24/48-port GbE and 2.5G L3 Access Switch with 4 10G Uplink

• IEEE 802.1D Spanning Tree Protocol (STP)*
• IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)*
• IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
• IEEE 802.3ad LACP* (Max # Trunks/ Links per Trunk):
  • XMG2230-28HP: 14/8
  • XMG2230-52HP: 26/8
• Loop guard* (with broadcast packet detection mechanism)
• Root guard*
• BPDU guard*
• ErrDisable recovery
• MRSTP (Zyxel Proprietary)
• Dual configuration files
• Dual images*
• ZULD
• Physical stacking up to 8 units* (future firmware support)

• 802.1Q static VLANs*/dynamic VLANs: 4K/4K
• Port-based VLAN
• VLAN isolation
• Vendor ID based VLAN*
• Protocol-based VLAN
• IP subnet-based VLAN
• MAC-based VLAN
• Private VLAN
• Voice VLAN*
• Independent VLAN Learning (IVL)
• VLAN Translation
• VLAN trunking
• VLAN mapping
• IEEE 802.1AD VLAN stacking (QinQ)
• VLAN ingress filtering
• LACP algorithm of source/destination IP or MAC*
• GVRP
• L2PT

• Port security*
• Layer 2 MAC filtering*
• Layer 3 IP filtering
• Layer 4 TCP/UDP socket filtering
• Static MAC forwarding
• Multiple RADIUS servers*
• Multiple TACACS+ servers
• 802.1x VLAN and 802.1p assignment by RADIUS
• Login authentication by RADIUS
• Login authentication by TACACS+
• TACACS+ accounting
• RADIUS accounting
• Authorization on RADIUS
• Compound authentication
• Authorization on TACACS+
• SSH v2*
• SSL
• MAC freeze
• IP source guard (IPv4*/IPv6)
• DHCP snooping
• DHCP Server Guard
• ARP inspection
• ARP freeze
• Anti-ARP scan
• Static IP-MAC-Port binding: 128
• Policy-based security filtering
• Port isolation*
• MAC search*
• Guest VLAN*
• ACL packet filtering IPv4* (on-premise/ Nebula cloud): 256/128
• ACL packet filtering IPv6: 128
• CPU protection
• Interface related trap enable/disable (by port)
• MAC-based authentication per VLAN
• BPDU transparency
• PPPoE relay agent/option82
• WoL/WoL Relay

• No. of hardware queues per port* (on-premise/Nebula cloud): 8/6
• Storm control and event log: Broadcast, multicast, unknown unicast (DLF)*
• Port-based rate limiting* (ingress/ egress)
• Rate limiting per IP/TCP/UDP per port
• Policy-based rate limiting
• 802.1p Class of Service (SPQ, WFQ, WRR, hybrid-SPQ combination capable)
• DiffServ (DSCP)
• Multicast/Unknown Unicast (DLF)

• L2 multicast*: 1K
• IGMP snooping (v1, v2, v3)*
• IGMP snooping fast leave*
• IGMP snooping immediate leave*
• Configurable IGMP snooping timer and priority*
• IGMP snooping statistics*
• IGMP throttling*
• IGMP filtering*
• IGMP proxy mode & snooping mode selection*
• Multicast load sharing over trunking port
• Static mulitcast
• MVR support
• MLD snooping (MLD v1/v2)

• Static route (IPv4*/IPv6): 64/64
• DHCP relay

• SNMP v1, v2c, v3
• SNMP trap group
• RMON (1, 2, 3, 9)
• ICMP echo/echo reply
• Syslog*
• Display port utilization*

• IPv6 over Ethernet (RFC 2464)
• IPv6 addressing architecture (RFC 4291)
• Dual stack (RFC 4213)
• ICMPv6 (RFC 4443)
• Path MTU (RFC 1981)
• Minimum path MTU size of 1280 (RFC 5095)
• Encapsulation for maximum PMTU of 1500
• Neighbor discovery (RFC 4861)
• DHCPv6 snooping
• IPv6 binding- static/dynamic
• Extend Radius server
• DHCPv6 relay
• Default DHCP client mode*

• Support NebulaFlex Pro for hybrid mode
• Standalone management by Web interface
• Cloud management by Nebula Control Center*
• Auto configuration recovery (only for cloud mode)
• Networked AV mode by Web Interface
• Zyxel iStacking™
• Management through Console, Telnet, SNMP
• Remote firmware upgrade by FTP/Web/TFTP
• Configuration saving and retrieving*
• Multiple logins supported
• Configure clone*
• Custom default Configuration
• Multilevel CLI*
• CLI (Cisco-like)
• DHCP relay per VLAN
• DHCP client IPv4*/IPv6
• DHCP client option 60
• DHCP option 82
• Daylight saving*
• DHCP relay MAC proxy
• NTP Support IPv4/IPv6: 3
• Port mirroring*
• Policy-based mirroring
• Mirror CPU
• VLAN-based mirroring
• USB-C console port
• Scheduled PoE*
• PoE default consumption mode*
• Auto PD Recovery*
• Continuous PoE
• LLDP power via MDI
• sFlow
• LED ECO mode to turn-off port LED
• DHCP Server

• Zyxel Private MIB
• Zyxel Common MIB
• RFC 1066 TCP/IP-based MIB
• RFC 1213, 1157 SNMPv2c/v3 MIB
• RFC 1493, 4188 bridge MIB
• RFC 1643 Ethernet MIB
• RFC 1757 RMON group 1, 2, 3, 9
• RFC 2011, 2012, 2013 SNMPv2 MIB
• RFC 2233 SMIv2 MIB
• RFC 2358 Ethernet-like MIB
• RFC 2674 bridge MIB extension
• RFC 2819, 2925 remote management MIB
• RFC 3621 power Ethernet MIB
• RFC 4022 management information base for transmission control protocol
• RFC 4113 management information base for user datagram protocol
• RFC 4292 IP forwarding table MIB
• RFC 4293 Management Information Base (MIB) for IP
• Cable diagnostic MIB

Safety

• LVD
• BSMI Safety

EMC

• FCC Part 15 (Class A)
• CE EMC (Class A)
• BSMI EMC

RoHS

ZON Utility*

• Discovery of Zyxel switches, APs and gateways
• Centralized and batch configurations:
  • IP configuration
  • IP renew
  • Device factory reset
  • Device reboot
  • Device locating
  • Web GUI access
  • Password configuration
  • One-click quick association with Zyxel AP Configurator (ZAC)
• Automatic detection of the latest firmware
• Displays device serial number and hardware version
• Cloud mode on/off option for Hybrid series devices
• Intuitive Cloud connection status

Smart Connect

• Discover neighboring devices
• One-click remote management access to the neighboring Zyxel devices
• Reset neighboring devices remotely to factory defaults
• Power cycle neighboring powered devices

• Limited life-time warranty**