HanDreamnet Subgate Security Switch series
Upcoming SlideShare
Loading in...5
×

Like this? Share it with your network

Share

HanDreamnet Subgate Security Switch series

  • 480 views
Uploaded on

Handreamnet is a leading network security solution provider with a competitive edge against global vendors in network security and traffic management markets. Internet usage patterns have changed......

Handreamnet is a leading network security solution provider with a competitive edge against global vendors in network security and traffic management markets. Internet usage patterns have changed and E-business volume is expanding, and so are the threats and damage caused by activities such as hacking, viruses, and worms, which are increasing in number. Handreamnet provides reliable solutions based on deep technology and expertise to secure network availability. Handreamnet is also making investments to solve the network overload traffic and to prohibit harmful traffic. For more information about Handreamnet please visit http://en.handream.net/main.php

  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Be the first to comment
    Be the first to like this
No Downloads

Views

Total Views
480
On Slideshare
480
From Embeds
0
Number of Embeds
0

Actions

Shares
Downloads
3
Comments
0
Likes
0

Embeds 0

No embeds

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
    No notes for slide

Transcript

  • 1. HanDreamnet Co., Ltd. www.handream.net The World 1 st Security Switch Integrated Management System of IP Resource Control / Access Control Visual Node Manager L2/L3 Security Switch Visual Node Manager Visual IP Manager The World 1st Security Switch Should you have any inquiries, feel free to contact us. We will respond as soon as possible. HanDreamnet acquired the world first L2 security switch patent with Product and sales inquiry : sales@handream.net / www.handream.net HanDreamnets own technologies and will help to build more safe network. SG Security Switch Series Detect / block malicious traffic caused by virus such as DoS/DDoS, Flooding or Scanning in IPv4/IPv6 environment Prevent information leaking with blocking ARP spoofing and block internal information hacking Guarantee network continuity with Self Loop Detect function Provide the network stability through patented MDS engine (ASIC) Supply integrated network management software (VNM) IPv6 Ready Logo #1209 MarioTower, 28, Digitalro-30-gil, Guro-Gu, Seoul 152-741 Korea TEL : 82-2-890-6650HanDreamnet Co., Ltd. FAX : 82-2-890-6654 www.handream.net E-mail : sales@handream.net
  • 2. L2/L3 Security Switch Visual Node Manager Visual IP Manager www.handream.net Network Topology for Security Switch SG Security Switch The world 1st Security Switch SG Security Internet Switch Series UTM (Firewall, VPN, IPS) SG8800 SG8800 Visua l Node Manag er No.1 in L2 security switch market share SG Security Switch Series VNM Integrated Network L3 Security SG202 VIPM IP Resource & Switch 420 4 2GS SG Security switch blocks malicious traffic in real time such as DoS/DDoS, Flooding, Scanning and Management Access Control Spoofing through packet analysis up to layer 4. SG Security switch blocks virus infection including Zero-Day attack. SG security series are essential to construct safe network environment. Traditional SG202 4 L2 Security SG202 4 L2 Security SG202 4 2GS 2GS 2GS L2 Switch Switch Switch 420 420 420 Prevent trouble in advance by blocking malicious traffic like worm and virus in access level It detects and blocks malicious traffic by worm and virus to prevent network speed reduction and down in IP Management Block Zero-Day Attack Block ARP Spoofing advance. The network administrator enables to carry out without service interruption’. (Unauthorized PC detection) (DoS/DDoS/Scanning/Flooding) (Tapping and leaking personal information) Protect confidential and financial information of individual / company / public institution from ARP Spoofing attack Increasing IP phone tapping, financial information and ID/Password hacking cause a huge damage to privacy and banking. SG security switch series detect and block ARP Spoofing in real time and protect L2 PoE Security Switch Comparison user’s confidential information. SG2124GXPoE Traditional PoE Switch Simultaneously detect / block malicious traffic in IPv4 and IPv6 network SG security switch acquired IPv6 ready logo. SG security switch supports secure and stable network in Up to 32K MAC address support Up to 8K MAC address support IPv4 and IPv6 network. Performance 144G Switching Capacity 176G Switching Capacity 131Mpps Throughput 42Mpps Throughput Support internal power supply redundancy Support external power supply redundancy Full wire speed with security function PoE 802.3af = 24port 802.3af = 24port MDS(Multi Dimension Security) engine is ASIC based hardware chip and carries out security function by 802.3at = 24port 802.3at = 12port analyzing traffic. MDS engine guarantees the full wire-speed while providing security features. IPv4/IPv6 network (Static IP & Dynamic IP) IPv4/IPv6 network (Static IP & Dynamic IP) - Stable network by installing a patented MDS security - Security engine not supported engine - Real-time blocking unavailable (only Smart protection (Block only malicious traffic) Types of - Real-time blocking malicious traffic such as DoS / DDoS, support storm control) By blocking virus infected packet or service port only, it provides work continuity like web service, e-mail Blocking Flooding, Scanning - Malicious traffic blocking not supported and groupware. Malicious - Secure network continuity by blocking selective malicious - ARP spoofing blocking with static IP Traffic traffic address not supported - Prevent information leaking with blocking ARP spoofing - Takes time to figure out cause of problem - Easy management for malicious traffic and trouble shooting It enables to monitor/control whole network status and condition on a screen. It helps to figure out attacking Detect & Block Real-time detect and block cable loop Unable to control cable loop history, detection/blocking log and history in a table which can be used as internal report. Looping Guarantee network continuity Network downtime by cable loop available Integrated Network Management(VNM) Extra network management system required Management - GUI based integrated network management system Reliability and stability are proven by large security references in Korea & Overseas market. System - Log and report output at integrated management system screen - Available to check IP, MAC and Network bandwidth in use
  • 3. L2/L3 Security Switch Visual Node Manager Visual IP Manager www.handream.netProduct Feature Product Feature SG security switch makes possible to build more safe network by checking Implementation of SG security switch helps IT administrator to have various network attacks in access level through behavior based blocking. secure and reliable network. Stable network through embedded MDS security engine Secure and reliable IPv6 network MDS developed by HanDreamnet adopts behavior SG security switch acquired IPv6 ready logo. It can based blocking method which does not require signa- block and detect malicious traffic in IPv6 as well as ture file update like other pattern matching(IPS/IDS) IPv4 network. It supports various IPv6 routing proto- products. It blocks only malicious traffic through col such as RIPng, OSPFv3, BGP4+ and supports analyzing traffic up to layer 4 in real-time, so guaran- various IPv6 management features. tees the safe and reliable network. Point!! Point !! Real-time detect / block malicious traffic in IPv4/IPv6 network Full wire speed in all ports with security function Blocking only malicious traffic through smart protection Strong privacy network It secures work continuity without service interrup- It helps to get rid of hacking hazard by allowing Internet tion by blocking malicious traffic only in PC, smart communication between designated uplink port and phone, and IP phone. terminal only in hotel and apartment. It blocks file sharing with NetBIOS. Point!! Secure service continuity of normal traffic by Point!! blocking malicious traffic only Room1 Room2 Room3 Room4 Smart protection in security switch vs IP/Port blocking in other traditional switch Normal traffic Malicious traffic Real-time detection and blocking of malicious traffic such as DoS/DDoS, Ring topology support Flooding and Scanning SG security switch supports ERP(Ethernet Ring Pro- MDS security engine blocks worm spread so that it tection) protocol for ring topology. So, it can extend SG21 24GX PoE prevents secondary damage. SG security switch blocks its value to carrier or metro ethernet area with malicious packet under each stacks in real-time to powerful security feature. keep network safety. It is good for financial institu- tions and ISP that have to carry out guaranteed SG21 SG21 traffic. 24GX PoE 24GX PoE Point!! Point!! Real-time block malicious traffic Prevent network overload caused by malicious traffic Primary SG21 24GX PoE Secondary (Forwarding) (Blocking)
  • 4. L2/L3 Security Switch Visual Node Manager Visual IP Manager www.handream.netProduct Feature Product Feature SG security switch detects and blocks the network problems in advance Implementation of SG security switch can support an optimal IPT net- to provide reliable network service. work. Network continuity with Self Loop Detect function Effective IPT network with LLDP-MED The entire network service is often down by users SG security switch supports Voice VLAN and Auto mistake during the operation. SG security switch QoS feature with LLDP-MED for IPT network. So detects and blocks cable loop so provides the reliable regardless of network congestion, it can guarantee network. voice quality. Point!! Point !! IPT Wizzard helps to build IPT network Prevent entire network downtime by cable loop Easy configuration of Voice VLAN based on Provide real-time log in case of cable loop LLDP-MED Redundancy feature 802.3af/at support with maximum 740W PoE power budget SG2124GXPoE SG2124GXPoE SG security switch provides various redundancy SG security switch supports built-in dual power feature. It prevents network suspension due to cable supply in 1U size. So it supports 15.4W to all 48 trouble, port trouble, and switch trouble. Master Slave ports, and 30W to all 24 ports. SG security switch power supply SSR SPR Point!! Point!! 2 1 SSR: Smart Switch Redundancy Internal power supply redundancy for reliability Power supply Internal power Power supply SPR: Smart Port Redundancy Support sufficient PoE/PoE+ supply redundancy Prevent information leaking with blocking ARP Spoofing Green IT network environment by reducing power consumption SG security switch detects and blocks attacks using Power for unused port is reduced to cut off power internal information. It prevents users to steal personal consumption significantly. And SG2100/3100 series Energy information in advance. can support EEE(Energy Efficient Ethernet). It enables SG2 124G X PoE to make green IT network through CO2 reduction. Efficient Ethernet SG2 SG2 SG2 SG2 124G 124G 124G 124G X X X X PoE PoE PoE PoE Point!! Point!! Prevent IPT/UC tapping Save power consumption up to 50% Prevent personal information and company Minimize port power according to port con- confidential resources to be leaked by hacking nection
  • 5. L2/L3 Security Switch Visual Node Manager Visual IP Manager www.handream.netProduct Feature Product Feature SG security switch detects/blocks malicious traffic, and blocks unauthorized SG security switch provides various management feature for administra- users to access the network, and also support user notification function. tor convenience. Blocks unauthorized users to access the internal network Management enhancements SG security switch supports powerful authentication By supporting Multi OS and USB interface, the admini- function with embedded RADIUS server and external RADIUS Server / VIPM strator easily manages switch firmware. Also, it supports Firmware VIPM server. It blocks an unauthorized users and sFlow and IPv6 management feature for the purpose USB Upgrade support user access control. of management convenience. Point !! Point!! Powerful IPv4/IPv6 management Mac Address FTP, SFTP ID hdn123 Mac Address IP Address + Firmware upgrade support with USB interface Pass F4:1C:XX:12:XX 192.168.0.254 IP Address Firmware Upgrade ********* + Port User notification for malicious traffic (MDS Web Alert) TFM(Traffic Flow Monitoring) It sends alert pop-up message to the user through SG security switch provides N:N monitoring capabili- web browser in case of malicious traffic. So users can ties instead of expensive extra TAP. With TFM, it Internet do self-check for virus and windows update. supports improved monitoring feature. SG8800 SG8800 Point!! Point!! Improved monitoring feature 1:N, N:N monitoring capabilities support with TFM Intrusion Anti Virus Network Traffic Detection Analysis Tool Loop Integrated User Network Prevention Manage- Access Security ment Control
  • 6. L2/L3 Security Switch Visual Node Manager Visual IP Manager www.handream.net Product Feature Integrated Network Group Policy Switch Auto Config Management SoftWare VNM (Visual Node Manager) VNM, integrated network management software is provided as a bundle. It helps to monitor switch and traffic status. VNM applies the policy to the individual switch or VNM with auto config feature can set IP address, group. gateway and SNMP community to the new security switch without console access. Network status analysis Network Topology Switch Configuration Backup Switch Firmware Upgrade Visu al Node Mana ger VNM supports network status analysis, traffic usage, IP Switches and 3rd party products can be configured in VNM can save up to 10 configuration files per switch. VNM supports firmware upgrade without additional usage and malicious traffic tracking. the topology map. The administrator can monitor With this feature when a failure occurs, you can easily program. individual devices or groups in topology map. recover the switch configuration. Real time malicious traffic monitoring Real time user status monitoring Special Report VNM server installation Minimum requirements Recommended requirements (Under 50 devices) (More than 50 devices) Window XP 32Bit Window XP 32Bit (SP2/3) (SP2/3) OS Window 7 32Bit higher Window 7 32Bit higher 2003 Server, Vista 2003 Server, Vista Intel Dual Core 2GHz CPU Intel Core i7 higher higher Memory 2GB higher 4GB higher HDD 200GB higher 500GB higher VNM supports malicious traffic monitoring in many VNM supports real-time monitoring about IP address/ VNM provides network status & malicious traffic status Should open TCP 8085~8087 and UDP 161~162 service port security switches. MAC address/Port information of users. Additional to operator based on daily/weekly/monthly. It also in firewall. information such as department and name can be added. supports the feature of scheduling report.
  • 7. L2/L3 Security Switch Visual Node Manager Visual IP Manager www.handream.net Product Feature IP resource management Powerful authentication feature Integrated Network Management VIPM (Visual IP Manager) VIPM in conjunction with SG security switch, supports IP resource control, NMS, authentica- - Monitor and control IP/MAC condition - Network access control with IP/MAC/Port tion system and network access control capabilities. VIPM enables to monitor IP/MAC status at a look and Network access control with IP/MAC/Port prevents IP change, tapping or collision. Integrated Access M rated at ated Management Ma Special Report The network which you manage... SSH Internet VIPM access How many resources are accessed? Are there malicious traffic inside network? SG8800 SG8800 Who, when and where accessed? Are there any information leaking or hacking by internal user? Administrator How many traffic does it have? Are there any network troubles by IP resources? Telnet/SSH direct access Telnet/SSH IP resource authorized? Is batch upgrade of switch firmware available? is restricted SG2024G SG2024G SG2024G access is allowed through VIPM - Powerful security feature by restricting - Periodically report Network status analysis Malicious traffic and device monitoring direct access VIPM supports a special report for network status and VIPM can allow access to the device through VIPM and malicious traffic monitoring. Scheduling report and restrict direct access to device. VIPM supports powerful finding features are also supported. management by assigning banned words, and tracking command history. VIPM Redundancy feature Product Configuration: VRRP Dedicated Appliance SG2000 Series S i Only for VIPM SG2100 Series - Real-time monitoring of whole network status - Real-time monitoring of switch status - Reliable IP resource management - Max 50,000 users - Raid 1 support (option) SG3000 Series VIPM monitors network status in real-time such as VIPM monitors current status of switch including IP VIPM supports redundancy feature for entire hardware, - Dual power supply SG3100 Series network topology, IP address usage status, and usage, traffic usage and malicious traffic detect/block and power supply to ensure IP resource management. (option) malicious traffic detect/block status. status per each port.
  • 8. L2/L3 Security Switch Visual Node Manager Visual IP Manager www.handream.net Product Product Specification L2 Security Switch SG2000 Series Specification L2 Security Switch SG2100 Series Non PoE Switch Physical Features Non PoE Switch Physical Features SG2024 SG2024G SG2048G SG2024GF SG2008G SG2124 SG2148 SG2124G SG2124GX SG2124GXF SG2148GX Switching Capacity (Gbps) 28.8 48.0 192.0 48.0 20.0 Switching Capacity (Gbps) 28.8 57.6 96.0 144.0 144.0 288.0 Performance Throughput (Mpps) 13.1 71.4 142.9 71.4 29.8 Performance Throughput (Mpps) 19.0 26.2 71.4 131.0 131.0 202.4 MAC Capacity (k) 8 32 32 32 16 MAC Capacity (k) 16 16 32 32 32 32 Power Supply 1 1+1 1+1 1+1 1 Power Supply 1+1 1+1 1+1 1+1 1+1 1+1 Hardware DRAM (MB) 256 256 256 256 256 Hardware DRAM (MB) 512 512 512 512 512 512 Basic Flash-Max Flash (MB) 16 (32) 64 (256) 64 (256) 64 (256) 64 (256) Basic Flash-Max Flash (MB) 64 (256) 64 (256) 64 (256) 64 (256) 64 (256) 64 (256) 10/100 Base-T 24 N/A N/A N/A N/A 10/100 Base-T 24 48 N/A N/A N/A N/A Interface 10/100/1000 Base-T 2 24 48 12 (Combo) 10 10/100/1000 Base-T 2 2 24 24 12 (Combo) 48 Interface 1000 Base-X 2 (Combo) 4 (Combo) 4 (Combo) 24 2 (Combo) 1000 Base-X 2 2 4 (Combo) 4 (Combo) 24 2 (Combo) Power usage (W) 34.7 64.8 98.8 67.7 25.3 10G N/A N/A N/A 2 2 2 Width (mm) 440 440 440 440 265 Power usage (W) 30.3 41.2 59.6 70.2 66.5 88.7 Materials Height (mm) 44 44 44 44 38 Width (mm) 440 440 440 440 440 440 Depth (mm) 220 350 350 350 190 Materials Height (mm) 44 44 44 44 44 44 Weight (kg) (Single/Dual) 3.0 4.7 (5.2) 4.8 (5.5) 4.8 (5.4) 1.8 Depth (mm) 350 350 350 350 350 360 Weight (kg) (Single/Dual) 4.3 (4.6) 4.4 (4.7) 4.7 (5.2) 4.7 (5.3) 4.8 (5.4) 5.1 (5.6) PoE Switch Physical Features PoE Switch Physical Features SG2024P SG2024GPoE SG2048GPoE SG2008GPoE SG2124PoE SG2148PoE SG2124GPoE SG2124GXPoE SG2148GXPoE Switching Capacity (Gbps) 28.8 48.0 192.0 20.0 Switching Capacity (Gbps) 28.8 57.6 96.0 144.0 288.0 Performance Throughput (Mpps) 13.1 71.4 142.9 29.8 Performance Throughput (Mpps) 19.0 26.2 71.4 131.0 202.4 MAC Capacity (k) 8 32 32 16 MAC Capacity (k) 16 16 32 32 32 Power Supply 1+1 1+1 1+1 1 Power Supply 1+1 2 1+1 1+1 2 Hardware DRAM (MB) 256 256 256 256 Hardware DRAM (MB) 512 512 512 512 512 Basic Flash-Max Flash (MB) 16 (32) 64 (256) 64 (256) 64 (256) Basic Flash-Max Flash (MB) 64 (256) 64 (256) 64 (256) 64 (256) 64 (256) 10/100 Base-T 24 N/A N/A N/A 10/100 Base-T 24 48 N/A N/A N/A Interface 10/100/1000 Base-T 2 24 48 10 10/100/1000 Base-T 2 2 24 24 48 Interface 1000 Base-X 2 (Combo) 4 (Combo) 4 (Combo) 2 (Combo) 1000 Base-X 2 2 4 (Combo) 4 (Combo) 2 (Combo) Total PoE power budget (W) 740 740 740 124 10G N/A N/A N/A 2 2 PoE PoE/PoE+ PoE PoE PoE PoE Total PoE power budget (W) 740 740 740 740 740 PoE Power usage (W) 65.2 74.7 143.1 36.0 PoE/PoE+ PoE/PoE+ PoE/PoE+ PoE/PoE+ PoE/PoE+ PoE/PoE+ Width (mm) 440 440 440 265 Power usage (W) 65.2 102.9 74.0 81.5 138.6 Materials Height (mm) 44 44 44 44 Width (mm) 440 440 440 440 440 Depth (mm) 410 428 428 265 Materials Height (mm) 44 44 44 44 44 Weight (kg) (Single/Dual) 6.5 (7.9) 6.8 (8.6) 7.3 (9.2) 2.8 Depth (mm) 428 428 438 438 438 Weight (kg) (Single/Dual) 6.8 (8.6) 8.8 7.1 (8.9) 7.2 (8.9) 9.2
  • 9. L2/L3 Security Switch Visual Node Manager Visual IP Manager www.handream.net Product Product Specification L3 Security Switch SG3000 Series Specification L3 Security Switch SG3100 Series Non PoE Switch Physical Features Non PoE Switch Physical Features SG3024 SG3024G SG3048G SG3024GF SG3124 SG3148 SG3124G SG3124GX SG3124GXF SG3148GX Switching Capacity (Gbps) 28.8 48.0 192.0 48.0 Switching Capacity (Gbps) 28.8 57.6 96.0 144.0 144.0 288.0 Performance Throughput (Mpps) 13.1 71.4 142.9 71.4 Performance Throughput (Mpps) 19.0 26.2 71.4 131.0 131.0 202.4 MAC Capacity (k) 8 32 32 32 MAC Capacity (k) 16 16 32 32 32 32 Power Supply 1 1+1 1+1 1+1 Power Supply 1+1 1+1 1+1 1+1 1+1 1+1 Hardware DRAM (MB) 256 256 256 256 Hardware DRAM (MB) 512 512 512 512 512 512 Basic Flash-Max Flash (MB) 16 (32) 64 (256) 64 (256) 64 (256) Basic Flash-Max Flash (MB) 64 (256) 64 (256) 64 (256) 64 (256) 64 (256) 64 (256) 10/100 Base-T 24 N/A N/A N/A 10/100 Base-T 24 48 N/A N/A N/A N/A Interface 10/100/1000 Base-T 2 24 48 12 (Combo) Interface 10/100/1000 Base-T 2 2 24 24 12 (Combo) 48 1000 Base-X 2 (Combo) 4 (Combo) 4 (Combo) 24 1000 Base-X 2 2 4 (Combo) 4 (Combo) 24 2 (Combo) Power usage (W) 34.7 64.8 98.8 67.7 10G N/A N/A N/A 2 2 2 Width (mm) 440 440 440 440 Power usage (W) 30.3 41.2 59.6 70.2 66.5 88.7 Materials Height (mm) 44 44 44 44 Width (mm) 440 440 440 440 440 440 Depth (mm) 220 350 350 350 Materials Height (mm) 44 44 44 44 44 44 Weight (kg) (Single/Dual) 3.0 4.7 (5.2) 4.8 (5.5) 4.8 (5.4) Depth (mm) 350 350 350 350 350 360 Weight (kg) (Single/Dual) 4.3 (4.6) 4.4 (4.7) 4.7 (5.2) 4.7 (5.3) 4.8 (5.4) 5.1 (5.6) PoE Switch Physical Features PoE Switch Physical Features SG3024P SG3024GPoE SG3048GPoE SG3124PoE SG3148PoE SG3124GPoE SG3124GXPoE SG3148GXPoE Switching Capacity (Gbps) 28.8 48.0 192.0 Switching Capacity (Gbps) 28.8 57.6 96.0 144.0 288.0 Performance Throughput (Mpps) 13.1 71.4 142.9 Performance Throughput (Mpps) 19.0 26.2 71.4 131.0 202.4 MAC Capacity (k) 8 32 32 MAC Capacity (k) 16 16 32 32 32 Power Supply 1+1 1+1 1+1 Power Supply 1+1 2 1+1 1+1 2 Hardware DRAM (MB) 256 256 256 Hardware DRAM (MB) 512 512 512 512 512 Basic Flash-Max Flash (MB) 16 (32) 64 (256) 64 (256) Basic Flash-Max Flash (MB) 64 (256) 64 (256) 64 (256) 64 (256) 64 (256) 10/100 Base-T 24 N/A N/A 10/100 Base-T 24 48 N/A N/A N/A Interface 10/100/1000 Base-T 2 24 48 10/100/1000 Base-T 2 2 24 24 48 Interface 1000 Base-X 2 (Combo) 4 (Combo) 4 (Combo) 1000 Base-X 2 2 4 (Combo) 4 (Combo) 2 (Combo) Total PoE power budget (W) 740 740 740 10G N/A N/A N/A 2 2 PoE PoE/PoE+ PoE PoE PoE Total PoE power budget (W) 740 740 740 740 740 PoE Power usage (W) 65.2 74.7 143.1 PoE/PoE+ PoE/PoE+ PoE/PoE+ PoE/PoE+ PoE/PoE+ PoE/PoE+ Width (mm) 440 440 440 Power usage (W) 65.2 102.9 74.0 81.5 138.6 Materials Height (mm) 44 44 44 Width (mm) 440 440 440 440 440 Depth (mm) 410 428 428 Materials Height (mm) 44 44 44 44 44 Weight (kg) (Single/Dual) 6.5 (7.9) 6.8 (8.6) 7.3 (9.2) Depth (mm) 428 428 438 438 438 Weight (kg) (Single/Dual) 6.8 (8.6) 8.8 7.1 (8.9) 7.2 (8.9) 9.2
  • 10. L2/L3 Security Switch Visual Node Manager Visual IP Manager www.handream.net Product Specification SG Security Switch Features SG Security Switch Solution Guide Features Description Features Description L2 Security Switch 4K VLAN ID IPv4 Static Routing 802.1Q Port based VLAN Protocol/IP Subnet/MAC based VLAN RIPv1/v2, OSPF, BGP ECMP SG2000 Series SG2100 Series VLAN Shared VLAN VRRP Hybrid VLAN L3 Feature PIM-SM/SSM Fast Ethernet Giga Ethernet Fast Ethernet Giga Ethernet Voice VLAN IPv6 Static Routing 802.1ad VLAN stacking (QinQ) RIPng, OSPFv3, BGP4+ STP/RSTP/MSTP IPv4/IPv6 Dual Stack SG2024/SG2024P SG2008G/SG2008GPoE SG2124/SG2124PoE SG2124G/SG2124GPoE PVSTP 6 to 4 Tunneling and ISATAP ERP (Ethernet Ring Protection) Security Engine Resiliency Self Loop Protection DHCP Snooping SPR (Smart Port Redundancy) Port Security SG2024G/SG2024GPoE SG2148/SG2148PoE SG2124GX/SG2124GXPoE SSR (Smart Switch Redundancy) IP Source Guard UDLD IPv4/IPv6 ACL Improved hardware IEEE 802.3ad - L2/L3/L4 ACL performance Link SG2048G/SG2084GPoE 10G(SFP+) uplink support SG2148GX/SG2148GXPoE Trunk groups (12, 24) - Time Base ACL Aggregation 802.3at(PoE+) support Memebers per group - 8 ports - VLAN ACL USB interface support Port Mirroring - Ingress/Egress ACL 802.3az(EEE) support Monitoring 1:1, N:1, 1:N, N:N - CPU-ACL SG2024GF SG2124GXF TFM (Traffic Flow Monitoring) IPv4/IPv6 DHCP/NetBIOS Filtering IPv4 IGMP Snooping (v1/v2/v3) Storm Control L2 Multicast IPv6 MLD Snooping (v1/v2) Embedded RADIUS Feature 8 queue per port IP, MAC, IP+MAC Based Authentication Rate Limit (Ingress/Egress) AAA Authentication Diffserv - Local, RADIUS, TACACS+ Authentication QoS Auto QoS 802.1x L3 Security Switch (Support IPv4/IPv6 Routing) Security SP, WRR, DRR - Multiuser, MAC Bypass, Web-Auth, IPv6 QoS Guest-VLAN SG3000 Series SG3100 Series Max 740W PoE Power Budget IPv4/IPv6 Blocking Selective Malicious PoE 802.3af / 802.3at Traffic Fast Ethernet Giga Ethernet Fast Ethernet Giga Ethernet Power off per PoE Port - Attack block: LLDP, LLDP-MED DoS/DDoS Attack, DHCP Attack, RMON (Group 1,2,3,9) ICMP Attack, ARP Attack Local/Remote Syslog - Flooding block: SG3024/SG3024P SG3024G/SG3024GPoE SG3124/SG3124PoE SG3124G/SG3124GPoE USB Interface Support TCP Syn Flooding, UDP Flooding, Multi OS MAC Flooding VNM(Visual Node Manager) - Spoofing block: IPv4/IPv6 Telnet / SSH ARP Spoofing, IP Spoofing SG3048G/SG3084GPoE SG3148/SG3148PoE SG3124GX/SG3124GXPoE Management Software Download: - Scanning block Improved hardware FTP, SFTP, TFTP, USB Host Scanning, Port Scanning performance DHCP Server/Relay - IPv6 DAD Attack block SG3024GF 10G(SFP+) uplink support SG3148GX/SG3148GXPoE IPv4/IPv6 SNMPv1/v2/v3 Automatically detect/block/QoS/Rate 802.3at(PoE+) support IPv4/IPv6 sFlow limit and release USB interface support IPv4/IPv6 NTP/SNTP User notification for malicious traffic 802.3az(EEE) support SG3124GXF Power Saving 802.3az EEE Some features can be limited per switch series