ProSAFE® Intelligent Edge Managed Switches Data Sheet
M4100 series
Page 8 of 36
Modern access layer features highlights
Port names feature allows for descriptive names on all interfaces and better clarity in real word admin daily tasks
Loopback interfaces management for routing protocols administration
Private VLANs and local Proxy ARP help reduce broadcast with added security
Management VLAN ID is user selectable for best convenience
Industry-standard VLAN management in the command line interface (CLI) for all common operations such as VLAN creation; VLAN names; VLAN "make static"
for dynamically created VLAN by GRVP registration; VLAN trunking; VLAN participation as well as VLAN ID (PVID) and VLAN tagging for one interface, a group of
interfaces or all interfaces at once
System defaults automatically set per-port broadcast, multicast, and unicast storm control for typical, robust protection against DoS attacks and faulty clients which
can, with BYOD, oen create network and performance issues
IP Telephony administration is simplified with consistent Voice VLAN capabilities per the industry standards and automatic functions associated
Comprehensive set of "system utilities" and "Clear" commands help troubleshoot connectivity issues and restore various configurations to their factory defaults for
maximumadmineciency:traceroute(todiscovertheroutesthatpacketsactuallytakewhentravelingonahop-by-hopbasisandwithasynchronousresponse
when initiated from the CLI), clear dynamically learned MAC addresses, counters, IGMP snooping table entries from the Multicast forwarding database etc.
Allmajorcentralizedsowaredistributionplatformsaresupportedforcentralsowareupgradesandcongurationlesmanagement(HTTP,TFTP),includinginhighly
securedversions(HTTPS,SFTP,SCP)
Simple Network Time Protocol (SNTP) can be used to synchronize network resources and for adaptation of NTP, and can provide synchronized network timestamp
either in broadcast or unicast mode (SNTP client implemented over UDP - port 123)
EmbeddedRMON(4groups)andsFlowagentspermitexternalnetworktracanalysis
Engineered for convergence
Audio (Voice over IP) and Video (multicasting) comprehensive switching, filtering, routing and prioritization
Auto-VoIP,VoiceVLANandLLDP-MEDsupportforIPphonesQoSandVLANconguration
IGMPSnoopingforIPv4,MLDSnoopingforIPv6andQueriermodefacilitatefastreceiversjoinsandleavesformulticaststreamsandensuremulticasttraconly
reaches interested receivers without the need of a Multicast router
Multicast VLAN Registration (MVR) uses a dedicated Multicast VLAN to forward multicast streams and avoid duplication for clients in dierent VLANs
Schedule enablement
Enterprise security
TraccontrolMACFilterandPortSecurityhelprestrictthetracallowedintoandoutofspeciedportsorinterfacesinthesysteminordertoincreaseoverall
securityandblockMACaddressoodingissues
DHCPSnoopingmonitorsDHCPtracbetweenDHCPclientsandDHCPserverstolterharmfulDHCPmessageandbuildsabindingsdatabaseof(MACaddress,
IPaddress,VLANID,port)tuplesthatareconsideredauthorizedinordertopreventDHCPserverspoongattacks
IPsourceguardandDynamicARPInspectionusetheDHCPsnoopingbindingsdatabaseperportandperVLANtodropincomingpacketsthatdonotmatchany
bindingandtoenforcesourceIP/MACaddressesformalicioususerstracelimination
Layer 2/Layer 3-v4/Layer 3-v6/Layer 4 Access Control Lists (ACLs) can be binded to ports, Layer 2 interfaces, VLANs and LAGs (Link Aggregation Groups or Port
channel) for fast unauthorized data prevention and right granularity
Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology
consistentandpredictable-unauthorizeddevicesorswitchesbehindtheedgeportsthathaveBPDUenabledwillnotbeabletoinuencetheoverallSTPtopology
by creating loops
Spanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance, unauthorized or
unexpectednewequipmentinthenetworkmayaccidentallybecomearootbridgeforagivenVLAN
Comments to this Manuals