Planet IGS-10020MT Industrial 8-port Gigabit RJ45 + 2-port 2.5G SFP Switch

The PLANET IGS-10020MT is a fully-managed Gigabit fiber switch usually designed for the industrial network. It features 8 10/100/1000BASE-T copper ports, 2 100/1000/2500BASE-X SFP ports and redundant power system in an IP30 rugged but compact-sized case that can be installed in any difficult environment without space limitation. Within such favorable enclosure, it provides user-friendly yet advanced IPv6/IPv4 management interfaces, abundant L2/L4 switching functions and Layer 3 static routing capability. The IGS-10020MT can operate stably under the temperature range from -40 to 75 degrees C and allows either DIN-rail or wall mounting for efficient use of cabinet space. With 2 100/1000/2500BASE-X SFP fiber slots, it can be flexibly applied to extend the connection distance.

The cybersecurity feature that virtually needs no effort and cost to have includes the protection of the switch management and the enhanced security of the mission-critical network. Both SSH and TLS protocols are utilized to provide strong protection against advanced threats. It includes a range of cybersecurity features such as DHCP Snooping, IP Source Guard, ARP Inspection Protection, 802.1x port-based and MAC-based network access control, RADIUS and TACACS+ user accounts management, SNMPv3 authentication, and so on to complement it as an all-security solution. The network administrator can now construct highly-secure corporate networks with considerably less time and effort than before.

Features:

Physical Port

• 8 10/100/1000BASE-T Gigabit Ethernet RJ45 ports
• 2 100/1000/2500BASE-X mini-GBIC/SFP slots for SFP type auto detection

Industrial Case and Installation

• IP30 aluminum case protection
• DIN-rail or wall-mount design
• Redundant power design
• - 12 to 48V DC, redundant power with polarity reverse protect function- AC 24V power adapter acceptable
• Supports 6000 VDC Ethernet ESD protection 
• -40 to 75 degrees C operating temperature

Industrial Protocol

• Modbus TCP for real-time monitoring in SCADA system
• IEEE 1588v2 PTP (Precision Time Protocol) transparent clock

Layer 2 Features

• High performance of Store-and-Forward architecture and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Storm Control support
• - Broadcast, Multicast and Unknown Unicast
• Supports VLAN
• - IEEE 802.1Q tagged VLAN- Up to 255 VLANs groups, out of 4095 VLAN IDs- Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)- Private VLAN Edge (PVE)- Protocol-based VLAN- MAC-based VLAN- Voice VLAN- GVRP (GARP VLAN Registration Protocol)
• Supports Spanning Tree Protocol
• - IEEE 802.1D Spanning Tree Protocol (STP)- IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)- IEEE 802.1s Multiple Spanning Tree Protocol (MSTP), spanning tree by VLAN- BPDU Guard
• Supports Link Aggregation
• - 802.3ad Link Aggregation Control Protocol (LACP)- Cisco ether-channel (static trunk)- Maximum 5 trunk groups, up to 10 ports per trunk group - Up to 26Gbps bandwidth (duplex mode)
• Provides port mirror (many-to-1)
• Port mirroring to monitor the incoming or outgoing traffic on a particular port 
• Loop protection to avoid broadcast loops
• Supports ERPS (Ethernet Ring Protection Switching)
• Compatible with Cisco Uni-directional link detection (UDLD) that monitors a link between two switches and blocks the ports on both ends of the link if the link fails at any point between the two devices
• Link Layer Discovery Protocol (LLDP)

Layer 3 IP Routing Features

• Supports maximum 32 static routes and route summarization

Quality of Service

• Ingress Shaper and Egress Rate Limit per port bandwidth control
• 8 priority queues on all switch ports
• Traffic classification
• - IEEE 802.1p CoS- IP TOS/DSCP/IP precedence- IP TCP/UDP port number- Typical network application
• Strict priority and Weighted Round Robin (WRR) CoS policies
• Supports QoS and In/Out bandwidth control on each port
• Traffic-policing on the switch port
• DSCP remarking

Multicast

• Supports IPv4 IGMP Snooping v1, v2 and v3
• Supports IPv6 MLD Snooping v1 and v2
• Querier mode support
• IPv4 IGMP Snooping port filtering
• IPv6 MLD Snooping port filtering
• MVR (Multicast VLAN Registration)

Security

• Authentication
• - IEEE 802.1x Port-based/MAC-based network access authentication- Built-in RADIUS client to cooperate with the RADIUS servers- TACACS+ login users access authentication- RADIUS/TACACS+ users access authentication
• Access Control List
• - IP-based Access Control List (ACL)- MAC-based Access Control List
• Source MAC/IP address binding
• DHCP snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• IP address access management to prevent unauthorized intruder

Management

• IPv4 and IPv6 dual stack management
• Switch Management Interfaces
• - Telnet Command Line Interface- Web switch management- SNMP v1 and v2c switch management- SSH/TLS and SNMP v3 secure access
• SNMP Management
• - Four RMON groups (history, statistics, alarms, and events) - SNMP trap for interface Link Up and Link Down notification
• IPv6 IP address/NTP/DNS management
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System Maintenance
• - Firmware upload/download via HTTP/TFTP- Reset button for system reboot or reset to factory default- Dual Images
• DHCP Relay and DHCP Option 82
• DHCP Server 
• User Privilege levels control
• Network Time Protocol (NTP)
• SFP-DDM (Digital Diagnostic Monitor)
• Network Diagnostic
• - ICMPv6/ICMPv4 Remote Ping- Cable diagnostic technology provides the mechanism to detect and report potential cabling issues
• PLANET Smart Discovery Utility for deployment management