Overview
Key Features & Benefits
VigorSwitch G2280x
10GbE Gigabit Switch with 24 Gigabit Ports & 4 10GbE SFP+ Uplink Ports
The VigorSwitch G2280x is a high-performance, L2+ Managed Gigabit Ethernet switch. With 24 1-Gigabit RJ-45 LAN ports and 4 10-Gigabit Ethernet SFP+ ports.
Use the 4 SFP+ ports for high speed uplinks between Switches, Servers and Network-Attached-Storage at up to 10 Gigabits per port.
Designed for centralised management, the VigorSwitch G2280x can be managed directly through its web interface, or provisioned and monitored through both the VigorACS management platform and/or, a DrayTek Vigor router’s Central Switch Management. Easily provision the VLAN configuration through the router and clone switch configurations. Drastically reduce the setup time required for a complex network, with VLANs spanning multiple switches.
10GbE SFP+ Ports for High Speed Uplinks
The DrayTek VigorSwitch G2280x has 4 dedicated SFP+ ports for uplinks, each operating at up to 10 Gigabits per second. The faster 10 Gigabit uplink capability allows you to make high bandwidth links to Network Attached Storage, Servers and other switches, to help reduce the risk of bottlenecks occurring within your network.
The SFP+ ports provide compatibility with your choice of SFP / SFP+ modules (not included) and therefore the most appropriate medium for your application.
Connect a passive Direct Attach SFP+ cable such as the DrayTek DAC-CX10-01M to the SFP+ module port of 1Gbps/10Gbps capable Network Attached Storage, Servers and Switches, for a cost effective, up to 10Gbps network link.
Advanced Layer 2+ Routing Features
A DrayTek VigorSwitch provides connectivity for multiple network segments with 802.1Q VLAN tags, which separate networks at Layer 2 (MAC level). In a typical network that uses Layer 2 VLAN tags, the router provides the routing between VLANs, which can limit throughput between VLANs to the router's Firewall throughput, instead of the 1Gbps link speed.
The VigorSwitch G2280x adds the Layer 3 features VLAN Routing and Static Route to allow the switch to provide routing between VLANs at high speed. The VigorSwitch's Access Control List allows for full control of what traffic routes between networks.
Routing beyond the VigorSwitch G2280x, to the Internet and across VPNs is possible with Static Routes. Up to 512 static routes can be configured on the switch.
Quiet Operation & Hardware Monitoring
The VigorSwitch G2280x is passively cooled for quiet operation.
Hardware Monitoring ensures safe and reliable operation with remote status information & alerts. Track and graph switch temperature and voltage status. View this information locally through the web interface or remotely through VigorACS central management.
This allows the switch to notify you if the switch's temperature exceeds its operating limit. For instance sending an email alert if the switch overheats for any reason.
Quality of Service & Bandwidth Control
Prioritise latency-sensitive applications on your network with Quality of Service (802.1p and DSCP) support.
Auto Voice VLAN allows the switch to automatically assign VoIP devices to a separate VLAN and prioritise their traffic.
Control throughput per-port with Rate Limiting and application specific Traffic Shaping.
Network Security and Management Features
Stay in control of what's connected to your network with Port Security and 802.1X & MAC authentication, to prevent connection of unauthorised equipment.
Protect against network issues arising from connection of unwanted devices with DHCP Snooping and IP Source Guard.
Control port access for every port on your network with the VigorSwitch Access Control List - to specifically allow or deny specified traffic types moving between ports, just like a Firewall.
AAA - 802.1X Authentication |
Control access to LAN ports through a RADIUS server, which could be provided by the Vigor 2862 router on site. Authenticate and authorise network access via 802.1X, MAC address or web authentication. Track data and time usage of each user authenticated with RADIUS Accounting. |
Management Authentication via RADIUS, TACACS+ or local accounts |
Control logins to the switch management with the switch's internal user accounts or through a central RADIUS / TACACS+ server. |
IPv6 Ready |
The VigorSwitch G2280x has extensive IPv6 support, with IPv6 ACL, MLD Snooping and IPv6 DNS Resolution. Filter IPv6 packets with the Access Control List (ACL) alongside IPv4 traffic. Use IPv6 MLD Snooping to control and more efficiently manage Multicast packets in the same way that IGMP Snooping would for IPv4 Multicast packets. |
Voice VLAN & Surveillance (IP Camera) VLAN |
Automatically assign VLANs and QoS configuration to devices with matching MAC address OUI (manufacturer identifier i.e. 00-1D-AA-00-11-22 = DrayTek) upon connection to the switch. |
DHCP Snooping |
Limit DHCP server responses to only a specified port to stop unauthorised devices from affecting network connectivity. |
IP Source Guard |
Protects against address spoofing by comparing packets received with either statically configured source IP addresses or addresses learned from DHCP snooping. |
Access Control List |
Similar to a firewall, the ACL can control which packet types (IPv4, IPv6 & MAC) are allowed to pass between ports on the switch. |
Link Aggregation - Port Trunking |
Use two or more network links to connect the VigorSwitch G2280x and another switch / server. Traffic can be shared between the two ports, effectively doubling the bandwidth of the uplink and providing resilience should one of the links fail. |
Improved Jumbo Frame |
The VigorSwitch G2280x supports Ethernet packets up to 12 Kilobytes in size, to further improve throughput and increase the efficiency of packet transmission across your network. |
sFlow |
Send sFlow data from the VigorSwitch G2280x to an sFlow Collector to analyse traffic passing through the switch. |
ONVIF IP Camera Management
The VigorSwitch G2280x is able to discover and manage ONVIF (Open Network Video Interface Forum) compatible IP cameras and NVR systems, allowing for easy discovery and management of your IP cameras on the network.
Simply connect ONVIF capable devices to the VigorSwitch G2280x, then Discover devices, the VigorSwitch determines the network topology of connected cameras & NVR systems. The switch can aid in the maintenance of an IP camera network, with port throughput overusage notifications and the Device Ping Check, to notify if connected IP cameras stop responding.
Through the VigorSwitch web interface, you can view the video feed of discovered and authenticated IP cameras, check firmware and device information, and modify the IP address settings of connected ONVIF devices.
Camera Management - Topology view
The ONVIF Topology automatically determines where IP cameras and NVR systems are connected into your network, summarising the network status of each and any Power over Ethernet issues that may be detected:
Central Management
The DrayTek VigorSwitch G2280x can operate in standalone mode and be managed through its web interface or, if you need to manage and monitor the switch remotely, or have several DrayTek VigorSwitches to administer, you can centrally manage and monitor them either with:
- A DrayTek router which supports switch management
(connected directly to the switch)
and / or - DrayTek's VigorACS management platform
Managing a VigorSwitch through VigorACS
DrayTek's VigorACS central management system provides a centralised way to manage and view the status of any DrayTek Vigor router, VigorAP access point and VigorSwitch connected to the VigorACS server.
DrayTek VigorSwitch switches that support TR-069 management can be managed through DrayTek VigorACS 2 in the same way that a DrayTek Vigor router or VigorAP access point would be managed. Through VigorACS, you can view and manage; a single VigorSwitch, all switches on a site or all switches across an entire network spanning multiple sites in one place.
DrayTek VigorSwitches connected to VigorACS connect directly to the VigorACS server to be managed, the router or network that they are connected to needs no additional configuration beyond the VigorSwitch having access to the Internet (or if your VigorACS server is located across a private WAN / VPN connection, access to that network).
Dashboard view
View the state of a VigorSwitch through the Dashboard, with PoE usage, uptime and connected ports all visible in one place:
Switch Configuration
View the configuration of a VigorSwitch and make changes to the configuration through VigorACS, then copy the settings from that switch to apply them to multiple VigorSwitch switches:
Central Switch Management with a DrayTek Vigor Router
DrayTek Vigor router Central Switch Management provisions and monitors VigorSwitch switches through a DrayTek Vigor router, with profiles that can be applied to multiple switches and VLAN configuration all handled within the router.
Central Switch Management requires firmware support on both the VigorSwitch and the DrayTek Vigor router*
*requires 3.9.1 firmware update
This can simplify the setup of multiple subnets and VLANs, without needing in-depth knowledge of VLAN tagging and reduces setup time, with the time consuming step of configuring VLANs for each port handled by the router instead.
Switch Hierarchy
The Switch Hierarchy view provides a visual overview of interconnections between DrayTek VigorSwitch switches with the devices connected to each LAN port:
Switch Management Profiles
Switch Management profiles can be used configure schedules to enable or disable ports (including PoE) and set bandwidth limits for the ports. Descriptive names can be configured on the router which can be seen from the Switch Hierarchy view:
VLAN configuration of a VigorSwitch can be provisioned from the DrayTek Vigor router, with the router automatically configuring the Uplink port and being aware of the VLAN tags that the Vigor router and the connected LAN port have available:
Energy Efficient Ethernet
The VigorSwitch G2280x supports Energy Efficient Ethernet, to lower the overall power usage of the switch when ports are idle or disconnected.
The IEEE 802.3az standard allows individual Ethernet links to enter a low power state, when not transmitting or not plugged in, drawing less energy than if the ports were to run at full speed at all times.
IP Conflict Prevention
DrayTek's IP Conflict Prevention system is an easy way to ensure that the switch protects against IP conflicts and ARP spoofing. Once configured, the switch monitors and notifies of IP conflicts, giving a visual reference of possible causes for network issues.
The IP Conflict Prevention wizard catalogues the current network layout, giving you the option to fix the IP address and MAC information for important network devices, such as Servers and Routers. If another device attempts to use the IP address, the switch and network will continue to communicate with the correct device instead of the unknown device.
IP Camera Management of ONVIF IP Cameras
Manage and view the video feed of automatically detected ONVIF IP Cameras connected to the VigorSwitch:
Port Bandwidth Usage
Display live usage data of all ports on the switch, showing the quantity of data transmitted and received on each port, with the percentage displayed along with the port's speed:
i.e. 900mbps would be displayed as 90% usage for a 1Gpbs port
50mbps would be displayed as 50% usage for a 100Mbps port
Dynamic MAC table
View devices connected to each port from the Dynamic MAC table, which displays the known MAC address and their respective VLANs for each port on the switch:
Port Bandwidth Limits
Configure bandwidth limits for each LAN port, with Egress rates controlling a client's download speed from the switch and Ingress rates controlling a client's upload speed to the switch.
VLAN Configuration
Quickly create single or multiple VLAN groups. To create multiple VLANs at once, specify multiple VLAN tags separated by commas, or as a range of VLANs (i.e. 3-5 would create VLANs 3, 4 and 5):
Apply VLAN configurations to multiple ports:
Specifications
VigorSwitch G2280x
Product Code | EAN | Product Name | Description |
---|---|---|---|
VSG2280x-K | 4712909128018 | VigorSwitch G2280x | 10GbE Gigabit Switch with 24 Gigabit Ports & 4 10GbE SFP+ Uplink Ports |
Key Specifications
- 24 x RJ-45 Gigabit Ethernet Ports
- 4 x SFP+ 10GbE Ports for Uplink / Fibre
- 802.1q VLANs (Tag, Port & MAC-based)
- VLAN Routing & Static Route with DHCP server / relay
- Virtual Router Redundancy Protocol
- QoS for Application traffic prioritisation
- 802.1x RADIUS / TACACS+ Port Authentication with Accounting
- Voice VLAN for QoS (OUI Mode)
- Access Control List (ACL)
- Port Mirroring & Link Aggregation
- IGMP Snooping/Querier (Up to 256 Multicast Groups)
- IPv4 and IPv6 Support
- Hardware Monitoring
- Centrally managed or standalone operation
- Console Port
Technical Specification (UK Hardware Spec.)
-
Physical Interfaces
- 24 RJ-45 Ethernet Ports – 10/100/1000Mbps
- 4 SFP+ Ports – 1000Mbps/10Gbps
- Console Port (RJ-45 physical, RS-232 electrical)
-
VLAN
- 802.1q Tag-based VLAN
- Port-based and MAC-based VLANs
- QinQ (Basic)
- GVRP – General VLAN Registration Protocol
- Up to 255 VLANs (out of 4096 VLAN IDs)
- 802.1v Protocol-Based VLAN
- Voice VLAN (OUI Mode)
- Surveillance VLAN (OUI Mode)
- Protocol VLAN
- MAC-based VLAN
- Management VLAN
- Port Isolation
-
QoS
- Support 8 priority queues
- Port-Based rate control (Ingress & Egress)
- Priority queue schedule (WRR or Strict Priority)
- Rate Limit
- Class of Service
- 802.1p CoS
- DSCP
- CoS-DSCP
- IP Precedence ToS
-
Network Security
- IP Source Guard with ARP inspection
- Storm Control (Broadcast, Unknown Multicast, Unknown Unicast)
- DoS Attack protection
- AAA Authentication
- MAC Authentication
- Protected Port / Port Isolation
- Static Port Security
- Dynamic ARP Inspection
- DHCP Snooping with Option 82
- Loop Detection & Prevention
- Access Control Lists (ACL)
- Up to 512 ACL Entries
- Source and destination MAC
- VLAN ID
- IPv4/v6 address
- Protocol
- TCP/UDP port
-
Spanning Tree
- Spanning Tree Protocol (STP)
- Rapid Spanning Tree Protocol (RSTP)
- Multiple Spanning Tree Protocol (MSTP)
-
Link Aggregation
- Combine multiple ports to increase bandwidth
- 8 Aggregation Groups
- Up to 8 ports in each group
- LACP or Static setup
- Supports traffic load balancing
-
Networking Performance
- Switching Capacity: 128Gbps
- Forwarding Rate: 95.24Mpps
- MAC Addresses Supported: 16,000
- Jumbo Frames up to 12KB
- Packet Buffer size: 12Mbit
- Layer 3 Routing Table: Up to 1000 Entries
-
Multicast
- Up to 256 multicast groups
- Multicast Group Filtering / Throttling
- IGMP Snooping V2/V3 (BISS)
- IGMP V2/V3 Querier
- Multicast VLAN registration
- MLD Snooping V1/V2
- Immediate Leave
- Report Suppression
- IGMP/MLD Querier
-
AAA
- RADIUS / TACACS+ Authentication for Management
- Multiple AAA Server
- MAC / Inaccessible Authentication bypass
- RADIUS Authentication 802.1X
- Accounting
- Guest VLAN
- Port based Authorisation
- 802.1X Single/Multi
- MAC-based
- Web-based
- Attribute Assignment
- User Privilege
- VLAN
- TACACS+ Authentication
- Port Authorisation
- Accounting *
-
Management
- Virtual Stacking – Single IP Management *
- OpenVPN Client
- ONVIF – IP Camera Management
- Running/Startup/Backup Configuration
- sFlow
- IPv4 & IPv6 Dual-Stack
- LLDP(802.1ab) + MED
- Web User Interface (HTTP or HTTPS)
- Firmware Upgrade/Backup by HTTP/HTTPS
- HTTP (Non-TLS) can be disabled for increased security
- Configuration Backup/Restore
- Factory Default
- System Reboot
- Dual Firmware Image (Active & Backup Firmware)
- Command Line Interface (CLI) via SSH/Telnet
- Console Port (RJ45) for CLI management
- DrayTek Switch Management support via router (requires router firmware support)
- VigorACS Compatible (TR-069)
- SNMP v1, v2c, v3 (with Generic Traps)
- RMON Groups 1, 2, 3, 9 (History, Statistics, Alarms, Events)
- SNTP (Simple Network Time Protocol)
-
Diagnostics
- Port Status & Usage display
- CPU/RAM Usage display
- Event Log via Syslog or email
- Port Mirroring
- Ping Diagnostics
- Port-based cable test
-
Hardware Monitor
- Remote Monitoring through Web Interface & VigorACS *
- Hardware Monitor Data Recording & Graphing
- Email & LED alert on voltage high/low and overheat
- Temperature Monitoring
- Voltage Monitoring
- Power Saving Mode
-
Layer 3 Networking Features
- Static Route
- VLAN Routing
- Virtual Router Redundancy (VRRP) Protocol *
-
IPv4 Features
- DHCP Client
- DNS Client
- DHCP Server *
- Option 82, 66, 67
- DHCP Relay
- DHCP Snooping
- DHCP IP Source Guard
-
IPv6 Features
- Auto Configuration
- Static IPv6 Address & Prefix Length
- Static IPv6 Default Gateway
- IPv6 Neighbour Discovery (ND)
- IPv6 Duplicate Address Detection
- ICMPv6
- DHCPv6 Client
-
General IEEE Standards Compliance
- 802.3 10Base-T
- 802.3u 100Base-T
- 802.3ab 1000Base-T
- 802.3ae 10GBase-T
- 802.3x Flow Control Capability
- 802.3 Auto-negotiation
- 802.3ad Port trunk with LACP
- 802.3az Energy Efficient Ethernet
- 802.1q VLAN
- 802.1p Class of Service
- 802.1d Spanning Tree
- 802.1w Rapid Spanning Tree
- 802.1s Multiple Spanning Tree
- 802.1x Port Based Network Access Control
- 802.1ab Link Layer Discovery Protocol (LLDP)
- 802.1ad QinQ
-
Operating Requirements
- Power Input Requirements: 100-240VAC
- Power supply: Internal
- Maximum Input Power Consumption: 25 Watts
- Cooling: Passively Cooled
- Operating Temperature: 0 °C to 45 °C
- Storage Temperature: -20 °C to 70 °C
- Operating Humidity: 10% to 90% RH (non-condensing)
-
Physical Specifications
- Dimensions: 441 x 270 x 45 mm (W x D x H)
- Rack mountable: 1U
- Weight: 2.48Kg (excluding SFP modules/cables)
- Brackets included for rack or wall mounting
-
ROHS & CE Compliant
-
Warranty
- Two (2) Year Manufacturer's RTB
- Optional VigorCare Enhanced Warranty Available
- VigorCare D3 3 Year Subscription: VCARE-D3
- VigorCare D5 5 Year Subscription: VCARE-D5
Box Contents
- VigorSwitch G2280x Network Switch
- UK IEC13 Power Cable
- 1U Rack Mount Fittings
- RJ-45 to RS-232 Console Cable Adapter
- Console Cable (RJ-45)
- Quick Start Guide
* - Not available in initial release firmware but will be available in a later firmware update.
Copyright © 2024 DrayTek