TP-LINK TL-NS680-24T2Q All 10 Gigabit stacked Layer 3 Network Management Switch

TL-NS680-24T2Q is TP-LINK newly developed cassette all-to-million packed three-storey network management switch, with a new generation of high-performance hardware and software platforms, providing 10G access and 40G uplink port, support stack, a variety of three floors Routing protocols, rich business features, perfect security protection mechanisms, easy to manage maintenance, available for high-rate wireless device access, data center 10 Gigabit server access, park access / aggregation layer, enterprise network core layer and other application scenarios .

10G access, 40G uplink

• TL-NS680-24T2Q provides 24 10Gbps SFP+ optical ports and 2 40Gbps QSFP+ optical ports;
• All ports have line speed forwarding capabilities.

Strong business processing capabilities

• Support BGP, OSPF, RIP dynamic routing protocols and static routing protocols, to solve routing routing problems after complex network partition subnet.
• Host route entries up to 16K.
• Support for DHCP Server, DHCP relay, assign IP addresses for hosts in the network.
• Support proxy ARP, so that hosts in different physical networks on the same network segment can communicate normally.
• Support IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN, users can flexibly divide VLAN according to different needs.
• Support GVRP, realize the dynamic distribution, registration and attribute propagation of VLAN, reduce the amount of manual configuration, and ensure the correct configuration.
• Support VLAN VPN function, encapsulate the outer VLAN Tag for the user's private network packet at the public network access end, so that the packet carries two layers of VLAN Tag across the public network.
• Support QoS, support three priority modes based on port, 802.1P and DSCP and four queue scheduling algorithms: Equ, SP, WRR, SP+WRR.
• Support ACL, filter packets by configuring matching rules, processing operations, and time permissions, and provide flexible security access control strategies.
• Support IGMP V1/V2 multicast protocol, MLD Snooping, IGMP Snooping to meet the needs of multi-terminal HD video surveillance and video conference access.

Complete security protection mechanism

• Support IP address, MAC address, VLAN and port quaternary binding to filter data packets.
• Supports ARP protection to protect against gateway spoofing and man-in-the-middle attacks such as ARP spoofing and ARP flood attacks common in LANs.
• Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC/IP spoofing.
• Support DoS protection, support Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.
• Support 802.1X authentication, provide authentication functions for LAN computers, and control the authorization status of controlled ports according to the authentication results.
• Support port security, stop learning when the number of MAC addresses learned by the port reaches the maximum number, prevent MAC address attacks and control port network traffic.
• Support DHCP Snooping, effectively prevent privately set DHCP server, and ensure the legality of the DHCP server.

Diverse reliability protection

• Support stacking, stacking system virtualization becomes a "distributed device", which can simplify management and improve system reliability.
• Support STP/RSTP/MSTP production tree protocol, eliminate layer 2 loops, and realize link backup.
• Supports spanning tree security features to prevent devices in the spanning tree network from being subjected to various forms of malicious attacks.
• Support static aggregation and dynamic aggregation, effectively increase link bandwidth, achieve load balancing, link backup, and improve link reliability.
• Support for two hot-swappable power modules 1 + 1 redundant backup to ensure that the equipment is constantly stable.

Easy operation and maintenance

• Supports TP-LINK Cloud Platform Management, Web Supplement, CONSOLE, TELNET, SNMP (V1/V2/V3) and other diverse management and maintenance methods.
• Support HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods, management is more secure.
• Support RMON, system log, port traffic statistics, easy network optimization and transformation.
• Support cable detection, Ping detection and Tracert detection operations, easy analysis of faulty network nodes.
• Support LLDP, convenient for network management system to query and judge the communication status of the link.
• Support CPU monitoring, memory monitoring, Ping detection, Tracert detection, cable detection.