19" switch with management and PoE +

This layer-2 switch was specially developed for applications with high data loads, such as video over IP, video streaming and in conjunction with multicast. The PoE allows IP cameras to be powered via the data cable. With the extensive management options , even complex network requirements can be fulfilled. Special features for access control Active monitoring of the componentsComponents powered by the switch via PoE are constantly monitored. In the event of a failure, the switch automatically restarts the controller . If this is not successful, the switch sends an alarm message via SNMP. Active monitoring of the PoE supplyIf, for example, too much power is required from the switch due to a defective camera, the switch sends an alarm via SNMP. Active management of the PoE powerWhen the switch is started up, the individual PoE ports can be started up with a time delay to prevent the PoE power supply unit from being overloaded. Further video-friendly featuresExtra high backplane performance for smooth video transmission with full port utilisation. Jumbo frames up to 9600 bytes are supported even at 100 Mbit/s. Port security through MAC address restriction. Further information Special featuresPoE:PoE per port adjustable PoE per port can be switched on at different times PoE per port.Switching on and off via time table adjustable Link status check, reboot if PoE sinks do not respond DMS DMS (Data Management System)The switch has an integrated network monitoring and control system, which gives the user a good overview of the entire network in a very simple way. This DMS system has the following features: Graphical network overviewThe network topology view allows a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and designation. Plans and maps can be stored as background images , allowing the user to quickly access specific network devices even without knowledge of the IP structure. Device searchThis function makes it possible to access a specific device even in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately, and allows the user to access them immediately without knowing the IP address. Data traffic displayThe data traffic can be graphically displayed per port via a time axis. Error handling and securityNetwork diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limitation allow effective protection against unauthorised access. With IEEE802.3ah and IEEE802.1ag, tools are available for structuring networks. Technical specifications General properties Supply voltage 100-240VAC, 50-60Hz Power consumption Max. 40W (without PoE) / 450W (with PoE) MTBF 25°C: 352'063h 50°C: 129'960h Operating temperature 0°C to 40°C Dimensions 442 x 211 x 44mm (WxDxH) Interfaces Copper ports 24 x 10/100/1000TX, RJ45, 24 of which with PoE+ 802.3af/at Maximum PoE power across all ports: 370W Fibre optic ports 4 x 100/1000SFP We recommend the use of our barox SFPs. We do not test or guarantee the compatibility of our devices with SFPs from other manufacturers. Console port RS232, RJ45 Network Features Backplane 56Gbit/s MAC table 8k Configuration Console, Web GUI, SNMPv1, v2c and v3 (USM) PoE management Port settings Port disable/enable. Auto-negotiation 10/100/1000Mbps. Flow Control disable/enable. Data rate control on each port. Max. Framesize, Power Control Port status display Display per port: speed link status, flow control status. Auto negotiation status, trunk status. VLAN VLAN based on: 802.1Q Tagged, Port, Protocol, IP subnet, Private (PVE), MAC Max. 4k VLANs Q-in-Q (double tag) private VLAN Voice VLAN GARP VLAN registration protocol (option) Link aggregation IEEE 802.3ad LACP Static trunk QoS Supports 8 hardware queues Strict priority and weighted round-robin (WRR) Queue assignment based on DSCP and class of service Security SSH v1 and v2 SSL encrypts the http traffic, allowing advanced secure access to the browser-based management GUI in the switch 802.1X RADIUS Port Security ACL with MAC, IP, MUlticast and many more Multicast IGMP v1/v2/v3 snooping, up to 1024 multicast groups, source-specific multicast, IGMP Proxy Topology STP, RSTP, MSTP Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af/at Power over Ethernet IEEE 802.az Energy Efficient Ethernet

This layer 2/3 switch with extensive L3 functions was specially developed for applications with a high data load, such as video over IP, video streaming also in conjunction with multicast. The PoE allows IP cameras to be powered via the data cable. With the extensive management options, even complex network requirements can be fulfilled. Special features for access control Active monitoring of the components Components powered by the switch via PoE are constantly monitored. In the event of a failure, the switch restarts the controllers independently . If this is not successful, the switch sends an alarm message via SNMP. Active monitoring of the PoE power supply If, for example, too much power is required from the switch due to a defective camera, the switch sends an alarm via SNMP. Active management of the PoE power When the switch is started up, the individual PoE ports can be started up with a time delay to prevent the PoE power supply from being overloaded . Active increased security Among other things, the switch has the option of storing a private authentication key, with which access to the management is only possible by PCs and servers that have the appropriate key. Other CyberSecurity features include MAC locking, ACL list, TACAS+Radius server compatibility and multiple user control. Active integration of the switch in video management systems SW modules are available for the popular Milestone and Siveillance Video video management systems that allow the switch management and DMS to be directly integrated into these VMS. Further component-friendly features Extra high backplane performance for smooth transmission with full port utilisation. Jumbo frames up to 9600bytes are also supported at 100MBit/s . Port security through MAC address restriction. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system, which gives the user a good overview of the entire network in a very simple way. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and designation. Plans and maps can be stored as background images with which the user can quickly access specific network devices even without knowledge of the IP structure, Device search This function makes it possible to access a specific device even in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user immediate access without knowledge of the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis . Error handling and security Network diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limitation allow effective protection against unauthorised access. With IEEE802.3ah and IEEE802.1ag, tools are available for the structuring of networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz Power consumption Max. 40W (without PoE) / 255W (with PoE 185W) / 450W (with PoE 370W) MTBF 25°C: 336'970h 40°C: 185'371h Operating temperature 0°C to 40°C Dimensions 442 x 211 x 44mm (WxDxH) Interfaces Copper ports 26 x 10/100/1000TX, RJ45, 24 of which with PoE+ 802.3af/at Maximum PoE power across all ports: 370W Fibre optic ports 2 x 100/1000, SFP (Combo) We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested or guaranteed by us. Console port RS232, RJ45 Network properties Backplane 52Gbit/s MAC table 8k Configuration Console, Web GUI, SNMPv1, v2c and v3 PoE management Port settings Port disable/enable. Auto-negotiation 10/100/1000Mbps. Flow control disable/enable. Data rate control on each port. Max. Framesize, Power Control Port status display Display per port: speed link status, flow control status. Auto negotiation status, trunk status. Layer3 functions IPv4 and IPv6 unicast: static routing VLAN 802.1Q Tagged based VLAN, up to 255 VLAN groups, Q-in-Q, private VLAN Link aggregation IEEE 802.3ad LACP / Static Trunk, supports 18 groups of 8-port trunks or static trunk QoS Traffic classification based, Strict priority and WRR, 4-level priority for Switching - Port number - 802.1p priority - DS/TOS field in IP Packet Security SSH v1 and v2, SSL, 802.1X RADIUS, port security, ACL with MAC, IP, MUlticast and much more. User authentication with private key Multicast IGMP v1/v2/v3 snooping, up to 1024 multicast groups, source-specific multicast, IGMP proxy Topology STP, RSTP, MSTP Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af/at Power over Ethernet IEEE 802.az Energy Efficient Ethernet Types/features RY-LGSP23-26 Switch with 185W for PoE

This layer 2/3 switch with extensive L3 functions was specially developed for applications with a high data load, such as video over IP, video streaming also in conjunction with multicast. The PoE allows IP cameras to be powered via the data cable. With the extensive management options, even complex network requirements can be fulfilled. Special features for access control Active monitoring of the components Components powered by the switch via PoE are constantly monitored. In the event of a failure, the switch restarts the controllers independently . If this is not successful, the switch sends an alarm message via SNMP. Active monitoring of the PoE power supply If, for example, too much power is required from the switch due to a defective camera, the switch sends an alarm via SNMP. Active management of the PoE power When the switch is started up, the individual PoE ports can be started up with a time delay to prevent the PoE power supply from being overloaded . Further component-friendly features Extra high backplane performance for smooth transmission with full port utilisation. Jumbo frames up to 9600 bytes are also supported at 100 Mbit/s . Port security through MAC address restriction. DMS DMS (Device Management System)The switch has an integrated network monitoring and control system, which gives the user a good overview of the entire network in a very simple way. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and name. Maps and maps can be stored as background images, allowing the user to quickly access specific network devices even without knowledge of the IP structure, Device search This function makes it possible to access a specific device even in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user immediate access without knowledge of the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis. Error handling and security Network diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limiting allow effective protection against unwanted access. With IEEE802.3ah and IEEE802.1ag, tools are available for structuring networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz Power consumption Max. 40W (without PoE) / 255W (with PoE 185W) / 450W (with PoE 370W) MTBF 25°C: 266'508h 40°C: 158'506h Operating temperature 0°C to 40°C Dimensions 442 x 211 x 44mm (WxDxH) Interfaces Copper ports 26 x 10/100/1000TX, RJ45, 24 of which with PoE+ 802.3af/at Maximum PoE power across all ports: 185W Fibre optic ports 2 x 100/1000, SFP (Combo) We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested or guaranteed by us. Console port RS232, RJ45 Network properties Backplane 52Gbit/s MAC table 8k Configuration Console, Web GUI, SNMPv1, v2c and v3 PoE management Port settings Port disable/enable. Auto-negotiation 10/100/1000Mbps. Flow control disable/enable. Data rate control on each port. Max. Framesize, Power Control Port status display Display per port Speed link status, flow control status. Auto negotiation status, trunk status. Layer3 functions IPv4 and IPv6 unicast: static routing VLAN 802.1Q Tagged based VLAN, up to 255 VLAN groups, Q-in-Q, private VLAN Link aggregation IEEE 802.3ad LACP / Static Trunk, supports 18 groups of 8-port trunks or static trunk QoS Traffic classification based, Strict priority and WRR, 4-level priority for switching - Port number - 802.1p priority - DS/TOS field in IP packet Security SSH v1 and v2, SSL, 802.1X RADIUS, port Security, ACL with MAC, IP, multicast and many more User authentication with private key Multicast IGMP v1/v2/v3 snooping, up to 1024 multicast groups, source-specific multicast, IGMP proxy Topology STP, RSTP, MSTP Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af/at Power over Ethernet IEEE 802.az Energy Efficient Ethernet Types/features RY-LGSP23-26/370 See separate data sheet Switch with 370W for PoE

This layer 2/3 switch with extensive L3 functions was specially developed for applications with a high data load, such as video over IP, video streaming also in conjunction with multicast . The PoE++ allows IP cameras to be powered via the data cable. The extensive management options mean that even complex network requirements can be met. Special features for access control Active monitoring of the components Components powered by the switch via PoE are continuously monitored. In the event of a failure , the switch automatically restarts the controllers. If this is not successful, the switch sends an alarm message via SNMP. Active monitoring of the PoE supply If too much power is required from the switch, e.g. due to a defective component, the switch sends an alarm via SNMP. Active management of PoE power When the switch is started up, the individual PoE ports can be started up with a time delay to prevent the PoE power supply unit from being overloaded. Other component-friendly features Extra high backplane performance for smooth transmission with full port utilisation. Jumbo frames up to 9600 bytes are also supported at 100 Mbit/s. Port security through MAC address restriction. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system, which gives the user a good overview of the entire network in a very simple way. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and name. Maps and maps can be stored as background images with which the user can quickly access specific network devices even without knowledge of the IP structure, device search This function also allows targeted access to a specific device in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user to access immediately without knowing the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis. Error handling and security Network diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limitation allow effective protection against unauthorised access. IEEE802.3ah and IEEE802.1ag provide tools for structuring networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz Power consumption Max. 40W (without PoE) 1,000W (with PoE 920W) with single or redundant power supply 2,000W (with PoE 2 x 920W) with redundant power supply MTBF 25°C: 182'061h 50°C: 66'683h Operating temperature 0°C to 40°C Power loss 136BTU, specification without consideration of PoE power. 340BTU with maximum PoE power output of 920W Dimensions 442 x 211 x 44mm (WxDxH) Interfaces Copper ports 26 x 10/100/1000TX, 45RJ, 24 of which with PoE++ 802.3af/at/bt Maximum PoE power across all ports: 920W Fibre optic ports 2 x 100/1000, SFP (Combo) We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested or guaranteed by us. Console port RS232, 115.2kBit/s, 8, N, 1, RJ45 Network features Backplane 52 GBit/s MAC table 8k Configuration Console, Web GUI, SNMPv1, v2c and v3 PoE management Port settings Port disable/enable. Auto-negotiation 10/100/1000Mbps. Flow control disable/enable. Data rate control on each port. Max. Framesize, Power Control Port status display Display per port Speed link status, flow control status. Auto negotiation status, trunk status. Layer3 functions IPv4 and IPv6 unicast: static routing VLAN 802.1Q Tagged based VLAN, up to 255 VLAN groups, Q-in-Q, private VLAN Link aggregation IEEE 802.3ad LACP / Static Trunk, supports 18 groups of 8-port trunks or static trunk QoS Traffic classification based, Strict priority and WRR, 4-level priority for Switching - Port number - 802.1p priority - DS/TOS field in IP Packet Security SSH v1 and v2, SSL, 802.1X RADIUS, port security, ACL with MAC, IP, MUlticast and much more. Multicast IGMP v1/v2/v3 snooping, up to 1024 multicast groups, source-specific multicast, IGMP proxy Topology STP, RSTP, MSTP Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN Tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af/at/bt Power over Ethernet IEEE 802.az Energy Efficient Ethernet Types/features RY-LGSPTR23-26 Switch with 920W for PoE++ incl. one 920W power supply module RY-PS-TR920 Power supply unit with 920W

This layer 2/3 switch with extensive L3 functions was specially developed for applications with a high data load, such as video over IP, video streaming also in conjunction with multicast . Thanks to the high number of optical ports, the RY-LGSO25-28 is particularly suitable for connecting remote locations, such as IP cameras. With its extensive management options, it can also fulfil complex network requirements. Special features for access control Extra high backplane performance for smooth transmission at full port utilisation. Jumbo frames up to 9600 bytes are also supported at 100 Mbit/s. Port security through MAC address restriction. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system, which gives the user a very simple overview of the entire network. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and name. Maps and maps can be stored as background images with which the user can quickly access specific network devices even without knowledge of the IP structure. Device search This function also allows targeted access to a specific device in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user to access immediately without knowing the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis. Error handling and security Network diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limitation allow effective protection against unauthorised access. IEEE802.3ah and IEEE802.1ag provide tools for structuring networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz, and 48VDC, redundant supply possible Power consumption Max. 30W MTBF 25°C: 196'049h 40°C: 46'583h 50°C: 42'690h 60°C: 38'246h Operating temperature -20°C to 60°C Power loss 102BTU Dimensions 442 x 212 x 44mm Interfaces Copper Ports 4 x 10/100/1000TX, RJ45 Fibre optic ports 24 x 100/1000, SFP 4 x 1G/10G, SFP/SFP+ We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested or guaranteed by us. Console port RS232, DB9 Incl. console cable Network features Backplane 128 GBit/s MAC table 32k Configuration Console, Web GUI, SNMPv1, v2c and v3 PoE management Port settings Port disable/enable. Auto-negotiation 10/100/1000Mbps. Flow control disable/enable. Data rate control on each port. Max. Framesize, Power Control Port status display Display per port: speed link status, flow control status. Auto negotiation status, trunk status. Layer3 functions IPv4 and IPv6 unicast: static routing VLAN 802.1Q Tagged based VLAN, up to 255 VLAN groups, Q-in-Q, private VLAN Link aggregation IEEE 802.3ad LACP / Static Trunk, supports 18 groups of 8-port trunks or static trunk QoS Traffic classification based, Strict priority and WRR, 4-level priority for Switching - Port number - 802.1p priority- DS/TOS field in IP Packet Security SSH, SSL, 802.1X RADIUS, Port Security, ACL with MAC, IP, MUlticast and much more. User authentication with private key Multicast IGMP v1/v2/v3 snooping, up to 1024 multicast groups, source-specific multicast, IGMP proxy Topology STP, RSTP, MSTP Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN Tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.az Energy Efficient Ethernet EMC: EN 60950-1: 2006 EN 55022: 2006 +A1: 2007 / CISPR 22:2005 +A1:2005 / AS/NZS CISPR 22:2009 EN 61000-3-2: 2006 +A1: 2009 +A2: 2003 EN 61000-3-3: 2008 EN 55024:1998 +A1: 2001 +A2: 2003 / CISPR 24: 1997 +A1: 2001 +A2: 2002 EN 61000-4-2: 2009 EN 61000-4-3: 2006 +A1: 2008 EN 61000-4-5: 2006 EN 61000-4-6: 2009 EN 61000-4-8: 2010 EN 6100-4-11: 2004 Types/features RY-LGSO25-28

This layer 2/3 switch with extensive L3 functions was specially developed for applications with a high data load, such as video over IP, video streaming also in conjunction with multicast . Thanks to the high number of optical ports, the RY-LGSO25-24 is particularly suitable for connecting remote locations, such as IP cameras. With its extensive management options, it can also fulfil complex network requirements. Special features for access control High backplane performance for smooth transmission with full port utilisation. Jumbo frames up to 9600 bytes are also supported at 100 Mbit/s. port security through MAC address restriction. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system, which gives the user a very simple overview of the entire network. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and name. Maps and maps can be stored as background images with which the user can quickly access specific network devices even without knowledge of the IP structure, device search This function also allows targeted access to a specific device in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user to access immediately without knowing the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis. Error handling and security Network diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limitation allow effective protection against unauthorised access. IEEE802.3ah and IEEE802.1ag provide tools for structuring networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz, and 48VDC, redundant supply possible Power consumption Max. 30W MTBF 25°C: 250'996h 60°C: 48'440h Operating temperature -20°C to 60°C Dimensions 442 x 211 x 44mm (WxDxH) Interfaces Copper ports 4 x 10/100/1000TX, RJ45, Combo Fibre optic ports 24 x 100/1000, SFP We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested or guaranteed by us. Console port RS232, DB9 Incl. console cable Network features Backplane 48 Gbit/s MAC table 32k Configuration Web GUI, SNMPv1, v2c and v3 PoE management Port settings Port disable/enable. Auto-negotiation 10/100/1000Mbps. Flow control disable/enable. Data rate control on each port. Max. Framesize, Power Control Port status display Display per port: speed link status, flow control status. Auto negotiation status, trunk status. Layer3 functions IPv4 and IPv6 unicast: static routing VLAN 802.1Q Tagged based VLAN, up to 4k VLAN IDs, Q-in-Q, private VLAN Link aggregation IEEE 802.3ad LACP / Static Trunk, supports 26 groups of 4-port trunks or static trunk QoS Traffic classification based, Strict priority and WRR, 4-level priority for switching - Port number - 802.1p priority- DS/TOS field in IP packet Security SSH, SSL, 802.1X RADIUS, port security, ACL with MAC, IP, multicast etc. User authentication with private key Multicast IGMP v1/v2 snooping, up to 1024 multicast groups, source-specific multicast, IGMP proxy Topology STP, RSTP, MSTP Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP Types/features RY-LGSO25-24

This layer 2/3 switch with extensive L3 functions was specially developed for applications with high data loads, such as video over IP, video streaming also in conjunction with multicast . The compact design and reduced number of ports make this switch ideal for smaller systems or as a remote unit in a larger network. With its extensive management options, can also fulfil complex network requirements. Special features for access control Component-friendly features Extra high backplane performance for smooth transmission with full port utilisation. Jumbo frames up to 9600bytes are also supported at 100MBit/s. port security through MAC address restriction. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system, which gives the user a very simple overview of the entire network. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and name. Maps and maps can be stored as background images with which the user can quickly access specific network devices even without knowledge of the IP structure. Device search This function also allows targeted access to a specific device in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user to access immediately without knowing the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis. Error handling and security Network diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limitation allow effective protection against unauthorised access. IEEE802.3ah and IEEE802.1ag provide tools for structuring networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz Power consumption Max. 25W MTBF 25°C: 595'825h 50°C: 271'556h Operating temperature 0°C to 40°C Dimensions 220 x 134 x 44mm (WxDxH) Interfaces Copper ports 10 x 10/100/1000TX, RJ45 Fibre optic ports 2 x 100/1000, SFP or 10/100/1000TX, RJ45 (Combo) We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested by us and is not guaranteed. Console ports 1 x RS232, RJ45 Network features Backplane 20 GBit/s MAC table 32k Configuration Console, Web GUI, SNMPv1, v2c and v3 PoE management Port settings Port disable/enable. Auto-negotiation 10/100/1000Mbps. Flow control disable/enable. Data rate control on each port. Max. Framesize, Power Control Port status display Display per port: speed link status, flow control status. Auto negotiation status, trunk status. Layer3 functions IPv4 and IPv6 unicast: static routing VLAN 802.1Q Tagged based VLAN, up to 255 VLAN groups, Q-in-Q, private VLAN Link Aggregation IEEE 802.3ad LACP / Static trunk, supports 18 groups of 8-port trunks or static trunk QoS Traffic classification based, Strict priority and WRR, 4-level priority for Switching - Port number - 802.1p priority- DS/TOS field in IP Packet Security SSH, SSL, 802.1X RADIUS, port security, ACL with MAC, IP, multicast and much more. User authentication with private key Multicast IGMP v1/v2/v3 snooping, up to 1024 multicast groups, source-specific multicast, IGMP proxy Topology STP, RSTP, MSTP Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN Tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.az Energy Efficient Ethernet Types/features RY-LGS23-10G RY-19'' bracket Pair of brackets for mounting the RY-GSP23-10G in a 19" frame Included in the scope of delivery

This layer 2/3 switch with extensive L3 functions was specially developed for applications with high data loads, such as video over IP, video streaming also in conjunction with multicast. The switch has extensive security functions that protect both the switch itself and the network traffic. The PoE allows IP cameras to be powered via the data cable. The compact design and reduced number of ports make this switch ideal for smaller installations or as a remote unit in a larger network. With its extensive management options, can also fulfil complex network requirements. Special features for access control Active monitoring of the components The switch continuously monitors components powered via PoE. In the event of a failure, the switch automatically restarts the controller . At the same time, the switch sends an SNMP message. Active monitoring of the PoE supply If, for example, a defective camera demands too much power from the switch , the switch sends an alarm via SNMP. If the separate PoE power supply fails, the switch continues to function and can alert the fault. Active management of the PoE power When the switch is started up, the individual PoE ports can be started up with a time delay to prevent the PoE power supply units from being overloaded. Active integration of the switch in video management systems SW modules are available for the popular Milestone and Siveillance Video video management systems that allow the switch management and DMS to be integrated directly into these VMS. Uninterrupted PoE power supply The PoE power supply to the PDs is not interrupted when the switch is rebooted. Jumbo frames even at 100 Mbit/s Jumbo frames up to 10,240 bytes are also supported at 100 Mbit/s . Further information Special features The switch has extensive security functions. For example, the ACL not only allows the switch itself to be protected, but also the traffic in the network. Non-stop PoE: When the switch is restarted, the PoE power supply to the connected cameras is not interrupted. As soon as the switch is operational again, so are the camera images. System notes The switch supports PTP, precision time protocol according to IEEE1588 v2 and IEC 61588. This function is used in industrial automation, in professional audio-video applications for audio-video bridging and in telecommunications, among others. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system that gives the user a good overview of the entire network in a very simple way. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and name. Maps and maps can be stored as background images, allowing the user to quickly access specific network devices even without knowledge of the IP structure. Device search This function also allows targeted access to a specific device in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user to access immediately without knowing the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis. Error handling and security Network diagnostics between the master switch and connected end devices. Protection mechanisms such as data rate limiting provide effective protection against unauthorised access. IEEE802.3ah and IEEE802.1ag provide tools for structuring networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz Power consumption Max. 40W (without PoE) / 290W (with PoE) MTBF 25°C: 334'272h 50°C: 97'070h Operating temperature 0°C to 50°C Dimensions 220 x 242 x 44mm (WxDxH) Weight 2.3 kg Interfaces Copper ports 8 x 10/100/1000TX, PoE+, RJ45 Maximum PoE power across all ports: 250W Fibre optic ports 2 x SFP/SFP+, 1G/10G We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other Console port 1 x RS232, RJ45 Network features Management HTTP/HTTPS, SSH, Telnet Client, IPv6 management SNMP v1, v2c, v3 supports traps and USM DHCP Client / DHCPv6 Client DHCP server PTP, Precision Time Protocol, IEEE1588 v2 Embedded RMON agent supports RMON groups 1,2,3,9 (history, statistics, alarms and events) for improved traffic management, monitoring and analysis Backplane 56Gbit/s MAC table 16k Configuration Web GUI, DMS, SNMPv1, v2c and v3, console, Telnet, RMON Individual management accesses can be deactivated PoE management Port configuration Supports the PoE configuration function per port. PoE scheduling Supports PoE scheduling per port for switching the PoE devices (PDs) on/off. Automatic check Check the connection status of the PDs. Restart the PDs, if there are no responses. Power delay The PoE ports can be switched on with a time delay to protect the switch from overload. Non-stop PoE, soft reboot The switch supplies the PDs with power even during the soft reboot. Port settings Port disable/enable, autonegotiation 10/100/1000Mbps, flow control disable/enable, data rate control on each port, max. framesize, power control Port status display Display per port: speed, link status, flow control status, autonegotiation status, trunk status Layer3 functions IPv4 and IPv6 unicast: static routing Communication redundancy Standard Spanning Tree (STP), IEEE802.1d Rapid Spanning Tree (RSTP), IEEE802.w Multiple Spanning Tree (MSTP), IEEE802.1s Ethernet Linear Protection Switching (ELPS), ITU-T G.8031 Ethernet Ring Protection Switching (ERPS), ITU-T G.8032 VLAN Tag-based VLAN according to 802.1Q Supports up to 4K VLANs simultaneously (from 4096 VLAN IDs) Port-based VLAN A port member of a VLAN can be isolated to other isolated ports of the same VLAN and private VLANs. Private VLAN Edge (PVE) Private VLANs are based on the source port mask and there are no connections to VLANs. This means that VLAN IDs and private VLAN IDs can be identical. Voice VLAN The Voice VLAN function enables the forwarding of voice traffic on the Voice VLAN. Guest VLAN With the IEEE 802.1X guest VLAN function, a guest VLAN can be configured for any 802.1X port on the device to provide non-802.1X compliant clients with restricted services. Q-in-Q (double tag) VLAN This allows specific requirements for VLAN IDs and the number of VLANs to be supported to be set. 802.1v protocol VLAN The classification of multiple protocols into a single VLAN often enforces VLAN boundaries that are unsuitable for some of the protocols. This requires the presence of a non-standard unit that forwards the frames with the protocols for which the VLAN boundaries are unsuitable between VLANs . MAC-based VLAN The MAC-based VLAN function makes it possible to assign incoming untagged packets to a VLAN and thus classify the traffic based on the source MAC address of the packet. IP subnet-based VLAN In an IP subnet-based VLAN, all end workstations in an IP subnet are assigned to the same VLAN. In this VLAN, users can move their workstations without having to reconfigure their network addresses. Management VLAN Management VLAN is used to manage the switch from a remote location using protocols such as Telnet, SSH, SNMP, Syslog, etc. Link Aggregation IEEE 802.3ad LACP / Static Trunk, supports five groups of 16-port trunks or static trunks. QoS Hardware queue Supports eight hardware queues. Classification Port-based: Traffic QoS by port 802.1p: The VLAN priority-based Layer 2 CoS QoS class of service is a parameter used in data and voice protocols to differentiate the types of payloads contained in the transmitted packet. DSCP-based differentiated services (DiffServ) Layer 3 DSCP QoS: IP packets can carry either an IP precedence value (IPP) or a Differentiated Services Code Point (DSCP) value. QoS supports the use of both values, as DSCP values are downward compatible with IP priority values. Classification and re-labelling of TCP/IP ACLs: QoS through ACL Rate limiting Ingress policer Egress shaping and speed control per port Scheduling Strict priority and weighted round robin (WRR): Weighted Round Robin is a scheduling algorithm that uses the weights assigned to the queues to determine how much data is emptied from a queue before it is moved to the next queue . Security Certified authentication A private HTTPS key can be stored for management access. User administration User rights can be freely set in up to 15 levels . ACL The switch allows up to 512 entries. Drop or rate limiting based on source/destination MAC/IP address or VLAN ID. Rules and conditions for incoming packets can be defined per port. The rules include protocols, IP ports and address ranges. The rules can be defined using either the authorisation or the exclusion method . The criteria are TCP/ UDP source and destination ports, 802.1p priority, Ethernet type, ICMP packet (Internet Control Message Protocol). Port security MAC address management per port and IP source guard: The MAC address can be checked in combination with the IP address. Storm Control Prevents traffic in a LAN from being disrupted by a broadcast, multicast or unicast flood on a port. RADIUS authentication, 802.1X Authorisation and accounting, MD5 hash, guest VLAN, single/multiple host mode and single/multiple sessions Supports IGMP-RADIUS based 802.1X Dynamic VLAN assignment TACACS+ authentication The switch supports TACACS+ authentication. Switch as client. Secure Shell (SSH) SSH secures Telnet traffic to or from the switch, SSH v1 and v2 are supported Secure Socket Layer (SSL) SSL encrypts the HTTP traffic and thus enables extended secure access to the browser-based management GUI in the switch. HTTPS & SSL (Secured Web) Hyper Text Transfer Protocol Secure (HTTPS) is the secure version of HTTP. BPDU Guard The BPDU Guard, an extension of STP, removes a node that reflects BPDUs back into the network. It enforces the boundaries of the STP domain and keeps the active topology predictable by not allowing network devices behind a BPDU Guard-enabled port to participate in STP . DHCP Snooping With DHCP snooping, the switch has a function that acts as a firewall between untrusted hosts and trusted DHCP servers. Loop protection Loop protection prevents unknown unicast, broadcast and multicast loops in layer 2 switching configurations . Multicast IGMP v1/v2/v3 snooping IGMP restricts the bandwidth-intensive multicast traffic to the requesters. Supports 1024 multicast groups. IGMP Querier IGMP Querier is used to support a Layer 2 multicast domain of snooping switches if no multicast router is available. IGMP Proxy IGMP snooping with proxy reporting or report suppression actively filters IGMP packets to reduce the load on the multicast router. MLD v1/v2 Snooping Delivers IPv6 multicast packets only to the required recipients. Multicast VLAN Registration (MVR) A dedicated, manually configured VLAN, the so-called Multicast VLAN, to forward multicast traffic via a Layer 2 network in conjunction with IGMP snooping. Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af/at Power over Ethernet IEEE 802.az Energy Efficient Ethernet IEEE 1588 v2 PTP Precisison Time Protocol Types/features RY-LGSP8-10 RY-19'' bracket Pair of brackets for mounting the RY-LGSP28-10 in a 19'' frame. Included in the scope of delivery.

This layer-2 and layer-3 switch was specially developed for applications with high data loads, such as video over IP, video streaming and in conjunction with multicast. The switch has extensive security functions that protect both the switch itself and the network traffic. The PoE allows IP cameras to be powered via the data cable. With its extensive management options, can also fulfil complex network requirements. Special features for access control Active monitoring of the components The switch continuously monitors components supplied via PoE . In the event of a failure, the switch automatically restarts the controller . At the same time, the switch sends an SNMP message. Active monitoring of the PoE power supply If, for example, a defective camera requires too much power from the switch , the switch sends an alarm via SNMP. Active management of the PoE power When the switch is started up, the individual PoE ports can be started up with a time delay to prevent the PoE power supply units from being overloaded. Active integration of the switch in video management systems SW modules are available for the popular Milestone and Siveillance Video video management systems that allow the switch management and DMS to be integrated directly into these VMS. Uninterrupted PoE power supply The PoE power supply to the PDs is not interrupted when the switch is rebooted. Jumbo frames even at 100 Mbit/s Jumbo frames up to 10,240 bytes are also supported at 100 Mbit/s . Further information Special features The switch has extensive security functions. For example, the ACL not only allows the switch itself to be protected, but also the traffic in the network. Non-stop PoE: When the switch is restarted, the PoE power supply to the connected cameras is not interrupted. As soon as the switch is operational again, so are the camera images. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system that provides the user with a very simple overview of the entire network. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers with details of the IP address, device type and name. Maps and maps can be stored as background images, allowing the user to quickly access specific network devices even without knowledge of the IP structure. Device search This function also allows targeted access to a specific device in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user to access immediately without knowing the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis. Error handling and security Network diagnostics between the master switch and connected end devices. Protection mechanisms such as data rate limiting provide effective protection against unauthorised access. IEEE802.3ah and IEEE802.1ag provide tools for structuring networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz Power consumption Max. 40W (without PoE) / 410W (with PoE) MTBF 25°C: 188'146h 50°C: 59'932h 50°C: 49'755h Operating temperature 0°C to 50°C Power loss 136BTU, specification without consideration of PoE power. 239BTU with maximum PoE power output of 370W. Dimensions 442 x 211 x 44mm (WxDxH) Weight 2.8 kg Interfaces Copper ports 24 x 10/100/1000TX, PoE+, RJ45 Maximum PoE power across all ports: 370W Fibre optic ports 4 x SFP/SFP+, 1G/10G We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested or guaranteed by us. Console port 1 x RS232, RJ45 Network properties Network management HTTP/HTTPS, SSH, Telnet Client, IPv6 Management SNMP v1, v2c, v3 supports traps and USM DHCP Client / DHCPv6 Client DHCP server Embedded RMON agent supports RMON groups 1,2,3,9 (history, statistics, alarms and events) for improved traffic management, monitoring and analysis Backplane 128Gbit/s MAC table 32k Configuration Web GUI, DMS, SNMPv1, v2c and v3, console, Telnet, RMON Individual management accesses can be deactivated PoE management Port configuration Supports the PoE configuration function per port. PoE scheduling Supports PoE scheduling per port for switching the PoE devices (PDs) on/off. Automatic check Check the connection status of the PDs. Restart the PDs, if there are no responses. Power delay The PoE ports can be switched on with a time delay to protect the switch from overload. Non-stop PoE, soft reboot The switch supplies the PDs with power even during the soft reboot. Port settings Port disable/enable, autonegotiation 10/100/1000Mbps, flow control disable/enable, data rate control on each port, max. framesize, power control Port status display Display per port: speed, link status, flow control status, autonegotiation status, trunk status Layer3 functions IPv4 and IPv6 unicast: static routing RIP v1/v2: The Routing Information Protocol (RIP) is an internal routing protocol that is based on distance vector routing and is used within an autonomous system. OSPF v2/v3 : OSPF is a link-state routing protocol. It is designed for internal operation in a single autonomous system. Each OSPF router maintains an identical database that describes the topology of the autonomous system. A routing table is calculated from this database by creating a shortest-path tree. Communication redundancy Standard Spanning Tree (STP), IEEE802.1d Rapid Spanning Tree (RSTP), IEEE802.w Multiple Spanning Tree (MSTP), IEEE802.1s VLAN Tag-based VLAN according to 802.1Q Supports up to 4K VLANs simultaneously (from 4096 VLAN IDs) Port-based VLAN A port member of a VLAN can be isolated to other isolated ports of the same VLAN and private VLANs. Private VLAN Edge (PVE) Private VLANs are based on the source port mask and there are no connections to VLANs. This means that VLAN IDs and private VLAN IDs can be identical. Voice VLAN The Voice VLAN function enables the forwarding of voice traffic on the Voice VLAN. Guest VLAN With the IEEE 802.1X guest VLAN function, a guest VLAN can be configured for any 802.1X port on the device to provide non-802.1X compliant clients with restricted services. Q-in-Q (double tag) VLAN This allows specific requirements for VLAN IDs and the number of VLANs to be supported to be set. 802.1v protocol VLAN The classification of multiple protocols into a single VLAN often enforces VLAN boundaries that are unsuitable for some of the protocols. This requires the presence of a non-standard unit that forwards the frames with the protocols for which the VLAN boundaries are unsuitable between VLANs . MAC-based VLAN The MAC-based VLAN function makes it possible to assign incoming untagged packets to a VLAN and thus classify the traffic based on the source MAC address of the packet. IP subnet-based VLAN In an IP subnet-based VLAN, all end workstations in an IP subnet are assigned to the same VLAN. In this VLAN, users can move their workstations without having to reconfigure their network addresses. Management VLAN Management VLAN is used to manage the switch from a remote location using protocols such as Telnet, SSH, SNMP, Syslog, etc. Link Aggregation IEEE 802.3ad LACP / Static Trunk, supports five groups of 16-port trunks or static trunks. QoS Hardware queue Supports eight hardware queues. Classification Port-based: Traffic QoS by port 802.1p: The VLAN priority-based Layer 2 CoS QoS class of service is a parameter used in data and voice protocols to differentiate the types of payloads contained in the transmitted packet. DSCP-based differentiated services (DiffServ) Layer 3 DSCP QoS: IP packets can carry either an IP precedence value (IPP) or a Differentiated Services Code Point (DSCP) value. QoS supports the use of both values, as DSCP values are downward compatible with IP priority values. Classification and re-labelling of TCP/IP ACLs: QoS through ACL Rate limiting Ingress policer Egress shaping and speed control per port Scheduling Strict priority and weighted round robin (WRR): Weighted Round Robin is a scheduling algorithm that uses the weights assigned to the queues to determine how much data is emptied from a queue before it is moved to the next queue . Security Certified authentication A private HTTPS key can be stored for management access. User administration User rights can be freely set in up to 15 levels . ACL The switch allows up to 512 entries. Drop or rate limiting based on source/destination MAC/IP address or VLAN ID. Rules and conditions for incoming packets can be defined per port. The rules include protocols, IP ports and address ranges. The rules can be defined using either the authorisation or the exclusion method . The criteria are TCP/ UDP source and destination ports, 802.1p priority, Ethernet type, ICMP packet (Internet Control Message Protocol). Port security MAC address management per port and IP source guard: The MAC address can be checked in combination with the IP address. Storm Control Prevents traffic in a LAN from being disrupted by a broadcast, multicast or unicast flood on a port. RADIUS authentication, 802.1X Authorisation and accounting, MD5 hash, guest VLAN, single/multiple host mode and single/multiple sessions Supports IGMP-RADIUS based 802.1X Dynamic VLAN assignment TACACS+ authentication The switch supports TACACS+ authentication. Switch as client. Secure Shell (SSH) SSH secures Telnet traffic into or out of the switch, SSH v1 and v2 are supported Secure Socket Layer (SSL) SSL encrypts HTTP traffic and thus enables extended secure access to the browser-based management GUI in the switch. HTTPS & SSL (Secured Web) Hyper Text Transfer Protocol Secure (HTTPS) is the secure version of HTTP. BPDU Guard The BPDU Guard, an extension of STP, removes a node that reflects BPDUs back into the network. It enforces the boundaries of the STP domain and keeps the active topology predictable by not allowing network devices behind a BPDU Guard-enabled port to participate in STP . DHCP Snooping With DHCP snooping, the switch has a function that acts as a firewall between untrusted hosts and trusted DHCP servers. Loop protection Loop protection prevents unknown unicast, broadcast and multicast loops in layer 2 switching configurations . Multicast IGMP v1/v2/v3 snooping IGMP restricts the bandwidth-intensive multicast traffic to the requesters. Supports 1024 multicast groups. IGMP Querier IGMP Querier is used to support a Layer 2 multicast domain of snooping switches if no multicast router is available. IGMP Proxy IGMP snooping with proxy reporting or report suppression actively filters IGMP packets to reduce the load on the multicast router. MLD v1/v2 Snooping Delivers IPv6 multicast packets only to the required recipients. Multicast VLAN Registration (MVR) A dedicated, manually configured VLAN, the so-called Multicast VLAN, to forward multicast traffic via a Layer 2 network in conjunction with IGMP snooping. Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af/at Power over Ethernet IEEE 802.az Energy Efficient Ethernet Types/features RY-LGSP38-28

This layer-2 and layer-3 switch was specially developed for applications with high data loads, such as video over IP, video streaming and in conjunction with multicast. The switch has extensive security functions that protect both the switch itself and the network traffic. The PoE allows IP cameras to be powered via the data cable. With its extensive management options, can also fulfil complex network requirements. Special features for access control Active monitoring of the components The switch continuously monitors components supplied via PoE . In the event of a failure, the switch automatically restarts the controller . At the same time, the switch sends an SNMP message. Active monitoring of the PoE supply If, for example, a defective camera demands too much power from the switch, the switch sends an alarm via SNMP. Active management of the PoE power When starting up the switch, the individual PoE ports can be started up with a time delay to prevent overloading of the PoE power supply units. Active integration of the switch into video management systems SW modules are available for the popular video management systems Milestone and Siveillance Video, which allow direct integration of the switch management and DMS into these VMS . Uninterrupted PoE power supply The PoE power supply of the PDs is not interrupted when the switch is rebooted. Jumbo frames even at 100 Mbit/s Jumbo frames up to 10,240 bytes are also supported at 100 Mbit/s. Further information Special features The switch has extensive security functions. For example, the ACL not only allows the switch itself to be protected, but also the traffic in the network. Non-stop PoE: When the switch is restarted, the PoE power supply to the connected cameras is not interrupted. As soon as the switch is operational again, so are the camera images. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system that gives the user a good overview of the entire network in a very simple way. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and name. Maps and maps can be stored as background images, allowing the user to quickly access specific network devices even without knowledge of the IP structure. Device search This function also allows targeted access to a specific device in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user to access immediately without knowing the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis. Error handling and security Network diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limiting allow effective protection against unwanted access. IEEE802.3ah and IEEE802.1ag provide tools for structuring networks. Technical Data General properties Supply voltage 100-240VAC, 50-60Hz Power consumption Max. 40W (without PoE) / 780W (with PoE) MTBF 25°C: 132'737h 40°C: 78'032h 50°C: 49'755h Operating temperature 0°C to 50°C Power loss 136BTU, specification without consideration of PoE power. 439BTU with maximum PoE power output of 740W. Dimensions 442 x 375 x 44mm (WxDxH) Weight 5.6 kg Interfaces Copper ports 48 x 10/100/1000TX, PoE+, RJ45 Maximum PoE power across all ports: 740W Fibre optic ports 4 x SFP/SFP+, 1G/10G We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested or guaranteed by us. Console port 1 x RS232, RJ45 Network properties Network management HTTP/HTTPS, SSH, Telnet Client, IPv6 Management SNMP v1, v2c, v3 supports traps and USM DHCP Client / DHCPv6 Client DHCP server Embedded RMON agent supports RMON groups 1,2,3,9 (history, statistics, alarms and events) for improved traffic management, monitoring and analysis Backplane 176Gbit/s MAC table 32k Configuration Web GUI, DMS, SNMPv1, v2c and v3, console, Telnet, RMON Individual management accesses can be deactivated PoE management Port configuration Supports the PoE configuration function per port. PoE scheduling Supports PoE scheduling per port for switching the PoE devices (PDs) on/off. Automatic check Check the connection status of the PDs. Restart the PDs, if there are no responses. Power delay The PoE ports can be switched on with a time delay to protect the switch from overload. Non-stop PoE, soft reboot The switch supplies the PDs with power even during a soft reboot. Port settings Port disable/enable, autonegotiation 10/100/1000Mbps, flow control disable/enable, data rate control on each port, max. framesize, power control Port status display Display per port: speed, link status, flow control status, autonegotiation status, trunk status Layer3 functions IPv4 and IPv6 unicast: static routing RIP v1/v2: The Routing Information Protocol (RIP) is an internal routing protocol that is based on distance vector routing and is used within an autonomous system. OSPF v2/v3 : OSPF is a link-state routing protocol. It is designed for internal operation in a single autonomous system. Each OSPF router maintains an identical database that describes the topology of the autonomous system. A routing table is calculated from this database by creating a shortest-path tree Communication redundancy Standard Spanning Tree (STP), IEEE802.1d Rapid Spanning Tree (RSTP), IEEE802.w Multiple Spanning Tree (MSTP), IEEE802.1s VLAN Tag-based VLAN according to 802.1Q Supports up to 4K VLANs simultaneously (from 4096 VLAN IDs) Port-based VLAN A port member of a VLAN can be isolated to other isolated ports of the same VLAN and private VLANs. Private VLAN Edge (PVE) Private VLANs are based on the source port mask and there are no connections to VLANs. This means that VLAN IDs and private VLAN IDs can be identical. Voice VLAN The Voice VLAN function enables the forwarding of voice traffic on the Voice VLAN. Guest VLAN With the IEEE 802.1X guest VLAN function, a guest VLAN can be configured for any 802.1X port on the device to provide non-802.1X compliant clients with restricted services. Q-in-Q (double tag) VLAN This allows specific requirements for VLAN IDs and the number of VLANs to be supported to be set. 802.1v protocol VLAN The classification of multiple protocols into a single VLAN often enforces VLAN boundaries that are unsuitable for some of the protocols. This requires the presence of a non-standard unit that forwards the frames with the protocols for which the VLAN boundaries are unsuitable between VLANs . MAC-based VLAN The MAC-based VLAN function makes it possible to assign incoming untagged packets to a VLAN and thus classify the traffic based on the source MAC address of the packet. IP subnet-based VLAN In an IP subnet-based VLAN, all end workstations in an IP subnet are assigned to the same VLAN. In this VLAN, users can move their workstations without having to reconfigure their network addresses. Management VLAN Management VLAN is used to manage the switch from a remote location using protocols such as Telnet, SSH, SNMP, Syslog, etc. Link Aggregation IEEE 802.3ad LACP / Static Trunk, supports five groups of 16-port trunks or static trunks. QoS Hardware queue Supports eight hardware queues. Classification Port-based: Traffic QoS by port 802.1p: The VLAN priority-based Layer 2 CoS QoS class of service is a parameter used in data and voice protocols to differentiate the types of payloads contained in the transmitted packet. DSCP-based differentiated services (DiffServ) Layer 3 DSCP QoS: IP packets can carry either an IP precedence value (IPP) or a Differentiated Services Code Point (DSCP) value. QoS supports the use of both values, as DSCP values are downward compatible with IP priority values. Classification and re-labelling of TCP/IP ACLs: QoS through ACL Rate limiting Ingress policer Egress shaping and speed control per port Scheduling Strict priority and weighted round robin (WRR): Weighted Round Robin is a scheduling algorithm that uses the weights assigned to the queues to determine how much data is emptied from a queue before it is moved to the next queue . Security Certified authentication A private HTTPS key can be stored for management access. User administration User rights can be freely set in up to 15 levels . ACL The switch allows up to 512 entries. Drop or rate limiting based on source/destination MAC/IP address or VLAN ID. Rules and conditions for incoming packets can be defined per port. The rules include protocols, IP ports and address ranges. The rules can be defined using either the authorisation or the exclusion method . The criteria are TCP/ UDP source and destination ports, 802.1p priority, Ethernet type, ICMP packet (Internet Control Message Protocol). Port security MAC address management per port and IP source guard: The MAC address can be checked in combination with the IP address. Storm Control Prevents traffic in a LAN from being disrupted by a broadcast, multicast or unicast flood on a port. RADIUS authentication, 802.1X Authorisation and accounting, MD5 hash, guest VLAN, single/multiple host mode and single/multiple sessions Supports IGMP-RADIUS based 802.1X Dynamic VLAN assignment TACACS+ authentication The switch supports TACACS+ authentication. Switch as client. Secure Shell (SSH) SSH secures Telnet traffic to or from the switch, SSH v1 and v2 are supported Secure Socket Layer (SSL) SSL encrypts the HTTP traffic and thus enables extended secure access to the browser-based management GUI in the switch. HTTPS & SSL (Secured Web) Hyper Text Transfer Protocol Secure (HTTPS) is the secure version of HTTP. BPDU Guard The BPDU Guard, an extension of STP, removes a node that reflects BPDUs back into the network. It enforces the boundaries of the STP domain and keeps the active topology predictable by not allowing network devices behind a BPDU Guard-enabled port to participate in STP . DHCP Snooping With DHCP snooping, the switch has a function that acts as a firewall between untrusted hosts and trusted DHCP servers. Loop protection Loop protection prevents unknown unicast, broadcast and multicast loops in layer 2 switching configurations . Multicast IGMP v1/v2/v3 snooping IGMP restricts the bandwidth-intensive multicast traffic to the requesters. Supports 1024 multicast groups. IGMP Querier IGMP Querier is used to support a Layer 2 multicast domain of snooping switches if no multicast router is available. IGMP Proxy IGMP snooping with proxy reporting or report suppression actively filters IGMP packets to reduce the load on the multicast router. MLD v1/v2 Snooping Delivers IPv6 multicast packets only to the required recipients. Multicast VLAN Registration (MVR) A dedicated, manually configured VLAN, the so-called Multicast VLAN, to forward multicast traffic via a Layer 2 network in conjunction with IGMP snooping. Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class of service IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af/at Power over Ethernet IEEE 802.az Energy Efficient Ethernet Types/features RY-LGSP38-52

This layer 2/3 switch with extensive L3 functions was specially developed for applications with a high data load, such as video over IP, video streaming also in conjunction with multicast. The switch has extensive security functions that protect both the switch itself and the network traffic. The PoE allows IP cameras to be powered via the data cable. With the extensive management options, even complex network requirements can be fulfilled. The option of redundant power supply increases the availability of the switch. Special features for access control Active monitoring of the components Components powered by the switch via PoE are constantly monitored. In the event of a failure, the switch restarts the controller independently . If this is not successful, the switch sends an alarm message via SNMP. Active monitoring of the PoE supply If, for example, too much power is required from the switch due to a defective camera, the switch sends an alarm via SNMP. Active management of the PoE power When the switch is started up, the individual PoE ports can be started up with a time delay to prevent the PoE power supply from being overloaded . Further component-friendly features Extra high backplane performance for smooth transmission with full port utilisation. Jumbo frames up to 9600 bytes are also supported at 100 Mbit/s . Port security through MAC address restriction. Further information Special features The switch has extensive security functions. For example, the ACL not only allows the switch itself to be protected, but also the traffic in the network. Non-stop PoE: When the switch is restarted, the PoE power supply to the connected cameras is not interrupted. As soon as the switch is operational again, so are the camera images. System notes The switch supports PTP, precision time protocol according to IEEE1588 v2 and IEC 61588. This function is used in industrial automation, in professional audio-video applications for audio-video bridging and in telecommunications, among others. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system, which gives the user a very simple overview of the entire network. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices in the network, such as IP cameras or servers, with details of the IP address, device type and designation. Plans and maps can be stored as background images with which the user can quickly access specific network devices even without knowledge of the IP structure, Device search This function makes it possible to access a specific device even in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user immediate access without knowledge of the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis . Error handling and security Network diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limiting allow effective protection against unauthorised access. With IEEE802.3ah and IEEE802.1ag, tools are available for the structuring of networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz Redundant power supply possible Power consumption Max. 40W without PoE 1,000W with PoE 920W even with redundant power supply unit 2,000W with PoE 1840W with second power supply unit MTBF 25°C: 129'236h 40°C: 69'015h 50°C: 44'683h Operating temperature 0°C to 45°C Power dissipation 136BTU, without PoE 614BTU, with maximum PoE power output of 920W Dimensions 442 x 440 x 44mm (WxDxH) Weight 5.6kg Interfaces Copper ports 48 x 10/100/1000TX, PoE+, RJ45 Maximum PoE power across all ports: 920W If two power supply units are inserted, a PoE power of 1840W is available. If the second power supply unit is used for redundancy, the PoE load should not exceed 920W. Fibre optic ports 4 x SFP/SFP+, 1G/10G We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested or guaranteed by us. Console port 1 x RS232, RJ45 Network properties Network management HTTP/HTTPS, SSH, Telnet Client, IPv6 Management SNMP v1, v2c, v3 supports traps and USM DHCP Client / DHCPv6 Client DHCP server PTP, Precision Time Protocol, IEEE1588 v2 Embedded RMON agent supports RMON groups 1,2,3,9 (history, statistics, alarms and events) for improved traffic management, monitoring and analysis Backplane 176Gbit/s MAC table 32k Configuration Console, Web GUI, SNMPv1, v2c and v3 PoE management Port configuration Supports the PoE configuration function per port. PoE scheduling Supports PoE scheduling per port to switch on/off the PoE devices (PDs). Automatic check Check the connection status of the PDs. Restart the PDs, if there are no responses. Power delay The PoE ports can be switched on with a time delay to protect the switch from overload. Non-stop PoE, soft reboot The switch supplies the PDs with power even during a soft reboot. Port settings Port disable/enable, autonegotiation 10/100/1000Mbps, flow control disable/enable, data rate control on each port, max. framesize, power control Port status display Display per port: speed, link status, flow control status, autonegotiation status, trunk status Layer3 functions IPv4 and IPv6 unicast: static routing Communication redundancy Standard Spanning Tree (STP), IEEE802.1d Rapid Spanning Tree (RSTP), IEEE802.w Multiple Spanning Tree (MSTP), IEEE802.1s Ethernet Linear Protection Switching (ELPS), ITU-T G.8031 Ethernet Ring Protection Switching (ERPS), ITU-T G.8032 VLAN Tag-based VLAN according to 802.1Q Supports up to 4K VLANs simultaneously (from 4096 VLAN IDs) Port-based VLAN A port member of a VLAN can be isolated to other isolated ports of the same VLAN and private VLANs. Private VLAN Edge (PVE) Private VLANs are based on the source port mask and there are no connections to VLANs. This means that VLAN IDs and private VLAN IDs can be identical. Voice VLAN The Voice VLAN function enables the forwarding of voice traffic on the Voice VLAN. Guest VLAN With the IEEE 802.1X guest VLAN function, a guest VLAN can be configured for any 802.1X port on the device to provide non-802.1X compliant clients with restricted services. Q-in-Q (double tag) VLAN This allows specific requirements for VLAN IDs and the number of VLANs to be supported to be set. 802.1v protocol VLAN The classification of multiple protocols into a single VLAN often enforces VLAN boundaries that are unsuitable for some of the protocols. This requires the presence of a non-standard unit that forwards the frames with the protocols for which the VLAN boundaries are unsuitable between VLANs . MAC-based VLAN The MAC-based VLAN function makes it possible to assign incoming untagged packets to a VLAN and thus classify the traffic based on the source MAC address of the packet. IP subnet-based VLAN In an IP subnet-based VLAN, all end workstations in an IP subnet are assigned to the same VLAN. In this VLAN, users can move their workstations without having to reconfigure their network addresses. Management VLAN Management VLAN is used to manage the switch from a remote location using protocols such as Telnet, SSH, SNMP, Syslog, etc. Link Aggregation IEEE 802.3ad LACP / Static Trunk, supports five groups of 16-port trunks or static trunk QoS Hardware queue Supports eight hardware queues. Classification Port-based: Traffic QoS by port 802.1p: The VLAN priority-based Layer 2 CoS QoS class of service is a parameter used in data and voice protocols to differentiate the types of payloads contained in the transmitted packet. DSCP-based differentiated services (DiffServ) Layer 3 DSCP QoS: IP packets can carry either an IP precedence value (IPP) or a Differentiated Services Code Point (DSCP) value. QoS supports the use of both values, as DSCP values are downward compatible with IP priority values. Classification and re-labelling of TCP/IP ACLs: QoS through ACL Rate limiting Ingress policer Egress shaping and speed control per port Scheduling Strict priority and weighted round robin (WRR): Weighted Round Robin is a scheduling algorithm that uses the weights assigned to the queues to determine how much data is emptied from a queue before it is moved to the next queue . Security Certified authentication A private HTTPS key can be stored for management access. User administration User rights can be freely set in up to 15 levels . ACL The switch allows up to 512 entries. Drop or rate limiting based on source/destination MAC/IP address or VLAN ID. Rules and conditions for incoming packets can be defined per port. The rules include protocols, IP ports and address ranges. The rules can be defined using either the authorisation or the exclusion method . The criteria are TCP/ UDP source and destination ports, 802.1p priority, Ethernet type, ICMP packet (Internet Control Message Protocol). Port security MAC address management per port and IP source guard: The MAC address can be checked in combination with the IP address. Storm Control Prevents traffic in a LAN from being disrupted by a broadcast, multicast or unicast flood on a port. RADIUS authentication, 802.1X Authorisation and accounting, MD5 hash, guest VLAN, single/multiple host mode and single/multiple sessions Supports IGMP-RADIUS based 802.1X Dynamic VLAN assignment TACACS+ authentication The switch supports TACACS+ authentication. Switch as client. Secure Shell (SSH) SSH secures Telnet traffic to or from the switch, SSH v1 and v2 are supported Secure Socket Layer (SSL) SSL encrypts the HTTP traffic and thus enables extended secure access to the browser-based management GUI in the switch. HTTPS & SSL (Secured Web) Hyper Text Transfer Protocol Secure (HTTPS) is the secure version of HTTP. BPDU Guard The BPDU Guard, an extension of STP, removes a node that reflects BPDUs back into the network. It enforces the boundaries of the STP domain and keeps the active topology predictable by not allowing network devices behind a BPDU Guard-enabled port to participate in STP . DHCP Snooping With DHCP snooping, the switch has a function that acts as a firewall between untrusted hosts and trusted DHCP servers. Loop protection Loop protection prevents unknown unicast, broadcast and multicast loops in layer 2 switching configurations . Multicast IGMP v1/v2/v3 snooping IGMP restricts the bandwidth-intensive multicast traffic to the requesters. Supports 1024 multicast groups. IGMP Querier IGMP Querier is used to support a Layer 2 multicast domain of snooping switches if no multicast router is available. IGMP Proxy IGMP snooping with proxy reporting or report suppression actively filters IGMP packets to reduce the load on the multicast router. MLD v1/v2 Snooping Delivers IPv6 multicast packets only to the required recipients. Multicast VLAN Registration (MVR) A dedicated, manually configured VLAN, the so-called Multicast VLAN, to forward multicast traffic via a Layer 2 network in conjunction with IGMP snooping. Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af/at Power over Ethernet IEEE 802.az Energy Efficient Ethernet IEEE 1588v2 PTP Precisison Time Protocol Types/features RY-LGSPTR28-52 Switch with 920W for PoE+ incl. one power supply unit 920W The second power supply unit must be ordered separately RY-PS-TR920 Power supply unit with 920W

This layer-2 and layer-3 switch was specially developed for applications with high data loads, such as video over IP, video streaming - also in conjunction with multicast. The switch has extensive security functions that protect both the switch itself and the network traffic. With its extensive management options, can also fulfil complex network requirements. Special features for access control Active monitoring of the components Monitoring of the bandwidths present at the port. Definition of the maximum and minimum bandwidths with the DMS. Active integration of the switch in management systems SW modules are available for the popular Milestone and Siveillance Video management systems that allow the switch management and the DMS to be integrated directly into these VMS. Jumbo frames even at 100 Mbit/s Jumbo frames up to 10,240 bytes are also supported at 100 Mbit/s Further information Special features The switch has extensive security functions. For example, the ACL not only allows the switch itself to be protected, but also the traffic in the network. DMS DMS (Device Management System) The switch has an integrated network monitoring and control system that gives the user a good overview of the entire network in a very simple way. This DMS system has the following features: Graphical network overview The network topology view provides a quick overview of all switches and end devices such as IP cameras or servers in the network with details of the IP address, device type and name. Maps and maps can be stored as background images, allowing the user to quickly access specific network devices even without knowledge of the IP structure. Device search This function also allows targeted access to a specific device in larger networks. Newly added devices, such as a replaced IP camera, are displayed immediately and allow the user to access immediately without knowing the IP address. Data traffic display The data traffic can be displayed graphically per port over a time axis. Error handling and security Network diagnostics between master switch and connected end devices. Protection mechanisms such as data rate limiting provide effective protection against unwanted access. IEEE802.3ah and IEEE802.1ag provide tools for structuring networks. Technical data General properties Supply voltage 100-240VAC, 50-60Hz Power consumption Max. 40W MTBF 25°C: 196'049h 40°C: 46'583h 50°C: 42'690h 60°C: 38'246 Operating temperature 0°C to 50°C Power loss 136BTU Dimensions 220 x 242 x 44mm (WxDxH) Weight 2.3kg Interfaces Copper ports 2 x 1G/2.5G/5G/10G TX, RJ45 Fibre optic ports 8 x SFP/SFP+, 1G/10G We recommend the use of our barox SFPs. The compatibility of our devices with SFPs from other manufacturers is not tested or guaranteed by us. Console port 1 x RS232, RJ45 Network properties Network management HTTP/HTTPS, SSH, Telnet Client, IPv6 Management SNMP v1, v2c, v3 supports traps and USM DHCP Client / DHCPv6 Client DHCP server Embedded RMON agent supports RMON groups 1,2,3,9 (history, statistics, alarms and events) for improved traffic management, monitoring and analysis Backplane 200 GBit/s MAC table 32k Configuration Web GUI, DMS, SNMPv1, v2c and v3, console, Telnet, RMON Individual management accesses can be deactivated PoE management No PoE Port settings Port disable/enable, autonegotiation 100/1000/10000Mbps, flow control disable/enable, data rate control on each port, max. framesize, power control Port status display Display per port: speed, link status, flow control status, autonegotiation status, trunk status Layer3 functions IPv4 and IPv6 unicast: static routing RIP v1/v2: The Routing Information Protocol (RIP) is an internal routing protocol that is based on distance vector routing and is used within an autonomous system. OSPF v2/v3 : OSPF is a link-state routing protocol. It is designed for internal operation in a single autonomous system. Each OSPF router maintains an identical database that describes the topology of the autonomous system. A routing table is calculated from this database by creating a shortest-path tree. Communication redundancy Standard Spanning Tree (STP), IEEE802.1d Rapid Spanning Tree (RSTP), IEEE802.w Multiple Spanning Tree (MSTP), IEEE802.1s Ethernet Linear Protection Switching (ELPS), ITU-T G.8031 Ethernet Ring Protection Switching (ERPS), ITU-T G.8032 VLAN Tag-based VLAN according to 802.1Q Supports up to 4K VLANs simultaneously (from 4096 VLAN IDs) Port-based VLAN A port member of a VLAN can be isolated to other isolated ports of the same VLAN and private VLANs. Private VLAN Edge (PVE) Private VLANs are based on the source port mask and there are no connections to VLANs. This means that VLAN IDs and private VLAN IDs can be identical. Voice VLAN The Voice VLAN function enables the forwarding of voice traffic on the Voice VLAN. Guest VLAN With the IEEE 802.1X guest VLAN function, a guest VLAN can be configured for any 802.1X port on the device to provide non-802.1X compliant clients with restricted services. Q-in-Q (double tag) VLAN This allows specific requirements for VLAN IDs and the number of VLANs to be supported to be set. 802.1v protocol VLAN The classification of multiple protocols into a single VLAN often enforces VLAN boundaries that are unsuitable for some of the protocols. This requires the presence of a non-standard unit that forwards the frames with the protocols for which the VLAN boundaries are unsuitable between VLANs . MAC-based VLAN The MAC-based VLAN function makes it possible to assign incoming untagged packets to a VLAN and thus classify the traffic based on the source MAC address of the packet. IP subnet-based VLAN In an IP subnet-based VLAN, all end workstations in an IP subnet are assigned to the same VLAN. In this VLAN, users can move their workstations without having to reconfigure their network addresses. Management VLAN Management VLAN is used to manage the switch from a remote location using protocols such as Telnet, SSH, SNMP, Syslog, etc. Link Aggregation IEEE 802.3ad LACP / Static Trunk, supports five groups of 16-port trunks or static trunks. QoS Hardware queue Supports eight hardware queues. Classification Port based: Traffic QoS by port 802.1p: The VLAN priority-based Layer 2 CoS QoS class of service is a parameter used in data and voice protocols to differentiate the types of payloads contained in the transmitted packet. DSCP-based differentiated services (DiffServ) Layer 3 DSCP QoS: IP packets can carry either an IP precedence value (IPP) or a Differentiated Services Code Point (DSCP) value. QoS supports the use of both values, as DSCP values are downward compatible with IP priority values. Classification and re-labelling of TCP/IP ACLs: QoS through ACL Rate limiting Ingress policer Egress shaping and speed control per port Scheduling Strict priority and weighted round robin (WRR): Weighted Round Robin is a scheduling algorithm that uses the weights assigned to the queues to determine how much data is emptied from a queue before it is moved to the next queue . Security Certified authentication A private HTTPS key can be stored for management access. User administration User rights can be freely set in up to 15 levels . ACL The switch allows up to 512 entries. Drop or rate limiting based on source/destination MAC/IP address or VLAN ID. Rules and conditions for incoming packets can be defined per port. The rules include protocols, IP ports and address ranges. The rules can be defined using either the authorisation or the exclusion method . The criteria are TCP/ UDP source and destination ports, 802.1p priority, Ethernet type, ICMP packet (Internet Control Message Protocol). Port security MAC address management per port and IP source guard: The MAC address can be checked in combination with the IP address. Storm Control Prevents traffic in a LAN from being disrupted by a broadcast, multicast or unicast flood on a port. RADIUS authentication, 802.1X Authorisation and accounting, MD5 hash, guest VLAN, single/multiple host mode and single/multiple sessions Supports IGMP-RADIUS based 802.1X Dynamic VLAN assignment TACACS+ authentication The switch supports TACACS+ authentication. Switch as client. Secure Shell (SSH) SSH secures Telnet traffic into or out of the switch, SSH v1 and v2 are supported Secure Socket Layer (SSL) SSL encrypts the HTTP traffic and thus enables extended secure access to the browser-based management GUI in the switch. HTTPS & SSL (Secured Web) Hyper Text Transfer Protocol Secure (HTTPS) is the secure version of HTTP. BPDU Guard The BPDU Guard, an extension of STP, removes a node that reflects BPDUs back into the network. It enforces the boundaries of the STP domain and keeps the active topology predictable by not allowing network devices behind a BPDU Guard-enabled port to participate in STP . DHCP Snooping With DHCP snooping, the switch has a function that acts as a firewall between untrusted hosts and trusted DHCP servers. Loop protection Loop protection prevents unknown unicast, broadcast and multicast loops in layer 2 switching configurations . Multicast IGMP v1/v2/v3 snooping IGMP restricts the bandwidth-intensive multicast traffic to the requesters. Supports 1024 multicast groups. IGMP Querier IGMP Querier is used to support a Layer 2 multicast domain of snooping switches if no multicast router is available. IGMP Proxy IGMP snooping with proxy reporting or report suppression actively filters IGMP packets to reduce the load on the multicast router. MLD v1/v2 Snooping Delivers IPv6 multicast packets only to the required recipients. Multicast VLAN Registration (MVR) A dedicated, manually configured VLAN, the so-called Multicast VLAN, to forward multicast traffic via a Layer 2 network in conjunction with IGMP snooping. Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100BASE-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class ofservice IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.az Energy Efficient Ethernet Types/features RY-LGSO38-10 RY-19'' bracket Pair of brackets for mounting the RY-LGSP23-10 in a 19" frame Included in the scope of delivery