- IEEE 802.1D Spanning Tree Protocol (STP)*
- IEEE 802.1w Rapid Spanning Tree ProtocoLimited life-time warrantyl (RSTP)*
- IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
- IEEE 802.3ad LACP*
- Loop guard*
- CPU protection
- ErrDisable recovery
- MRSTP (Zyxel proprietary)
- Redundant power supply support
- Dual configuration files
- Dual images*
- Flex Link
- 802.1Q static VLANs*/dynamic VLANs: 4 K/4 K
- Port-based VLAN*
- MAC-based VLAN
- Protocol-based VLAN
- IP subnet-based VLAN
- Private VLAN
- VLAN trunking
- VLAN translation
- VLAN ingress filtering
- 802.1ad VLAN stacking (QinQ)
- LACP algorithm of source/destination IP
- GVRP
- 802.1x*
- Port security*
- MAC authentication*
- Layer 2 MAC filtering
- Layer 3 IP filtering
- Layer 4 TCP/UDP socket filtering
- Static MAC forwarding
- Multiple RADIUS servers (IPv4*/IPv6)
- Multiple TACACS+ servers
- 802.1x VLAN and bandwidth assignment by RADIUS*
- Login authentication by RADIUS*
- Login authentication by TACACS+
- TACACS+ accounting
- RADIUS accounting
- Authorization on TACACS+
- Authorization on console
- SSH v2
- SSL
- MAC freeze
- DHCP snooping
- DHCP Server Guard
- ARP inspection
- ARP freeze
- Static ARP setting
- Static IP/MAC binding
- Policy-based security filtering
- Port isolation
- IP source guard*
- Limit number of MAC per VLAN
- MAC search
- Guest VLAN*
- Guest VLAN on MAC-based Authentication
- ACL packet filtering (IPv4/IPv6)
- Interface related trap can be enable/disable by port
- No. of hardware queues per port: 8*
- 802.1p queuing method: SPQ/WRR/WFQ*
- Storm control: Broadcast, Multicast, Unknown Unicast (DLF)*
- Rate limiting, per IP/TCP/UDP per port
- Policy-based rate limiting
- Policy-based bandwidth control granularity
- 802.3x flow control
- Policy based prioritization
- 802.1p Class of Service (SPQ, WFQ,SPQ/WFQ combination capable) DiffServ (DSCP)
- L2 multicast*
- IGMP snooping (v1, v2, v3)*
- IGMP snooping fast leave*
- Configurable IGMP snooping timer and priority
- IGMP snooping statistics*
- IGMP throttling*
- MVR support
- IGMP filtering*
- IGMP snooping immediate leave*
- IGMP snooping and proxy*
- Multicast load sharing over trunk port
- IPv4 static route
- IPv4 default routing
- SNMP v1, v2c, v3
- SNMP trap group
- RMON (1, 2, 3, 9)
- Syslog
- Support NebulaFlex Pro for hybrid mode
- Standalone management by Web interface
- Cloud management by Nebula Control Center*
- Auto configuration recovery (only for cloud mode)
- Management through console, ssh, telnet, SNMP
- Firmware upgrade by Web/FTP/SFTP/TFTP
- Configuration saving and retrieving
- Multiple login supported
- Configure Clone
- Multilevel CLI
- DHCP servers
- DHCP relay per VLAN
- DHCP option 82
- Daylight Saving*
- NTP*
- Port mirroring*
- Policy-based port mirroring
- RJ-45 out-of-band management port
- sFlow
- Networked AV mode
- Zyxel private MIB
- RFC 1066 TCP/IP-based MIB
- RFC 1213, 1157 SNMPv2c/v3 MIB
- RFC 1493 bridge MIB
- RFC 1643 Ethernet MIB
- RFC 1757 RMON group 1, 2, 3, 9
- RFC 2011, 2012, 2013 SNMPv2 MIB
- RFC 2233 SMIv2 MIB
- RFC 2358 Ethernet-like MIB
- RFC 2674 bridge MIB extension
- RFC 2819, 2925 remote management MIB
- RFC 3621 Power Ethernet MIB
- RFC 4022 management information base for transmission control protocol
- RFC 4113 management information base for user datagram protocol
- RFC 4292 IP forwarding table MIB
- RFC 4293 management information base (MIB) for IP
ZON Utility*
- Discovery of Zyxel switches, APs and gateways
- Centralized and batch configurations
- IP configuration
- IP renew
- Device factory reset
- Device reboot
- Device locating
- Web GUI access
- Password configuration
- One-click quick association with Zyxel AP Configurator (ZAC)
- Automatic detection of the latest firmware
- Displays device serial number and hardware version
- Cloud mode on/off option for Hybrid series devices
- Intuitive Cloud connection status
Smart Connect
- Discover neighboring devices
- One-click remote management access to the neighboring Zyxel devices
- Reset neighboring devices remotely to factory defaults
- Power cycle neighboring powered devices (PoE switches only)
IPv6 Management
- IPv6 Management
- IPv6 Interface
- DHCPv6 Snooping
- DHCPv6 Server
- DHCPv6 Relay
- IPv6 MLD Snooping
L2 Features
- 100G to 4 x 25G breakout port
- Physical Stacking up to 2 units
- MAC Pinning
- ZULD
- L2PT
- PPPoE relay agent
- PPPoE IA
- OAM
- Microsoft NLB
L3 Features
- IPv6 static route
- IPv6 default routing
- VRRP
- Policy Based Route
- DVMRP
- RIPv1,v2, RIPng
- OSPFv2, OSPFv3
- ECMPv4/v6
- IPv6 Neighbor Discover
- Nebula Cloud and Standalone modes supported features. Some Nebula features may need an extra license to work. For more details on the features and licenses, check Nebula Licensing Table.
- These features will be supported in a future official firmware release. For details on supported features, please refer to the latest release notes.