Ethernet Access Switch MES2408B

Key features

• Non-blocking architecture
• Advanced L2 features 
• Support for Multicast (IGMP Snooping, MVR) 
• Advanced security functions (L2-L4 ACL, IP SourceGuard, Dynamic ARP Inspection, etc.)
• Uninterruptible power supply from rechargeablebattery

MES2408B switches provide connection of end users to networks of large enterprises, small and mid-sized businesses and service providers via Gigabit Ethernet interfaces.
The switches support Virtual Local Area Networks (VLAN), multicast groups and advanced security functions.  

Uninterruptible power
MES2408B switch can be equipped with a rechargeable battery to ensure power supply in case of the 220 V primary network connection loss. The switch is also equipped with a power supply unit which allows the battery to be charged when 220 V power is available. Power supply redundancy system makes it possible to monitor the state of the primary network and notify of a power type switching.

Interfaces

• 8 ports 10/100/1000BASE-T 
• 2 ports 100BASE-FX/1000BASE-X
• Console port RS-232/RJ-45

Performance

• Bandwidth 20 Gbps
• Throughput for 64-byte packets 14.88 MPPS
• Buffer memory 512 KB
• RAM (DDR3) 256 MB
• ROM (SPI Flash) 32 MB
• MAC table 8192
• ARP table 1000
  
• VLAN table 4094
  
• L2 Multicast groups (IGMP Snooping) 509
• SQinQ rules number 128 (ingress)/256 (egress)
  
• MAC ACL rules 381
  
• IРv4/IPv6 ACL rules 219/128
  
• L3 interfaces - 8 VLAN, up to 5 of IРv4 addresses for each VLANs, up to 300 of IРv6 GUA for all VLANs in summary
  
• Link Aggregation Groups (LAG) - 8 groups, up to 8 ports in one LAG
• Quality of Service (QoS) - 8 egress queues per port
• Jumbo frame size -  the maximum packet size is 10 000 bytes

Interface features

• Head-of-line blocking (HOL) protection
• Auto MDI/MDIX
• Jumbo frames
• Flow Control IEEE 802.3X
• Port mirroring (SPAN, RSPAN)

MAC table

• Independent learning mode per VLAN
• MAC Multicast Support
• Configurable aging time of MAC addresses
• Static MAC Entries
• MAC change events monitoring per ports
  
• MAC Flapping logging

VLAN features

• Voice VLAN
• IEEE 802.1Q
• Q-in-Q
• Selective Q-in-Q
• GVRP
  
• MAC-based VLAN
• Protocol-based VLAN

L2 Multicast features

• Multicast profiles
• Static Multicast groups
• IGMP Snooping v1,2,3
• IGMP Snooping fast-leave
• IGMP Proxy-report
• IGMP authorization via RADIUS
• MLD Snooping v1,2
• MLD Snooping fast-leave
• IGMP Querier
  
• MVR

L2 features

• STP (Spanning Tree Protocol, IEEE 802.1d)
• RSTP (Rapid Spanning Tree Protocol, IEEE 802.1d)
• MSTP (Multiple Spanning Tree Protocol, IEEE 802.1s)
• STP Root Guard
• STP Loop Guard
• STP BPDU Guard
• BPDU Filtering
• Spanning Tree Fast Link option
• Layer 2 Protocol Tunneling (L2PT)
  
• Loopback Detection (LBD)
• Port isolation
• Storm Control for different types of traffic (broadcast, multicast, unknown unicast)

Link Aggregation functions

• Link Aggregation Groups (LAG)
• LACP
• LAG Balancing Algorithm

Service functions 

• Virtual cable Test (VCT)
• Optical transceiver diagnostics

IPv6

• IPv6 Host
• Dual-stack

Security functions

• DHCP Snooping
• DHCP Option 82
• IP Source Guard
• Dynamic ARP Inspection (Protection)
• MAC-based authentication, Port Security, static MAC entries
• Port-based authentication IEEE 802.1x
• Guest VLAN
• DoS attacks prevention
• Traffic segmentation
• DHCP clients filtering
• BPDU attacks prevention
• PPPoE Intermediate agent
• DHCPv6 Snooping
  
• IPv6 Source Guard
• IPv6 ND Inspection
• IPv6 RA Guard

Quality of service (QoS) and rate limiting

• Port rate limiting (shaping, policing)
• IEEE 802.1p Class of Service (CoS)
• Queue scheduling algorithms: Strict Priority/Weighted Round Robin (WRR)
• IEEE 802.1p priority tagging for management VLAN
• ACL-based traffic classification
• ACL-based CoS/DSCP mark assignment
• DSCP to CoS remarking
• CoS to DSCP remarking
• ACL-based VLAN assignment

Access control lists (ACL) 

• L2-L3-L4 ACL (Access Control List)
• IPv6 ACL
• ACL based on:
  • Switch port
  • IEEE 802.1p priority
  • VLAN ID
  • EtherType
  • DSCP 
  • IP protocol type 
  • TCP/UDP port number
  • User Defined Bytes 

ОАМ

• IEEE 802.3ah, Ethernet OAM
• Dying Gasp
• IEEE 802.3ah Unidirectional Link Detection (UDLD)

Main management functions

• Configuration file download and upload via TFTP/SFTP
• Automated backup of configuration file via TFTP/SFTP
• Simple Network Management Protocol (SNMP)
• Command Line Interface (CLI)
• Web interface
• Syslog
• Simple Network Time Protocol (SNTP)
• Traceroute
• LLDP (IEEE 802.1ab) + LLDP MED
• Two 802.1Q headers traffic control
• Commands authorization using TACACS+ server
• IPv4/IPv6 ACL support for device control
• Switch access management — privilege levels for users
• Management interface blocking
• Local authentication
• IP addresses filtering for SNMP
• RADIUS and TACACS+ clients (Terminal Access Controller Access Control System)
• Telnet client, SSH client
• Telnet server, SSH server
• Macro commands
• Input commands logging via TACACS+
• DHCP  autoprovision
• DHCP Relay (support for IPv4)
• DHCP Relay Option 82
• PPPoE Circuit-ID tag adding
• Flash File System
• Debug commands
• Rate limit of traffic to CPU
• Password encryption
• Ping (support for IPv4/IPv6)
• IPv4/IPv6 static routes support
• Support for several versions of configuration file

Monitoring functions