User manual ZYXEL ES-1552 BROCHURE

[. . . ] ExtraSmartTM Switch Empower "DoS Attack Preventive" & "VoIP Friendly"Networks Benefits Robust Design Power SMB/SB Network ZyXEL ES-1528/ES-1552 come with 24/48 Fast Ethernet copper ports plus four Gigabit uplinks (two 1000Base-T ports and two SFP slots) that fire up the non-blocking connection power to SMB/SB networks, and their multi-function design fit into copper or fiber networks easily. By utilizing 4G uplinks and port Auto DoS Attack Prevention Auto VoIP Flexible 4 GbE Uplink Interfaces IEEE 802. 3ad Static Port Aggregation Streamlined Web-based Interface IEEE 802. 1Q VLAN Port security IEEE 802. 1p with 4 Priority Queues WRR and SPQ Queuing Algorithms aggregation, bandwidth on critical paths can be expanded flexibly by merging multiple traffic pipelines into a logical one to dramatically improve network stability. ExtraSmartTM -- Evolution New Smart Power While many legacy Web Smart switches improve manageability, complexity is still around. [. . . ] The ES-1528/ES-1552 support 802. 1Q VLAN for traffic isolation, as well as Static MAC forwarding and dynamic ARP to establish a strictly protected network. 28-port/52-port Webmanaged Ethernet Switch Extra QoS -- Auto VoIP Optimization VoIP is a key to differentiate business competitiveness. It usually requires IT expertise to optimize a network for VoIP applications. With the emergence of the "Auto VoIP" however, the ES-1528/ES-1552 can identify , VoIP packet patterns and grant the highest priority to establish a VoIP-friendly communication automatically. ES-1528 ES-1552 Auto VoIP offers IP telephony without configuration headaches. Features like four priority queues and WFQ scheduling algorithm allow users to optimize network bandwidth usage and quality of services. In term of bandwidth management, users can choose from several options and pick the most appropriate with just a mouse click. Specifications Standard Compliance · IEEE 802. 3 10Base-T Ethernet · IEEE 802. 3u 100Base-TX Ethernet · IEEE 802. ab 1000Base-T Ethernet · IEEE 802. 3x Flow control · IEEE 802. 1p Class of service, priority protocols · IEEE 802. 1Q VLAN tagging · IEEE 802. 3ad static port aggregation Link Aggregation · IEEE 802. 3ad static port aggregation · Up to 6 aggregation groups, per group supports up to 8 ports - NULL scan -- TCP sequence number is zero and all control bits are zeros. - SYN with port <1024 -- SYN packets with source port less than 1024. · Smurf Attacks -- This attack uses Internet Control User Security and Authentication · Specific MAC forwarding per port: only specified MAC addresses can access the network (Port Security) Message Protocol (ICMP) echo requests packets (pings) to cause network congestion or outrages. · Ping Flooding -- This attack floods the target network with ICMP packets. · SYN/SYN-ACK Flooding -- This attack floods the target network with SYN or SYN/ACK packets. Performance ES-1528/ES-1552 · 12. 8/17. 6 Gbps non-blocking switching fabric · Switching Forwarding Rate 9. 6/13. 1 Mpps (1488000 pps/1000Base-T/1000Base-X, 148800 pps/100Base-TX) · Wire-speed performance · IEEE 802. 1Q tagged VLAN · 256 static VLAN, up to 4 K dynamic VLAN · Dynamic ARP Network Administration Security Auto DoS Attack Prevention Denial of Service (DoS) attacks try to disable a device or network so users no longer have access to network resources. Auto DoS Attack Prevention · Password required for administrators Network Management · Web-based management · SNMP v1, v2 · IP management: static IP · RMON · Port mirroring: supports Source/Destination/Both port mirroring · Cable Diagnostic MAC and Packet Buffer · 8 K MAC entries · 512 KB Packet Buffer module matches attack types in switches and prevent network outage Types of DoS Attacks can be prevented · Land Attacks -- These attacks result from Traffic Management and QoS · Rate Limiting: Port-based bandwidth control with 7 grades (64 kbps, 256 kbps, 1 Mbps, 10 Mbps, 64 Mbps, 100 Mbps, 1 Gbps) · Port-based egress traffic shaping · Broadcast Storm Control · Congestion control on all ports · IEEE 802. 1p with 4 priority queues per port for different types of traffic · WRR (Weighted Round Robin)/SPQ scheduling algorithm sending a specially crafted packet to a machine where the source host IP address is the same as the destination host IP address. The system attempts to reply to itself, resulting in system lockup. · Blat Attack -- These switch result from sending a specially crafted packet to a machine where the source host port is the same as the destination host port. [. . . ] All other brands, product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice. 65-100-152803B 07/08 [. . . ]