Switch Planet Industrial L3 16-Port 10/100/1000T 802.3at PoE + 2-Port 1G/2.5G SFP Managed (IGS-20160HPT)

Advanced Manageable PoE Solution for Hardened Environment

PLANET IGS-20160HPT L3 Industrial Managed PoE+ Switch, featuring 16 10/100/1000BASE-T 802.3at PoE+ ports with each port powering up to 36 watts, and 100/1000/2500BASE-X SFP ports in an IP30 rugged metal case, can be installed in any difficult environment. It provides user-friendly yet advanced IPv6/IPv4 management interfaces, abundant L2/L4 switching functions, Layer 3 OSPFv2 dynamic routing capability, and advanced ITU-G.8032 ERPS Ring technology to improve the rapid self-recovery capability and PLANET intelligent PoE functions for controlling the PoE outdoor IP surveillance and wireless network applications. It is able to operate reliably, stably and quietly in the temperature range from -40 to 75 degrees C.

Layer 3 Dynamic Routing Support

The IGS-20160HPT enables the administrator to conveniently boost network efficiency by configuring Layer 3 IPv4/IPv6 VLAN static routing manually, and the OSPFv2 (Open Shortest Path First) settings automatically. The OSPF is an interior dynamic routing protocol for autonomous system based on link state. The protocol creates a database for link state by exchanging link states among Layer3 switches, and then uses the Shortest Path First algorithm to generate a route table based on that database.

Cybersecurity Network Solution to Minimize Security Risks

The IGS-20160HPT supports SSHv2 and TLS protocols to provide strong protection against advanced threats. It includes a range of cybersecurity features such as DHCP Snooping, IP Source Guard, ARP Inspection Protection, 802.1x port-based and MAC-based network access control, RADIUS and TACACS+ user accounts management, SNMPv3 authentication, and so on to complement it as an all-security solution.

Redundant Ring, Fast Recovery for Critical Network Applications

The IGS-20160HPT supports redundant ring technology and features strong, rapid self-recovery capability to prevent interruptions and external intrusions. It incorporates advanced ITU-T G.8032 ERPS (Ethernet Ring Protection Switching) technology, Spanning Tree Protocol (802.1s MSTP), and redundant power input system into customer’s industrial automation network to enhance system reliability and uptime in harsh factory environments. In a simple Ring network, the recovery time of data link can be as fast as 10ms.

High Power PoE for Security and Public Service Applications

As the whole system comes with a total 320-watt PoE budget, the IGS-20160HPT is designed specifically to satisfy the growing demand of higher power consuming network PDs (powered devices) such as multi-channel (802.11a/b/g/n) wireless LAN access points, PTZ (pan, tilt, zoom) speed dome network cameras and other PoE network devices.

Convenient and Smart ONVIF Devices with Detection Feature

PLANET has developed an awesome feature -- ONVIF Support -- which is specifically designed for co-operating with video IP surveillances. From the IGS-20160HPT GUI, clients just need one click to search and show all of the ONVIF devices via network application. In addition, clients can upload floor images to the switch series, making the deployments of surveillance and other devices easy for planning and inspection purposes. Moreover, clients can get real-time surveillance’s information and online/offline status; the PoE reboot can be controlled from the GUI.

Intelligent Alive Check for Powered Device

The IGS-20160HPT can be configured to monitor connected PD’s status in real time via ping action. Once the PD stops working and responding, the IGS-20160HPT will recycle the PoE port power and bring the PD back to work. It also greatly enhances the reliability in that the PoE port will reset the PD power, thus reducing administrator’s management burden.

PoE Schedule for Energy Saving

Under the trend of energy saving worldwide and contributing to environmental protection on the Earth, the IGS-20160HPT can effectively control the power supply besides its capability of giving high watts power. The built-in “PoE schedule” function helps you to enable or disable PoE power feeding for each PoE port during specified time intervals and it is a powerful function to help SMBs or enterprises save power and money.

Scheduled Power Recycling

The IGS-20160HPT allows each of the connected PoE IP cameras or PoE wireless access points to reboot at a specific time each week. Therefore, it will reduce the chance of IP camera or AP crash resulting from buffer overflow.

SMTP/SNMP Trap Event Alert

The IGS-20160HPT provides event alert function to help to diagnose the abnormal device owing to whether or not there is a break of the network connection, or the rebooting response.

Effective Alarm Alert for Better Protection

The IGS-20160HPT supports a Fault Alarm feature which can alert the users when there is something wrong with the switches. With this ideal feature, the users would not have to waste time finding where the problem is. It will help to save time and human resource.

Digital Input and Digital Output for External Alarm

The IGS-20160HPT supports Digital Input and Digital Output on its front panel. This external alarm enables users to use Digital Input to detect and log external device status (such as door intrusion detector), and send event alarm to the administrators. The Digital Output could be used to alarm the administrators if the IGS-20160HPT port shows link down, link up or power failure.

Robust Layer 2 Features

The IGS-20160HPT can be programmed for advanced switch management functions such as dynamic port link aggregation, Q-in-Q VLAN, private VLAN, Rapid Spanning Tree Protocol, Layer 2 to Layer 4 QoS, bandwidth control and IGMP snooping. The IGS-20160HPT provides 802.1Q tagged VLAN, and the VLAN groups allowed will be maximally up to 255. Via aggregation of supporting ports, the IGS-20160HPT allows the operation of a high-speed trunk combining multiple ports. It enables a maximum of up to 10 trunk groups with 4 ports per trunk group, and supports fail-over as well. 

Efficient Management

For efficient management, the IGS-20160HPT Managed Ethernet Switch is equipped with console, Web and SNMP management interfaces. With the built-in Web-based management interface, the IGS-20160HPT offers an easy-to-use, platform-independent management and configuration facility. For text-based management, the IGS-20160HPT can be accessed via Telnet and the console port. Moreover, it also offers secure remote management via any standard-based management software by supporting SNMPv3 connection which encrypts the packet content at each session. 

Powerful Security

The IGS-20160HPT offers comprehensive Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. It can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications. Its protection mechanism also comprises 802.1x Port-based and MAC-based user and device authentication. With the private VLAN function, communication between edge ports can be prevented to ensure user privacy. The network administrators can now construct highly-secure corporate networks with considerably less time and effort than before.

Modbus TCP Provides Flexible Network Connectivity for Factory Automation

With the supported Modbus TCP/IP protocol, the IGS-20160HPT can easily integrate with SCADA systems, HMI systems and other data acquisition systems in factory floors. It enables administrators to remotely monitor the industrial Ethernet switch’s operating information, port information and communication status, thus easily achieving enhanced monitoring and maintenance of the entire factory.

1588 Time Protocol for Industrial Computing Networks

The IGS-20160HPT is ideal for telecom and Carrier Ethernet applications, supporting MEF service delivery and timing over packet solutions for IEEE 1588 and synchronous Ethernet.

Flexibility and Extension Solution

The two mini-GBIC slots built in the IGS-20160HPT support triple speed, 100BASE-FX, 1000BASE-SX/LX and 2500BASE-SX/LX SFP (Small Form-factor Pluggable) fiber-optic modules, meaning the administrator now can flexibly choose the suitable SFP transceiver according to not only the transmission distance but also the transmission speed required. The distance can be extended from 300 meters to 2km (multi-mode fiber) and up to 10/20/40/60/80/120 kilometers (single-mode fiber or WDM fiber). They are well suited for applications within the enterprise data centers and distributions. 

Intelligent SFP Diagnosis Mechanism

The IGS-20160HPT supports SFP-DDM (Digital Diagnostic Monitor) function that greatly helps network administrator to easily monitor real-time parameters of the SFP, such as optical output power, optical input power, temperature, laser bias current, and transceiver supply voltage.

Layer 3 VLAN Dynamic Routing and PoE Application

With the built-in robust IPv4/IPv6 Layer 3 traffic routing protocols, the IGS-20160HPT ensures reliable routing between VLANs and network segments. The routing protocols can be applied by VLAN interface with up to 32 routing entries. The IGS-20160HPT is certainly a cost-effective and ideal solution for enterprises.

Providing up to 16 Gigabit PoE+ ports and in-line power interface, the IGS-20160HPT PoE+ Managed Switch can easily build a centrally-controlled power network shared by wireless Gigabit AP, IP phone system, or mega-pixel IP camera system group for the enterprises.

Industrial Area Department/Workgroup PoE Switch

Providing up to 16 PoE+, in-line power interfaces, the IGS-20160HPT can easily build a power centrally controlled for IP phone system, IP camera system, or wireless AP group for Industrial network. For instance, 16 PoE IP cameras or wireless access points can be easily installed around the corner in the industrial environment for surveillance demands or for a wireless roaming network. Without the power-socket limitation, the IGS-20160HPT makes the installation of IP cameras or wireless AP easier and more efficient.

Physical Port

• 16 10/100/1000BASE-T Gigabit Ethernet RJ45 ports with IEEE 802.3at PoE+ Injector
• 2 10/100/1000BASE-T Gigabit Ethernet RJ45 ports
• 2 100/1000/2500BASE-X mini-GBIC/SFP slots for SFP type auto detection
• One RJ45 console interface for basic management and setup

Power over Ethernet 

• Complies with IEEE 802.3at Power over Ethernet Plus/end-span PSE
• Up to 16 IEEE 802.3af/802.3at devices powered
• Supports PoE power up to 36 watts for each PoE port
• Auto detects powered device (PD)
• Circuit protection prevents power interference between ports
• Remote power feeding up to 100m in standard mode; 250m in extended mode at speed of 10Mbps
• PoE management features
  • PoE admin-mode control 
  • PoE management mode selection
  • PoE Legacy mode selection
  • PoE Budget setup option
  • Per port PoE function enable/disable
  • PoE port power feeding priority
  • Per PoE port power limit
  • PoE Port Status monitoring
  • PD classification detection
  • Sequence port PoE
• Intelligent PoE features
  • Temperature threshold control
  • PoE usage threshold control
  • PoE extension
  • PoE schedule
  • PD alive check
  • LLDP PoE Neighbors

Industrial Protocol

• Modbus TCP for real-time monitoring in the SCADA system
• IEEE 1588v2 PTP (Precision Time Protocol) 

Industrial Case and Installation

• IP30 aluminum case 
• DIN-rail or wall-mount design
• 48~56V DC, redundant power with reverse polarity protection
• Supports 6KV DC Ethernet ESD protection
• -40 to 75 degrees C operating temperature 

Digital Input and Digital Output

• 2 digital input (DI)
• 2 digital output (DO)
• Integrate sensors into auto alarm system
• Transfer alarm to IP network via email and SNMP trap

Layer 2 Features

• Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex)
• High performance of Store-and-Forward architecture, and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth
• Storm Control support
  • Broadcast/Multicast/Unicast
• Supports VLAN
  • IEEE 802.1Q tagged VLAN
  • Up to 4K VLANs groups, out of 4094 VLAN IDs
  • Supports provider bridging (VLAN Q-in-Q, IEEE 802.1ad) 
  • Private VLAN Edge (PVE)
  • Port Isolation
  • MAC-based VLAN
  • IP Subnet-based VLAN
  • Protocol-based VLAN
  • VLAN Translation
  • Voice VLAN
  • GVRP
• Supports Spanning Tree Protocol
  • IEEE 802.1D Spanning Tree Protocol (STP)
  • IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
  • IEEE 802.1s Multiple Spanning Tree Protocol (MSTP), spanning tree by VLAN
  • BPDU Filtering/BPDU Guard
• Supports Link Aggregation
  • 802.3ad Link Aggregation Control Protocol (LACP)
  • Cisco ether-channel (static trunk)
  • Maximum 10 trunk groups with 4 ports per trunk group 
  • Up to 8Gbps bandwidth (duplex mode) 
• Provides port mirror (1-to-1)
• Port mirroring to monitor the incoming or outgoing traffic on a particular port 
• Loop protection to avoid broadcast loops
• Supports ERPS (Ethernet Ring Protection Switching)
• Compatible with Cisco Uni-directional link detection (UDLD) that monitors a link between two switches and blocks the ports on both ends of the link if the link fails at any point between the two devices
• Link Layer Discovery Protocol (LLDP) 
• Provides ONVIF for co-operating with PLANET video IP surveillances

Layer 3 IP Routing Features

• Supports maximum 128 static routes and route summarization
• IPv4 dynamic routing protocol supports OSPFv2
• IPv4/IPv6 hardware static routing
• Routing interface provides per VLAN routing mode

Quality of Service

• Ingress Shaper and Egress Rate Limit per port bandwidth control
• 8 priority queues on all switch ports
• Traffic classification
  • IEEE 802.1p CoS
  • IP TOS/DSCP/IP precedence
  • IP TCP/UDP port number
  • Typical network application
• Strict priority and Weighted Round Robin (WRR) CoS policies
• Supports QoS and In/Out bandwidth control on each port
• Traffic-policing on the switch port
• DSCP remarking

Multicast

• Supports IPv4 IGMP snooping v1, v2 and v3
• Supports IPv6 MLD snooping v1 and v2
• Querier mode support
• IPv4 IGMP snooping port filtering
• IPv6 MLD snooping port filtering
• MVR (Multicast VLAN Registration)

Security

• Authentication
  • IEEE 802.1x port-based / MAC-based network access authentication
  • Built-in RADIUS client to co-operate with the RADIUS servers
  • TACACS+ login users access authentication
  • RADIUS / TACACS+ users access authentication
• Access Control List
  • IP-based Access Control List (ACL)
  • MAC-based Access Control List
• Source MAC / IP address binding
• DHCP Snooping to filter un-trusted DHCP messages
• Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding
• IP Source Guard prevents IP spoofing attacks
• IP address access management to prevent unauthorized intruder

Management

• IPv4 and IPv6 dual stack management
• Switch Management Interfaces
  • Web switch management
  • Console/Telnet Command Line Interface 
  • SNMP v1 and v2c switch management
  • SSHv2, TLSv1.2 and SNMP v3 secure access
• IPv6 IP Address/NTP/DNS management
• Built-in Trivial File Transfer Protocol (TFTP) client
• BOOTP and DHCP for IP address assignment
• System Maintenance
  • Firmware upload/download via HTTP
  • Reset button for system reboot or reset to factory default
  • Dual Images
• DHCP Relay
• DHCP Option82
• DHCP Server
• User Privilege levels control
• NTP (Network Time Protocol)
• UPnP
• Link Layer Discovery Protocol (LLDP) and LLDP-MED
• IEEE 802.3ah OAM
• Compatible with Cisco uni-directional link detection(UDLD) that monitors a link between two switches and blocks the ports on both ends of the link if the link fails at any point between the two devices
• Network Diagnostic
  • SFP-DDM (Digital Diagnostic Monitor)
  • ICMPv6/ICMPv4 Remote Ping
  • Cable Diagnostic technology provides the mechanism to detect and report potential cabling issues
• SMTP/Syslog remote alarm
• Four RMON groups (history, statistics, alarms and events) 
• SNMP trap for interface Linkup and Linkdown notification
• System Log
• PLANET NMS System and Smart Discovery Utility for deployment management