28-port 10GbE L3 Aggregation Switch

• IEEE 802.3z 1000BASE-X*
• IEEE 802.3ab 1000BASE-T Ethernet*
• IEEE 802.3an 10G BASE-T Ethernet*
• IEEE 802.3ae 10 Gbit/s Ethernet over fiber*
• IEEE 802.3bz 2.5G/5GBase-T Ethernet*
• IEEE 802.3az EEE support*
• IEEE 802.3x flow control
• IEEE 802.1p CoS support*
• IEEE 802.1AB LLDP/LLDP-MED
• IEEE 802.3ah OAM (Link Discovery,Loopback)
• Store and forward
• N-way auto-negotiation

• IEEE 802.1D Spanning Tree Protocol (STP)*
• IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)*
• IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
• IEEE 802.3ad LACP*
• Equal Cost Multipath Routing (ECMP)
• Virtual Router Redundancy Protocol (VRRP)
• Loop guard*
• CPU protection
• ErrDisable recovery
• MRSTP (Zyxel proprietary)
• Redundant power supply support
• Dual configuration files
• Dual images*
• Physical stacking up to 4 units
• New for V4.80 Flex link

• 802.1Q static VLANs*/dynamic VLANs: 4 K/4 K
• Port-based VLAN*
• Vendor ID-based VLAN
• Protocol-based VLAN
• IP subnet-based VLAN
• Private VLAN
• VLAN trunking
• VLAN translation
• VLAN ingress filtering
• 802.1ad VLAN stacking (Q-in-Q)
• LACP algorithm of source/destination IP
• GVRP
• Selected Q-in-Q
• L2PT

• 802.1x*
• Port security*
• MAC authentication*
• Layer 2 MAC filtering
• Layer 3 IP filtering
• Layer 4 TCP/UDP socket filtering
• BPDU transparency
• Static MAC forwarding
• Multiple RADIUS servers (IPv4*/IPv6)
• Multiple TACACS+ servers
• 802.1x VLAN and bandwidth assignment by RADIUS*
• Login authentication by RADIUS*
• Login authentication by TACACS+
• TACACS+ accounting
• RADIUS accounting
• Authorization on TACACS+
• Authorization on console
• SSH v2
• SSL
• MAC freeze
• DHCP snooping
• DHCP Server Guard
• ARP inspection
• ARP freeze
• Static ARP setting
• Static IP/MAC binding
• Policy-based security filtering
• Port isolation
• IP source guard*
• Limit number of MAC per VLAN
• MAC search
• Guest VLAN*
• Guest VLAN on MAC-based Authentication
• ACL packet filtering (IPv4/IPv6)
• PPPoE relay agent
• PPPoE option82
• PPPoE IA
• CPU protection
• MAC pinning
• Interface related trap can be enable/disable by port

• No. of hardware queues per Port: 8*
• 802.1p queuing method: SPQ/WRR/WFQ*
• Storm control: Broadcast, Multicast,Unknown Unicast (DLF)*
• Port-based rate limiting (Ingress/Egress): */64 kbps
• Rate limiting, per IP/TCP/UDP per port
• Policy-based rate limiting
• Policy-based bandwidth control granularity
• Ingress CIR for bandwidth control
• 802.3x flow control
• Port-based egress traffic shaping CIR/PIR supported
• Policy based prioritization
• 802.1p Class of Service (SPQ, WFQ, SPQ/WFQ combination capable)
• DiffServ (DSCP)

• L2 multicast (Group)
• IGMP snooping (v1, v2, v3)*
• IGMP snooping fast leave*
• Configurable IGMP snooping timer and priority
• IGMP snooping statistics*
• IGMP throttling*
• MVR support
• IGMP filtering*
• IGMP snooping immediate leave*
• IGMP snooping and proxy*
• IPv6 MLD snooping proxy
• Multicast load sharing over trunk port

• Static route
• Policy-based route
• IP port moving

• SNMP v1, v2c, v3
• SNMP trap group
• RMON (1, 2, 3, 9)
• ICMP echo/echo reply
• Syslog
• Support NebulaFlex Pro for Cloud Management

• IPv6 over Ethernet (RFC 2464)
• IPv6 addressing architecture (RFC 4291)
• Dual stack (RFC4213)
• ICMPv6 (RFC4884)
• Path MTU (RFC 1981)
• Minimum path MTU size of 1280 (RFC 5905)
• Encapsulation for minimum MTU of 1500
• Neighbor discovery (RFC4861)
• DHCPv6 Relay

• Standalone management by Web interface
• Cloud management by Nebula Control Center*
• iStacking
• New for V4.80 Auto configuration recovery (only for cloud mode)
• New for V4.80 New Web interface
• Management through console, telnet, SNMP
• Firmware upgrade by FTP
• Remote firmware upgrade by FTP/Web
• Configuration saving and retrieving
• Multiple login supported
• Configure Clone
• Multilevel CLI
• CLI (Cisco like)
• DHCP servers
• DHCP relay per VLAN
• DHCP option 82
• Daylight Saving*
• NTP*
• Port mirroring*
• Policy-based port mirroring
• RJ-45 out-of-band management port
• RS-232 console port
• sFlow
• Remote port monitoring
• Restore to last custom default
• Networked AV mode

• Zyxel new private MIB
• RFC 1066 TCP/IP-based MIB
• RFC 1213, 1157 SNMPv2c/v3 MIB
• RFC 1493 bridge MIB
• RFC 1643 Ethernet MIB
• RFC 1757 RMON group 1, 2, 3, 9
• RFC 2011, 2012, 2013 SNMPv2 MIB
• RFC 2233 SMIv2 MIB
• RFC 2358 Ethernet-like MIB
• RFC 2674 bridge MIB extension
• RFC 2819, 2925 remote management MIB
• RFC 3621 Power Ethernet MIB
• RFC 4022 management information base for transmission control protocol
• RFC 4113 management information base for user datagram protocol
• RFC 4292 IP forwarding table MIB
• RFC 4293 management information base (MIB) for IP

Safety

• LVD
• BSMI

EMC

• FCC Part 15 (Class A)
• CE EMC (Class A)
• BSMI ENC

RoHS

• Level A

ZON Utility^*

• Discovery of Zyxel switches, APs and gateways
• Centralized and batch configurations
  • IP configuration
  • IP renew
  • Device factory reset
  • Device reboot
  • Device locating
  • Web GUI access
  • Password configuration
  • One-click quick association with Zyxel AP Configurator (ZAC)
• Automatic detection of the latest firmware
• Displays device serial number and hardware version
• Cloud mode on/off option for Hybrid series devices
• New for V4.80 Intuitive Cloud connection status

Smart Connect

• Discover neighboring devices
• One-click remote management access to the neighboring Zyxel devices
• Reset neighboring devices remotely to factory defaults
• Power cycle neighboring powered devices (PoE switches only)

• Warranty terms, service availability, and service response times may vary from country or region to country or region