G-NET G-UES-24GX2GT-SFP is a smart Layer 2 managed Gigabit Fiber Aggregation Switch.It provides 24x1000Base-FX SFP Slots and 2x10/100/1000Base-TX self adaptive RJ45 ports for uplink,which can implement mutual conversion between 10Base-T/100Base-TX/1000Base-TX twisted pair electrical signal and 1000Base-FX optical signal.G-UES-24GX2GT-SFP can extend the transmission distance of a network from 100m over copper wires to 120Km.This type of fiber converter supports two different types of network connection media types: 10/100/1000Base-TX and 1000Base-FX.It also supports IEEE 802.3,IEEE 802.3ab,IEEE 802.3z,IEEE 802.3u,IEEE 802.3x standard with 10/100/1000M,full/half-duplex, and MDI/MDI-X auto negotiation,All ports support wire speed switch, jumbo frame transmission.It is a reliable and economic choice for your security system,electronic power system and traffic system.

 

 

Features

▪Users can set all kinds of functions of the switch through the Ethernet port in WEB. Built-in ARP and DOS defense system can effectively defense the ARP, DOS and various virus attack. Moreover,it also equipped with many powerful features: a comprehensive QoS, spanning tree, a storm suppression, Bandwidth Control, IGMP Snooping, ACL access control, DHCP snooping etc. Very suitable for small and medium-sized enterprises, campus network, and the metropolitan area network aggregation applications.

▪ARP defense: the function of MAC address and port binding and MAC address security filtering can effectively defense the ARP attack; DHCP snooping can provide ARP protection for users to obtain the MAC dynamically.

▪QoS: support for multiple QOS strategy. Based on the 802.1p priority setting, each port provides eight priority queues. IP-DSCP can be divided into different service levels according to the IP header , to achieve a comprehensive QOS. AUTO VOIP can set the port to the highest priority of the voice signal, improve the voice quality of network IP telephone greatly.

▪Spanning Tree:Support the standard of IEEE 802.1d and IEEE 802.1w (Rapid Spanning Tree Protocol) and IEEE 802.1s (Multiple Spanning Tree Protocol).

▪AUTO DOS: defense the the following DOS attack with seven different forms.

    (1) Land attack: the attacker sends forged TCP SYN packets of information flow with the same source IP address, IP destination address , the victim system tries to send a response information to itself, result in a system disturbance and will be paralyzed or restart.

    (2) Blat attack: the attacker sends forged packets with the same source port number and destination port number, the victim system tries to send a response information to itself, result in system crashes or restart.

    (3) Smurf attack: the attacker uses spoofed source address of attack target to operate ping process to a broadcast address. Then all the active hosts will response the the target, leading to network congestion or disruption.

    (4) Ping flood: flooding the target system by the ping broadcast storms, so that the system can not respond to legitimate correspondence.

    (5) SYN/SYN-ACK flooded: floods the hole target system by SYN or SYN / ACK packet.

    (6) Protect the invalid TCP attack: Prevent the flood of data caused by the invalid TCP packets.

    (7) Ping of Death attack: Sends out a very large ICMP request packets ("Ping"), its intention is to cause the target computer input buffer overflow, so that the computer is paralyzed.

▪Storm suppression: can be set with the Broadcast, multicast, DLF traffic.

▪ACL Access Control: used to control the exchange of the packet from the port, to ensure that the intranet site will not be access to users without authority, while indirectly defend ARP attack.

▪IGMP Snooping: Support IGMP version 2 (RFC 2236): IGMP Snooping is used to establish the multicast groups to forward multicast packets to avoid wasting bandwidth when a multicast packet overflow network.

▪Support for 802.1x authentication, and to provide users with access to authentication.

▪Wire-speed filtering - Storage - forward mode, providing a true non-blocking switching structure.

▪Support the function of port mirroring, port gathering, port speed limit.

▪Support the port-based VLAN and IEEE802.1Q based on VLAN.