TP-LINK TL-NS650-24GP4F Full Gigabit Layer 3 Network Management PoE Switch

TL-NS650-24GP4F is a new-link newly developed cassette full Gigabit three-layer network management PoE switch, which adopts a new generation of high-performance hardware and software platforms, providing flexible, cost-effective accession and upstream ports, support three Layer routing protocols, complete security protection mechanisms, perfect ACL / QoS policies, and rich VLAN features, easy to manage maintenance, meet users to manage, high security, low-cost networking requirements, suitable for campus, hotel, Enterprise, the park network PoE access application scenario.

Full Gigabit port

• TL-NS650-24GP4F provides 24 Gigabit RJ45 electrical ports and 4 Gigabit SFP optical ports;
• All ports have Gigabit line speed forwarding capabilities.

PoE power supply function

• 24 Gigabit RJ45 ports support the IEEE 802.3af/at standard PoE + power supply, meet the needs of POE power supply such as security monitoring, telephone conference system, wireless coverage.
• The maximum PoE output power of the whole machine reaches 370W, and the port PoE output power is 30W.
• Supports setting the Web network management interface to control the power supply of the PoE port based on a user-defined time period.
• Support to configure the priority of PoE ports on the Web network management interface. When the remaining power is insufficient, the power supply of high priority ports is guaranteed first.

Strong business processing capabilities

• Supports RIP dynamic routing protocol, dynamically generates and updates routing tables, and solves the routing problem of small and medium-sized networks after subnetting.
• Support static routing, administrators manually configure routing entries to achieve communication between different network segments, simple, efficient and reliable.
• Support DHCP server to assign IP addresses to hosts in the network.
• Supports DHCP relay, switches on different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
• Support proxy ARP, so that hosts in different physical networks on the same network segment can communicate normally.
• Support IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN, users can flexibly divide VLAN according to different needs.
• Support GVRP, realize the dynamic distribution, registration and attribute propagation of VLAN, reduce the amount of manual configuration, and ensure the correct configuration.
• Support VLAN VPN function, encapsulate the outer VLAN Tag for the user's private network packet at the public network access end, so that the packet carries two layers of VLAN Tag across the public network.
• Support QoS, support three priority modes based on port, 802.1P and DSCP and four queue scheduling algorithms: Equ, SP, WRR, SP+WRR.
• Support ACL, filter packets by configuring matching rules, processing operations, and time permissions, and provide flexible security access control strategies.
• Support IGMP V1/V2 multicast protocol, MLD Snooping, IGMP Snooping to meet the needs of multi-terminal HD video surveillance and video conference access.
• Support IPv6 to meet the needs of the network transition from IPv4 to IPv6.

Complete security protection mechanism

• Support IP address, MAC address, VLAN and port quaternary binding to filter data packets.
• Supports ARP protection to protect against gateway spoofing and man-in-the-middle attacks such as ARP spoofing and ARP flood attacks common in LANs.
• Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC/IP spoofing.
• Support DoS protection, support Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.
• Support 802.1X authentication, provide authentication functions for LAN computers, and control the authorization status of controlled ports according to the authentication results.
• Support port security, stop learning when the number of MAC addresses learned by the port reaches the maximum number, prevent MAC address attacks and control port network traffic.
• Support DHCP Snooping, effectively prevent privately set DHCP server, and ensure the legality of the DHCP server.

Diverse reliability protection

• Supports STP/RSTP/MSTP spanning tree protocol to eliminate layer 2 loops and realize link backup.
• Supports spanning tree security features to prevent devices in the spanning tree network from being subjected to various forms of malicious attacks.
• Support static aggregation and dynamic aggregation, effectively increase link bandwidth, achieve load balancing, link backup, and improve link reliability.

Easy operation and maintenance

• Support TP-LINK commercial cloud platforms, easy to implement remote management, maintenance equipment, reduce site operation and maintenance costs.
• Support intelligent start, automatically configure networking, topology graphics display.
• Support Web network management, CLI command line (Console, Telnet), SNMP (V1/V2/V3) and other diverse management and maintenance methods.
• Support HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods, management is more secure.
• Support RMON, system log, port traffic statistics, easy network optimization and transformation.
• Support cable detection, Ping detection and Tracert detection operations, easy analysis of faulty network nodes.
• Support LLDP, convenient for network management system to query and judge the communication status of the link.
• Support CPU monitoring, memory monitoring, Ping detection, Tracert detection, cable detection.