User manual ZYXEL GS-4000 DATASHEET

[. . . ] Intelligent Pro Gigabit Switching & Routing Solution for Business L3+ IP Routing RIP & OSPF Support Multicast DVMRP & IGMP Support High Redundancy and Resilient Architecture with RSTP, VRRP & Port Trunking Backup Power System Optional Multilayer (L2/L3/L4) Enterprise Access Control List Port Security and Static MAC filtering & Limited MAC number per port VLAN Stacking (QinQ) for Networkbased VPN or Campus VPN 802. 1x Authentication ZyXEL iStackingTM Technology, Clustering Network Management SNMP & RMON Support Benefits Intelligent Multilayer Gigabit Ethernet Switch ZyXEL GS-4000 Series is an intelligent Gigabit multilayer (L2/L3/L4) Ethernet switch that provides enterprise-class availability, resilient and redundant architecture with OSPF, VRRP, RSTP and port trunking. [. . . ] Classification and reclassification can be based on criteria as specific as rule-based on IP, MAC addresses, VLAN ID, TCP/UDP port number, on the other hand, for bandwidth management, the GS-4000 Series is loaded with powerful traffic management tools. For instance, the GS-4000 Series provides eight priority queues per port for different types of traffics, allowing administrators to set rule-based rate limiting which takes full advantage of limited network resources and guarantees the best performance. 12/24-port Managed L3+ Gigabit Ethernet Switch gs-4000 series iSafe - High-Security for Business-Critical Applications The GS-4000 Series works with iSafe intelligent 3-tiers security which offers complete data security in the data and management plane via a wide range of security features to protect users' data and administrative traffic, and secure the network from unauthorized users. 802. 1x authentication and Port security provide the ability to deny unauthorized users from accessing the network. Limited MAC Number by Port limits the total number of devices connected to a switch port, therefore highly reducing the risk of unknown access from mass deployed wireless networks or Hubs. Cooperating with RADIUS, 802. 1x is useful to prevent unauthorized access based on username and password (or other credentials) and acts as powerful access control for convergent networks with mixed wired and wireless access. The GS-4000 Series multilayer (L2/L3/L4) ACLs suite of sophisticated rule-based control mechanisms is easily deployed, based on realistic network environments via a Web GUI or command line to prevent abnormal and illegal access. [. . . ] (manually or dynamically selected) · VLAN Trunking Intelligent ACL (L2/L3/L4 Access List Control) · Based on MAC address · Based on VLAN ID · Based on IP address or subnet · Based on Protocol type or TCP/UDP port number · Based on DSCP Redundancy for Fault Backup · VRRP (Virtual Router Redundancy Protocol) · BPS (Backup Power System) support, one power connector with ZyXEL BPS-120 · IEEE 802. 1w Rapid Spanning Tree Protocol (RSTP) provides rapid convergence of spanning tree independent of spanning-tree timer Hardware Specifications GS-4024 · Ports: 20 10/100/1000BASE-T RJ-45 ports and 4 dual-personality GbE interface (RJ-45 or SFP open slots) · Console: D-Sub 9 pin Female (DCE) · Management: 1 out-of-band management RJ-45 port User Security and Authentication · MAC filtering per port secures access to each port · Specific MAC forwarding per port: only specified MAC addresses can access the network (port lock) · Limited maximum MAC number per port · IP Filtering · TCP/UDP Socket Filtering · 802. 1x port-based security, prevent unauthorized client access to the network · IEEE 802. 1Q tag-based 256 static VLAN, up to 4K dynamic VLAN · Port-based VLAN · Support VLAN Stacking (QinQ) · Private VLAN provides security and isolation between ports on a switch, ensures that users can not snoop on each other's traffic GS-4012F · Ports: 8 SFP open slots and 4 dual-personality GbE interface (RJ-45 or SFP open slots) · Console: D-Sub 9 pin Female (DCE) · Management: 1 out-of-band management RJ-45 port Physical Specifications GS-4024 · Dimensions: 438 (W) x 300 (D) x 44. 45 (H) mm · Weight: 4 Kg GS-4012F · Dimensions: 438 (W) x 225 (D) x 44. 45 (H) mm · Weight: 3. 4 Kg Network Administration Security · User name/password required for web/telnet/local console administrators · Two level security by specific SNMP read/write community Power Requirements · Input voltage of AC: 100-240VAC, 50/60Hz · Max power rating of AC: 50 Watts · Backup power supply into 12V DC Environmental Specifications · Operating temperature: 0°C ~ 45°C · Storage temperature: -25°C ~ 70°C · Operating humidity: 10% ~ 90%, non-condensing Network Management · Supports ZyXEL iStackingTM, up to 24 switches can be managed by one IP address · Web-based management · Support out-of-band management RJ-45 port for management VLAN · Telnet CLI · Text-based configuration file for scripting · SNMP v2c · RS-232c Local console · IP management: static IP or DHCP client · RMON four RMON groups 1, 2, 3, 9 (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis · Port mirroring: supports Source/Destination/Both port mirroring Application Diagram GS-4024 Deployment for SMB Core Network 3rd Floor High Bandwidth Demand Workgroup ~150 Users 2nd Floor High Security Demand Workgroup BPS-120 Back-up Power System 1st Floor High Performance Server Farm GS-3012 L2+ GbE Switch o Et Gb eD th op kt es 1000Mbps GS-2024 L2 GbE Switch ~150 Users GbE Trunk En ha ed nc Se cu rit y E Gb to th eS er r ve EMS Network Management Service/Server rm Fa er rv Se IP Cam ES-3124/ES-3124PWR S-3124/ES-3124PW /ES-3 3 L2+ Fast Ethern Switc 2+ Ethernet Switch h IP Phone GbE Trunk ~150 Users GS-4 GS-4024 -4 L3+ GbE Switch GbE Sw E GbE Trunk 100/1000Mbps BPS-120 SBack-up Power System we Sy VRRP OSPF GS-3012 L2+ GbE Switch GS-4024 L3+ GbE Switch ZyWALL Internet Security Gateway Internet net Application Diagram GS-4012F Deployment for Campus Fiber Aggregation GbE to the Desktop GbE to the Desktop Access Switch ES-3124PWR Building A GbE Core Switch GS-4012F ESES- GbE to the Server MIS Center Fiber Trunk Building B Fiber Uplink Fiber Uplink Fiber Uplink R Student Dormitories Library Building C Operational Information Transceiver (Optional) Model Name SFP-SX SFP-LX-10 SFP-LHX1310-40 SFP-ZX-80 Optical Receiver Sensitivity Transmission Distance vs. [. . . ]