Planet 16-Port 10/100/1000T 802.3at PoE + 2-Port 100/1000X SFP Managed Switch | GS-4210-16P2S

L2 Managed 16×PoE+ Gigabit + 2×SFP Switch

Cost-optimized Managed PoE+ Switch with Advanced L2/L4 Switching and Security
PLANET GS-4210-16P2S is an ideal Gigabit PoE Switch which provides cost-effective advantage to local area network and is widely accepted in the SMB office network. It offers intelligent Layer 2 data packet switching and management functions, friendly web user interface and stable operation. The model complies with IEEE 802.3at Power over Ethernet Plus (PoE+) at an affordable price. The GS-4210-16P2S is equipped with 16 10/100/1000BASE-T Gigabit Ethernet ports and 2 100/1000BASE-X SFP interfaces with inner power system. Its 16 Gigabit Ethernet ports integrated with 802.3at PoE+ injector function on all ports. It offers a rack-mountable, affordable, safe and reliable power solution for SMBs deploying Power over Ethernet networks, or requiring enhanced data security and network traffic management. 

Cybersecurity Network Solution to Minimize Security Risks
The GS-4210-16P2S supports SSHv2 and TLS protocols to provide strong protection against advanced threats. It includes a range of cybersecurity features such as DHCP Snooping, IP Source Guard, dynamic ARP Inspection Protection, 802.1x port-based network access control, RADIUS and TACACS+ user accounts management, SNMPv3 authentication, and so on to complement it as an all-security solution.

Redundant Ring, Fast Recovery for Critical Network Applications
The GS-4210-16P2S supports redundant ring technology and features strong, rapid self-recovery capability to prevent interruptions and external intrusions. It incorporates advanced ITU-T G.8032 ERPS (Ethernet Ring Protection Switching) technology, Spanning Tree Protocol (802.1s MSTP) into customer’s network to enhance system reliability and uptime in various environments.

Built-in Unique PoE Functions for Powered Devices Management

As the PoE managed switch for surveillance, wireless and VoIP networks, the GS-4210-16P2S features special PoE management functions:

PD alive check
Scheduled power recycling
PoE schedule
PoE usage monitoring
PoE Extension

Intelligent Powered Device Alive Check
The GS-4210-16P2S can be configured to monitor connected PD (Powered Device) status in real time via ping action. Once the PD stops working and responding, the GS-4210-16P2S will resume the PoE port power and bring the PD back to work. It will greatly enhance the network reliability through the PoE port resetting the PD’s power source and reducing administrator management burden.

Scheduled Power Recycling
The GS-4210-16P2S allows each of the connected PoE IP cameras or PoE wireless access points to reboot at a specific time each week. Therefore, it will reduce the chance of IP camera or AP crash resulting from buffer overflow. 

PoE Schedule for Energy Saving
Under the trend of energy saving worldwide and contributing to environmental protection, the GS-4210-16P2S can effectively control the power supply besides its capability of giving high watts power. The “PoE schedule” function helps you to enable or disable PoE power feeding for each PoE port during specified time intervals and it is a powerful function to help SMBs or enterprises save power and money. It also increases security by powering off PDs that should not be in use during non-business hours. 
 

PoE Usage Monitoring
Via the power usage chart in the web management interface, the GS-4210-16P2S enables the administrator to monitor the status of the power usage of the connected PDs in real time. Thus, it greatly enhances the management efficiency of the facilities.

802.3at PoE+ Power and Ethernet Data Transmission Distance Extension
In the “Extend” operation mode, the GS-4210-16P2S operates on a per-port basis at 10Mbps duplex operation but can support 20-watt PoE power output over a distance of up to 250 meters overcoming the 100m limit on Ethernet UTP cable. With this brand-new feature, the GS-4210-16P2S provides an additional solution for 802.3at/af PoE distance extension, thus saving the cost of Ethernet cable installation. 

IPv6/IPv4 Dual Stack Management
Supporting both IPv6 and IPv4 protocols, the GS-4210-16P2S helps the SMBs to step in the IPv6 era with the lowest investment as its network facilities need not be replaced or overhauled if the IPv6 FTTx edge network is set up.

Robust Layer 2 Features
The GS-4210-16P2S  can be programmed for advanced switch management functions such as dynamic port link aggregation, 802.1Q VLAN and Q-in-Q VLAN, Multiple Spanning Tree protocol (MSTP), loop and BPDU guard, IGMP snooping, and MLD snooping. Via the link aggregation, the GS-4210-16P2S allows the operation of a high-speed trunk to combine with multiple ports such as a 4Gbps fat pipe, and supports fail-over as well.  Also, the Link Layer Discovery Protocol (LLDP) is the Layer 2 protocol included to help discover basic information about neighboring devices on the local broadcast domain.

Efficient Traffic Control
The GS-4210-16P2S is loaded with robust QoS features and powerful traffic management to enhance services to business-class data, voice, and video solutions. The functionality includes broadcast/multicast/unicast storm control, per port bandwidth control, 802.1p/CoS/IP DSCP QoS priority and remarking. It guarantees the best performance at VoIP and video stream transmission, and empowers the enterprises to take full advantages of the limited network resources.

Powerful Security
PLANET GS-4210-16P2S offers comprehensive IPv4/IPv6 Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. It can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications. Its protection mechanism also comprises 802.1X port-based user and device authentication, which can be deployed with RADIUS to ensure the port level security and block illegal users. With the protected port function, communication between edge ports can be prevented to guarantee user privacy. Furthermore, Port security function allows to limit the number of network devices on a given port. The network administrators can now construct highly-secure corporate networks with considerably less time and effort than before.

Friendly and Secure Management 
For efficient management, the GS-4210-16P2S is equipped with Command line, Web and SNMP management interfaces.

With the built-in Web-based management interface, the GS-4210-16P2S offers an easy-to-use, platform-independent management and configuration facility.
For text-based management, it can be accessed via Telnet and the console port.
By supporting the standard SNMP protocol, the switch can be managed via any SNMP-based management software.
Moreover, the GS-4210-16P2S offers secure remote management by supporting SSHv2, TLSv1.2 and SNMP v3 connections which encrypt the packet content at each session.

Flexible Extension Solution
The two mini-GBIC slots built in the GS-4210-16P2S are compatible with the 100BASE-FX/1000BASE-SX/LX SFP (Small Form-factor Pluggable) fiber transceiver to uplink to backbone switch and monitor center in long distance. The distance can be extended from 550 meters to 2 kilometers (multi-mode fiber) and to 10/20/40/60/80/120 kilometers (single-mode fiber or WDM fiber). They are well suited for applications within the enterprise data centers and distributions.

Applications

Perfectly-integrated Solution for PoE IP Surveillance
The GS-4210-16P2S brings an ideal, secure surveillance system at a lower total cost. The GS-4210-16P2S provides 16 10/100/1000Mbps 802.3at PoE+ ports able to feed sufficient PoE power for 16 IEEE 802.3at/af PoE IP cameras at the same time. It is also able to connect with one 16-channel NVR or two 8-channel NVR systems, uplinked to the core switch and the control center. With such a high-performance switch architecture, the recorded video files from the PoE IP cameras can be saved in the NVR system to enable the administrators to control and monitor the surveillance images both in the local LAN and the remote sites.

Department/Workgroup PoE Network
Providing 16 PoE in-line power interfaces, the GS-4210-16P2S can easily build a power that can centrally control IP phone system, IP camera system and wireless AP group for enterprises. The GS-4210-16P2S delivers full ports of 802.3at/af compliant Gigabit Ethernet network connectivity with high-performance and cost-effective advantages for the increasing number of PoE IP telephones, PoE IP cameras, PoE wireless access points and other devices applied at the edge of the small or medium enterprise network. The GS-4210-16P2S improves the network efficiency and protects the network clients with the powerful features:

Layer 2 to Layer 4 security
QoS/802.1Q VLAN / static trunk / LACP
802.1x Port-based and MAC-based network access authentication security
Multicast IGMP snooping

Key Features

Physical Port
16 10/100/1000BASE-T Gigabit Ethernet RJ45 ports with IEEE 802.3at PoE+ Injector
2 100/1000BASE-X mini-GBIC/SFP slots
1 RJ45 console interface for switch basic management and setup
Reset button for system factory default and reboot
 
Switching
Hardware-based 10/100Mbps, half/full duplex and 1000Mbps full duplex mode, flow control and auto-negotiation, and auto MDI/MDI-X
Features Store-and-Forward mode with wire-speed filtering and forwarding rates
IEEE 802.3x flow control for full duplex operation and back pressure for half duplex operation
9K jumbo frame
Automatic address learning and address aging
Supports CSMA/CD protocol
 
Power over Ethernet
Complies with IEEE 802.3at Power over Ethernet Plus, end-span PSE
Backward compatible with IEEE 802.3af Power over Ethernet
Up to 16 ports of IEEE 802.3af/802.3at devices powered
Supports PoE Power up to 30.8 watts for each PoE port
220-watt PoE budget
Auto detects powered device (PD)
Circuit protection prevents power interference between ports
Remote power feeding up to 100 meters in standard mode and 250m in extend mode
PoE Management
Total PoE power budget control
Per port PoE function enable/disable
PoE Port Power feeding priority
Per PoE port power limitation
PoE delay 
PD classification detection
Intelligent PoE features
PoE usage threshold control
PD alive check
PoE schedule
 
Layer 2 Features
Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
High performance Store and Forward architecture, runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
Supports VLAN
IEEE 802.1Q tagged VLAN
Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)
Protocol VLAN
Voice VLAN
Private VLAN
Management VLAN
GVRP
Supports Spanning Tree Protocol
STP (Spanning Tree Protocol)
RSTP (Rapid Spanning Tree Protocol)
MSTP (Multiple Spanning Tree Protocol)
STP BPDU Guard, BPDU Filtering and BPDU Forwarding
Supports Link Aggregation
IEEE 802.3ad Link Aggregation Control Protocol (LACP)
1 LACP group, up to 2 ports per LACP group 
Cisco ether-channel (static trunk)
1  trunk group, up to 2 ports per trunk group 
Provides port mirror (many-to-1)
Loop protection to avoid broadcast loops
Supports ERPS (Ethernet Ring Protection Switching)
 
Quality of Service
Ingress/Egress Rate Limit per port bandwidth control
Storm Control support
Broadcast, Unknown Unicast, and Unknown Multicast
Traffic classification
IEEE 802.1p CoS
DSCP/IP Precedence of IPv4/IPv6 packets
Strict priority and Weighted Round Robin (WRR) CoS policies
 
Multicast
Supports IPv4 IGMP snooping v2 and v3
Supports IPv6 MLD snooping v1, v2
IGMP querier mode support
IGMP snooping port filtering
MLD snooping port filtering

Security
Authentication
IEEE 802.1X port-based network access authentication
Built-in RADIUS client to co-operate with the RADIUS servers
DHCP Option 82
RADIUS/TACACS+ login user access authentication
Access Control List
IPv4/IPv6 IP-based ACL
IPv4/IPv6 IP-based ACE
MAC-based ACL
MAC-based ACE
MAC Security
Static MAC
MAC Filtering
Port security for source MAC address entries filtering
DHCP snooping to filter distrusted DHCP messages
Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
IP source guard prevents IP spoofing attacks
DoS attack prevention

Management
IPv4 and IPv6 dual stack management
Switch management interface
Web switch management 
Console/Telnet Command Line Interface 
SNMP v1 and v2c switch management
SSHv2, TLSv1.2 and SNMP v3 secure access
SNMP Management
Four RMON groups (history, statistics, alarms and events) 
SNMP trap for interface link up and link down notification
User privilege levels control
Built-in Trivial File Transfer Protocol (TFTP) client
BOOTP and DHCP for IP address assignment
System maintenance
Firmware upload/download via HTTP/TFTP
Configuration upload/download through web interface
Dual images
Hardware reset button for system reboot or reset to factory default
SNTP Network Time Protocol
Network Diagnostic
ICMPv6/ICMPv4 Remote Ping
Cable diagnostics
Link Layer Discovery Protocol (LLDP) and LLDP-MED
Event message logging to remote Syslog server
PLANET Smart Discovery Utility for deployment management
PLANET NMS system and CloudViewer for deployment management