Switch Cisco SG220-26-K9-EU 24 10/100/1000 ports, 2 Gigabit RJ45/SFP combo port 

Layer 2 switching

MAC table

Up to 8,192 MAC addresses

Spanning Tree Protocol (STP)

Standard 802.1d Spanning Tree support, enabled by default

Fast convergence using 802.1w (Rapid Spanning Tree [RSTP])

Multiple Spanning Tree instances using 802.1s (MSTP)

16 instances are supported

Port grouping

Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP)

Load balance based on source and destination MAC address, or source and destination MAC/IP

VLAN

Support for up to 256 VLANs simultaneously

Port-based and 802.1Q tag-based VLANs

Management VLAN

Guest VLAN

Auto voice VLAN

Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS

QinQ VLAN

VLANs transparently cross a service provider network while isolating traffic among customers

Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP)

Protocols for automatically propagating and configuring VLANs in a bridged domain

Head-Of-Line (HOL) blocking

HOL blocking prevention

Jumbo frame

Frame sizes up to 9216 supported

Loopback detection

Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP.

Automatic Media-Dependent Interface Crossover (MDIX)

Automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight-through) is installed.

Security

ACLs

Drop or rate limit based on source and destination MAC, VLAN ID or IP address, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, TCP/UDP source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag

Support up to 512 rules

Port security

Creates the ability to lock source MAC addresses to ports; limits the number of learned MAC addresses

IEEE 802.1X (authenticator role)

802.1X: RADIUS authentication; guest VLAN;

Single-host, multiple-host, and multisession mode

RADIUS, TACACS+

Supports RADIUS and TACACS authentication; switch functions as a client

MAC address filtering

Supported

Storm control

Broadcast, multicast, and unknown unicast

DoS protection

DOS attack prevention

STP Bridge Protocol Data Unit (BPDU) Guard

This security mechanism protects the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port

Spanning Tree Loop Guard

This feature provides additional protection against Layer 2 forwarding loops (STP loops).

Secure Shell (SSH) Protocol

SSH is a secure replacement for Telnet traffic. SCP also uses SSH. SSH v1 and v2 are supported

Secure Sockets Layer (SSL)

SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch

QoS

Priority levels

8 hardware queues per port

Scheduling

Strict priority and Weighted Round-Robin (WRR) queue assignment based on DSCP and class of service (802.1p/CoS)

Class of service

Port-based; 802.1p VLAN priority-based; IPv4/v6 IP precedence, Type of Service (ToS), and DSCP-based; Differentiated Services (DiffServ); classification and re-marking ACLs, trusted QoS

Rate limiting

Ingress policer; egress shaping and rate control; per VLAN, per port, and flow-based

Congestion avoidance

A TCP congestion avoidance algorithm is required to reduce and prevent global TCP loss synchronization

pported SFP/SFP+ modules

SKU

Media

Speed

Maximum Distance

MGBBX1

Single-mode fiber

1000 Mbps

10 km

MGBSX1

Multimode fiber

1000 Mbps

500 m

MGBLH1

Single-mode fiber

1000 Mbps

40 km

MGBLX1

Single-mode fiber

1000 Mbps

10 km

MGBT1

UTP cat 5e

1000 Mbps

100 m

MFEFX1

Multimode fiber

100 Mbps

10 km

MFELX1

Single-mode fiber

100 Mbps

20 km