Stackable L3 Lite Managed PoE Switch 24x10/100/1000M RJ45, 4x10G SFP+

Overview

CSL3LRS-04X24GP-B is a next-generation aggregation 10G PoE switch. It is targeted at the IP MAN (metropolitan area network), government and enterprise networks, Internet café and disk-less working environment. It supports functions such as powerful ACL, flexible QinQ, 1:1 or N:1 VLAN switching, Ethernet OAM, carrier-level QoS and industry-level 10GE Ether-ring, ensuring this switch series meets application requirements in all kinds of complicated sites. It also supports layer-3 routing protocol.

Features

VLAN: 4K Active VLAN, QinQ & Selective QinQ, GVRP, Private VLAN, Voice VLAN

Spanning Tree: 802.1D (STP) 802.1W (RSTP) and 802.1S (MSTP); BPDU guard, root guard and loopback guard

Multicast: IGMP v1/v2/v3, IGMP Snooping, IGMP Fast Leave, MVR, IGMP filter

IP: Static route, RIP, OSPF; IPv4/v6 dual stack

IPv6: ICMPv6, DHCPv6, ACLv6 and IPv6 Telnet; IPv6 neighbor discovery, Path MTU discovery; MLD v1/2, MLD snooping; IPv6 Static Routing, RIPng, OSPFv3; Manual tunnel, ISATAP tunnel,6 to 4 tunnels

QoS: CAR, HQoS, MAC/IP/TCP/UDP/VLAN/ COS/ DSCP/ TOS based QoS, 802.1P/ DSCP priority re-labeling, SP, WRR, and “SP+WRR”, Tail-Drop, WRED, flow monitoring and traffic shaping

Security: Port isolation, Port security, and “IP + MAC + port” binding, MAC sticky DAI & IP source guard, PPPoE+; IEEE 802.1x, AAA, Radius and Tacacs+; L2/L3/L4 ACL flow identification and filtration Anti-attack from DDoS, TCP’s SYN Flood, UDP Flood, etc.; Broadcast/multicast/unknown unicast storm-control; MD5, SHA-256, RSA-1024, AES256, etc.

DHCP: DHCP server/relay/client; DHCP snooping/option82

Reliability: Static/LACP link aggregation, Interface backup; EAPS and ERPS; ISSU uninterrupted system upgrade; VSS, ups to 16-units per stack; VRRP; UDLD

Management: Console, Telnet, SSH v1/2, HTTP, HTTPS SNMP v1/v2/v3, RMON; TFTP, FTP, SFTP; NTP; ZTP (Zero Touch Provisioning); SPAN, RSPAN; Dying gasp*; syslog

Environment: Operating temperature/humidity: 0°C -50°C, 10%-90% non-condensing                                Storage temperature/humidity: -20°C -70°C, 5%-95% non-condensing

Accessories: Power cord, rack-mount kits, console cable

Certification: CE, FCC, ROHS

Characteristics

Innovative Virtual Cluster Switching Technique

• Innovative VSS (Virtual Switch System): it virtualizes multiple physical devices into one. The performance, reliability and management of the virtual system are superior to the physical ones.

• Improved Performance: VSS makes full use of each link in the physical devices, which avoids STP blocking the link and protects the original link to the maximum extent.

• High Reliability: Based on the advanced distribution mechanism and efficient cross-physical link aggregation link function, the logic control plane, service control plane and service data plane are separated. Thus, it can support continuous layer-3 routing forwarding, avoiding service interruption as a result of a single point of failure.

• Easy Management: VSS realizes single IP management, greatly improving the networking efficiency and lowering the operating cost.

Industrial Ethernet Ring with Zero Delay and Zero Packet Loss

• Support industry-level EAPS and their protection shift time is less than 50ms. Their high reliability is represented by the null packet loss, which has been proved by many years of application in the Grid, rail transportation and defense systems.

Telecom- Level Ethernet Switch

• Support the telecom-level Ethernet-ring protection protocol with a protection shift time of less than 50ms, STP/RSTP/MSTP, backup of active and standby uplinks and LACP link aggregation to cater to the requirements of high reliability of carriers.

• Support Ethernet standard 802.3u, 802.3x, 802.3ad, 802.1d, 802.1p, 802.1q, 802.1w, 802.1ad.

• Support system status LED, port dynamic LED

• Provide the perfect Ethernet OAM mechanism to monitor the network running status in real time for rapid trouble locating and detection.

• Support powerful ACL functions to access and control L2-L7 data based on physical port, VLAN, MAC, IP and protocol port ID, and providing carriers flexible and various policy control methods.

• Support In-Service Software Upgrade (ISSU) to ensure the unremitting data forwarding during system upgrade.

• Support various L2 multicast functions, including IGMP-Snooping, fast-leave and trans-VLAN multicast copy.

Flexible and Convenient Management and Maintenance

• Support management modes such as the console port, Telnet, SSH, etc.

• Support the WEB management mode, which is easy and efficient so that it makes installation and debugging convenient.

• Support TFTP-patterned file upload/download management.

• Support ISSU (In-Service Software Upgrade).

• Support SNMP and NMS smart network management platform to realize automatic equipment discovery, network topology management, equipment configuration management, performance data statistics and analysis and trouble management.

Carrier-Level QoS Policies

• Support priority retagging and complicated flow classification based on VLAN, MAC, source address, destination address, IP or priority to better streamline carrier’s services.

• Support to provide flexible bandwidth control policies and supports port-/flow-based flow limit and ensuring the line speed forwarding of each port to make sure the high quality of video, audio and data services.

• Support 8 priority queues by each port.

• Support multiple queue schedule algorithms such as SP, WRR, and SP+WRR.

Versatile IPv6 Solutions

• Support the IPv6 protocol suite, IPv6 neighbor discovery, ICMPv6, path MTU discovery, etc.

• Support Ping, Traceroute, Telnet, SSH, ACL and so like on the basis of IPv6, meeting IPv6 networks' equipment management requirements and service control requirements.

Perfect Security Mechanisms

• Equipment-level security: The advanced hardware infrastructure design realizes the level-based packet schedule and packet protection, prevents DoS-/TCP-related SYN flood, UDP flood, broadcast storm or large traffic attacks, and supports level-based command line protection, endowing different levels of users with different management permissions.

• Support perfect security authentication mechanisms: IEEE802.1X Radius and Tacacst.

• Support storm/multicast/unicast limit to ensure the normal running of equipment in harsh network conditions.

• Support a perfect ring detection mechanism to ensure the long-term stable running of network.

• Support port isolation within the same VLAN, DHCP-Snooping, and IP plus MAC plus Port binding for ensuring user data security.

Intelligent PoE+

• Support IEEE 802.3af/at PoE standard, and PoE power budget ups to a maximum of 370W;

• Support PoE non-stop power supply, the PoE+ power is maintained during a switch reload;

• Support manual and dynamic PoE power allocation;

• Supports up to 6KV thunder-proof of the PoE port and power supply.