RY-LGSP28-28

HTTP/HTTPS, SSH, Telnet client, IPv6 management
SNMP v1, v2c, v3 supports traps and USM
DHCP client / DHCPv6 client
DHCP server
PTP, Precision Time Protocol, IEEE 1588 v2
Embedded RMON agent supports RMON groups 1,2,3,9 (history, statistics, alarms and events) for improved traffic management, monitoring and analysis

Hardware Queue
Supports eight hardware queues.

Classification:
Port-based: traffic QoS by port
802.1p: The VLAN priority-based Layer 2 CoS QoS Class of Service is a parameter used in data and voice protocols to distinguish the types of payload contained in the packet.
DSCP-based differentiated services (DiffServ) Layer 3 DSCP-QoS: IP packets can carry either an IP priority (IPP) or a Differentiated Services Code Point (DSCP) value. QoS supports the use of both values because DSCP values are backwards compatible with IP priority values.
Classification and re-marking of TCP/IP ACLs: QoS through ACL

Rate-Limiting
Ingress Policer
Egress Shaping and Rate Control Per Port

Scheduling
Strict Priority and Weighted Round Robin (WRR): Weighted Round Robin is a scheduling algorithm that uses the weights assigned to queues to determine how much data is dequeued from each queue before advancing to the next queue.

Certified authentication
A private HTTPS key can be stored for management access.

User management
User rights can be freely set at up to 15 levels.

ACL
The switch allows up to 512 entries. Drop or rate restriction based on source/destination MAC/IP address or VLAN ID. Rules and conditions for incoming packets can be set per port. The rules include protocols, IP ports and address ranges. The rules can be set according to the authorization or exclusion procedure. Criteria are: TCP/ UDP source and destination ports, 802.1p priority, Ethernet type, ICMP (Internet Control Message Protocol) packet.

Port security
MAC address management per port and IP source guard: The MAC address can be checked in combination with the IP

Storm Control
Prevents traffic on a LAN from being disrupted by a flood of broadcasts, multicasts or unicasts on a port.

RADIUS Authentication, 802.1X
Authorization and Accounting, MD5 Hash , Guest VLAN, Single/Multiple Host Mode, and Single/Multiple Sessions
Supports IGMP RADIUS-based 802.1X
Dynamic VLAN assignment

TACACS+ Authentication
The switch supports TACACS+ authentication. Switch as client.

Secure Shell (SSH)
SSH secures Telnet traffic to or from the switch, SSH v1 and v2 are supported

Secure Socket Layer (SSL)
SSL encrypts HTTP traffic, providing enhanced secure access to the browser-based management GUI in the switch.

HTTPS & SSL (Secured Web)
Hyper Text Transfer Protocol Secure (HTTPS) is the secure version of HTTP.

BPDU Guard
BPDU Guard, an extension of STP, removes a node that reflects BPDUs back into the network. It enforces the boundaries of the STP domain and keeps the active topology predictable by preventing network devices behind a BPDU Guard-capable port from participating in STP.

DHCP Snooping
With DHCP snooping, the switch has a function that acts as a firewall between untrustworthy hosts and trustworthy DHCP servers.

Loop protection
Loop protection is used to prevent unknown unicast, broadcast and multicast loops in layer 2 switching configurations.