TP-LINK TL-NS650-24G4F Full Gigabit Layer 3 Network Management Switch

TP-LINK newly developed full Gigabit three-layer network management switch, adopts a new generation of high-performance hardware and software platforms, providing flexible, cost-effective full Gigabit access and uplink port, support three-layer routing protocol, complete security protection Mechanism, perfect ACL / QoS strategy and rich VLAN feature, easy to manage maintenance, meet users to manage, high security, low-cost networking requirements for network equipment, suitable for campus, hotel and enterprise park network access, gathering, The core variety of application scenarios.

Full Gigabit port

• Support "Ethernet port + optical port" combination, convenient for users to flexibly, meet the needs of various scene network;
• All ports have Gigabit line speed forwarding capabilities to meet different user needs.

Strong business processing capabilities

• Supports RIP dynamic routing protocol, dynamically generates and updates routing tables, and solves the routing problem of small and medium-sized networks after subnetting.
• Support static routing, administrators manually configure routing entries to achieve communication between different network segments, simple, efficient and reliable.
• Support DHCP server to assign IP addresses to hosts in the network.
• Supports DHCP relay, switches on different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
• Support proxy ARP, so that hosts in different physical networks on the same network segment can communicate normally.
• Support IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN, users can flexibly divide VLAN according to different needs.
• Support GVRP, realize the dynamic distribution, registration and attribute propagation of VLAN, reduce the amount of manual configuration, and ensure the correct configuration.
• Support VLAN VPN function, encapsulate the outer VLAN Tag for the user's private network packet at the public network access end, so that the packet carries two layers of VLAN Tag across the public network.
• Support QoS, support three priority modes based on port, 802.1P and DSCP and four queue scheduling algorithms: Equ, SP, WRR, SP+WRR.
• Support ACL, filter packets by configuring matching rules, processing operations, and time permissions, and provide flexible security access control strategies.
• Support IGMP V1/V2 multicast protocol, MLD Snooping, IGMP Snooping to meet the needs of multi-terminal HD video surveillance and video conference access.
• Support IPv6 to meet the needs of the network transition from IPv4 to IPv6.

Complete security protection mechanism

• Support IP address, MAC address, VLAN and port quaternary binding to filter data packets.
• Supports ARP protection to protect against gateway spoofing and man-in-the-middle attacks such as ARP spoofing and ARP flood attacks common in LANs.
• Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC/IP spoofing.
• Support DoS protection, support Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.
• Support 802.1X authentication, provide authentication functions for LAN computers, and control the authorization status of controlled ports according to the authentication results.
• Support port security, stop learning when the number of MAC addresses learned by the port reaches the maximum number, prevent MAC address attacks and control port network traffic.
• Support DHCP Snooping, effectively prevent privately set DHCP server, and ensure the legality of the DHCP server.

Diverse reliability protection

• Supports STP/RSTP/MSTP spanning tree protocol to eliminate layer 2 loops and realize link backup.
• Supports spanning tree security features to prevent devices in the spanning tree network from being subjected to various forms of malicious attacks.
• Support static aggregation and dynamic aggregation, effectively increase link bandwidth, achieve load balancing, link backup, and improve link reliability.

Easy operation and maintenance

• Support Web network management, CLI command line (Console, Telnet), SNMP (V1/V2/V3) and other diverse management and maintenance methods.
• Support HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods, management is more secure.
• Support RMON, system log, port traffic statistics, easy network optimization and transformation.
• Support cable detection, Ping detection and Tracert detection operations, easy analysis of faulty network nodes.
• Support LLDP, convenient for network management system to query and judge the communication status of the link.
• Support CPU monitoring, memory monitoring, Ping detection, Tracert detection, cable detection.