28-port GbE L3 Aggregation Switch with 4 SFP+ Uplink

• IEEE 802.3 10Base-T Ethernet
• IEEE 802.3u 100Base-Tx Ethernet
• IEEE 802.3ab 1000Base-T Ethernet
• IEEE 802.3z 1000 Base-X
• IEEE 802.3az EEE support
• IEEE 802.3x flow control
• IEEE 802.3ad LACP aggregation
• IEEE 802.1AB LLDP/LLDP-MED
• IEEE 802.1D Spanning Tree Protocol (STP)
• IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
• IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
• IEEE 802.1Q VLAN tagging
• IEEE 802.1p CoS support
• IEEE 802.1X Port authentication

• IEEE 802.1D Spanning Tree Protocol (STP)
• IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
• IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
• Equal Cost Multipath Routing (ECMP)
• Virtual Router Redundancy Protocol (VRRP)
• CPU protection
• IEEE 802.3ad LACP
• Loop guard
• ErrDisable recovery
• MRSTP (Zyxel Proprietary)
• Dual configuration files
• Dual images
• Physical stacking

• 802.1Q static VLANs/dynamic VLANs: 4K
• Port-based VLAN and VLAN isolation
• IP classification VLAN
• VLAN counter
• VLAN search
• VLAN translation
• VLAN MAC limit
• New for V4.70 VLAN isolation
• Vendor ID based VLAN
• Rate limiting: policy-based/portbased bandwidth control with 64 kbps granularity
• CIR/PIR bandwidth control
• Port-based egress traffic shaping
• IEEE 802.1p with 8 priority queues per port
• DSCP/DSCP to 802.1p priority mapping
• Congestion control on all ports
• Selective Q-in-Q

• 802.1X
• Port security
• Layer 2 MAC filtering
• Layer 3 IP filtering
• Layer 4 TCP/UDP socket filtering
• Static MAC forwarding
• Multiple RADIUS servers
• Multiple TACACS+ servers
• 802.1x VLAN and 802.1p assignment by RADIUS
• New for V4.70 Compound authentication
• Login authentication by RADIUS
• Login authentication by TACACS+
• TACACS+ accounting
• Authorization on RADIUS
• Authorization on TACACS+
• SSH v2
• SSL
• Intrusion lock
• MAC freeze
• MAC search
• MAC filtering
• DHCP snooping
• ARP inspection
• Static IP-MAC-Port binding
• Policy-based security filtering
• Port isolation
• Limited MAC number per port
• IP source guard
• Guest VLAN
• IEEE 802.1Q tag-based and portbased VLAN
• GVRP automatic VLAN member registration
• Full range 4K PVID support
• Limited MAC number per port
• IP filtering
• TCP/UDP socket filtering
• BPDU transparency
• IEEE 802.1X port-based authentication
• Enhanced 802.1X compensation assignment over VLAN
• Layer 2 protocol tunneling
• Root guard
• BPDU guard
• Storm control: Broadcast, multicast, unknown unicast (DLF)

• No. of hardware queues per port: 8
• 802.3x flow control
• 802.1p Class of Service (SPQ, WFQ, WRR, hybrid-SPQ combination capable)
• DiffServ (DSCP)
• Port-based rate limiting (ingress/ egress)
• Rate limiting per IP/TCP/UDP per port
• Policy-based rate limiting

• L2 multicast
• GMP snooping v1, v2, v3
• IGMP throttling
• IGMP snooping fast leave
• IGMP snooping statistics
• Multicast VLAN Registration (MVR)
• IGMP filtering
• IGMP snooping immediate leave
• IGMP proxy mode & snooping mode selection
• MLD snooping

• SNMP v1, v2c, v3
• SNMP trap group
• RMON (1, 2, 3, 9)
• Custom default
• Syslog (IPv4/IPv6)
• ICMP echo/echo reply
• IEEE 802.1AB LLDP
• IEEE 802.1AB LLDP-MED
• Display port utilization

• IPv6 over Ethernet (RFC 2464)
• IPv6 addressing architecture (RFC 4291)
• Dual stack (RFC 4213)
• ICMPv6 (RFC 4443)
• Path MTU (RFC 1981)
• Minimum path MTU size of 1280 (RFC 5095)
• Encapsulation for maximum PMTU of 1500
• Neighbor discovery (RFC 4861)
• DHCPv4/v6 server/relay
• Default DHCP client mode

• Zyxel iStacking^TM
• Web interface
• Management through Console, Telnet, SNMP
• Remote firmware upgrade by FTP/ Web/TFTP
• Configuration saving and retrieving
• Multiple logins supported
• Configure clone
• Multilevel CLI
• CLI (Cisco-like)
• CLV (Cisco-like VLAN)
• DHCP relay MAC proxy
• New for V4.70 DHCP server guard
• DHCP relay per VLAN
• DHCP client
• DHCP option 82
• Daylight saving
• NTP
• Port mirroring: ingress/egress/both port mirroring
• RS-232c local console
• Flow-based mirroring
• VLAN-based mirroring
• sFlow
• Microsoft NLB
• Auto configuration setup

• IEEE 802.3ad LACP link aggregation
• Static port trunking
• Up to 16 aggregation groups, 8 ports per group randomly selected
• Link aggregation algorithm of source/destination IP address

• Wire-speed IP forwarding
• RIP v1, v2
• OSPF
• Static routing IPv4/v6
• OSPF summary address
• IGMP
• DVMRP
• ECMP
• IP port moving
• VRRP
• Assigned DHCP relay with specific source IP interface
• Advance Routing License RIPng
• Advance Routing License OSPFv3

• Zyxel private MIB
• RFC 1066 TCP/IP-based MIB
• RFC 1213, 1157 SNMPv2c/v3 MIB
• RFC 1493 bridge MIB
• RFC 1643 Ethernet MIB
• RFC 1757 RMON group 1, 2, 3, 9
• RFC 2011, 2012, 2013 SNMPv2 MIB
• RFC 2233 SMIv2 MIB
• RFC 2358 Ethernet-like MIB
• RFC 2674 bridge MIB extension
• RFC 2819, 2925 remote management MIB
• RFC 3621 power Ethernet MIB
• RFC 4022 management information base for transmission control protocol
• RFC 4113 management information base for user datagram protocol
• RFC 4292 IP forwarding table MIB
• RFC4293 Management Information Base (MIB) for IP
• Cable diagnostic MIB

Safety

• LVD
• BSMI

EMC

• FCC Part 15 (Class A)
• CE EMC (Class A)
• BSMI ENC

RoHS

• Level A

ZON Utility

• Discovery of Zyxel switches, APs and gateways
• Centralized and batch configurations
• IP configuration
• IP renew
• Device factory reset
• Device reboot
• Device locating
• Web GUI access
• Password configuration
• One-click quick association with Zyxel AP Configurator (ZAC)

Smart Connect

• Discover neighboring devices
• One-click remote management access to the neighboring Zyxel devices
• Reset neighboring devices remotely to factory defaults
• Power cycle neighboring powered devices (PoE switches only)

• Warranty terms, service availability, and service response times may vary from country or region to country or region