Ethernet Access Switch MES2411X

Key features

• Bandwidth up to 236 Gbps
• Non-blocking architecture
• Advanced L2 features
• L3 switch
• Support for Multicast (IGMP Snooping, MVR)
• Advanced security functions (L2-L4 ACL, IP Source Guard, Dynamic ARP Inspection, etc.)
• Front-to-back cooling

The Ethernet access switches provides end users connection to networks of large enterprises, small and mid-sized businesses and service providers via 1G/10G interfaces.

The switches support Virtual Local Area Networks (VLAN), multicast groups and advanced security functions.

Interfaces

• 10/100/1000BASE-T (RJ-45) - 8
• 1000BASE-X (SFP)/10GBASE-R (SFP+) - 11
• Console port RS-232 (RJ-45) - 1

Performance

• Bandwidth - 236 Gbps
• Throughput for 64-byte packets1 - 175.5 MPPS
• Buffer memory - 2 MB
• RAM (DDR3) - 512 MB
• ROM (SPI Flash) - 64 MB
• MAC table - 32768
• ARP entries - 1000
• VLAN table - 4094
• L2 Multicast groups (IGMP Snooping) - 4094
• L3 Multicast groups (IGMP Proxy) - 2048
  
• SQinQ rules - 2048 (ingress2)/1024 (egress)
• MAC ACL rules - 766
• IPv4/IPv6 ACL rules - 640/320
• L3 IPv4 Unicast routes - 2048
• L3 IРv6 Unicast routes - 512
• VRRP routers - 32
• L3 interfaces - 20 VLANs, up to 5 of IPv4 addresses for each VLAN, up to 512 of IPv6 GUA for all VLANs in summary
• Link Aggregation Groups (LAG) - 24 groups, up to 8 ports in one LAG
• Quality of Service (QoS) - 8 egress queues per port 
• Jumbo frames - maximum packet size is 12288 bytes

Interface features

• Head-of-line blocking (HOL) protection
• Auto MDI/MDIX
• Jumbo frames
• Flow Control IEEE 802.3X
• Port mirroring SPAN/RSPAN

МAC table

• Independent learning mode per VLAN
• MAC Multicast Support
• Configurable aging time of MAC addresses
• Static MAC Entries
• MAC change events monitoring per ports
• MAC Flapping

VLAN features

• Voice VLAN
• IEEE 802.1Q
• Q-in-Q Selective
• Q-in-Q
• GVRP
• MAC-based VLAN
• Protocol-based VLAN

L2 Multicast features

• Multicast profiles
• Static Multicast groups
• IGMP Snooping v1,2,3
• IGMP Snooping fast-leave
• IGMP Proxy-report
• IGMP authorization via RADIUS
• MLD Snooping v1, 22
• MLD Snooping fast-leave2
  
• IGMP Querier
• MVR
  

L2 features

• STP (Spanning Tree Protocol, IEEE 802.1d)
• RSTP (Rapid Spanning Tree Protocol, IEEE 802.1w)
• MSTP (Multiple Spanning Tree Protocol, IEEE 802.1s)
• Rapid-PVST+
• STP Root Guard
• STP Loop Guard
• STP BPDU Guard
• BPDU Filtering
• Spanning Tree Fast Link option
• Loopback Detection (LBD)
• Port isolation
• Storm Control for different types of traffic (broadcast, multicast, unknown unicast)
• Layer 2 Protocol Tunneling (L2PT)
• ERPS (G.8032v2)

L3 Multicast features

• IGMP proxy (RFC 4605) 
• IGMP proxy fast-leave

L3 features

• Static IPv4, IРv6 routes
• RIPv1/2, OSPFv2/3
• VRRP

Link Aggregation functions

• Static LAG
• Dynamic LAG (LACP)
• LAG Balancing Algorithm

Service functions

• Virtual Cable Test (VCT)
• Optical transceiver diagnostics

IPv6 support

• IPv6 Host
• Dual-stack IPv4, IPv6

Security functions

• DHCP Snooping
• DHCP Option 82
• MAC-based authentication, Port Security, static MAC entries
• IEEE 802.1x based interface authentication
• Guest VLAN
• DoS attacks prevention
• Traffic segmentation
• DHCP clients filtering
• BPDU attacks prevention
• PPPoE Intermediate agent
• IP Source Guard
• Dynamic ARP Inspection
• DHCPv6 Snooping
• IPv6 Source Guard
• IPv6 ND Inspection support
• IPv6 RA Guard support

 Access control lists (ACL)

• L2-L3-L4 ACL (Access Control List)
• IPv6 ACL
• ACL based on:
  • Switch port
  • IEEE 802.1p priority
  • VLAN ID
  • EtherType
  • DSCP
  • IP protocol type
  • TCP/UDP port number
  • User Defined Bytes

Quality of service (QoS) and rate limiting

• Port rate limiting (shaping) 
• Rate limiting (policing) in accordance with sr-TCM and tr-TCM 
• IEEE 802.1p Class of Service (CoS) 
• Queue scheduling algorithms: Strict Priority/Weighted Round Robin (WRR) 
• IEEE 802.1p priority for management VLAN 
• ACL-based traffic classification 
• ACL-based CoS/DSCP mark assignment 
• DSCP to CoS remarking 
• CoS to DSCP remarking 
• ACL-based VLAN assignment

OAM

• IEEE 802.3ah, Ethernet OAM
• IEEE 802.3ah Undirectional Link Detection (UDLD)

Main management functions

• Download and upload of configuration file via TFTP/SFTP 
• Automated backup of configuration file via TFTP/SFTP 
• Simple Network Management Protocol (SNMP) 
• Command Line Interface (CLI) 
• Web interface 
• Syslog 
• Simple Network Time Protocol (SNTP) 
• Traceroute 
• LLDP (IEEE 802.1ab) + LLDP MED 
• Two 802.1Q headers traffic control 
• Commands Authorization using TACACS+ server 
• IPv4/IPv6 ACL