single session is supported
IEEE 802.1ab (LLDP) Used by network devices for advertising their identities, capabilities, and neighbors on an IEEE 802ab local area network
Support LLDP-MED (ANSI/TIA-1057) extensions
UPnP The Universal Plug and Play Forum, an industry group of companies working to enable device-to-device interoperability by promoting Universal Plug and Play
CDP Aware The CDP operation is restricted to decoding incoming CDP frames (The switch doesn’t transmit CDP frames). CDP frames are only decoded if LLDP on the port is enabled
s-Flow The industry standard for monitoring high speed switched networks. It gives complete visibility into the use of networks enabling performance optimization, accounting/billing for usage, and defense against security threats
Web GUI Interface Built-in switch configuration utility for browser-based device configuration
CLI For users to configure/manage switches in command line modes
Dual Image Independent primary and secondary images for backup while upgrading
NTP Network Time Protocol (NTP) is a networking protocol for clock synchronization between computer systems over packet-switched
Switch Management HTTP/HTTPs
DHCP Client/ DHCPv6 Client
Telnet Client
IPv6 Management
Diagnostics Cable diagnostics
Device Management System (DMS)
Topology view: Support intuitive way to configure and manage switches and devices with visual relations
Floor view: It’s easy to drag and drop PoE devices and help you to build smart workforces
Map view: Enhance efficiency to drag and drop devices and monitor surroundings on google map
Display visual chart of network traffic of all devices and monitor every port at any time from switches
Switch2go You’ll be noticed a change in whatever your switch happen
Find my Switch Search your real switches quickly and manage directly
Traffic Monitoring Display visual chart of network traffic of all devices and monitor every port at any time from switches
Trouble Shooting Network diagnostic between master switch and devices
Support protection mechanism, such as rate-limiting to protect your devices from brute-force downloading
Power over Ethernet (PoE)
Port Configuration Supports per port PoE configuration function
PoE Scheduling Supports per port PoE scheduling to turn on/off the PoE devices (PDs).
Auto-checking Check the link status of PDs. Reboot PDs if there are no responses
Power Delay The switch provides power to the PDs based on delay time when PoE switch boots up, in order to protect switch from misuse of the PDs
Soft-Reboot PoE Non-stop The switch will keep providing power to the PDs while during soft-reboot.
Model Name DMS-24G4XFPP
Product Family Diana
Warranty 5 Year Warranty Pack
Product Description 28 ports GbE/10GbE
L2+ Managed PoE Switch
Port Configuration
10M/100M/1G RJ45 Port 24
100M/1G/2.5G RJ45 Port --
100M/1G/10G RJ45 Port --
100M/1G/2.5G/5G/10G RJ45 Port --
100M/1G SFP Port --
GbE RJ45/SFP Combo Port --
1G/2.5G SFP Port --
1G/10G SFP+ Port 4
Console Port RJ45
Total Ports 28
PoE Function
IEEE802.3at (PoE+ 30W) Y
IEEE802.3af (PoE 15.4W) Y
UPoE(60W) --
PoE++ 90W --
PoE Port 24
Available PoE Power 370W
HW Performance
Switching Bandwidth 128Gbps
Forwarding Performance 95.238Mpps
MAC Address 32K
Jumbo Frames 10240 Bytes
Environmental Specification
Operating Temperature 0°C to 50°C
Operating Humidity 5 to 95% RH
Storage Temperature -20 to 70°C
Storage Humidity 5 to 95% RH
Mechanical Specification
Dimensions (H) x (W) x (D) mm 44 x 442 x 211
Weight 3.8 Kg
FAN Less --
Power Source
AC Input 100V-240V
DC Input --
Dual Input --
EN61000-4-5 (for RJ45 Port, Surge 6KV) Y
Certifications CE/FCC Class A
Others by Request
L2 Switching
Spanning Tree Y
IEEE802.1D (STP) Y
802.1Q VLAN Y
Port-Based Y
VLAN Entries 4K
Private VLAN Y
Voice VLAN Y
Guest VLAN Y
Q-in-Q Y
802.1v Protocol VLAN Y
IP Subnet-Based VLAN Y
IEEE 802.3ad LACP Y
Dynamic Trunk Y
Static Trunk Y
IGMP Snooping Y
MLD Snooping Y
Multicast VLAN Registration (MVR) Y
L3 Features
Static Route Y
DHCP Server Y
QoS Features
Class of Service Y
Port Based Y
802.1p Y
Rate Limiting
Ingress Y
Egress Y
Priority Queue Scheduling
Stri Priority Y
Hardware Queues 8
L2/L3/L4 Y
IPv6 Support Y
Port Security (MAC-based) Y
IP Source Guard Y
Storm Control Y
RADIUS Authentication 802.1x Y
TACACS+ Authentication Y
HTTPs and SSL (Secured Web) Y
BPDU Guard Y
STP Root Guard Y
DHCP Snooping Y
Loop Protection Y
Client Y
Relay Y
Option 66 Y
Option 67 Y
Option 82 Y
Event/Error Log Y
Syslog Y
Management Access Filtering Y
Web UI Y
Telnet Y
PoE Management Y
Scheduling Y
Auto-Checking Y
Power Delay Y
Soft-Reboot PoE Non-stop Y
SNMP (v1, v2c, v3) Y
RMON (1,2,3 & 9 Groups) Y
Software Upgrade Y
Configuration Export/Import Y
Port Mirroring Y
CDP Aware Y
sFlow Y
IPv6 Management Y
Carrier Ethernet
SyncE --
1588v2 PTP Y
1588v2 PTP (stratum3) --
OAM (IEEE802.3ah) --
CFM (IEEE802.1ag) --
PM (ITU-T Y.1731) --
ELPS (ITU-T G.8031) Y
ERPS (ITU-T G.8032) Y
Rapid-Ring --
RFC2544 --
Y.1564 --
Device Management System
Device Management Y
Topology View Y
Floor View Y
Map View Y
Dashboard Y
Traffic Monitoring Y
Cable Diagnostics Y
Switch2go Y
iOS Devices Y
Android Devices Y
Find my Switch Y
iOS Devices Y
Android Devices Y


*All specifications are subject to change without notice.