24/48-port GbE L3 Access Switch with 10GbE Uplink

• IEEE 802.3 10BASE-T Ethernet
• IEEE 802.3u 100BASE-TX Ethernet
• IEEE 802.3ab 1000BASE-T Ethernet
• IEEE 802.3z 1000BASE-X
• IEEE 802.3aq 10GBASE-X
• IEEE 802.3af PoE
• IEEE 802.3at PoE plus
• IEEE 802.3az EEE
• IEEE 802.3x flow control
• IEEE 802.3ad LACP aggregation
• IEEE 802.3ah OAM
• IEEE 802.1ag CFM
• IEEE 802.1AB LLDP/LLDP-MED
• IEEE 802.1D Spanning Tree Protocol (STP)
• IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
• IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
• IEEE 802.1Q VLAN tagging
• IEEE 802.1p Class of Service (CoS) prioritization
• IEEE 802.1X port authentication

• IEEE 802.1D Spanning Tree Protocol (STP)
• IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
• IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
• IEEE 802.3ad LACP
• Virtual Router Redundancy Protocol (VRRP)
• Loop guard
• Root guard
• BPDU guard
• ErrDisable recovery
• MRSTP (Zyxel Proprietary)
• Dual configuration files
• Dual flash images
• Dual redundant power supply support
• Physical stacking

• 802.1Q static VLANs/dynamic VLANs: 1 K/4 K
• Port-based VLAN
• Protocol-based VLAN
• Private VLAN
• IP subnet-based VLAN
• VLAN trunking
• VLAN translation
• VLAN ingress filtering
• 802.1ad VLAN stacking (Q-in-Q)
• LACP algorithm of source/destination IP
• GVRP
• Selected Q-in-Q
• L2PT

• 802.1X
• Port security
• MAC authentication
• Layer 2 MAC filtering
• Layer 3 IP filtering
• Layer 4 TCP/UDP socket filtering
• BPDU transparency
• Static MAC forwarding
• Multiple RADIUS servers
• Multiple TACACS+ servers
• 802.1x VLAN and 802.1p assignment by RADIUS
• Login authentication by RADIUS
• Login authentication by TACACS+
• TACACS+ accounting
• RADIUS accounting
• Authorization on RADIUS
• Authorization on TACACS+
• Authorization on console
• SSH v1/v2
• SSL
• Intrusion lock
• MAC freeze
• DHCP snooping
• ARP inspection
• ARP freeze
• Static ARP
• Static IP/MAC binding
• Policy-based security filtering
• Port isolation
• IP source guard (IPv4/IPv6)
• Limit number of MAC per VLAN
• MAC search
• Guest VLAN
• ACL packet filtering (IPv4/IPv6)
• PPPoE relay agent
• PPPoE option 82
• PPPoE IA
• CPU protection
• MAC pinning
• Interface related trap enable/disable (by port)
• MAC-based authentication per VLAN

• No. of hardware queues per port: 8
• 802.1p queuing method: SPQ/WRR/WFQ
• Storm control: Broadcast, multicast, unknown unicast (DLF)
• Port-based rate limiting (ingress/egress):*/64 Kbps
• Rate limiting per IP/TCP/UDP per port
• Policy-based rate limiting
• Policy-based bandwidth control granularity
• Ingress CIR for bandwidth control
• 802.3x flow control
• Port-based egress traffic shaping CIR/PIR support
• Policy-based prioritization
• Two Rate Three Color Marking (TRTCM)
• 802.1p Class of Service (SPQ, WFQ, SPQ/WFQ combination capable)
• DiffServ (DSCP)

• L2 multicast (Group)
• IGMP snooping (v1, v2, v3)
• IGMP snooping fast leave
• Configurable IGMP snooping timer and priority
• IGMP snooping statistics
• IGMP throttling
• MVR support
• IGMP filtering
• IGMP snooping immediate leave
• IGMP proxy mode & snooping mode selection
• IPv6 MLD snooping proxy

• Static route
• Policy-based route
• IP port moving
• Multiple default route

• SNMP v1, v2c, v3
• SNMP trap group
• RMON (1, 2, 3, 9)
• ICMP echo/echo reply
• Syslog
• IEEE 802.3ah OAM (Link discovery, loopback)
• IEEE 802.1ag CFM
• IEEE 802.1AB LLDP
• IEEE 802.1AB LLDP-MED

• IPv6 over Ethernet (RFC 2464)
• IPv6 addressing architecture (RFC 4291)
• Dual stack (RFC 4213)
• ICMPv6 (RFC 4443)
• Path MTU (RFC 1981)
• Minimum path MTU size of 1280 (RFC 5095)
• Encapsulation for maximum PMTU of 1500
• Neighbor discovery (RFC 4861)
• DHCPv6 relay
• Default DHCP client mode

• iStacking
• Web interface
• Management through Console, Telnet, SNMP
• Firmware upgrade by FTP
• Remote firmware upgrade by FTP/Web
• Configuration saving and retrieving
• Multiple logins supported
• Configure clone
• Multilevel CLI
• CLI (Cisco-like)
• DHCP servers (IPv4/IPv6)
• DHCP relay per VLAN
• DHCP client
• DHCP option 82
• DHCP option 82 profile
• Daylight saving
• NTP
• Port mirroring
• Port mirroring per IP/TCP/UDP
• Policy-based port mirroring
• RJ-45 out-of-band management port
• RS-232 out-of-band console port
• sFlow
• Remote port monitoring
• Scheduled PoE

• Zyxel Private MIB
• RFC 1066 TCP/IP-based MIB
• RFC 1213, 1157 SNMPv2c/v3 MIB
• RFC 1493 bridge MIB
• RFC 1643 Ethernet MIB
• RFC 1757 RMON group 1, 2, 3, 9
• RFC 2011, 2012, 2013 SNMPv2 MIB
• RFC 2233 SMIv2 MIB
• RFC 2358 Ethernet-like MIB
• RFC 2674 bridge MIB extension
• RFC 2819, 2925 remote management MIB
• RFC 3621 power Ethernet MIB
• RFC 4022 management information base for transmission control protocol
• RFC 4113 management information base for user datagram protocol
• RFC 4292 IP forwarding table MIB
• RFC 4293 Management Information Base (MIB) for IP

Safety

• LVD
• BSMI

EMC

• FCC Part 15 (Class A)
• CE EMC (Class A)
• BSMI ENC

RoHS

• Level A
• Per host session limit
• Guaranteed bandwidth
• Maximum bandwidth
• Priority-bandwidth utilization

ZON Utility

• Discovery of Zyxel switches, APs and gateways
• Centralized and batch configurations
  • IP configuration
  • IP renew
  • Device factory reset
  • Device reboot
  • Device locating
  • Web GUI access
  • Firmware upgrade
  • Password configuration
  • One-click quick association with Zyxel AP Configurator (ZAC)
• Automatic detection of the latest firmware
• Displays device serial number and hardware version
• Cloud mode on/off option for Hybrid series devices

Smart Connect

• Discover neighboring devices
• One-click remote management access to the neighboring Zyxel devices
• Reset neighboring devices remotely to factory defaults
• Power cycle neighboring powered devices (PoE switches only)

• Warranty terms, service availability, and service response times may vary from country or region to country or region