Industrial switch MES3708P

Key features

• Advanced L2 features
• Multicast support (IGMP Snooping, MVR)
• Advanced security functions (L2-L4 ACL, IP Source Guard, Dynamic ARP Inspection, etc.)

MES3708P industrial switch is intended to be placed inside lighting (and other) poles with inner diameter of at least 185 mm and designed to organize secure fault-tolerant networks on sites where resistance to temperature, mechanical and other impacts should be provided.

The switch has 10/100/1000BASE-T ports with PoE/PoE+ support and 1000BASE-X/100BASE-FX ports for optical cable connection

Interfaces

• 10/100/1000BASE-T PoE/PoE+ (RJ-45) - 8
• 100BASE-FX/1000BASE-X (SFP) - 2
• Console port - RS-232 (RJ-45)

Performance

• Bandwidth - 20 Gbps
• Throughput for 64 bytes1 - 14.88 MPPS
• Buffer memory - 512 KB
• RAM (DDR3) - 256 MB
• ROM (SPI Flash) - 32 MB
• MAC table - 8192
• ARP table - 1000
  
• VLAN table - 4094
  
• L2 Multicast groups (IGMP Snooping) - 509
• SQinQ rules number - 128 (ingress)/256 (egress)
  
• MAC ACL rules - 381
  
• IРv4, IPv6 ACL rules - 219/128
  
• L3 interfaces - 8 VLANs, up to 5 of IPv4 for each VLAN, up to 300 of IPv6 GUA for all VLANs in summary
  
• Link Aggregation Groups (LAG) - 8 groups, up to 8 ports in one LAG
• Quality of Service (QoS) - 8 output queues per port
• Jumbo frames - maximum packet size is 10000 bytes
  

Interface features

• Head-of-line blocking (HOL) protection
• Auto MDI/MDIX
• Jumbo frames
• Flow Control IEEE 802.3X
• Port mirroring (SPAN, RSPAN)

МAC table

• Independent learning mode per VLAN
• MAC Multicast Support
• Configurable aging time of MAC addresses
• Static MAC Entries
• MAC change events 

VLAN features

• IEEE 802.1Q
• Q-in-Q
• Selective Q-in-Q
• GVRP
  
• MAC-based VLAN
• Protocol-based VLAN

L2 Multicast features

• Multicast profiles
• Static Multicast groups
• IGMP Snooping v1,2,3
• Port-based IGMP Snooping fast-leave
• IGMP authorization via RADIUS
• MLD Snooping v1,2
• MLD Snooping fast-leave
• IGMP Querier
• MVR

L2 features

• STP (Spanning Tree Protocol, IEEE 802.1d)
• RSTP (Rapid Spanning Tree Protocol, IEEE 802.1d)
• MSTP (Multiple Spanning Tree Protocol, IEEE 802.1s)
• STP Root Guard
• STP Loop Guard
• STP BPDU Guard
• BPDU Filtering
• Spanning Tree Fast Link option
• Layer 2 Protocol Tunneling
• Loopback Detection (LBD)
• Port isolation
• Storm Control for different types of traffic (broadcast, multicast, unknown unicast)

Link Aggregation functions

• Static LAG
• Dynamic LAG (LACP)
• LAG Balancing Algorithm

Service functions

• Virtual cable Test (VCT)
• Optical transceiver diagnostics

IPv6

• IPv6 Host
• Dual-stack IPv4, IPv6
  

Security functions

• DHCP Snooping
• DHCP Option 82
• IP Source Guard
• Dynamic ARP Inspection (Protection)
• MAC-based authentication, Port Security, static MAC entries
• IEEE 802.1x based interface authentication
• DoS attacks prevention
• Traffic segmentation
• DHCP clients filtering
• BPDU attacks prevention
• PPPoE Intermediate agent
• DHCPv6 Snooping
  
• IPv6 Source Guard
• IPv6 ND Inspection support
• IPv6 RA Guard support

Access control lists (ACL)

• L2-L3-L4 ACL (Access Control List)
• IPv6 ACL
• ACL based on:
  • Switch port
  • IEEE 802.1p priority
  • VLAN ID 
  • EtherType
  • DSCP
  • IP protocol type
  • TCP/UDP port number
  • User Defined Bytes

Quality of Service (QoS) and rate limiting ОАМ

• IEEE 802.3ah, Ethernet OAM
• IEEE 802.3ah Unidirectional Link Detection (UDLD)
• Dying Gasp

Main management functions

• Download and upload of configuration file via TFTP/SFTP
• Automatic backup of configuration file via TFTP/SFTP
• Simple Network Management Protocol (SNMP)
• Command LIne Interface (CLI)
• Web interface
• Syslog
• Simple Network Time Protocol (SNTP)
• Traceroute
• LLDP (IEEE 802.1ab) + LLDP MED
• Two 802.1Q headers traffic control
• Commands Authorization using TACACS+ server
  
• IPv4/IPv6 ACL support for device control
• Switch access management – privilege levels for users
• Management interface blocking
• Local authentication
• IP addresses filtering for SNMP
• RADIUS and TACACS+ clients (Terminal Access Controller Access Control System)
• Telnet client, SSH client
• Telnet server, SSH server
• Macro commands
• Input commands logging via TACACS+
  
• DHCP auto configuration
• DHCP Relay (support for IРv4)
• DHCP Relay Option 82
• PPPoE Circuit-ID tag adding
• Flash File System
• Debug commands
• CPU traffic limiting
  
• Password encryption
• Password recovery
• Ping (support for IPv4/IPv6)
• IPv4/IPv6 static routes support
• Support for several versions of configuration file

Monitoring functions