24 10/100TX + 4 DualSpeed SFP IEC 61850-3 Managed Ethernet Switch w/ Enhanced Ring & MMS

• Compliant with IEC61850-3 & IEEE1613
• Support dual power redundancy AC&DC
• Built-in MMS server based on IEC61850-90-4 switch data modeling for SCADA with monitoring and control
• Enhanced G.8032 ring protection < 20ms for single ring. Supports auto mode, enhanced mode, train mode, multi-VLAN and basic mode; Enhanced G.8032 ring covers multicast packets; MSTP 16MSTI /RSTP ; support MRP Ring
• Miss-wiring avoidance & node failure protection
• User friendly UI, including auto topology drawing; Complete CLI
• Support LACP link aggregation, IGMP v3/router port, MLD snooping, DHCP server & DHCP Option82; DHCP Snooping, Port based DHCP distribution, Mac based DHCP server, QoS by VLAN, SSH v2/SSL, HTTPS, INGRESS/EGRESS ACL L2/L3,TACACS+**, QinQ
• Protocol based VLAN ; IPv4 Subnet based VLAN
• USB port to backup, restore the configuration file and upgrade firmware

OVERVIEW

Lantech IES-3424DSFP-2P-PT is a high performance L2+ (Gigabit uplink) switch with 24 10/100/1000T + 4 Dual Speed SFP that complies with IEC 61850-3 & IEEE 1613. It delivers ITU G.8032 enhanced ring recovery less than 20ms in single ring while also supports train ring, enhanced mode, multiple VLAN model. The comprehensive QoS, QoS by VLAN, advanced security including INGRESS/EGRESS ACL L2/L3, TACACS+**, SSH v2/SSL, Mac based DHCP server, DHCP Option 82, DHCP server, IGMPv1/v2/v3/router port, QinQ are supported and also required in large network.

The built-in MMS server allows SCADA to control & monitor switch for data modeling.

Built-in MMS server for IEC61850 data modeling for monitoring and control
The built-in MMS (Manufacturing Messaging Specification) server can help SCADA to monitor and control switch by data modeling. It covers system, power, port status, network configuration.

Miss-wiring avoidance, Loop protection, Node failure protection
The IES-3424DSFP-2P-PT also embedded several features for stronger and reliable network protection in an easy and intuitive way. When the pre-set ring configuration failed or looped by miss-wiring, Lantech IES-3424DSFP-2P-PT is able to alert with the LED indicator and disable ring automatically. Node failure protection ensures the switches in a ring to survive after power breakout is back. The status can be shown in NMS when each switch is back. This feature prevents the broken ring and keep ring alive without any re-configuration needed. Loop protection is also available to prevent the generation of broadcast storm when a dumb switch is inserted in a closed loop connection.

Enhanced G.8032 ring, 16 MSTI MSTP; MRP ring
Lantech IES-3424DSFP-2P-PT features enhanced G.8032 ring which can be self-healed in less than 20ms for single ring topology protection covering Multicast packets. It also supports various ring topologies that covers double ring, multi-chain (under enhanced ring), train ring, basic ring, multiple-VLAN ring and auto-ring by easy setup than others. The innovative auto-Ring configurator (auto mode) can calculate owner and neighbor in one step. It supports MSTP that allows RSTP over VLAN for redundant links with 16 MSTI.

MRP (Media Redundancy Protocol) can be supported for industrial automation networks.

DHCP option 82 & Port based, Mac based DHCP, Option66, DHCP Snooping, IPv6 DHCP server
DHCP server can assign dedicated IP address by MAC or by port (Port based for single switch) , it also can assign IP address by port for multiple switches with single DHCP option82 server. DHCP Snooping is supported. For the ending device which need to download file from TFTP server, DHCP Option66 server can offer IP address of TFTP server to DHCP client. Basic IPv6 DHCP service can be supported.

QoS by VLAN for legacy devices
QoS by VLAN can allow switch to tag QoS by VLAN regardless the devices acknowledge QoS or not in which greatly enhance the bandwidth management in a network.

QinQ, QoS and GVRP supported
It supports the QinQ, QoS, GVRP for large VLAN segmentation.

802.1X security by MAC address
MAC-based port authentication is an alternative approach to 802.1x for authenticating hosts connected to a port. By authenticating based on the host's source MAC address, the host is not required to run a user for the 802.1x protocol. The RADIUS server that performs the authentication will inform the switch if this MAC can be registered in the MAC address table of switch.

IGMPv3,GMRP, router port, MLD Snooping, static multicast forwarding and multicast Ring protection
The unique multicast protection under enhanced G.8032 ring can offer immediate self-recovery instead of waiting for IGMP table timeout. It also supports IGMPv3, GMRP, router port, MLD snooping and static multicast forwarding binding by ports for video surveillance application.

User friendly GUI, Auto topology drawing
The user friendly UI, innovative auto topology drawing and topology demo makes IES-3424DSFP-2P-PT much easier to get hands-on. The IES-3424DSFP-2P-PT supports DMI interface that can correspond with DDM SFPs (Digital diagnostic monitor) to display the five parameters in Lantech’s UI, including optical output power, input power, temperature, laser bias current and transceiver supply voltage***. The TX power/RX power raw data is automatically converted to dB values for installer, making it easier to calculate the fiber distance. The complete CLI enables professional engineer to configure setting by command line.

Editable configuration file; USB port for configuration upload & download
The configuration file of Lantech IES-3424DSFP-2P-PT can be exported and edited with word processor for the other switches configuration with ease. The factory reset button can restore the setting back to factory default and built-in watchdog design can automatically reboot the switch when CPU is found dead.

The built-in USB port can have configuration upload & download by USB dongle.

Event log & message; 2 DI / 2 DO
In case of event, the IES-3424DSFP-2P-PT is able to send an email to pre-defined addresses as well as SNMP Traps our immediately. It provides 2 DI and 2 DO. When disconnection of the specific port was detected; DO will activate the signal LED to alarm. DI can integrate the sensors for events and DO will trigger the alarm while sending alert information to IP network with email and traps.

Various dual power conversions redundancy; Relay contact alarm
Lantech IES-3424DSFP-2P-PT supports dual power redundancies with isolated 85~264VAC/100~370VDC power conversion and isolated 36~75VDC power conversion or with non-isolated 12~56VDC power module to increase the network reliability. Featured with relay contact alarm function, the IES-3424DSFP-2P-PT is able to connect with alarm system in case of power failure or port disconnection. The IES-3424DSFP-2P-PT also provides 4kV EFT, ±4kV Surge and ±15kV ESD air protection, which can reduce unstable situation caused by power line and Ethernet.

Industrial hardened design for extended temperature operation
Lantech IES-3424DSFP-2P-PT features high reliability and robustness withstanding extensive EMI/RFI phenomenon, lighting surge, inductive load switching, high ESD, high fault current environment, environmental vibration and shocks usually found in factory, substation, steel automation, aviation, mining and process control. It is the best solution for Automation, transportation, surveillance, Wireless backhaul, Semi-conductor factory and assembly lines.

Lantech IES-3424DSFP-2P-PT can run under widely operational temperature (-40°C~75°C) in the harsh environment.

FEATURES

• 24 10/100TX + 4 Dual Speed SFP (Total 28 Ports Switch)
• Back-plane (Switching Fabric): 12.8Gbps
• 16K MAC address table
• Built-in MMS server for SCADA data-modeling with control and monitoring
  • System info
  • Power
  • Device event report
  • Port status
  • Port statistic
  • Port event report
  • Firmware upgrade
  • Network configuration
• 10KB Jumbo frame
• User friendly UI, Auto topology drawing, topology demo, Complete CLI for professional setting
• Enhanced G.8032 Ring recovery < 20ms in single ring
  • Support various ring/chain topologies, including train ring, enhanced ring, basic ring, auto ring & multiple VLAN ring
  • Enhanced G.8032 ring configuration with ease
  • Auto ring configuration(auto mode) for single ring
  • Covers multi-cast and data packets
• DDM to support SFP diagnostic function***
  • Automatically convert the raw data into dB values for TX power/RX power, making it easier to measure the fiber distance
• Dual isolated power conversions for 1600V DC(36V~75V)
• Dual isolated power conversions for ±3000 V (85V~264VAC/100V~370VDC)
• Dual power supply terminal block for non-isolated power DC(12V~56V)
• Provides 4kV EFT protection
• Provides ±8kV (Contact) and ±15kV (Air) ESD protection
• Provides ±4kV Surge protection
• Supports IEEE 802.1p Class of Service, per port provides 8 priority queues Port base, Tag Base and Type of Service Priority
• IEEE 802.1d STP, IEEE 802.1w RSTP,802.1s MSTP VLAN redundancy with 16 MSTI
• 4K 802.1Q VLAN, Port based VLAN, GVRP, QinQ
• Supports IEEE 802.1ab LLDP, Cisco CDP; LLDP info can be viewed via Web/ Console
• DHCP server / client / DHCP Option 82 relay / DHCP Option 82 server; Port based DHCP server; DHCP Snooping; DHCP Option 66; basic IPv6 DHCP server
• Mac based DHCP server to assign IP address
• MLD Snooping for IPv6 Multicast stream
• Bandwidth Control
  • Ingress packet filter and egress rate limit
  • Broadcast/multicast packet filter control
• Relay alarm output system events
• Miss-wiring avoidance
  • LED indicator
• Node failure protection
  • Ensure the switches in a ring to survive after power breakout is back
  • The status can be shown in NMS when each switch is back
• TFTP/HTTP firmware upgrade
• Configuration backup and restoration
  • Supports text configuration file for system quick installation
  • USB port for upload / download configuration by USB dongle
• System Event Log and SNMP Trap for alarm support; 32 RMON counters
• Security
  • SSL/SSH v2/INGRESS/EGRESS ACL L2/L3
  • MAC address table: MAC address entries/Filter/MAC-Port binding
  • IP Security: IP address security management to prevent unauthorized intruder.
  • Login Security: IEEE802.1X/RADIUS
  • HTTPS for secure access to the web interface
  • TACACS+**
• Static multicast forwarding forward reversed IGMP flow with multicast packets binding with ports for IP surveillance application
• IGMP router port to assign query in ring for reversed multicast video flow
• IGMPv1,v2,v3 with Query mode for multimedia; GMRP
• Factory reset button to restore setting to factory default
• Watchdog design to auto reboot switch CPU is found dead
• Diagnostic including Ping / DDM information
• Supports DIDO (2 Digital Input / 2 Digital Output)
• IP30 metal housing with DIN rail and Wall-mount** design
• Auto Provision to verify switch firmware with the latest or certain version