28-port GbE L3 Aggregation Switch with 4 SFP+ Uplink

XGS4600 Series

Item Features
Standard Compliance
  • IEEE 802.3 10Base-T Ethernet
  • IEEE 802.3u 100Base-Tx Ethernet
  • IEEE 802.3ab 1000Base-T Ethernet
  • IEEE 802.3z 1000 Base-X
  • IEEE 802.3az EEE support
  • IEEE 802.3x flow control
  • IEEE 802.3ad LACP aggregation
  • IEEE 802.1AB LLDP/LLDP-MED
  • IEEE 802.1D Spanning Tree Protocol (STP)
  • IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
  • IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
  • IEEE 802.1Q VLAN tagging
  • IEEE 802.1p CoS support
  • IEEE 802.1X Port authentication
Resilience and Availability
  • IEEE 802.1D Spanning Tree Protocol (STP)
  • IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
  • IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
  • Equal Cost Multipath Routing (ECMP)
  • Virtual Router Redundancy Protocol (VRRP)
  • CPU protection
  • IEEE 802.3ad LACP
  • Loop guard
  • ErrDisable recovery
  • MRSTP (Zyxel Proprietary)
  • Dual configuration files
  • Dual images
  • Physical stacking
Traffic Control
  • 802.1Q static VLANs/dynamic VLANs: 4K
  • Port-based VLAN and VLAN isolation
  • IP classification VLAN
  • VLAN counter
  • VLAN search
  • VLAN translation
  • VLAN MAC limit
  • New for V4.70 VLAN isolation
  • Vendor ID based VLAN
  • Rate limiting: policy-based/portbased bandwidth control with 64 kbps granularity
  • CIR/PIR bandwidth control
  • Port-based egress traffic shaping
  • IEEE 802.1p with 8 priority queues per port
  • DSCP/DSCP to 802.1p priority mapping
  • Congestion control on all ports
  • Selective Q-in-Q
Security
  • 802.1X
  • Port security
  • Layer 2 MAC filtering
  • Layer 3 IP filtering
  • Layer 4 TCP/UDP socket filtering
  • Static MAC forwarding
  • Multiple RADIUS servers
  • Multiple TACACS+ servers
  • 802.1x VLAN and 802.1p assignment by RADIUS
  • New for V4.70 Compound authentication
  • Login authentication by RADIUS
  • Login authentication by TACACS+
  • TACACS+ accounting
  • Authorization on RADIUS
  • Authorization on TACACS+
  • SSH v2
  • SSL
  • Intrusion lock
  • MAC freeze
  • MAC search
  • MAC filtering
  • DHCP snooping
  • ARP inspection
  • Static IP-MAC-Port binding
  • Policy-based security filtering
  • Port isolation
  • Limited MAC number per port
  • IP source guard
  • Guest VLAN
  • IEEE 802.1Q tag-based and portbased VLAN
  • GVRP automatic VLAN member registration
  • Full range 4K PVID support
  • Limited MAC number per port
  • IP filtering
  • TCP/UDP socket filtering
  • BPDU transparency
  • IEEE 802.1X port-based authentication
  • Enhanced 802.1X compensation assignment over VLAN
  • Layer 2 protocol tunneling
  • Root guard
  • BPDU guard
  • Storm control: Broadcast, multicast, unknown unicast (DLF)
Quality of Service (QoS)
  • No. of hardware queues per port: 8
  • 802.3x flow control
  • 802.1p Class of Service (SPQ, WFQ, WRR, hybrid-SPQ combination capable)
  • DiffServ (DSCP)
  • Port-based rate limiting (ingress/ egress)
  • Rate limiting per IP/TCP/UDP per port
  • Policy-based rate limiting
Layer 2 Multicast
  • L2 multicast
  • GMP snooping v1, v2, v3
  • IGMP throttling
  • IGMP snooping fast leave
  • IGMP snooping statistics
  • Multicast VLAN Registration (MVR)
  • IGMP filtering
  • IGMP snooping immediate leave
  • IGMP proxy mode & snooping mode selection
  • MLD snooping
Manageability
  • SNMP v1, v2c, v3
  • SNMP trap group
  • RMON (1, 2, 3, 9)
  • Custom default
  • Syslog (IPv4/IPv6)
  • ICMP echo/echo reply
  • IEEE 802.1AB LLDP
  • IEEE 802.1AB LLDP-MED
  • Display port utilization
IPv6 Management
  • IPv6 over Ethernet (RFC 2464)
  • IPv6 addressing architecture (RFC 4291)
  • Dual stack (RFC 4213)
  • ICMPv6 (RFC 4443)
  • Path MTU (RFC 1981)
  • Minimum path MTU size of 1280 (RFC 5095)
  • Encapsulation for maximum PMTU of 1500
  • Neighbor discovery (RFC 4861)
  • DHCPv4/v6 server/relay
  • Default DHCP client mode
Device Management
  • Zyxel iStackingTM
  • Web interface
  • Management through Console, Telnet, SNMP
  • Remote firmware upgrade by FTP/ Web/TFTP
  • Configuration saving and retrieving
  • Multiple logins supported
  • Configure clone
  • Multilevel CLI
  • CLI (Cisco-like)
  • CLV (Cisco-like VLAN)
  • DHCP relay MAC proxy
  • New for V4.70 DHCP server guard
  • DHCP relay per VLAN
  • DHCP client
  • DHCP option 82
  • Daylight saving
  • NTP
  • Port mirroring: ingress/egress/both port mirroring
  • RS-232c local console
  • Flow-based mirroring
  • VLAN-based mirroring
  • sFlow
  • Microsoft NLB
  • Auto configuration setup
Link Aggregation
  • IEEE 802.3ad LACP link aggregation
  • Static port trunking
  • Up to 16 aggregation groups, 8 ports per group randomly selected
  • Link aggregation algorithm of source/destination IP address
IP Routing
  • Wire-speed IP forwarding
  • RIP v1, v2
  • OSPF
  • Static routing IPv4/v6
  • OSPF summary address
  • IGMP
  • DVMRP
  • ECMP
  • IP port moving
  • VRRP
  • Assigned DHCP relay with specific source IP interface
  • Advance Routing License RIPng
  • Advance Routing License OSPFv3
MIB
  • Zyxel private MIB
  • RFC 1066 TCP/IP-based MIB
  • RFC 1213, 1157 SNMPv2c/v3 MIB
  • RFC 1493 bridge MIB
  • RFC 1643 Ethernet MIB
  • RFC 1757 RMON group 1, 2, 3, 9
  • RFC 2011, 2012, 2013 SNMPv2 MIB
  • RFC 2233 SMIv2 MIB
  • RFC 2358 Ethernet-like MIB
  • RFC 2674 bridge MIB extension
  • RFC 2819, 2925 remote management MIB
  • RFC 3621 power Ethernet MIB
  • RFC 4022 management information base for transmission control protocol
  • RFC 4113 management information base for user datagram protocol
  • RFC 4292 IP forwarding table MIB
  • RFC4293 Management Information Base (MIB) for IP
  • Cable diagnostic MIB
Certifications

Safety

  • LVD
  • BSMI

EMC

  • FCC Part 15 (Class A)
  • CE EMC (Class A)
  • BSMI ENC

RoHS

  • Level A
Zyxel One Network

ZON Utility

  • Discovery of Zyxel switches, APs and gateways
  • Centralized and batch configurations
  • IP configuration
  • IP renew
  • Device factory reset
  • Device reboot
  • Device locating
  • Web GUI access
  • Password configuration
  • One-click quick association with Zyxel AP Configurator (ZAC)

Smart Connect

  • Discover neighboring devices
  • One-click remote management access to the neighboring Zyxel devices
  • Reset neighboring devices remotely to factory defaults
  • Power cycle neighboring powered devices (PoE switches only)
Limited life-time warranty
  • Warranty terms, service availability, and service response times may vary from country or region to country or region

Licenses

Model Service Duration Description
XGS4600-32 Life Time Advanced routing license
XGS4600-32F Life Time Advanced routing license
XGS4600-52F Life Time Advanced routing license

*All specifications are subject to change without notice.