48*2.5GE+4*10GE SFP+2*40GE QSFP

                          Items

                                                      DES-2.5G-48G4X2Q-L3

L2 features

MAC

MAC Black Hole

Port MAC Limit

VLAN

4K VLAN entries

Port-based/MAC-based/IP subnet-based VLAN

PVLAN to realize port isolation and save public-vlan resources

GVRP

Spanning tree protocol

IEEE 802.1D Spanning Tree Protocol (STP)

IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)

IEEE 802.1s Multiple Spanning Tree Protocol instances (MSTP)

Port

Bi-directional bandwidth control

Static link aggregation and LACP (Link Aggregation Control Protocol)

Port mirroring and traffic mirroring

Security features

User’s security

Anti-ARP-spoofing

Anti-ARP-flooding

IP Source Guard create IP+VLAN+MAC+Port binding

Port Isolation

MAC address binds to port and port MAC address filtration

IEEE 802.1x and AAA/Radius authentication

Device security

Anti-DOS attack(such as ARP，Syn flood, Smurf, ICMP attack), ARP detection, worm and Msblaster worm attack

SSHv2 Secure Shell

SNMP v3 encrypted management

Security IP login through Telnet

Hierarchical management and password protection of users

Network security

User-based MAC and ARP traffic examination

automatic ARP protection based on MAC address and ARP packet suppression or automatic user block of ARP traffic detection

Dynamic ARP table-based binding

IP+VLAN+MAC+Port binding

L2 to L7 ACL flow filtration mechanism on the 80 bytes of the head of user-defined packet

Port-based broadcast/multicast suppression and auto-shutdown risk port

URPF to prevent IP address counterfeit and attack

DHCP Option82 and PPPoE+ upload user’s physical location

DHCP snooping / IP source Guard / 802.1X / rich security features
Link protection such as dynamic link aggregation and Ethernet ring network

Plaintext authentication of OSPF、RIPv2 and BGPv4 packets and MD5 cryptograph authentication

Service features

ACL

Standard and extended ACL

Time Range ACL

Packet filter providing filtering based on source/destination MAC address, source/destination IP address, port, protocol, VLAN, VLAN range, MAC address range, or invalid frame. System supports concurrent identification at most 50-service traffic

Packet filtration of L2～L7 even deep to 80 bytes of IP packet head

QoS

Rate-limit to packet sending/receiving speed of port or self-defined flow and provide general flow monitor and two-speed tri-color monitor of self-defined flow

Priority remark to port or self-defined flow and provide 802.1P, DSCP priority and Remark

transmission of high-priority packets with various traffic classification and QoS flow control functions

CAR(Committed Access Rate)、Traffic Shaping and flow statistics

Packet mirror and redirection of interface and self-defined flow

Super queue scheduler based on port and self-defined flow. Each port/ flow supports 8 priority queues and scheduler of SP, WRR and SP+WRR.

Congestion avoid mechanism，including Tail-Drop and WRED

Multicast

IGMPv1/v2/v3

IGMPv1/v2/v3 Snooping

IGMP Filter

MVR and cross VLAN multicast copy

IGMP Fast leave

IGMP Proxy

PIM-SM/PIM-DM/PIM-SSM

MLDv2/MLDv2 Snooping

Functions

Static route

Reliability

Loop protection

ERRP

Loopback-detection

Link protection

Flex Link

RSTP/MSTP

LACP

BFD

Maintenance

Network maintenance

Telnet-based statistics

RFC3176 sFlow

LLDP

802.3ah Ethernet OAM

RFC 3164 BSD syslog Protocol

Ping and Trace route

Device management

Command-line interface（CLI）, Console, Telnet and WEB configuration

System configuration with SNMPv1/v2/v3

RMON (Remote Monitoring)1/2/3/9 groups of MIB

NTP (Network Time Protocol)

WEB-based network management

Ping and Trace route