IGSW-24040T Industrial 24-Port 10/100/1000Mbps with 4-Port Shared SFP Managed Gigabit Switch

IGSW-24040T-Industrial L2+ 20-Port 10/100/1000T + 4-Port TP/SFP Combo Managed Ethernet Switch

Cybersecurity Network Solution to Minimize Security Risks

The IGSW-24040T supports SSHv2 and TLS protocols to provide strong protection against advanced threats. It includes a range of cybersecurity features such as DHCP Snooping, IP Source Guard, dynamic ARP Inspection Protection, 802.1x port-based network access control, RADIUS and TACACS+ user accounts management, SNMPv3 authentication, and so on to complement it as an all-security solution. 

Redundant Ring, Fast Recovery for Critical Network Applications

The IGSW-24040T supports redundant ring technology and features strong, rapid self-recovery capability to prevent interruptions and external intrusions. It incorporates advanced ITU-T G.8032 ERPS (Ethernet Ring Protection Switching) technology and Spanning Tree Protocol (802.1s MSTP) into customer’s network to enhance system reliability and uptime in various environments.

AC and DC Redundant Power to Ensure Continuous Operation

The IGSW-24040T possesses a 100~240V AC power supply and dual 36~60V DC power supply utilized as redundant power supply to ensure its continuous operation. Its redundant power system is specifically designed to handle the demands of high-tech facilities requiring the highest power integrity. Furthermore, with the 36~60V DC power supply implemented, the IGSW-24040T can be applied as the telecom level device and placed in almost any difficult environment.

Digital Input and Digital Output for External Alarm

The IGSW-24040T helps the network administrators efficiently manage the unexpected network situations by providing Digital Input and Digital Output for external alarm device on the front panel. The Digital Input can be used to detect and log the status of the external devices such as door intrusion detector. The Digital Output could be used to send alarm whenever the IGSW-24040T has port link-down or power failure.

Effective Alarm Alert for Better Protection

The IGSW-24040T supports a Fault Alarm feature which can alert the users when there is something wrong with the switches. With this ideal feature, the users would not have to waste time to find where the problem is. It will help to save time and human resource.

IPv6/IPv4 Dual Stack Management

Supporting both IPv6 and IPv4 protocols, the IGSW-24040T help the SMBs to step in the IPv6 era with the lowest investment as their network facilities need not be replaced or overhauled if the IPv6 FTTx edge network is set up. 

Layer 3 IPv4 and IPv6 VLAN Routing for Secure and Flexible Management

The IGSW-24040T offers IPv4/IPv6 VLAN routing feature which allows to crossover different VLANs and different IP addresses for the purpose of having a highly-secured, flexible management and simpler networking application.

Robust Layer 2 Features

The IGSW-24040T can be programmed for advanced switch management functions such as dynamic port link aggregation, 802.1Q VLAN and Q-in-Q VLAN, Multiple Spanning Tree protocol (MSTP), loop and BPDU guard, IGMP snooping, and MLD snooping. Via the link aggregation, the IGSW-24040T allows the operation of a high-speed trunk to combine with multiple ports, and supports fail-over as well.  Also, the Link Layer Discovery Protocol (LLDP) is the Layer 2 protocol included to help discover basic information about neighboring devices on the local broadcast domain.

Efficient Traffic Control

The IGSW-24040T is loaded with robust QoS features and powerful traffic management to enhance services to business-class data, voice, and video solutions. The functionality includes broadcast/multicast storm control, per port bandwidth control, IP DSCP QoS priority and remarking. They guarantee the best performance for VoIP and video stream transmission, and empower the enterprises to take full advantage of the limited network resources.

Powerful Security

PLANET IGSW-24040T offer comprehensive IPv4/IPv6 Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. They can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications. Their protection mechanism also comprises 802.1X port-based user and device authentication, which can be deployed with RADIUS and TACACS+ to ensure the port level security and block illegal users. With the protected port function, communication between edge ports can be prevented to guarantee user privacy. Furthermore, Port security function allows to limit the number of network devices on a given port

Friendly and Secure Management 

For efficient management, the IGSW-24040T is equipped with web, Telnet and SNMP management interfaces. 

• With the built-in Web-based management interface, the IGSW-24040T offers an easy-to-use, platform-independent management and configuration facility.
• For text-based management, the switches can be accessed via Telnet and the console port.
• By supporting the standard SNMP, the switches can be managed via any standard management software 

Moreover, the IGSW-24040T offers secure remote management by supporting SSHv2, TLSv1.2 and SNMP v3 connections which encrypt the packet content at each session.

Flexibility and Long-distance Extension Solution

The IGSW-24040T provide 4 built-in Gigabit SFP interfaces supporting 100BASE-FX/1000BASE-SX/LX SFP (small form-factor pluggable) fiber transceiver to uplink to backbone switch and monitoring center in long distance. The distance can be extended from 550 meters to 2 kilometers (multi-mode fiber) and up to above 10/20/40/60/80/120 kilometers (single-mode fiber or WDM fiber). They are well suited for applications within the enterprise data centers and distributions.

Intelligent SFP Diagnosis Mechanism

The IGSW-24040T supports SFP-DDM (Digital Diagnostic Monitor) function that greatly helps network administrator to easily monitor real-time parameters of the SFP, such as optical output power, optical input power, temperature, laser bias current, and transceiver supply voltage.

Applications: 

Redundant Ring, Fast Recovery for Critical Network Applications

The IGSW-24040T supports redundant ring technology and features strong, rapid self-recovery capability to prevent interruptions and external intrusions. It incorporates advanced ITU-T G.8032 ERPS (Ethernet Ring Protection Switching) technology, Spanning Tree Protocol (802.1s MSTP), and redundant power input system into customer’s industrial automation network to enhance system reliability and uptime in harsh factory environments. In a certain, simple Ring network, the recovery time of data link can be as fast as 20ms.  

Layer 3 VLAN Routing Application

With the built-in, robust Layer 3 routing protocols, the IGSW-24040T ensures reliable routing between VLANs and network segments. The routing protocols can be applied by VLAN interface with up to 32 routing entries. The IGSW-24040T, certainly an ideal solution for industries, offers greater security, control and bandwidth conservation, and high-speed uplink.

Key Features: 

Physical Port 

• 24-port 10/100/1000BASE-T RJ45 copper 
• 4 100/1000BASE-X mini-GBIC/SFP slots, shared with Port-21 to Port-24 compatible with 100BASE-FX SFP
• RJ45 to RS232 DB9 console interface for basic management and setup

Hardware Conformance 

• One 100 to 240V AC or dual 36 to 60V DC power input, redundant power with reverse polarity protection  
• Active-active redundant power failure protection
• Backup of catastrophic power failure on one supply
• Fault tolerance and resilience
• 19-inch rack-mountable design
• IP30 metal case 
• Supports EFT protection for 6000V DC power and 6000V DC Ethernet ESD protection
• 40 to 75 degrees C operating temperature for DC power input
• 10 to 60 degrees C operating temperature for AC power input

Digital Input & Digital Output  

• 2 Digital Input (DI)
• 2 Digital Output (DO)
• Integrates sensors into auto alarm system
• Transfers alarm to IP network via email and SNMP trap

Layer 3 IP Routing Features 

• Supports maximum 32 static routes and route summarization

Layer 2 Features 

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance of Store-and-Forward architecture, and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Storm control support
• Broadcast/Multicast/Unknown unicast
• Supports VLAN
• IEEE 802.1Q tagged VLAN
• Provides Bridging (VLAN Q-in-Q) support (IEEE 802.1ad) 
• Private VLAN Edge (PVE)
• Protocol-based VLAN
• MAC-based VLAN
• IP subnet-based VLAN
• Voice VLAN

Supports Spanning Tree Protocol

• IEEE 802.1D Spanning Tree Protocol (STP)
• IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
• IEEE 802.1s Multiple Spanning Tree Protocol (MSTP), spanning tree by VLAN
• BPDU Guard

Supports Link Aggregation

• 802.3ad Link Aggregation Control Protocol (LACP)
• Cisco ether-channel (static trunk)
• Maximum 12 trunk groups, with 8 ports for each trunk 
• Up to 16Gbps bandwidth (full duplex mode)
• Provides port mirror (many-to-1)
• Port mirroring monitors the incoming or outgoing traffic on a particular port 
• Loop protection to avoid broadcast loops
• Supports ERPS.(Ethernet Ring Protection Switching)
• IEEE 1588 and Synchronous Ethernet network timing, transparent clock mode

Quality of Service

• Ingress shaper and egress rate limit per port bandwidth control
• 8 priority queues on all switch ports
• Traffic classification
• IEEE 802.1p CoS
• ToS/DSCP/IP precedence of IPv4/IPv6 packets
• IP TCP/UDP port number
• Typical network application
• Strict priority and Weighted Round Robin (WRR) CoS policies
• Traffic-policing on the switch port
• DSCP remarking 

Multicast

• Supports IGMP snooping v1, v2 and v3
• Supports MLD snooping v1 and v2
• Querier mode support
• IGMP snooping port filtering
• MLD snooping port filtering
• MVR (Multicast VLAN Registration)

Security

Authentication

• IEEE 802.1x port-based/MAC-based network access authentication
• IEEE 802.1x authentication with guest VLAN
• Built-in RADIUS client to cooperate with the RADIUS servers
• RADIUS/TACACS+ users access authentication

Access Control List

• IP-based Access Control List (ACL)
• MAC-based Access Control List (ACL)
• Source MAC/IP address binding
• DHCP Snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• IP address access management to prevent unauthorized intruder

Management

• IPv4 and IPv6 dual stack management
• Switch Management Interfaces
• Console/Telnet command line interface 
• Web switch management
• SNMP v1 and v2c  switch management
• SSHv2, TLSv1.2 and SNMP v3 secure access
• IPv6 address/NTP management
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System Maintenance
• Firmware upload/download via HTTP/TFTP
• Reset button for system reboot or reset to factory default
• Dual images
• DHCP relay and option 82
• User privilege levels control
• NTP (Network Time Protocol)
• Link Layer Discovery Protocol (LLDP) and LLDP-MED
• Network diagnostic
• SFP-DDM (Digital Diagnostic Monitor)
• Cable diagnostic technology provides the mechanism to detect and report potential cabling issues
• ICMPv6/ICMPv4 remote ping
• SMTP/Syslog remote alarm
• Four RMON groups (history, statistics, alarms and events) 
• SNMP trap for interface link up and link down notification
• System Log
• PLANET Smart Discovery Utility for deployment management
• PLANET NMS system and CloudViewer for deployment management

 Specifications :