Ethernet Access Switch MES2424B

Key features

• Non-blocking architecture
• Advanced L2 features
• L3 switches
• Multicast (IGMP Snooping, MVR)
• Advanced security features (L2-L4 ACL, IP Source Guard,Dynamic ARP Inspection, etc.)
• Uninterruptible power supply from rechargeable battery

The Ethernet access switches provide end users connection to networks of large enterprises, small and mid-sized businesses and service providers via 1G/10G interfaces.

The switches support Virtual Local Area Networks (VLAN), multicast groups and advanced security functions.

Uninterruptible power
MES2424B switches can be equipped with a rechargeable battery to ensure power supply in case of the 220 V primary network connection loss. The switch is also equipped with a power supply unit which allows the battery to be charged when 220 V power is available. Power supply redundancy system makes it possible to monitor the state of the primary network and notify of a power type switching.

Interfaces

• 10/100/1000BASE-T (RJ-45) - 24
• 1000BASE-X(SFP)/ 10GBASE-R(SFP+) - 4
• Console port RS-232 (RJ-45) - 1

Performance

• Bandwidth - 128 Gbps
• Throughput on 64-byte packets1 - 95.2 MPPS
• Buffer memory - 1.5 MB
• RAM (DDR3) - 512 MB
• ROM (SPI Flash) - 64 MB
• MAC table - 16384
• ARP table - 1000
• VLAN table - 4094
• L2 Multicast groups (IGMP Snooping) - 1023
• L3 Multicast groups(IGMP proxy) - 512
• SQinQ rules - 1024 (ingress1), 512 (egress)
• MAC ACL rules - 509
  
• IPv4/IPv6 ACL rules - 384/192
  
• L3 IPv4 Unicast routes - 496
• L3 IPv6 Unicast routes - 124
• VRRP routers - 32
• L3 interfaces - 20 VLANs, up to 5 of IPv4 addresses for each VLAN, up to 124 of IPv6 GUA for all VLANs in summary
• Link Aggregation Groups (LAG) - 24 groups, up to 8 ports in one LAG
• QoS - 8 output queues with different priorities for each port
  
• Jumbo frame size - 12288 bytes

Interface features

• Head-of-line blocking (HOL) protection
• Auto MDI/MDIX
• Jumbo frames
• Flow Control (IEEE 802.3X)
• Port mirroring (SPAN, RSPAN)

МAC table

• Independent learning mode per VLAN
• MAC Multicast Support
• Configurable aging time of MAC addresses
• Static MAC Entries
• MAC change events monitoring per ports
• MAC Flapping logging
  

VLAN features

• Voice VLAN
• IEEE 802.1Q
• Q-in-Q
• Selective Q-in-Q
  
• GVRP
• MAC-based VLAN
• Protocol-based VLAN

L2 Multicast features

• Multicast profiles
• Static Multicast groups
• IGMP Snooping v1,2,3
• IGMP Snooping fast leave
• IGMP Proxy-report
  
• IGMP authorization via RADIUS 
• MLD Snooping v1,2
• MLD Snooping fast-leave
• IGMP Querier
• MVR

L2 features

• STP (Spanning Tree Protocol, IEEE 802.1d)
• RSTP (Rapid Spanning Tree Protocol, IEEE 802.1d)
• MSTP (Multiple Spanning Tree Protocol, IEEE 802.1s)
• Rapid-PVST+
• STP Root Guard
• STP Loop Guard
• STP BPDU Guard
• BPDU Filtering
• Spanning Tree Fast Link option
• Loopback Detection (LBD)
• Port isolation
• Storm Control for different types of traffic (broadcast, multicast, unknown unicast)
• Layer 2 Protocol Tunneling (L2PT)
• ERPS (G.8032v2)
  

L3 Multicast features

• IGMP proxy (RFC 4605)
• IGMP proxy fast-leave

L3 features

• Static IPv4, IPv6 routes
• Dynamic routing protocols RIPv1/2, OSPFv2/3
• VRRP

Link Aggregation functions

• Link Aggregation Groups (LAG)
• LACP
• LAG Balancing Algorithm

Service functions

• Virtual cable Testing (VCT)
• Optical transceiver diagnostics

IPv6 functions

• IPv6 Host
• Dual-stack IPv4, IPv6

Security functions

• DHCP Snooping
• DHCP Option 82
• MAC-based authentication, Port Security, static MAC entries
• Port-based authentication IEEE 802.1x
• Guest VLAN
• DoS attacks prevention
• Traffic segmentation
• DHCP clients filtering
• BPDU attacks prevention 
• PPPoE Intermediate agent
• IP Source Guard
• Dynamic ARP Inspection
• DHCPv6 Snooping
• IPv6 Source Guard
• IPv6 ND Inspection
• IPv6 RA Guard

ACL (Access Control List)

• L2-L3-L4 ACL (Access Control List)
• IPv6 ACL
• ACL based on:
  • Switch port 
  • IEEE 802.1p priority
  • VLAN ID
  • EtherType
  • DSCP
  • IP protocol 
  • TCP/UDP port number
  • User Defined Bytes

Quality of service (QoS) and rate limiting

• Port rate limiting (shaping)
  
• Rate limiting (policing) according to sr-TCM and tr-TCM
• IEEE 802.1p Class of Service (CoS)
• Strict Priority/Weighted Round Robin (WRR)  scheduling algorithms
• Setting the IEEE 802.1p priority for management VLAN
• ACL-based traffic classification
• ACL-based CoS/DSCP marking
• DSCP to CoS remarking 
• CoS to DSCP remarking 
• ACL-based VLAN assignment

OAM

• IEEE 802.3ah, Ethernet OAM
• IEEE 802.3ah Unidirectional Link Detection (UDLD)

Main management functions

• Configuration file download and upload file via TFTP/SFTP
  
• Automated backup of configuration file via TFTP/SFTP
• Simple Network Management Protocol (SNMP)
• Command Line Interface (CLI)
• Web interface
• Syslog
• SNTP (Simple Network Time Protocol)
• Traceroute
• LLDP (IEEE 802.1ab) + LLDP MED
• Two IEEE 802.1Q headers traffic control
• Commands Authorization using TACACS+ server
• IPv4/IPv6 ACL support for device control 
• Switch access management — privilege levels for users
• Management interface blocking
• Local authentication
• IP addresses filtering for SNMP
• RADIUS and TACACS+ (Terminal Access Controller Access Control System) clients 
• Telnet client, SSH client