Planet WGS-4215 Series User Manual page 14

User's Manual of WGS Managed Series
Robust Layer 2 Features
The WGS managed series can be programmed for advanced switch management functions such as dynamic port link
aggregation, 802.1Q VLAN and Q-in-Q VLAN, Multiple Spanning Tree protocol (MSTP), Loop and BPDU Guard, IGMP
Snooping, and MLD Snooping. Via the link aggregation, the WGS managed series allows the operation of a high-speed trunk
to combine with multiple ports such as a 16Gbps fat pipe, and supports fail-over as well. Also, the Link Layer Discovery Protocol
(LLDP) is the Layer 2 protocol included to help discover basic information about neighboring devices on the local broadcast
domain.
Efficient Traffic Control
The WGS managed series is loaded with robust QoS features and powerful traffic management to enhance services to
business-class data, voice, and video solutions. The functionality includes broadcast / multicast storm control, per port
bandwidth control, IP DSCP QoS priority and remarking. It guarantees the best performance for VoIP and video stream
transmission, and empowers the enterprises to take full advantage of the limited network resources.
Powerful Security
PLANET WGS managed series offers comprehensive IPv4/IPv6 Layer 2 to Layer 4 Access Control List (ACL) for enforcing
security to the edge. It can be used to restrict network access by denying packets based on source and destination IP address,
TCP/UDP ports or defined typical network applications. Its protection mechanism also comprises 802.1X port-based user and
device authentication, which can be deployed with RADIUS to ensure the port level security and block illegal users. With the
Protected Port function, communication between edge ports can be prevented to guarantee user privacy. Furthermore, Port
Security function allows to limit the number of network devices on a given port.
Advanced Network Security
The WGS managed series also provides DHCP Snooping, IP Source Guard and Dynamic ARP Inspection functions to
prevent IP snooping from attack and discard ARP packets with invalid MAC address. The network administrators can now
construct highly secured corporate networks with considerably less time and effort than before.
14