<ul><li><strong>TPM-based security</strong><br> Includes a Trusted Platform Module (TPM) for secure hardware-based generation and storage of cryptographic keys used for secure connection to the Instant On cloud portal.</li><li> <strong>IEEE 802.1Q VLAN support</strong><br> Support for up to 256 VLANs with a VLAN ID range of 2-4093 IEEE 802.1X access control Authentication of network users on a per port basis prior to allowing network access. Port authentication includes RADIUS assigned VLAN, dynamic VLAN creation, guest VLAN or into an unauthenticated VLAN. Automatic denial-of-service protection Monitors for malicious attacks and protects the network by blocking the attacks.</li><li> <strong>Packet storm protection</strong><br> Protects against unknown unicast, broadcast and multicast storms with user-defined thresholds.</li><li> <strong>RADIUS</strong><br> The switch supports RADIUS authentication with primary and backup server configuration.</li><li> <strong>RADIUS accounting</strong><br> A robust set of attributes and statistics are available for collecting information from the switch.</li><li> <strong>Management VLAN ID</strong><br> Provides secure management access to administrators in the specified VLAN.</li><li> <strong>Link flap prevention</strong><br> Minimizes the network disruption by automatically detecting and disabling ports that experience link flap events.</li><li> <strong>Energy Efficient Ethernet (EEE)</strong><br> Compliant with IEEE 802.3az standard requirements to save energy during periods of low data activity.</li><li> <strong>Auto-port shut down</strong><br> The switch saves power by automatically shutting down power to inactive ports. Power is restored on a port upon link detection.</li><li> <strong>Energy savings status</strong><br> The switch provides an estimated cumulative energy savings due to green Ethernet features being enabled.</li><li> <strong>Energy-efficient cooling</strong><br> Includes variable speed fans operating only at the speed necessary to maintain operating temperature to reduce excess noise and power consumption.</li><li> <strong>IEEE 802.3x Flow control</strong><br> Provides a flow-throttling mechanism propagated through the network to prevent packet loss at a congested node.</li><li> <strong>Spanning Tree Protocol (STP)</strong><br> Supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and IEEE 802.1s Multiple Spanning Tree Protocol (MSTP on local web).</li><li> <strong>Loop protection</strong><br> If the switch detects a loop, it disables the source port from forwarding data packets originating from the switch to avoid broadcast storms.</li><li> <strong>BPDU filtering</strong><br> Drops BPDU packets when STP is enabled globally but disabled on a specific port.</li><li> <strong>Jumbo frame support</strong><br> Supports up to 9216 bytes frame size to improve the performance of large data transfers.</li><li> <strong>IGMP snooping v1/v2</strong><br> Improves network performance through multicast filtering, instead of flooding traffic on all ports.</li><li> <strong>Link aggregation</strong><br> Groups together multiple ports up to a maximum of eight (8) ports per trunk automatically using Link Aggregation Control Protocol (LACP), or manually, to form a high-bandwidth connection to the network backbone that helps prevent traffic bottlenecks. The 8-port models support 4 trunks, 24-port models support 8 trunks, and 48-port models support 16 trunks.</li><li> <strong>LLDP/LLDP-MED (Media Endpoint Discovery)</strong><br> Defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN for automatic configuration of network devices such as IP phones.</li><li> <strong>Address Resolution Protocol (ARP)</strong><br> The ARP table displays all of the IP addresses that have been resolved to MAC addresses, either dynamically or through static entry configuration.</li><li> <strong>Static IPv4 routing</strong><br> Supports manual routing configuration of up to 32 static routes.</li><li> <strong>Auto-voice VLAN</strong><br> Recognizes IP phones and automatically assigns voice traffic to dedicated VLAN for IP phones.</li><li> <strong>Access Control Lists (ACLs)</strong><br> Enables network traffic filtering by creating an ACL, adds rules and matches criteria to an ACL, and applies the ACL to permit or deny on one or more interfaces or a VLAN. Supports for 50 inbound IPv4 and MAC ACLs with up to 480 ACEs.</li><li> <strong>IPv6 host</strong><br> Enables switches to be managed and deployed at the IPv6 network&#39;s edge.</li><li> <strong>Rate limiting</strong><br> Sets and enforces per-port ingress traffic limits based on percentages or packets per second.</li><li> <strong>ARP Attack prevention</strong><br> Dynamic ARP protection blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data.</li><li> <strong>DHCP snooping</strong><br> Provides network security by filtering untrusted DHCP messages.</li><li> <strong>Port security</strong><br> Ports in a port isolation group are restricted from forwarding Layer 2 traffic between ports in that group, providing data privacy and security.</li><li> <strong>SCP and TFTP file transfer</strong><br> Provides different mechanisms for secure file transfer through SCP (Secure Copy Protocol) or TFTP.</li><li> <strong>Dual image support</strong><br> Provide independent primary and secondary software images for backup while upgrading.</li><li> <strong>User account management</strong><br> Password strength checking and aging feature provides enhanced security to user account administration to the local web management interface.</li><li> <strong>Secure Sockets Layer (SSL)</strong><br> Encrypts all HTTP traffic, secures access to the local browser-based management of the switch.</li><li> <strong>SNMPv1, v2c, and v3</strong><br> Facilitate management of the switch, as the device can be discovered and monitored from an SNMP management station.</li><li> <strong>Remote monitoring (RMON)</strong><br> Remote monitoring (RMON) provides advanced monitoring and reporting capabilities for statistics, history, alarms and events. RMON data is retrieved from the switch through a network management platform over SNMP.</li></ul>