28-port Metro Managed Layer2+ switch: 24× 100Mbps open SFP + 4× Gigabit
combo (RJ45/SFP), QoS, ACL, IGMP, IPv6, Green (802.3az), wire speed, cable front
access, dual AC/DC power, alarm block, 19" rackmount 16K MAC address table
Policy-based QoS optimizes multi-service quality
IGMP Snooping v1, v2, v3; MVR
Multilayer-aware (L2/L3/L4) ACL for security protection
Wire speed
High redundancy and resilient architecture with RSTP and Port Trunking “Front
access” design; external alarm input/output block
IPv6 management support
Telco-class Layer 2 Fast Ethernet Switch with Access Control List (ACL)
Advanced QoS for significant services
Consistent service quality and reliable connecting ability in a converged
network is the key for Carrier to connect and satisfy customers; therefore the
ability to control traffic flow and set traffic policy becomes more critical
than ever. The ZyXEL MES3500–24/MES3500–24F 24-port FE L2 Switch offers
wire-speed flow control that classifies and prioritizes the incoming packets
according to the predefine QoS policies that meet requirements of service
providers.
In terms of classification, the Differentiated Services Code Point (DSCP)
field and the 802.1p Class of Service (CoS) field are identified to assess the
priority of incoming packets. Classification and reclassification can be based
on criteria as specific as rules based on IP, MAC addresses, VLAN ID or TCP/UDP
port number. For bandwidth management, the MES3500–24/MES3500–24F provides
8 priority queues per port for different types of traffics, allowing service
providers to set policy-based rate limitations that take full advantage of
constrained network resources and guarantee the best performance.
Enhanced security for protection among customers
Avoiding subscribers affecting each other on a shared network or shared
device is a major concern for service providers. The ZyXEL
MES3500–24/MES3500–24F offers a complete set of security features to protect
user data while administrating the traffics. Port security provides the ability
to deny unauthorized users from accessing the network. Moreover, the 802.1X
feature cooperating with RADIUS is useful to prevent unauthorized access based
on username and password (or other credentials) and acts as powerful access
control for converged networks with mixed wired and wireless access.
The MES3500–24/MES3500–24F provides a multilayer (L2/L3/L4) ACL suite of
sophisticated policy-based control mechanisms that enables service providers to
deploy easily based on actual network environment needs via a Web GUI or command
line interface to prevent abnormal or illegal access. The policies can be
defined to deny packets based on source and destination MAC addresses, IP
addresses or TCP/UDP ports.
Resilient and redundant design
A quick recovery and round-the-clock network is vital for service providers
to establish a robust network. The MES3500–24/MES3500–24F provides
comprehensive features to make sure network is well operated. The IEEE 802.3ad
Link Aggregation feature reduces network downtime by providing redundant paths
and bandwidth aggregation to critical connections, while IEEE 802.1w Rapid
Spanning Tree Protocol (RSTP) and IEEE 802.1s Multiple Spanning Tree Protocol
(MSTP) allow immediate recovery from failed connections by sending packets via
the backup link.
The enhanced digital interface allows real-time access to the device
operating parameters, and it includes optional digital features such as soft
control and monitoring of SFP I/O signals. In addition, the
MES3500–24/MES3500–24F fully incorporates the functionality needed to
implement digital alarms and warnings from fault isolation and failure
prediction tasks as well as component monitoring features, among others.
With the digital diagnostic monitoring interface, the
MES3500–24/MES3500–24F enables users to easily detect packet loss from
transceivers and aging cables; therefore users can not only avoid troubles such
as unstable networking services, but also boost productivity significantly.
Rich IPv6 features built-in for future-proof network expansions
As ZyXEL considers IPv6 management features as a future trend, complete IPv6
host management capabilities are added to the MES3500–24/MES3500–24F for
guaranteed IPv6/4 migration and future-proof expansion. It’s not only
beneficial for high-density Fast Ethernet deployments, but also capable of
preventing investment loss and therefore perfectly suitable for both network
cores and edges.
Standard Compliance
•IEEE 802.3 10BASE-T Ethernet
•IEEE 802.3u 100BASE-Tx Ethernet
•IEEE 802.ab 1000BASE-T Ethernet
•IEEE 802.3z 1000BASE-X
•IEEE 802.3× flow control
•IEEE 802.1d spanning tree protocol
•IEEE 802.1w rapid spanning tree protocol
•IEEE 802.1s multiple spanning tree protocol
•IEEE 802.1p class of service, priority protocols
•IEEE 802.1Q VLAN tagging
•IEEE 802.1X port authentication
•IEEE 802.3ad LACP aggregation
•IEEE 802.3az Energy Efficient Ethernet (EEE)
Traffic Management and QoS
•Broadcast storm control
•IEEE 802.1p with 8 hardware priority queues per port for different types of
traffic
•IEEE 802.1Q tag-based and port-based VLAN
•Weighted Fair Queuing (WFQ)/WRR/SPQ scheduling algorithm
•Policy based rate limiting
•Policy based bandwidth control
•Port based traffic shaping
•Policy-based traffic mirroring
•IGMP snooping (v1, v2, v3)
•IGMP filtering
•Jumbo frame support (9K Bytes) for high performance data backup or recovery
services
•Support GVRP, automatic VLAN member registration
•Multicast VLAN Registration (MVR)
•Q in Q
•Selected Q in Q
Link Aggregation
•IEEE 802.3ad LACP link aggregation compliant
•Support static manually port trunking
•Up to 8 aggregation groups, 8 ports/per group randomly selected
•VLAN trunking
Redundancy for Fault Backup
•IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) provides rapid convergence of
spanning tree independent of spanning-tree timer
•IEEE 802.1s multiple spanning tree provides link availability in multiple
VLAN environments by allowing multiple spanning trees
•MRSTP- Multiple RSTP
User Security and Authentication
•IEEE 802.1X authentication
•IP source guard (static IP/MAC binding, DHCP snooping, ARP inspection)
•IP subnet VLAN & VLAN isolation
•Limiting MAC number per port
•Loop guard prevents a switch from being affected by another switch which is
already in a looping status
•MAC filtering per port secures access to each port
•MAC freeze
•Port security, port isolation, port mirroring
•Static MAC forwarding per port: only specified MAC addresses can access the
network (port security)
•Wire speed filtering per MAC/IP/TCP/UDP
•Wire speed mirroring per MAC/IP/TCP/UDP
•Wire speed rate limiting per MAC/IP/TCP/UDP
•GVRP, automatic VLAN member registration
•Guest VLAN
•CPU protection
•PPPoE option 82
