Planet Industrial L3 8-Port 10/100/1000T + 2-Port 1G/2.5G SFP + 2-Port 10G SFP+ Managed Ethernet Switch | IGS-5225-8T2S2X

Environmentally Hardened Design
PLANET IGS-5225-8T2S2X is an industrial Layer 2+ managed Gigabit Switch that features 8 10/100/1000Mbps copper ports, 2 additional 100/1000/2500BASE-X SFP ports and 2 10G SFP+ ports, and supports static Layer 3 routing in a rugged IP30 aluminum case for stable operation in heavy industrial demanding environments. With 10Gbps uplink, the IGS-5225-8T2S2X can handle extremely large amounts of data in a secure topology linking to an enterprise backbone or high capacity servers. The IGS-5225-8T2S2X is capable of providing non-blocking switch fabric and wire-speed throughput as high as 66Gbps without any packet loss and CRC error. It greatly simplifies the tasks of upgrading the enterprise LAN for catering to increasing bandwidth demands. Being able to operate under wide temperature range from -40 to 75 degrees C, the IGS-5225-8T2S2X can be placed in almost any difficult environment. The IGS-5225-8T2S2X also allows either DIN rail or wall mounting for efficient use of cabinet space.

Redundant Ring, Fast Recovery for Surveillance System
The IGS-5225-8T2S2X supports redundant ring technology and features strong, rapid self-recovery capability to prevent interruptions and external intrusions. It incorporates advanced ITU-T G.8032 ERPS (Ethernet Ring Protection Switching) technology, Spanning Tree Protocol (802.1s MSTP), and redundant power input system into customer’s industrial automation network to enhance system reliability and uptime in harsh factory environments. In a certain, simple Ring network, the recovery time of data link can be as fast as 10ms.

Flexible and Extendable 10Gb Ethernet Solution
10G Ethernet is a big leap in the evolution of Ethernet. Each of the 10G SFP+ slots in the IGS-5225-8T2S2X supports triple speed and 10GBASE-SR/LR, 2500BASE-X or 1000BASE-SX/LX, providing broad bandwidth and powerful processing capacity. With its 2-port, 10G Ethernet link capability, the administrator now can flexibly choose the suitable SFP/SFP+ transceiver according to the transmission distance or the transmission speed required to extend the network efficiently. 

1588 Time Protocol for Industrial Computing Networks
The IGS-5225 series is ideal for telecom and Carrier Ethernet applications, supporting MEF service delivery and timing over packet solutions for IEEE 1588 and synchronous Ethernet.

Layer 3 IPv4 and IPv6 Software VLAN Routing for Secure and Flexible Management
To help customers stay on top of their businesses, the IGS-5225 series not only provides ultra high transmission performance and excellent Layer 2 technologies, but also IPv4/IPv6 software VLAN routing feature which allows to crossover different VLANs and different IP addresses for the purpose of having a highly-secure, flexible management and simpler networking application.

Cybersecurity Network Solution to Minimize Security Risks
The new generation of IGS-5225 series has the cybersecurity feature to protect the switch management and enhance the security for mission-critical network without extra deployment cost and effort. The IGS-5225 series expands its memory and upgrades the kernel of SSH and SSL protocols to provide strong protection against advanced threats. It includes a range of cybersecurity features such as DHCP Snooping, IP Source Guard, ARP Inspection Protection, 802.1x port-based and Mac-based network access control, RADIUS and TACACS+ user accounts management, SNMPv3 authentication, and so on to complement it as an all-security solution. The network administrator can now construct highly-secure corporate networks with considerably less time and effort than before.

SMTP/SNMP Trap Event Alert
The IGS-5225 series provides event alert function to help to diagnose the abnormal device owing to whether or not there is a break of the network connection, or the rebooting response.

Digital Input and Digital Output for External Alarm
The IGS-5225 series supports Digital Input and Digital Output on its front panel. This external alarm enables users to use Digital Input to detect and log external device status (such as door intrusion detector), and send event alarm to the administrators. The Digital Output could be used to alarm the administrators if the IGS-5225 series port shows link down, link up or power failure.

Robust Layer 2 Features
The IGS-5225 series can be programmed for advanced switch management functions such as dynamic port link aggregation, Q-in-Q VLAN, private VLAN, Rapid Spanning Tree Protocol, Layer 2 to Layer 4 QoS, bandwidth control and IGMP snooping. The IGS-5225 series provides 802.1Q tagged VLAN, and the VLAN groups allowed will be maximally up to 4K. Via aggregation of supporting ports, the IGS-5225 series allows the operation of a high-speed trunk combining multiple ports. It enables a maximum of up to 6 trunk groups with 8 ports per trunk group, and supports fail-over as well.

Efficient Management
For efficient management, the Managed Ethernet Switch series is equipped with console, Web and SNMP management interfaces. With the built-in Web-based management interface, the IGS-5225 series offers an easy-to-use, platform-independent management and configuration facility. For text-based management, the IGS-5225 series can be accessed via Telnet and the console port. Moreover, it also offers secure remote management via any standard-based management software by supporting SNMP v3 connection which encrypts the packet content at each session.

Powerful Security
The IGS-5225 series offers comprehensive Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. It can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications. Its protection mechanism also comprises 802.1x Port-based and MAC-based user and device authentication. With the private VLAN function, communication between edge ports can be prevented to ensure user privacy. The network administrators can now construct highly-secure corporate networks with considerably less time and effort than before.

Intelligent SFP Diagnosis Mechanism
The IGS-5225 series supports SFP-DDM (Digital Diagnostic Monitor) function that greatly helps network administrator to easily monitor real-time parameters of the SFP, such as optical output power, optical input power, temperature, laser bias current, and transceiver supply voltage.

Modbus TCP provides Flexible Network Connectivity for Factory Automation
With the supported Modbus TCP/IP protocol, the IGS-5225 series can easily integrate with SCADA systems, HMI systems and other data acquisition systems in factory floors. It enables administrators to remotely monitor the industrial Ethernet switch’s operating information, port information and communication status, thus easily achieving enhanced monitoring and maintenance of the entire factory.

Applications

Excellent 10Gbps High Bandwidth Solution to Core Network
The IGS-5225-8T2S2X performs 60Gbps non-blocking switch fabric, so it can easily provide a local 10Gbps high bandwidth Ethernet network for the backbone of your department. With the two built-in SFP+ ports, the IGS-5225-8T2S2X provides the uplink to the backbone network through the 10G Ethernet LR/SR SFP+ modules. It further improves the network efficiency and protects the network clients by offering the security and QoS features.

FTTx/MAN Edge Switch
By means of improving the technology of Optical Fiber Ethernet with highly-flexible, highly-extendable and easy-to-install features, the IGS-5225-8T2S2X offers up to 10Gbps data exchange speed via Optical Fiber interface and the transmission distance can be extended to 120km. The IGS-5225-8T2S2X is the ideal solution for service providers such as ISPs and telecoms to build Metropolitan Area Network (MAN) based on the fiber technology.

Key Features

Physical Port
8 10/100/1000BASE-T Gigabit Ethernet RJ45 ports
2 100/1000/2500BASE-X mini-GBIC/SFP slots for SFP type auto detection
2 10GBASE-SR/LR SFP+ slots, backward compatible with 1000BASE-SX/LX/BX and 2500BAS-X SFP
One RJ45 console interface for basic management and setup

Industrial Case and Installation
IP30 aluminum case
DIN rail and wall-mount design
Redundant power design
- 12~48V DC, redundant power with polarity reverse protect function
- 24V AC power input acceptable
Supports 6000V DC Ethernet ESD protection
-40 to 75 degrees C operating temperature

Digital Input and Digital Output
2 Digital Input (DI)
2 Digital Output (DO)
Integrate sensors into auto alarm system
Transfer alarm to IP network via email and SNMP trap

Layer 2 Features
Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
High performance of Store-and-Forward architecture, and runt/CRC filtering that eliminates erroneous packets to optimize the network bandwidth
Storm Control support
- Broadcast/Multicast/Unicast
Supports VLAN
- IEEE 802.1Q tagged VLAN
- Up to 4K VLANs groups, out of 4095 VLAN IDs
- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)
- Private VLAN Edge (PVE)
- Protocol-based VLAN
- MAC-based VLAN
- Voice VLAN
Supports Spanning Tree Protocol
- IEEE 802.1D Spanning Tree Protocol (STP)
- IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
- IEEE 802.1s Multiple Spanning Tree Protocol (MSTP), spanning tree by VLAN
- BPDU Guard
Supports Link Aggregation
- 802.3ad Link Aggregation Control Protocol (LACP)
- Cisco ether-channel (static trunk)
- Maximum 6 trunk groups with 8 ports per trunk group
- Up to 16Gbps bandwidth (duplex mode)
Provides port mirror (1-to-1)
Port mirroring to monitor the incoming or outgoing traffic on a particular port
Loop protection to avoid broadcast loops

Layer 3 IP Routing Features
IP interfaces (Max. 128 VLAN interfaces)
Routing table (Max. 128 routing entries)
Routing Protocols (IPv4/IPv6 hardware static routing)

Quality of Service
Ingress Shaper and Egress Rate Limit per port bandwidth control
8 priority queues on all switch ports
Traffic classification
- IEEE 802.1p CoS
- TOS/DSCP/IP precedence of IPv4/IPv6 packets
- IP TCP/UDP port number
- Typical network application
Strict priority and Weighted Round Robin (WRR) CoS policies
Supports QoS and In/Out bandwidth control on each port
Traffic-policing policies on the switch port
DSCP remarking

Multicast
Supports IGMP snooping v1, v2 and v3
Supports MLD snooping v1 and v2
Querier mode support
IGMP snooping port filtering
MLD snooping port filtering
Multicast VLAN Registration (MVR) support

Security
IEEE 802.1x Port-based/MAC-based network access authentication
Built-in RADIUS client to cooperate with the RADIUS servers
TACACS+ login users access authentication
RADIUS/TACACS+ users access authentication
Access Control List
- IP-based Access Control List (ACL)
- MAC-based Access Control List
Source MAC/IP address binding
DHCP snooping to filter un-trusted DHCP messages
Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
IP Source Guard prevents IP spoofing attacks
Auto DoS rule to defend DoS attacks
IP address access management to prevent unauthorized intruder

Management
IPv4 and IPv6 dual stack management
Switch Management Interfaces
- Console/Telnet Command Line Interface
- Web switch management
- SNMP v1, v2c and v3 switch management
- SSH/SSL secure access
Four RMON groups (history, statistics, alarms, and events) 
IPv6 IP address/NTP/DNS management
Built-in Trivial File Transfer Protocol (TFTP) client
BOOTP and DHCP for IP address assignment
System Maintenance
- Firmware upload/download via HTTP/TFTP
- Reset button for system reboot or reset to factory default
- Dual Images
DHCP Server
DHCP Relay
DHCP Option 82
User Privilege levels control
Network Time Protocol (NTP)
Link Layer Discovery Protocol (LLDP) and LLDP-MED
Network Diagnostic
- ICMPv6/ICMPv4 Remote Ping
- Cable Diagnostic technology provides the mechanism to detect and report potential cabling issues
SMTP/Syslog remote alarm
System Log
SNMP trap for interface Link up and Link down notification
SFP-DDM (Digital Diagnostic Monitor)
Reset button for system reboot or reset to factory default
ONVIF Supports
Precision Time Protocol (PTP) Clock transparent
PLANET Smart Discovery Utility for deployment management