Industrial switch MES3400I-24

• Bandwidth up to 128 Gbps
• Non-blocking architecture
• L2 Advanced features
• 4 ports of 10G in base configuration
• L3 switches
• Support for Multicast (IGMP Snooping, MVR)
• Advanced security functions (L2-L4 ACL, IP Source Guard, Dynamic ARP Inspection, etc.)
• Hot-swappable redundant power supplies
• Passive cooling

MES3400I-24 industrial switch is designed for organization of the secure data transmission networks on sites where it is necessary to meet the requirements for ensuring resistance to temperature influences. The switch has 10/100/1000BASE-T Gigabit ports with data rate of 10G. The distinctive features of the switch are passive cooling and hot-swappable redundant power supplies.

Interfaces

• 10/100/1000BASE-T (RJ-45) - 24
• 1000BASE-X (SFP)/10GBASE-R (SFP+) - 4
• Console port RS-232 (RJ-45) - 1
• USB 2.0 - 1

Performance

• Bandwidth - 128 Gbps
• Throughput for 64 bytes1 - 95.2 MPPS
• Buffer memory - 2 MB
• RAM (DDR3) - 1 GB
• ROM (SPI Flash) - 64 MB
• MAC table - 32768
• ARP table - 1000
• VLAN table - 4094
• L2 Multicast (IGMP Snooping) - 4094
• L3 Multicast-групп (IGMP proxy) - 2048
• SQinQ rules - 2048 (ingress2), 1024 (egress)
• MAC ACL rules - 766
• IPv4/IPv6 ACL rules - 640/320
• L3 IPv4 Unicast routes - 2048
• L3 IPv6 Unicast routes - 512
• VRRP routers - 32
• L3 interfaces - 20 VLANs, up to 5 IPv4 addresses in each VLAN, up to 512 IPv6 GUA in total for all VLANs
• Link Aggregation Groups (LAG) - 24 groups, up to 8 ports per LAG
• Quality of Service (QoS) - 8 egress queues per port
• Jumbo frames - 12288 bytes

Interface features

• Head-of-line blocking (HOL) protection
• Auto MDI/MDIX
• Jumbo frames
• Flow Control (IEEE 802.3X)
• Port Mirroring (SPAN, RSPAN)

MAC address functions

• Independent learning mode per VLAN
• MAC Multicast Support
• Configurable aging time of MAC addresses
• MAC change events monitoring per ports
• Static MAC Entries
• MAC Flapping

VLAN functions

• Voice VLAN
• IEEE 802.1Q
• Q-in-Q
• Selective Q-in-Q
• GVRP
• MAC-based VLAN
• Protocol-based VLAN

L2 Multicast functions

• Multicast groups
• Static Multicast groups
• IGMP Snooping v1,2,3
• IGMP Snooping fast-leave
• IGMP Proxy-report
• IGMP authorization through RADIUS
• IGMP Querier
• MVR

L2 functions

• STP (Spanning Tree Protocol, IEEE 802.1d)
• RSTP (Rapid Spanning Tree Protocol, IEEE 802.1w)
• MSTP (Multiple Spanning Tree Protocol, IEEE 802.1s)
• Rapid-PVST+
• STP Root Guard
• STP Loop Guard
• STP BPDU Guard
• BPDU Filtering
• Spanning Tree Fast Link option
• Loopback Detection (LBD)
• Port isolation
• Storm Control for different traffic (broadcast, multicast, unknown unicast)
• Layer 2 Protocol Tunneling (L2PT)
• ERPS (G.8032v2)

L3 Multicast functions

• IGMP proxy (RFC 4605)
• IGMP proxy fast-leave

L3 functions

• Static IPv4, IPv6-routing
• Dynamic routing protocols RIPv1/2, OSPFv2/3
• VRRP

Link Aggregation functions

• LAG
• LACP
• LAG Balancing Algorithm

Service functions

• Virtual Cable testing (VCT)
• Optical transceiver diagnostics

IPv6 support

• IPv6 Host
• Dual-stack IPv4, IРv6

Security functions

• DHCP Snooping
• DHCP Option 82
• MAC-based authentication, MAC address limitation, static MAC entries
• Port-based authentication IEEE 802.1x
• Guest VLAN
• DoS attack prevention
• Traffic segmentation
• DHCP clients filtering
• BPDU attack prevention
• PPPoE Intermediate agent
• IP Source Guard
• Dynamic ARP Inspection
• DHCPv6 Snooping
• IPv6 Source Guard
• IPv6 ND Inspection
• IPv6 RA Guard

Access Control Lists (ACL)

• L2-L3-L4 ACL (Access Control List)
• IPv6 ACL
• ACL based on:
  • Switch port
  • IEEE 802.1p
  • VLAN ID
  • EtherType
  • DSCP
  • IP  protocol type
  • TCP/UDP port number
  • User Defined Bytes

Quality of Service (QoS) and rate limiting

• Shaping
• Rate limiting according to sr-TCM and tr-TCM policing algorithms
• IEEE 802.1p Class of Service (CoS)
• Strict Priority/Weighted Round Robin (WRR)
• IEEE 802.1p priority tagging for VLAN management
• ACL-based traffic classification
• ACL-based CoS/DSCP assignment
• DSCP to CoS, CoS to DSCP remarking
• ACL-based VLAN assignment

OAM

• IEEE 802.3ah, Ethernet OAM
• IEEE 802.3ah Unidirectional Link Detection (UDLD)

Management functions

• Configuration file download and upload via TFTP/SFTP
• Configuration file backup via TFTP/SFTP
• SNMP
• Command Line Interface (CLI)
• Web interface
• Syslog
• SNTP (Simple Network Time Protocol)
• Traceroute
• LLDP (IEEE 802.1ab) + LLDP MED
• Two IEEE 802.1Q headers traffic control
• Commands authorization using TACACS+ server
• IPv4/IPv6 ACL support for device control
• Access control — privilege levels
• Management interface blocking
• Local authentication
• IP addresses filtering for SNMP
• RADIUS, TACACS+ (Terminal Access Controller Access Control System) client
• Telnet, SSH client
• Telnet, SSH server
• Macrocommands
• Input commands logging via TACACS+ protocol
• DHCP auto configuration
• DHCP Relay (support for IРv4)