These Layer 2 Ethernet switches are designed for enterprise networks demanding high security and intelligence. They provide 10/100 Mbps downlink and 1000 Mbps uplink Ethernet ports, and serve as access devices for 100 Mpbs-to-desktop applications in enterprise networks. In metropolitan area networks or various industry networks, they connect end users or aggregate client devices with 10/100 Mbps connections, converging at a higher capacity switch with 1000 Mbps interfaces. Features include advanced quality of service (QoS), rate limiting, QinQ (virtual LAN [VLAN]/VPN), SSHv2, Multicast VLAN Registration (MVR), Virtual Cable Test (VCT), HGMP V2, GARP VLAN Registration Protocol (GVRP), access control list (ACL), media access control (MAC)-IP-port binding, and Endpoint Admission Defense, voice and protocol-based VLAN, Internet Group Management Protocol snooping, and Power over Ethernet (PoE) - Broadcast control: allows limitation of broadcast traffic rate to cut down on unwanted network broadcast traffic. Advanced classifier-based QoS: classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; applies QoS policies such as setting priority level and rate limit to selected traffic on a per-port or per-VLAN basis. Powerful QoS feature: supports the following congestion actions: strict priority queuing (SP), weighted round robin (WRR) queuing, and SP+WRR. Traffic policing: supports Committed Access Rate (CAR) and line rate. - Friendly port names: allow assignment of descriptive names to ports. Remote configuration and management: is available through a secure Web browser or a command-line interface (CLI). Manager and operator privilege levels: enable read-only (operator) and read-write (manager) access on CLI and Web browser management interfaces. Command authorization: leverages HWTACACS to link a custom list of CLI commands to an individual network administrator's login; also provides an audit trail. Secure Web GUI: provides a secure, easy-to-use graphical interface for configuring the module via HTTPS. - Auto-MDIX: automatically adjusts for straight-through or crossover cables on all 10/100 and 10/100/1000 ports. Flow control: using standard IEEE 802.3x, it provides back pressure to reduce congestion in heavy traffic situations. Gigabit uplinks: dual-personality ports for either 10/100/1000 or mini-GBIC SFP connectivity for increased connectivity flexibility. IEEE 802.3af Power over Ethernet (PoE): provides up to 15.4 W per port to IEEE 802.3af-compliant PoE-powered devices such as IP phones, wireless access points, and security cameras. Ethernet OAM: provides a Layer 2 link performance and fault detection monitoring tool, which reduces failover and network convergence times. - Hardware-based wire-speed access control lists (ACLs): feature-rich ACL implementation (TCAM based) helps ensure high levels of security and ease of administration without impacting network performance. Gigabit Ethernet interface: provides a connection to the network that eliminates the network as a bottleneck. - Separate data and control paths: increases security and performance. External redundant power supply: provides high reliability. Smart link: allows 50 ms failover between links. Spanning Tree/MSTP, RSTP: provides redundant links while preventing network loops. Port trunking: provides higher switch-to-switch throughput and link-level redundancy, with support for standards-based link aggregation (IEEE 802.3ad); supports up to 13 trunks, each with up to 8 links (ports) per trunk. - 8K MAC addresses: provide access to many Layer 2 devices. VLAN support and tagging: supports the IEEE 802.1Q, with 4094 simultaneous VLAN IDs; supports port-based VLANs, MAC-based VLANs, and protocol-based VLANs. GARP VLAN Registration Protocol: allows automatic learning and dynamic assignment of VLANs. IEEE 802.1ad QinQ and Selective QinQ: increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed campus or metro network. Gigabit Ethernet port aggregation: allows grouping of ports to increase overall data throughput to a remote device.