User Manual

WGSW-52040
2
Robust Layer 2 Features
The WGSW-52040 can be programmed for basic Switch management functions such
as Port speed configuration, Port aggregation, VLAN, Spanning Tree protocol, WRR,
bandwidth control and IGMP Snooping. The WGSW-52040 provides 802.1Q Tagged
VLAN, Q-in-Q, voice VLAN and GVRP protocol. The VLAN groups allowed to be on
the WGSW-52040 will be maximally up to 256. By supporting port aggregation, the
WGSW-52040 allows the operation of a high-speed trunk combined with multiple ports.
It enables up to 32 groups of maximum 8 ports for trunking.
Excellent Traffic Control
The WGSW-52040 is loaded with powerful traffic management and WRR features
to enhance services offered by telecoms. The WRR functionalities include wire-
speed Layer 4 traffic classifiers and bandwidth limiting which are particularly useful
for multi-tenant unit, multi-business unit, Telco, or Network Service applications. It also
empowers the enterprises to take full advantages of the limited network resources and
guarantees the best performance at VoIP and Video conferencing transmission.
Powerful Security
The WGSW-52040 supports ACL policies comprehensively. The trafc can be classied
by source/destination IP addresses, source/destination MAC addresses, IP protocols,
TCP/UDP, IP precedence, time ranges and ToS. Moreover, various policies can be
conducted to forward the traffic. The WGSW-52040 also provides IEEE 802.1x port
based access authentication, which can be deployed with RADIUS, to ensure the port
level security and block illegal users.
Efficient Management
The WGSW-52040 supports IP Stacking function that helps network managers to
easily configure up to 24 switches in the same series via one single IP address
instead of connecting and setting each unit one by one. For efficient management,
the WGSW-52040 Managed Gigabit Switch is equipped with console, WEB and
SNMP management interfaces. With its built-in Web-based management interface,
the WGSW-52040 offers an easy-to-use, platform-independent management
and configuration facility. The WGSW-52040 supports standard Simple Network
Management Protocol (SNMP) and can be managed via any standard-based
management software. For text-based management, the WGSW-520400 can be
accessed via Telnet and the console port. Moreover, the WGSW-52040 offers secure
remote management by supporting SSH connection which encrypts the packet content
at each session.
Flexibility and Extension Solution
The four mini-GBIC slots built in the WGSW-52040 are compatible with
100/1000Base-X and WDM SFP (Small Factor Pluggable) fiber-optic modules.
The distance can be extended from 550 meters (Multi-Mode fiber) up to above
10/50/70/120 kilometers (Single-Mode fiber or WDM fiber). It is well suited for
applications within the enterprise data centers and distributions.
–
Protocol-based VLAN
–
MAC-based VLAN
–
IP Subnet VLAN
• Supports Link Aggregation
–
Maximum 32 trunk groups, up to 8 ports per trunk group
–
IEEE 802.3ad LACP (Link Aggregation Control Protocol)
–
Cisco ether-channel (Static Trunk)
• Supports Spanning Tree Protocol
–
STP, IEEE 802.1D (Classic Spanning Tree Protocol)
–
RSTP, IEEE 802.1w (Rapid Spanning Tree Protocol)
–
MSTP, IEEE 802.1s (Multiple Spanning Tree Protocol,
spanning tree by VLAN)
–
Supports BPDU & root guard
• Port Mirroring to monitor the incoming or outgoing trafc on
a particular port (many to many)
• Provides Port Mirror (many-to-1)
Quality of Service
• 8 priority queues on all switch ports
• Supports for strict priority and WRR (Weighted Round
Robin) CoS policies
• Trafc classication
–
IEEE 802.1p CoS / ToS
–
IPv4 / IPv6 DSCP
–
Port-based WRR
• Strict priority and WRR CoS policies
Multicast
• Supports IGMP Snooping v1, v2 and v3, MLD v1 and v2
snooping
• Querier mode support
• Supports Multicast VLAN Register (MVR)
Security
• IEEE 802.1x Port-based network access authentication
• MAC-based network access authentication
• Built-in RADIUS client to co-operate with the RADIUS
servers for IPv4 and IPv6
• TACACS+ login users access authentication
• IP-based Access Control List (ACL)
• MAC-based Access Control List
• Supports DHCP Snooping
• Supports ARP Inspection
• IP Source Guard prevents IP spoong attacks