DS422

1.  Rugged High Port Density L2+ Cyber Security Switch

High performance CPU & Full Gigabit Switching

・Powerful 1.2GHz ARM Cotex-A9 processor

・Non-blocking switch fabric design

・22-port Full Gigabit Ethernet ports, including 16

    Gigabit RJ45 and 6 100/1000M SFP.

・8 flexible Class of Service(CoS) queues

・16K MAC address table

・ 9Kb Jumbo Frame

・ DDM function for fiber connectivity monitoring

・Up to 8Gbps Link Aggregation

・Energy-Efficient Ethernet for power saving
 

L2+ Management Switch Features

・Various configuration paths, including WebGUI, CLI,

    SNMP, Modbus TCP, LLDP topology control

・Layer 2 Switch features include VLAN, QoS,

    LACP/Trunk, Rapid Spanning Tree protocol…etc.

・IGMP Snooping v1/v2/v3, IGMP Query, 512 L2 Multicast Groups for video applications

・Built-in DHCP Server that automatically provides and assigns IP addresses, default gateways to clients
 

WoMaster ERPSv2 PLUS Ring Technology

・ITU G.8032 v1/v2 ERPS Ring Redundancy & HW-based CFM for quick acknowledgment while GbE copper link failure, providing sub 50ms recovery time and seamless restoration.

・ ERPSv2 available to replace legacy Ring + Chain + Dual Homing

・Inter-Operability with 3rd party industrial switch and still remain fast recovery time.

・Support Enhanced RSTP for large ring network topology with up to 80 switches.

Industrial IoT LAN Management

・Support Software Utilities:

    -NetMaster, Network Management System

    -ViewMaster, Group Discovery & Configuration Utility

・Support Modbus TCP for monitoring in field

・Support Ethernet IP for monitoring in field

Rugged Design for Wayside Network Switching with Wide Power Input Range 

・10~60V wide power range design with redundant

    power input

・Excellent heat dissipation design for operating in

    -40~75oC environments

・High level EMC protection exceeding traffic control

    and heavy industrial standards’ requirements

・IEC 61000-6-2/4 Heavy Industrial Environment

√ ITU-T G.8032 ERPSv2 reduces coupling Ring failure recovery time

The G.8032 ERPS v2 technology effectively saves the recovery time for coupling ring link breakdown from 300 sec to less than 50ms by immediately change the topology of both major ring and subring.  
       
 

√ WoMaster ERPS v2 PLUS Technology – Fast Giga Copper Recovery Time

The adaption of Broadcom® CFM Technology can reduce CFM Transmission for link failure within 3.3ms, thus to detect the ring link fault within 11.55ms (3.5 times the CFM Interval) for ERPSv2 mechanism to respond. Once the ring port fails, the ERPS RPL-Owner will forward the backup port and recover the GbE copper within 50ms under the condition that 250pcs nodes in one ring
​.
          

MAB enables port-based access control by bypassing the MAC address authentication process to TACACS+/Radius Server. Prior to MAB, the endpoint's (ex. PLC) identity is unknown and all traffic is blocked. The switch examines a single packet to learn and authenticate the source MAC address. After MAB succeeds, the endpoint's identity is known and all traffic from that endpoint is allowed. The switch performs source MAC address filtering to help ensure that only the MAB-authenticated endpoint is allowed to send traffic.

​

• MAC address Auto Learning enables the switch to be programmed to learn (and to authorize) a preconfigured number of the first source MAC addresses encountered on a secure port. This enables the capture of the appropriate secure addresses when first configuring MAC address-based authorization on a port. Those MAC addresses are automatically inserted into the Static MAC Address Table and remained there until explicitly removed by the user.
• The port security is further enhanced by the Sticky MAC setting. If Sticky MAC address is activated, the MACs/Devices authorized on the port 'sticks’ to the port and the switch will not allow them to move to a different port.
• Port Shutdown Time allows users to specify for the time period to auto shutdown the port if a security violation event occurs.

√ DHCP Snooping

DHCP snooping acts like a firewall between untrusted hosts and trusted DHCP servers. It performs the following activities:

• Validates DHCP messages received from untrusted sources and filters out invalid messages.
• Rate-limits DHCP traffic from trusted and untrusted sources.
• Builds and maintains the DHCP snooping binding database, which contains information about untrusted hosts with leased IP addresses.
• Utilizes the DHCP snooping binding database to validate subsequent requests from untrusted hosts.

DHCP snooping is enabled on a per-VLAN basis. By default, the feature is inactive on all VLANs. You can enable the feature on a single VLAN or a range of VLANs.
cccccccccc

 

​√ Dynamic ARP Inspection (DAI)

DAI validates the ARP packets in a network. DAI intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from some man-in-the-middle attacks.

DAI ensures that only valid ARP requests and responses are relayed. The switch performs these activities:

• Intercepts all ARP requests and responses on untrusted ports
• Verifies that each of these intercepted packets has a valid IP-to-MAC address binding before updating the local ARP cache or before forwarding the packet to the appropriate destination
• Drops invalid ARP packets.

​√ IPv4/v6 Access Control List (ACL)

Packet filtering limits network traffic and restricts network use by certain users or devices. ACLs filter traffic as it passes through a switch and permits or denies packets crossing specified interfaces. An ACL is a sequential collection of permit and deny conditions that apply to packets. When a packet is received on an interface, the switch compares the fields in the packet against any applied ACLs to verify that the packet has the required permissions to be forwarded, based on the criteria specified in the access lists.

WoMaster supports L2-L7 ACLs, parsing up to 128 bytes/packet and L2-L7 packet classification and filtering IPv4/IPv6 traffic, including TCP, User Datagram Protocol (UDP), Internet Group Management Protocol (IGMP), and Internet Control Message Protocol (ICMP).



 

√ Multi-Level User Passwords

The different centralized authentication server is supported such as RADIUS and TACACS+. Using a central authentication server simplifies account administration, in particular when you have more than one switches in the network.

Authentication Chain is also supported. An authentication chain is an ordered list of authentication methods to handle more advanced authentication scenarios. For example, you can create an authentication chain which first contacts a RADIUS server, and then looks in a local database if the RADIUS server does not respond.

 

​√ NMS NetMaster Made Easy Deploy and Visualize Large Scale of ERPS Ring and VLAN

It is very time consuming and technical to set up a large group of ERPS v2 ring.  However, NetMaster NMS provides a smart way to configure a group of ERPS ring and visualize ERPS major/subring in purple/yellow color. With VLAN visualization, devices, ports, and links with the VLAN ID will be colored-coded.