GS-4210-16P4C — 16-Port 10/100/1000T 802.3at PoE + 4-Port Gigabit TP/SFP Combo Managed Switch

Descripción

A Perfect Managed PoE+ Switch with Advanced L2/L4 Switching and Security PLANET GS-4210-16P4C is a cost-optimized, Gigabit PoE+ Managed Switch featuring PLANET intelligent PoE functions to improve the availability of critical business applications. It provides IPv6/IPv4 dual stack management and built-in L2/L4 Gigabit switching engine along with 16 10/100/1000BASE-T ports featuring 30-watt 802.3at PoE+ and 4 additional Gigabit TP/SFP combo ports . With a total power budget of up to 240 watts for different kinds of PoE applications, the GS-4210-16P4C provides a quick, safe and cost-effective Power over Ethernet network solution for small businesses and enterprises. Cybersecurity Network Solution to Minimize Security Risks The GS-4210-16P4C supports SSHv2 and TLS protocols to provide strong protection against advanced threats. It includes a range of cybersecurity features such as DHCP Snooping, IP Source Guard, dynamic ARP Inspection Protection, 802.1x port-based network access control, RADIUS and TACACS+ user accounts management, SNMPv3 authentication, and so on to complement it as an all-security solution. Redundant Ring, Fast Recovery for Critical Network Applications The GS-4210-16P4C supports redundant ring technology and features strong, rapid self-recovery capability to prevent interruptions and external intrusions. It incorporates advanced ITU-T G.8032 ERPS (Ethernet Ring Protection Switching) technology, Spanning Tree Protocol (802.1s MSTP) into customer’s network to enhance system reliability and uptime in various environments. Built-in Unique PoE Functions for Powered Devices Management As it is the managed PoE switch for surveillance, wireless and VoIP networks, the GS-4210-16P4C features the following special PoE management functions: PD Alive Check Scheduled Power Recycling PoE Schedule PoE Usage Monitoring PoE Extension Intelligent Powered Device Alive Check The GS-4210-16P4C can be configured to monitor connected PD (powered device) status in real time via ping action. Once the PD stops working and responding, the GS-4210-16P4C will resume the PoE port power and bring the PD back to work. It will greatly enhance the network reliability through the PoE port resetting the PD’s power source, thus reducing the administrator’s management burden. Scheduled Power Recycling The GS-4210-16P4C allows each of the connected PoE IP cameras or PoE wireless access points to reboot at a specified time each week. Therefore, it will reduce the chance of IP camera or AP crash resulting from buffer overflow. PoE Schedule for Energy Savings Under the trend of energy savings worldwide and contributing to environmental protection, the GS-4210-16P4C can effectively control the power supply besides its capability of giving high watts power. The “PoE schedule” function helps you to enable or disable PoE power feeding for each PoE port during specified time intervals and it is a powerful function to help SMBs or enterprises save power and money. It also increases security by powering off PDs that should not be in use during non-business hours. PoE Usage Monitoring Via the power usage chart in the web management interface, the GS-4210-16P4C enables the administrator to monitor the status of the power usage of the connected PDs in real time. Thus, it greatly enhances the management efficiency of the facilities. 802.3at PoE+ Power and Ethernet Data Transmission Distance Extension In the “ Extend ” operation mode, the GS-4210-16P4C operates on a per-port basis at 10Mbps duplex operation but can support 30-watt PoE power output over a distance of up to 250 meters overcoming the 100m limit on Ethernet UTP cable. With this brand-new feature, the GS-4210-16P4C provides an additional solution for 802.3at/af PoE distance extension, thus saving the cost of Ethernet cable installation. IPv6/IPv4 Dual Stack Management Supporting both IPv6 and IPv4 protocols, the GS-4210-16P4C helps the SMBs to step in the IPv6 era with the lowest investment as its network facilities need not be replaced or overhauled if the IPv6 FTTx edge network is set up. Robust Layer 2 Features The GS-4210-16P4C can be programmed for advanced switch management functions such as dynamic port link aggregation, 802.1Q VLAN and Q-in-Q VLAN, Multiple Spanning Tree protocol (MSTP) , loop and BPDU guard , IGMP snooping , and MLD snooping . Via the link aggregation, the GS-4210-16P4C allows the operation of a high-speed trunk to combine with multiple ports such as a 16Gbps fat pipe, and supports fail-over as well. Also, the Link Layer Discovery Protocol (LLDP) is the Layer 2 protocol included to help discover basic information about neighboring devices on the local broadcast domain. Efficient Traffic Control The GS-4210-16P4C is loaded with robust QoS features and powerful traffic management to enhance services to business-class data, voice, and video solutions. The functionality includes broadcast / multicast storm control , per port bandwidth control , IP DSCP QoS priority and remarking. It guarantees the best performance for VoIP and video stream transmission, and empowers the enterprises to take full advantage of the limited network resources. Powerful Security PLANET GS-4210-16P4C offers comprehensive IPv4/IPv6 Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. It can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications. Its protection mechanism also comprises 802.1X port-based user and device authentication, which can be deployed with RADIUS and TACACS+ to ensure the port level security and block illegal users. With the protected port function, communication between edge ports can be prevented to guarantee user privacy. Furthermore, Port security function allows to limit the number of network devices on a given port. User-friendly and Secure Management For efficient management, the GS-4210-16P4C is equipped with web , Telnet and SNMP management interfaces. With the built-in Web-based management interface, the GS-4210-16P4C offers an easy-to-use, platform-independent management and configuration facility. For text-based management, the switch can be accessed via Telnet and the console port. By supporting the standard SNMP, the switch can be managed via any standard management software Moreover, the GS-4210-16P4C offers secure remote management by supporting SSHv2 , TLSv1.2 /TLSv1.3 and SNMP v3 connections which encrypt the packet content at each session. Remote Management Solution PLANET's Universal Network Management System (UNI-NMS) and NMSViewerPro/CloudViewerPro app support IT staff by remotely managing all network devices and monitoring PDs' operational statuses. Thus, they're designed for both the enterprises and industries where deployments of PDs can be as remote as possible, without having to go to the actual location once a bug or faulty condition is found. With the UNI-NMS or NMSViewerPro/CloudViewerPro app, all kinds of businesses can now be speedily and efficiently managed from one platform. PLANET CloudNMS – Cloud-Based Universal Network Management PLANET’s CloudNMS platform and mobile app empower IT staff to remotely manage all network devices and Powered Devices (PDs) in real time. Designed for enterprises and industries, CloudNMS minimizes the need for on-site troubleshooting by providing centralized monitoring, fault detection, and instant alerts. With CloudNMS, businesses can manage diverse network deployments more efficiently, securely, and intelligently—all from a single cloud-based platform. Flexibility and Long-distance Extension Solution The GS-4210-16P4C provides 4 extra Gigabit TP interfaces supporting 10/100/1000BASE-T RJ45 copper to connect with surveillance network devices such as NVR, Video Streaming Server or NAS to facilitate surveillance management. Or through these dual-speed fiber SFP slots , it can also connect with the 100BASE-FX/1000BASE-SX/LX SFP (Small Form-factor Pluggable) fiber transceiver to uplink to backbone switch and monitoring center in long distance. The distance can be extended from 550 meters to 2 kilometers (multi-mode fiber) and up to above 10/20/40/60/80/120 kilometers (single-mode fiber or WDM fiber). They are well suited for applications within the enterprise data centers and distributions. Intelligent SFP Diagnosis Mechanism The GS-4210-16P4C supports SFP-DDM (Digital Diagnostic Monitor) function that can easily monitor real-time parameters of the SFP for network administrator, such as optical output power, optical input power, temperature, laser bias current, and transceiver supply voltage. Applications High Scalability and Best Security for Today’s IP Networking and Cyber Security Solution The GS-4210-16P4C comes with non-blocking design and SFP fiber-optic modules, bringing network infrastructure higher flexibility but lower in cost. Providing sixteen 10/100/1000BASE-T PoE ports and four Gigabit TP/SFP combo ports, the GS-4210-16P4C can easily build a networking security on the cyber security system for the enterprises. For instance, it can work with the router and UTM to perform comprehensive security for today’s businesses. ITU-T G.8032 ERPS with PoE IP Surveillance System for SMBs/Workgroups The GS-4210-16P4C features strong rapid self-recovery capability to prevent interruptions and external intrusions. It incorporates ITU-T G.8032 ERPS (Ethernet Ring Protection Switching) technology into customer’s automation network to enhance system reliability and uptime. Applying the IEEE 802.3at Power over Ethernet standard, the GS-4210-16P4C can directly connect with any IEEE 802.3at end-nodes like PTZ (Pan, Tilt & Zoom) network cameras and speed dome cameras. The GS-4210-16P4C can easily build a power that can centrally control a wireless AP/IP camera/VoIP system for SMBs and workgroups in the enterprises with high availability network infrastructure. Key Features Physical Port 20-Port 10/100/1000BASE-T Gigabit RJ45 copper with 16-Port IEEE 802.3at/af PoE Injector (Port-1 to Port-16) 4 100/1000BASE-X SFP slots, shared with port-17 to port-20 compatible with 100BASE-FX SFP RJ45 console interface for switch basic management and setup Reset button for system factory default and reboot Switching Hardware-based 10/100Mbps, half/full duplex and 1000Mbps full duplex mode, flow control and auto-negotiation, and auto MDI/MDI-X Features Store-and-Forward mode with wire-speed filtering and forwarding rates IEEE 802.3x flow control for full duplex operation and back pressure for half duplex operation 12K jumbo frame Supports ESD protection Contact Discharge 6KV DC Air Gap Discharge 8KV DC Automatic address learning and address aging Supports CSMA/CD protocol Power over Ethernet Complies with IEEE 802.3at Power over Ethernet Plus, end-span PSE Backward compatible with IEEE 802.3af Power over Ethernet Up to 16 ports of IEEE 802.3af/802.3at devices powered Supports PoE power up to 30 watts for each PoE port 240-watt PoE budget Auto detects powered device (PD) Circuit protection prevents power interference between ports Remote power feeding up to 100 meters in standard mode and 250m in extend mode PoE management Total PoE power budget control Per port PoE function enable/disable PoE Port Power feeding priority Per PoE port power limitation PoE delay PD classification detection Intelligent PoE features PD alive check PoE schedule PoE extension Layer 2 Features Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex) High performance Store and Forward architecture, broadcast storm control, runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth Supports VLAN IEEE 802.1Q tagged VLAN Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad) Protocol VLAN Voice VLAN Private VLAN Management VLAN GVRP Supports Spanning Tree Protocol STP (Spanning Tree Protocol) RSTP (Rapid Spanning Tree Protocol) MSTP (Multiple Spanning Tree Protocol) STP BPDU Guard, BPDU Filtering and BPDU Forwarding Supports Link Aggregation IEEE 802.3ad Link Aggregation Control Protocol (LACP) Cisco ether-channel (Static Trunk) Maximum 8 trunk groups, up to 8 ports per trunk group Provides port mirror (many-to-1) Loop protection to avoid broadcast loops Supports ERPS (Ethernet Ring Protection Switching) Quality of Service Ingress/Egress Rate Limit per port bandwidth control Storm Control support Broadcast/Unknown-Unicast/Unknown-Multicast Traffic classification IEEE 802.1p CoS TOS/DSCP/IP Precedence of IPv4/IPv6 packets Strict priority and Weighted Round Robin (WRR) CoS policies Multicast Supports IPv4 IGMP snooping v2 and v3 Supports IPv6 MLD snooping v1, v2 IGMP querier mode support IGMP snooping port filtering MLD snooping port filtering Security Authentication IEEE 802.1X Port-based network access authentication Built-in RADIUS client to cooperate with the RADIUS servers DHCP Option 82 RADIUS/TACACS+ login user access authentication Access Control List IPv4/IPv6 IP-based ACL IPv4/IPv6 IP-based ACE MAC-based ACL MAC-based ACE MAC Security Static MAC MAC Filtering Port Security for Source MAC address entries filtering DHCP Snooping to filter distrusted DHCP messages Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding IP Source Guard prevents IP spoofing attacks DoS Attack Prevention Management IPv4 and IPv6 dual stack management Switch Management Interface Web switch management Console/Telnet Command Line Interface SNMP v1 and v2c switch management SSHv2, TLSv1.2/TLSv1.3 and SNMP v3 secure access SNMP Management Four RMON groups (history, statistics, alarms, and events) SNMP trap for interface Link Up and Link Down notification User Privilege Levels Control Built-in Trivial File Transfer Protocol (TFTP) client BOOTP and DHCP for IP address assignment System Maintenance Firmware upload/download via HTTP/TFTP Configuration upload / download through Web interface Dual Images Hardware reset button for system reboot or reset to factory default SNTP Network Time Protocol Network Diagnostic ICMPv6/ICMPv4 Remote Ping Cable Diagnostics SFP-DDM (Digital Diagnostic Monitor) Link Layer Discovery Protocol (LLDP) Protocol and LLDP-MED Event message logging to remote Syslog server SMTP remote alarm PLANET Smart Discovery utility automatically finds PLANET devices on the network PLANET NMS system and NMSViewerPro/CloudViewerPro/CloudNMS App for deployment management

Especificaciones técnicas

Hardware Version

4

Copper Ports

20 x 10/100/1000BASE-T RJ45 Auto-MDI/MDI-X ports

PoE Injector Port

16 ports with 802.3at/af PoE injector function with Port-1 to Port-16

SFP Slots

4 x 100/1000BASE-X SFP interfaces with Port-17 to Port-20 Supports 100/1000Mbps dual mode and DDM

Console

1 x RS-232-to-RJ45 serial port (115200, 8, N, 1)

Reset Button

< 5 sec: System reboot > 5 sec: Factory default

Fan

2 fans

Dimensions (W x D x H)

440 x 207 x 44 mm, 19-inch, 1U height

Weight

2.4kg

ESD Protection

±8KV air gap discharge ±6KV contact discharge

Enclosure

Metal

Power Requirements

100~240V AC, 50/60Hz, 4A (max.)

Power Consumption/Dissipation

Max. 14 watts / 47.7 BTU (Power on without any connection) Max. 278 watts / 948 BTU (Full Loading)

LED

System: PWR x 1( Green ) SYS x 1 ( Green ) Per PoE Port (Port 1 to Port 16): 1000 LNK/ACT ( Green ),10/100 LNK/ACT x1 ( Amber ), PoE-in-use x 1 ( Amber ) Per Gigabit RJ45 Port (Port 17 to Port 20): 1000 LNK/ACT ( Green ) & 　10/100 LNK/ACT x 1 ( Amber ) Per Gigabit SFP Port (Port 17 to Port 20): 1000 LNK/ACT ( Green ) & 100 LNK/ACT x1 ( Amber )

Switch Architecture

Store-and-Forward

Switch Fabric

40Gbps/non-blocking

Switch Throughput@64Bytes

29.76Mpps

Address Table

16K entries

Shared Data Buffer

4.1 megabits

Flow Control

IEEE 802.3x pause frame for full duplex Back pressure for half duplex

Jumbo Frame

12K bytes

PoE Standard

IEEE 802.3af/802.3at PoE/PSE

PoE Power Supply Type

End-span

PoE Power Output

Per Port 54V DC, 300mA. Max. 15.4 watts (IEEE 802.3af) Per Port 54V DC, 600mA. Max. 30 watts (IEEE 802.3at)

Power Pin Assignment

1/2(+), 3/6(-)

PoE Power Budget

240 watts (max.)

Number of 802.3af PDs

15 units

Number of 802.3at PDs

8 units

PoE Management

PD Alive Check Scheduled Power Recycling PoE Schedule PoE Usage Monitoring PoE Extension

Port Mirroring

TX/RX/both Many-to-1 monitor Up to 4 sessions

VLAN

IEEE 802.1Q tagged-based VLAN IEEE 802.1ad Q-in-Q tunneling (VLAN stacking) Voice VLAN Protocol VLAN Private VLAN (Protected port) GVRP Management VLAN Up to 256 VLAN groups, out of 4094 VLAN IDs

Link Aggregation

IEEE 802.3ad LACP and static trunk Supports 8 groups of 8-port trunk

Spanning Tree Protocol

STP, IEEE 802.1D Spanning Tree Protocol RSTP, IEEE 802.1w Rapid Spanning Tree Protocol MSTP, IEEE 802.1s Multiple Spanning Tree Protocol STP BPDU Guard, BPDU Filtering and BPDU Forwarding

IGMP Snooping

IPv4 IGMP (v2/v3) snooping IGMP querier Up to 256 multicast groups

MLD Snooping

IPv6 MLD (v1/v2) snooping Up to 256 multicast groups

QoS

8 mapping IDs to 8 level priority queues Port number 802.1p priority DSCP/IP precedence of IPv4/IPv6 packets Traffic classification based, strict priority and WRR Ingress/Egress Rate Limit per port bandwidth control

Ring

Supports ERPS, and complies with ITU-T G.8032 Recovery time < 450ms

Access Control List

IPv4/IPv6 IP-based ACL/MAC-based ACL IPv4/IPv6 IP-based ACE/MAC-based ACE Max. 256 ACL entries

Port Security

IEEE 802.1X – Port-based authentication Built-in RADIUS client to co-operate with RADIUS server RADIUS/TACACS+ user access authentication

MAC Security

IP-MAC port binding MAC filter Static MAC address, max. 256 static MAC entries

Enhanced Security

DHCP Snooping and DHCP Option82 STP BPDU guard, BPDU filtering and BPDU forwarding DoS attack prevention ARP inspection IP source guard

Basic Management Interfaces

RS232 to RJ45 Console Web browser Telnet SNMP v1, v2c

Secure Management Interfaces

SSHv2, TLS v1.2/TLSv1.3, SNMP v3

System Management

Firmware upgrade by HTTP/TFTP protocol through Ethernet network LLDP protocol SNTP PLANET Smart Discovery Utility PLANET NMS system PLANET NMSViewerPro/CloudViewerPro/CloudNMS

Event Management

Remote/Local Syslog System log SMTP remote alarm

SNMP MIBs

RFC 1213 MIB-II RFC 1215 Generic Traps RFC 1493 Bridge MIB RFC 2737 Entity MIB (Version 2) RFC 2819 RMON (1, 2, 3, 9) RFC 3635 Ethernet-like MIB LLDP MIB PLANET-Aggr-MIB PLANET-DDMI-MIB PLANET-Firmware-MIB PLANET-GVRP-MIB PLANET-LACP-MIB PLANET-SYSUTIL-MIB

Regulatory Compliance

FCC Part 15 Class A, CE

Standards Compliance

IEEE 802.3 10BASE-T IEEE 802.3u 100BASE-TX/100BASE-FX IEEE 802.3ab Gigabit 1000BASE-T IEEE 802.3z Gigabit SX/LX IEEE 802.3x flow control and back pressure IEEE 802.3ad port trunk with LACP IEEE 802.1D Spanning Tree protocol IEEE 802.1w Rapid Spanning Tree protocol IEEE 802.1s Multiple Spanning Tree protocol IEEE 802.1p Class of Service IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af Power over Ethernet IEEE 802.3at Power over Ethernet Plus RFC 768 UDP RFC 783 TFTP RFC 791 IP RFC 792 ICMP RFC 793 TCP RFC 2068 HTTP RFC 1112 IGMP version 1 RFC 2236 IGMP version 2 RFC 3376 IGMP version 3 RFC 2710 MLD version 1 RFC 3810 MLD version 2 ITU-T G.8032 ERPS Ring

Operating

Temperature: 0 ~ 50 degrees C Relative Humidity: 5 ~ 95% (non-condensing)

Storage

Temperature: -20 ~ 70 degrees C Relative Humidity: 5 ~ 95% (non-condensing)