GS-4210-16UP4C Planet Managed POE

 A New Generation IEEE 802.3bt PoE++ Managed Switch with Advanced L2/L4 Switching and Security

PLANET GS-4210-16UP4C is a cost-optimized, 1U, Gigabit 802.3bt PoE++ Managed Switch featuring PLANET intelligent PoE functions to improve the availability of critical business applications. It provides IPv6/IPv4 dual stack management and built-in L2/L4 Gigabit switching engine along with 16 10/100/1000BASE-T ports featuring 95-watt 802.3bt type-4 PoE++ injector ports and 4 additional Gigabit TP/SFP combo ports. With a total power budget of up to 400 watts for different kinds of PoE applications, respectively, the GS-4210-16UP4C provides a quick, safe and cost-effective 802.3bt PoE++ network solution for small businesses and enterprises.

Cybersecurity Network Solution to Minimize Security Risks

The cybersecurity feature that virtually needs no effort and cost to have includes the protection of the switch management and the enhanced security of the mission-critical network. Both SSHv2 and TLS protocols are utilized to provide strong protection against advanced threats. 

802.3bt PoE++ 60~95-watt Power over 4-pair UTP Solution

As the GS-4210-16UP4C adopts the IEEE 802.bt PoE++ standard and PoH technology, it is capable to source up to 95 watts of power by using all the four pairs of standard Cat5e/6 Ethernet cabling to deliver power and full-speed data to each remote PoE compliant powered device (PD). Its power capability is three times more than that of the conventional 802.3at PoE+ and it is an ideal solution for those high power consuming network PDs, such as:

• PoE PTZ speed dome cameras
• Network devices 
• Thin clients
• AIO (all-in-one) touch PCs, point of sale (POS) and information kiosks
• Remote digital signage displays
• PoE lightings

802.3bt PoE++ and Advanced PoE Power Output Mode Management

To meet the demand of various powered devices consuming stable PoE power, the GS-4210-16UP4C supports rich PoE operation modes including 90-watt 802.3bt type-4 PoE++ mode, 95-watt PoH (Power over HD-BASE-T) mode and 4-pair force mode to solve the incompatibility of non-standard 4-pair PoE PDs in the field.

• 95W UPoE/PoH Power Output Mode
• 90W 802.3bt PoE++ Power Output Mode
• 72W UPoE/PoH Power Output Mode
• 60W 802.3bt PoE++ Power Output Mode
• 60W Force Power Output Mode
• 36W End-span PoE Power Output Mode
• 36W Mid-span PoE Power Output Mode

Built-in Unique PoE Functions for Powered Devices Management

As it is the managed PoE switch for surveillance, wireless and VoIP networks, the GS-4210-16UP4C features the following special PoE management functions:

• PD Alive Check
• Scheduled Power Recycling 
• PoE Schedule
• PoE Usage Monitoring
• PoE Extension

Intelligent Powered Device Alive Check

The GS-4210-16UP4C can be configured to monitor connected PD status in real time via ping action. Once the PD stops working and responding, the GS-4210-16UP4C will resume the PoE port power and bring the PD back to work. It will greatly enhance the network reliability through the PoE port resetting the PD’s power source and reducing administrator management burden.

Scheduled Power Recycling

The GS-4210-16UP4C allows each of the connected PoE IP cameras or PoE wireless access points to reboot at a specified time each week. Therefore, it will reduce the chance of IP camera or AP crash resulting from buffer overflow.

PoE Schedule for Energy Savings

Under the trend of energy saving worldwide and contributing to environmental protection, the GS-4210-16UP4C can effectively control the power supply besides its capability of giving high watts power. The “PoE schedule” function helps you to enable or disable PoE power feeding for each PoE port during specified time intervals and it is a powerful function to help SMBs or Enterprises save power and money. It also increases security by powering off PDs that should not be in use during non-business hours.

PoE Usage Monitoring

Via the power usage chart in the web management interface, the GS-4210-16UP4C enables the administrator to monitor the status of the power usage of the connected PDs in real time. Thus, it greatly enhances the management efficiency of the facilities.

802.3at PoE+ Power and Ethernet Data Transmission Distance Extension

In the “Extend” operation mode, the GS-4210-16UP4C operates on a per-port basis at 10Mbps duplex operation but can support 36-watt PoE power output over a distance of up to 250 meters overcoming the 100m limit on Ethernet UTP cable. With this brand-new feature, the GS-4210-16UP4C provides an additional solution for 802.3at/af PoE distance extension, thus saving the cost of Ethernet cable installation.

Environment-friendly, Smart Fan Design for Silent Operation

The GS-4210-16UP4C features a desktop-sized metal housing, a low noise design and an effective ventilation system. It supports the smart fan technology that automatically controls the speed of the built-in fan to reduce noise and maintain the temperature of the PoE switch for optimal power output capability. The GS-4210-16UP4C is able to operate reliably, stably and quietly in any environment without affecting its performance.

IPv6/IPv4 Dual Stack Management

Supporting both IPv6 and IPv4 protocols, the GS-4210-16UP4C helps the SMBs to step in the IPv6 era with the lowest investment as its network facilities need not be replaced or overhauled if the IPv6 FTTx edge network is set up. 

Robust Layer 2 Features

The GS-4210-16UP4C can be programmed for advanced switch management functions such as dynamic port link aggregation, 802.1Q VLAN and Q-in-Q VLAN, Multiple Spanning Tree Protocol (MSTP), loop and BPDU guard, IGMP snooping, and MLD snooping. Via the link aggregation, the GS-4210-16UP4C allows the operation of a high-speed trunk to combine with multiple ports, and supports fail-over as well.  Also, the Link Layer Discovery Protocol (LLDP) is the Layer 2 protocol included to help discover basic information about neighboring devices on the local broadcast domain.

Efficient Traffic Control

The GS-4210-16UP4C is loaded with robust QoS features and powerful traffic management to enhance services to business-class data, voice and video solutions. The functionality includes broadcast/multicast storm control, per port bandwidth control, IP DSCP QoS priority and remarking. It guarantees the best performance for VoIP and video stream transmission, and empowers the enterprises to take full advantage of the limited network resources.

Powerful Security

PLANET GS-4210-16UP4C offers comprehensive IPv4/IPv6 Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. It can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications. Its protection mechanism also comprises 802.1X port-based user and device authentication, which can be deployed with RADIUS to ensure the port level security and block illegal users. With the protected port function, communication between edge ports can be prevented to guarantee user privacy. Furthermore, Port security function allows to limit the number of network devices on a given port. 

Advanced Network Security

The GS-4210-16UP4C also provides DHCP snooping, IP source guard and dynamic ARP inspection functions to prevent IP snooping from attack and discard ARP packets with invalid MAC address. The network administrators can now construct highly-secure corporate networks with considerably less time and effort than before.

User-friendly and Secure Management 

For efficient management, the GS-4210-16UP4C is equipped with web, Telnet and SNMP management interfaces. With the built-in web-based management interface, the GS-4210-16UP4C offers an easy-to-use, platform-independent management and configuration facility. By supporting the standard SNMP, the switch can be managed via any standard management software. For text-based management, the switch can be accessed via Telnet. Moreover, the GS-4210-16UP4C offers secure remote management by supporting SSH, TLS and SNMP v3 connections which encrypt the packet content at each session.

Flexibility and Long-distance Extension Solution

The four mini-GBIC slots built in the GS-4210-16UP4C support SFP auto-detection and dual speed as it features 100BASE-FX and 1000BASE-SX/LX SFP (Small Form-factor Pluggable) fiber transceivers to uplink to backbone switch and monitoring center in long distance. The distance can be extended from 550 meters to 2 kilometers (multi-mode fiber) and up to above 10/20/40/60/80/120 kilometers (single-mode fiber or WDM fiber). They are well suited for applications within the enterprise data centers and distributions.

Intelligent SFP Diagnosis Mechanism

The GS-4210-16UP4C supports SFP-DDM (Digital Diagnostic Monitor) function that can easily monitor real-time parameters of the SFP for network administrator, such as optical output power, optical input power, temperature, laser bias current and transceiver supply voltage.

Applications

Gigabit 802.3bt PoE++ and PoE+ Network Deployment Solution

PLANET GS-4210-16UP4C can easily build an Ultra PoE networking solution on the cyber security system for the enterprises.  For instance, it can work with the POS system and thin client to perform comprehensive security protection for today’s businesses. The GS-4210-16UP4C and 802.3bt PoE++ Splitter-POE-173S, operate as a pair to provide the easiest way to power your Ethernet devices which need high power input. Receiving data and power from the GS-4210-16UP4C, the POE-173S separates digital data and power into three optional outputs (12V, 19V or 24V DC) to non-PoE devices such as laptops, Thin Client, POS System, PTZ (pan, tilt & zoom) network cameras, PTZ speed dome, color touch-screen IP phones, multi-channel wireless LAN access points and other network devices at distance up to 100 meters.

Multiple Spanning Tree Protocol with PoE IP Office Solution for SMBs and Workgroups

The GS-4210-16UP4C features strong, rapid self-recovery capability to prevent interruptions and external intrusions. It incorporates Multiple Spanning Tree Protocol (802.1s MSTP) into customer’s automation network to enhance system reliability and uptime. Applying the IEEE 802.3af/IEEE 802.3at/802.3bt PoE++ standard, the GS-4210-16UP4C can directly connect with any IEEE 802.3at/Ultra PoE/802.3bt PoE++ end-nodes like PTZ network cameras and speed dome cameras. The GS-4210-16UP4C can easily help enterprises with the available network infrastructure to build wireless AP, IP camera and VoIP systems where power can be centrally controlled.

Features and Benefits

Physical Port

• 20 10/100/1000BASE-T RJ45 copper ports with 16-Port IEEE 802.3af PoE/802.3at PoE+/802.3bt PoE++ injector
• 4 100/1000BASE-X mini-GBIC/SFP slots, shared with port-17 to port-20 compatible with 100BASE-FX SFP
• RJ45 console interface for switch basic management and setup

Power over Ethernet

• Complies with IEEE 802.3bt Power over Ethernet Plus Plus
• Backward compatible with IEEE 802.3at Power over Ethernet Plus
• Up to 16 ports of IEEE 802.3at/IEEE 802.3bt PoE devices powered
• 8 PoE ports with built-in 802.3bt type-4 PoE 90W or ultra PoE 95-watt injector function (Ports 1 to 8)
• 8 PoE ports with built-in 802.3bt type-3 PoE 60W or ultra PoE 72-watt injector function (Ports 9 to 16)
• All PoE ports support 802.3at end-span/mid-span PoE 36W injector function
• Auto detects powered device (PD)
• Circuit protection prevents power interference between ports
• Remote power feeding up to 100 meters in standard mode and 250m in extend mode
• PoE management
• - PoE admin-mode control 
• - PoE Legacy mode option
• - Temperature threshold control
• - PoE Chipset temperature display
• - Per port PoE function enable/disable
• - Per port PoE Inline mode option
• - PoE port power feeding priority
• - PD classification detection
• Intelligent PoE features
• - PD alive check
• - PoE schedule
• - PoE extension

Layer 2 Features

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance Store and Forward architecture, broadcast storm control, and runt/CRC filtering that eliminates erroneous packets to optimize the network bandwidth
• Supports VLAN
• - IEEE 802.1Q tagged VLAN
• - Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)
• - Protocol VLAN
• - Voice VLAN
• - Private VLAN
• - Management VLAN
• - GVRP
• Supports Spanning Tree Protocol
• - STP (Spanning Tree Protocol)
• - RSTP (Rapid Spanning Tree Protocol)
• - MSTP (Multiple Spanning Tree Protocol)
• - STP BPDU Guard, BPDU filtering and BPDU forwarding
• Supports Link Aggregation
• - IEEE 802.3ad Link Aggregation Control Protocol (LACP)
• - Cisco ether-channel (static trunk)
• - 2 groups of 4-port trunk
• Provides port mirror (many-to-1)
• Loop protection to avoid broadcast loops

Quality of Service

• Ingress and egress rate limit per port bandwidth control
• Storm control support
• - Broadcast/Unknown unicast/Unknown multicast
• Traffic classification
• - IEEE 802.1p CoS
• - TOS/DSCP/IP precedence of IPv4/IPv6 packets
• Strict priority and Weighted Round Robin (WRR) CoS policies

Multicast

• Supports IPv4 IGMP snooping v2 and v3
• Supports IPv6 MLD snooping v1, v2
• IGMP querier mode support
• IGMP snooping port filtering
• MLD snooping port filtering

Security

• Authentication
• - IEEE 802.1X port-based network access authentication
• - Built-in RADIUS client to cooperate with the RADIUS servers
• - RADIUS/TACACS+ login user access authentication
• Access control list
• - IPv4/IPv6 IP-based ACL
• - MAC-based ACL
• MAC security
• - Static MAC
• - MAC filtering
• Port security for source MAC address entries filtering
• DHCP snooping to filter distrusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP source guard prevents IP spoofing attacks
• DoS attack prevention
• IP address access management to prevent unauthorized intruder

Management

• IPv4 and IPv6 dual stack management
• Switch management interface
• - Web switch management 
• - Console and telnet command line interface
• - SNMP v1 and v2c switch management
• - SSHv2, TLSv1.2 and SNMP v3 secure access
• SNMP Management
• - Four RMON groups (history, statistics, alarms and events) 
• - SNMP trap for interface link up and link down notification
• User privilege levels control
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System maintenance
• - Firmware upload/download via HTTP/TFTP
• - Configuration upload/download through web interface
• - Dual images
• - Hardware reset button for system reboot or reset to factory default
• SNTP Network Time Protocol
• Network Diagnostic
• - SFP-DDM (digital diagnostic monitor)
• - Cable diagnostics
• - ICMPv4/ICMPv6 remote ping
• Link Layer Discovery Protocol (LLDP) and LLDP-MED
• Event message logging to remote syslog server
• Smart fan with speed control
• PLANET UNI-NMS (Universal Network Management) and Smart Discovery Utility for deployment management

Specifications

Hardware Specifications

Copper Ports: 20 x 10/100/1000BASE-T RJ45 auto-MDI/MDI-X port
SFP/mini-GBIC Slots: 4 x 100/1000BASE-X SFP interface shared with port-17 to port-20
Supports 100/1000Mbps dual mode and DDM
PoE Injector Port: 16 ports with 802.3at/af/802.3bt PoE++ injector function with port-1 to port-16
Switch Architecture: Store-and-Forward
Switch Fabric: 40Gbps/non-blocking
Switch Throughput@64Bytes: 29.7Mpps
Address Table: 8K entries
Shared Data Buffer: 4.1 megabits
Flow Control: IEEE 802.3x pause frame for full-duplex
Back pressure for half-duplex
Jumbo Frame: 10K bytes
Reset Button: < 5 sec: System reboot
> 5 sec: Factory default
LED: System:
　PWR x1 (Green)
　SYS x1 (Green)
Per PoE Port (Port 1 to Port 16):
　10/100/1000 LNK/ACT x1 (10/100:Orange.1000:Green)
　IEEE 802.3af/at/bt PoE-in-use x1 (802.3af/at: Orange. 802.3bt: Green)
Per Gigabit TP Port (Port 17 to Port 20):
　10/100 LNK/ACT x1 (Orange)
　1000 LNK/ACT x1 (Green)
Per Gigabit SFP Port (Port 17 to Port 20):
　100 LNK/ACT x1 (Orange)
　1000 LNK/ACT x1 (Green)
Alert:
　PoE PWR x1 (Red)
　FAN1 x1 (Red)
　FAN2 x1 (Red)
　FAN3 x1 (Red)
Power Requirements: 100~240V AC, 50/60Hz, auto-sensing
Dimensions (W x D x H): 440 x 300 x 44.5 mm, 1U height
ESD Protection: Contact Discharge 4KV DC
Air Discharge 8KV DC
Enclosure: Metal
Weight: 4.4kg
Power Consumption/Dissipation: 500 watts (max.)/1706 BTU
Fan: 3 x smart fan

Power over Ethernet

PoE Standard: IEEE 802.3bt PoE++ PSE
Backward compatible with IEEE 802.3at/af PoE PSE
PoE Power Supply Type: 
802.3bt
UPoE/POH
End-span
Mid-span
Force
PoE Power Output: Per port 54V DC
802.3bt mode, Ports 1 to 8: maximum 90 watts
802.3bt mode, Ports 9 to 16: maximum 60 watts
UPoE mode, Ports 1 to 8: maximum 95 watts
UPoE-mode, Ports 9 to 16: maximum 72 watts
End-span mode: maximum 36 watts
Mid-span mode: maximum 36 watts
Power Pin Assignment: 
802.3bt: 1/2(-), 3/6(+), 4/5(+), 7/8(-)
UPoE: 1/2(-), 3/6(+), 4/5(+), 7/8(-)
End-span: 1/2(-), 3/6(+)
Mid-span: 4/5(+), 7/8(-)
PoE Power Budget: 400 watts (max.)
Number of 90W 802.3bt Type-4 PDs: 4
Number of 60W 802.3bt Type-3 PDs: 6
Number of 802.3at PDs: 16

PoE Management Functions

Active PoE device alive detects: Yes
PoE Power Recycle: Yes, daily or predefined schedule
PoE Schedule: 4 schedule profiles
PoE Extend Mode: Yes, max. up to 250 meters
PoE Port Management: 
Port Enable/Disable/Schedule
PoE mode control
　- 802.3bt
　- UPoE
　- 802.3at End-span
　- 802.3at Mid-span
Force mode
Port Priority

Layer 2 Functions

Port Mirroring: TX/RX/both
Many-to-1 monitor
VLAN: 802.1Q tagged VLAN
Up to 256 VLAN groups, out of 4094 VLAN IDs
802.1ad Q-in-Q tunneling
Voice VLAN
Protocol VLAN
Private VLAN (Protected port)
GVRP
Link Aggregation: IEEE 802.3ad LACP and static trunk
Supports 2 groups of 4-port trunk
Spanning Tree Protocol: IEEE 802.1D Spanning Tree Protocol (STP)
IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
IGMP Snooping: IGMP (v2/v3) snooping
IGMP querier
Up to 256 multicast groups
MLD Snooping: MLD (v1/v2) snooping, up to 256 multicast groups
Access Control List: IPv4/IPv6 IP-based ACL/MAC-based ACL
QoS: 8 mapping IDs to 8 level priority queues
　- Port number
　- 802.1p priority
　- 802.1Q VLAN tag
　- DSCP field in IP packet
Traffic classification based, strict priority and WRR
Security: IEEE 802.1X port-based authentication
Built-in RADIUS client to cooperate with RADIUS server
RADIUS/TACACS+ user access authentication
IP-MAC port binding
MAC filtering
Static MAC address
DHCP Snooping and DHCP Option82
STP BPDU guard, BPDU filtering and BPDU forwarding
DoS attack prevention
ARP inspection
IP source guard

Management Functions

Basic Management Interfaces: Web browser; Telnet; SNMP v1, v2c
Firmware upgrade by HTTP/TFTP Protocol through Ethernet network
Remote/Local syslog
System log
LLDP Protocol
SNTP
Secure Management Interfaces: SSHv2, TLS v1.2, SNMP v3
SNMP MIBs: RFC 1213 MIB-II
RFC 1215 Generic Traps
RFC 1493 Bridge MIB
RFC 2674 Bridge MIB Extensions
RFC 2737 Entity MIB (v2)
RFC 2819 RMON (1, 2, 3, 9)
RFC 2863 Interface Group MIB
RFC 3635 Ethernet-like MIB
RFC 3621 Power Ethernet MIB

Standards Conformance

Regulatory Compliance: FCC Part 15 Class A, CE, LVD
Standards Compliance: 
IEEE 802.3 10BASE-T
IEEE 802.3u 100BASE-TX/100BASE-FX
IEEE 802.3z Gigabit SX/LX
IEEE 802.3ab Gigabit 1000T
IEEE 802.3x flow control and back pressure
IEEE 802.3ad port trunk with LACP
IEEE 802.1D Spanning Tree protocol
IEEE 802.1w Rapid Spanning Tree protocol
IEEE 802.1s Multiple Spanning Tree protocol
IEEE 802.1p Class of Service
IEEE 802.1Q VLAN tagging
IEEE 802.1x Port Authentication Network Control
IEEE 802.1ab LLDP
IEEE 802.3af Power over Ethernet
IEEE 802.3at Power over Ethernet Plus
IEEE 802.3bt Power over Ethernet Plus Plus
IEEE 802.3az Energy Efficient Ethernet (EEE)
RFC 768 UDP
RFC 793 TFTP
RFC 791 IP
RFC 792 ICMP
RFC 2068 HTTP
RFC 1112 IGMP version 1
RFC 2236 IGMP version 2
RFC 3376 IGMP version 3
RFC 2710 MLD version 1
RFC 3810 MLD version 2

Environment

Operating: Temperature: 0 ~ 50 degrees C
Relative Humidity: 5 ~ 95% (non-condensing)
Storage: Temperature: -10 ~ 70 degrees C
Relative Humidity: 5 ~ 95% (non-condensing)