Gigabit 24-Port SFP Fiber Optic Switches With ACL Access Control

Product Overview

24+2 Management gigabit fibre network switches is a second, four gigabit managed switch, provides 24 SFP optical ports and 2 RJ45 ports. Support the second floor of wire-speed switching hardware. You can form through the Ethernet port on the switch to WEB to set various functions. Built-in ARP and DOS defense system, effective defense ARP, DOS and a variety of variants of viruses, in addition this switchalso equipped with many powerful features: a comprehensive QoS, Spanning Tree, a variety of storm suppression, Bandwidth Control, IGMP Snooping , ACL Access Control, DHCP Snooping and so on. Very suitable for small and medium enterprises, campus networks and metropolitan area network aggregation applications.

• Product Key Features

• ARP Defense:MAC address and MAC address port security binding function and filtering function can be an effective defense ARP attack; DHCP Snooping can obtain the MAC address to the dynamic ARP protection for users.
• QoS:Support multiple QOS policy, based on 802.1p priority settings for each port provides 8 priority queues; IP-DSCP to IP header according to different service level classification to achieve a comprehensive QOS; AUTO VOIP function Set the port to the highest priority voice signals, greatly improve the network IP telephony voice quality.
• Spanning Tree:Support IEEE 802.1d, IEEE 802.1w (Rapid Spanning Tree Protocol) and IEEE 802.1s (Multiple Spanning Tree Protocol) standard.
• AUTO DOS:Can the following seven different forms of DOS attacks for defense
• Land attack:an attacker to send with the same IP source address, IP destination address of the forged TCP SYN packet of information flow, victims of the system trying to send a response to his information, the result is a system disturbance and will be paralyzed or restart
• Blat attacks: the attacker sends the same source port number and destination port number of forged packets, the victim system attempted to send a response to his information, the result is a system crash or reboot.
• Smurf attack:an attacker use the target's camouflage the source address of a broadcast address to the implementation of ping operation, then all activities will be to target the host response, leading to network congestion or disruption.
• Ping flood:using Ping broadcast storms, flooding the target system, so the system can not respond to legitimate traffic.
• SYN / SYN-ACK flood:using SYN or SYN / ACK packets flood the target system.
• Protection Invalid TCP attacks: to prevent the TCP packet with invalid data caused by flood.
• Ping of Death attack:send out a very large ICMP request packets (a "Ping"), its intention is to cause the target computer input buffer overflow, so that the paralysis.
• Storm suppression:Can broadcast, multicast, DLF to set the flow.
• ACL Access Control:Used to control the port and out of the packet to ensure that certain sites within the network will not be without access to authorized users, while indirectly played a defense ARP attack capabilities.
• IGMP Snooping: Support IGMP:Version 2 (RFC 2236): IGMP Snooping is used to overflow when the multicast packet network, the establishment of a multicast group to forward multicast packets to avoid the waste of bandwidth.
• Support 802.1x authentication, provide users with access to certification.
• Wire-speed filtering - Storage - forward mode, providing true non-blocking switching fabric.
• Support port mirroring, port trunking, port speed limit function.
• Support Port-based VLAN and based IEEE802.1Q the VLAN.

•Product technical specifications