Standard Compliance

• IEEE 802.3 10Base-T Ethernet
• IEEE 802.3u 100Base-Tx Ethernet
• IEEE 802.ab 1000Base-T Ethernet
• IEEE 802.3z
• IEEE 802.3x flow control
• IEEE 802.1p class of service, priority protocols
• IEEE 802.1Q VLAN tagging
• IEEE 802.3ad LACP aggregation

Traffic Management and QoS

• Rate limiting: port-based bandwidth control with 7 grades (64 kbps, 256 kbps, 1 Mbps, 10 Mbps, 64 Mbps, 100 Mbps, 1 Gbps)
• Broadcast storm control
• IEEE 802.1p with 4 hardware priority queues per port for different traffic types
• WRR (Weighted Round Robin)/SPQ scheduling algorithm
• Congestion control on all ports
• Jumbo frame support (up to 9 KB) (GS-1524 and GS-1548)

Auto VoIP

• Auto VoIP module explicitly matches VoIP streams in switches and assign the highest priority for the following VoIP packets
  • SIP—Session Initiation Protocol
  • MGCP—Media Gateway Control Protocol
  • SCCP—Skinny Client Control Protocol

Link Aggregation

• IEEE 802.3ad LACP link aggregation compliant
• Up to 6 aggregation groups, 8 ports/per group randomly selected

User Security and Authentication

• Specific MAC forwarding by assigned port: to control specified MAC addresses can access the network by assigned port
• IEEE 802.1Q tag-based and port-based VLAN
• 256 static VLAN, up to 4 K dynamic VLAN
• Dynamic ARP

Auto DoS attack prevention

Auto DoS module explicitly matches attack patterns in switches and prevent network outrage

• Types of DoS Attacks can be prevented
  • Land attacks—These attacks result from sending a specially crafted packet to a machine where the source host IP address is the same as the destination host IP address. The system attempts to reply to itself, resulting in system lockup.
  • Blat attack—These switch result from sending a specially crafted packet to a machine where the source host port is the same as the destination host port. The system attempts to reply to itself, resulting in system lockup.
  • SYNFIN scans—SYNchronization (SYN, ACKnowledgement (ACK) and FINish (FIN) packets are used to initiate,  acknowledge and conclude TCP/IP communication sessions. The following scans exploit weakness in the TCP/IP specification and try to illicit a response from a host to identify ports for an attack:
    • Scan SYNFIN—SYN and FIN bits are set in the packet
    • Xmascan—TCP sequence number is zero and the FIN, URG and PSH bits are set
    • NULL scan—TCP sequence number is zero and  all control bits are zeros
    • SYN with port <1024—SYN packets with source port less than 1024
  • Smurf attacks—This attack uses Internet Control Message Protocol (ICMP) echo requests packets (pings) to cause network congestion or outrages
  • Ping flooding—This attack floods the target network with ICMP packets
  • SYN/SYN-ACK Flooding—This attack floods the target network with SYN or SYN/ACK packets
  • Password required for administrators
  • Web-based management
  • Telnet
  • SNMP v1, v2c, v3
  • Static IP
  • RMON-Lite
  • Port mirroring: supports source/destination/both port mirroring
  • Cable diagnostic 
  • UL 60950-1
  • CSA 60950-1 (future available)
  • EN 60950-1
  • IEC 60950-1
  • EU RoHS Compliant

Network Administration Security

• Password required for administrators

Network Management

• Web-based management
• Telnet
• SNMP v1, v2c, v3
• Static IP
• RMON-Lite
• Port mirroring: supports source/destination/both port mirroring
• Cable diagnostic

Certification

• UL 60950-1
• CSA 60950-1 (future available)
• EN 60950-1
• IEC 60950-1
• EU RoHS Compliant