․
Q-in-Q VLAN for performance & security
The VLAN feature in the switch offers the benefits of both security and performance. VLAN is
used to isolate traffic between different users and thus provides better security. Limiting the
broadcast traffic to within the same VLAN broadcast domain also enhances performance.
Q-in-Q, the use of double VLAN tags is an efficient method for enabling Subscriber
Aggregation. This is very useful in the MAN.
․
Isolated Group provides protection for certain ports
The isolated group feature allows certain ports to be designated as protected.
All other ports are non-isolated. Traffic between isolated group members are blocked. Traffic
can only be sent from isolated group to non-isolated group.
․
Mac-based 802.ad LACP with automatic link fail-over
Dynamic fail-over means packets will not get assigned to any trunk member port that has failed.
If one of the ports were to fail, traffic will automatically get distributed to the remaining active
ports.
․
802.1x Access Control improves network security
802.1x features enable user authentication for each network access attempt. Port security
features allow you to limit the number of MAC addresses per port in order to control the
number of stations for each port. Static MAC addresses can be defined for each port to ensure
only registered machines are allowed to access. By enabling both of these features, you can
establish an access mechanism based on user and machine identities, as well as control the
number of access stations.
․
802.1d Compatible & 802.1w Rapid Spanning Tree
For mission critical environments with multiple switches supporting STP, you can configure the
switches with a redundant backup bridge path, so transmission and reception of packets can
be guaranteed in event of any failover switch in the network.
․
2 Dual Media ports for flexible fiber connection
Ports 25,26 dual media ports are provided for flexible fiber connection. You can select to install
optional transceiver modules in these slots for short, medium or long distance fiber backbone
attachment. Use of the GBIC will disable their corresponding built-in 10/100/1000Base-T
connections.
