TP-LINK TL-NS660-24GP4T 10 Gigabit Layer 3 Network Management PoE Switch

TL-NS660-24GP4T is TP-Link newly developed cassette PoE switch, which adopts a new generation of high-performance hardware and software platforms, providing flexible Gigabit access and cost-effective access to travel. Port, and 24 Gigabit RJ45 ports support IEEE 802.3AT / AF standard PoE power supply, the maximum PoE output power of the whole machine is 396W. Equipment also supports stacking, a variety of three-layer routing protocols, complete security mechanisms, perfect ACL / QoS strategies, and rich VLAN features, easy to manage, can meet hotels, campus, enterprises, park PoE network high speed, high density Access requirements.

Gigabit access, 10 Gigabit uplink

• TL-NS660-24GP4T offers 24 Gigabit RJ45 electrical ports and 4 10 Gigabit SFP+ optical ports;
• All ports have line speed forwarding capabilities.

PoE power supply function

• The 24 Gigabit RJ45 port supports IEEE 802.3af/at standard PoE power supply, meets the demand of POE power supply such as security monitoring, telephone conference system, wireless coverage.
• The maximum PoE output power of the whole machine is 396W, and the port PoE output power is 30W.
• Supports setting the Web network management interface to control the power supply of the PoE port based on a user-defined time period.
• Support to configure the priority of PoE ports on the Web network management interface. When the remaining power is insufficient, the power supply of high priority ports is guaranteed first.

Strong business processing capabilities

• Support OSPF, RIP, RIPNG dynamic routing protocol, to solve the route routing problem after small and medium network division subnet, simplify network configuration.
• Support static routing, administrators manually configure routing entries to achieve communication between different network segments, simple, efficient and reliable.
• Support DHCP server to assign IP addresses to hosts in the network.
• Supports DHCP relay, switches on different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
• Support proxy ARP, so that hosts in different physical networks on the same network segment can communicate normally.
• Support IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN, users can flexibly divide VLAN according to different needs.
• Support GVRP, realize the dynamic distribution, registration and attribute propagation of VLAN, reduce the amount of manual configuration, and ensure the correct configuration.
• Support VLAN VPN function, encapsulate the outer VLAN Tag for the user's private network packet at the public network access end, so that the packet carries two layers of VLAN Tag across the public network.
• Support QoS, support three priority modes based on port, 802.1P and DSCP and four queue scheduling algorithms: Equ, SP, WRR, SP+WRR.
• Support ACL, filter packets by configuring matching rules, processing operations, and time permissions, and provide flexible security access control strategies.
• Support IGMP V1/V2 multicast protocol, MLD Snooping, IGMP Snooping to meet the needs of multi-terminal HD video surveillance and video conference access.

Complete security protection mechanism

• Support IP address, MAC address, VLAN and port quaternary binding to filter data packets.
• Supports ARP protection to protect against gateway spoofing and man-in-the-middle attacks such as ARP spoofing and ARP flood attacks common in LANs.
• Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC/IP spoofing.
• Support DoS protection, support Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.
• Support 802.1X authentication, provide authentication functions for LAN computers, and control the authorization status of controlled ports according to the authentication results.
• Support port security, stop learning when the number of MAC addresses learned by the port reaches the maximum number, prevent MAC address attacks and control port network traffic.
• Support DHCP Snooping, effectively prevent privately set DHCP server, and ensure the legality of the DHCP server.

Diverse reliability protection

• Support stacking, stacking system virtualization becomes a "distributed device", which can simplify management and improve system reliability.
• Support STP/RSTP/MSTP production tree protocol, eliminate layer 2 loops, and realize link backup.
• Supports spanning tree security features to prevent devices in the spanning tree network from being subjected to various forms of malicious attacks.
• Support static aggregation and dynamic aggregation, effectively increase link bandwidth, achieve load balancing, link backup, and improve link reliability.

Easy operation and maintenance

• Support TP-LINK commercial cloud platform, easy to achieve remote management, maintenance equipment, reduce site operation and maintenance costs
• Support Web network management, CLI command line (Console, Telnet), SNMP (V1/V2/V3) and other diverse management and maintenance methods.
• Support HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods, management is more secure.
• Support RMON, system log, port traffic statistics, easy network optimization and transformation.
• Support cable detection, Ping detection and Tracert detection operations, easy analysis of faulty network nodes.
• Support LLDP, convenient for network management system to query and judge the communication status of the link.
• Support CPU monitoring, memory monitoring, Ping detection, Tracert detection, cable detection.