VigorSwitch G2500

Overview

Key Features & Benefits

Designed for Centralised Management

Can be configured and monitored instantly through both the VigorACS cloud management platform and/or, a DrayTek Vigor router's central switch management.

Benefits: Saves time and money. Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.

Security

DHCP Snooping: Limit DHCP server responses to only a specified port.

IP Source Guard: Protects against address spoofing.

Access Control List: Controls which packet types (IPv4, IPv6 & MAC) should pass between ports on the switch.

Voice VLAN & Surveillance VLAN

Automatically assign VLANs and QoS configuration to devices with matching MAC address OUI upon connection to the switch.

Benefits: Reduces broadcast traffic and allow more control when implementing security policies.

Hardware Monitoring

It monitors and controls the switch's temperature and operating voltages . Email notification alerts integrated for power loss, downtime or configuration changes.

Benefits: Prevents network failure. Ensures high availability.

VigorSwitch G2500 - 50 Port Gigabit Switch

The VigorSwitch G2500 is a high-performance, high port density, Managed Gigabit Ethernet switch. Connect up to 48 Ethernet devices to each switch, in a standard 1u rack mounted form factor, with 2 additional dedicated SFP ports for uplinks. The VigorSwitch G2500 is fanless for silent operation.

Designed for centralised management, the VigorSwitch G2500 can be provisioned and monitored through both the VigorACS management platform and/or, a DrayTek Vigor router’s Central Switch Management. Easily provision the VLAN configuration through the router and clone switch configurations. Drastically reduce the setup time required for a complex network, with VLANs spanning multiple switches.

Use the 4 switchable SFP/RJ-45 ports and 2 dedicated SFP module slots to link with additional switches using link aggregation, or plug in a suitable SFP module to use optical Fibre as an Ethernet uplink.

The VigorSwitch G2500's Serial (RS232) Console port and SSH server allow for configuration and management of the VigorSwitch through its fully featured command line interface (CLI).

Features

Access Control

VigorSwitch G2500 supports ACL by IP/MAC and 802.1x port access control with RADIUS to filter.

Central Switch Management

Set up VLAN easily from the router and get a centralized hierarchy view of the switches.

IPv6 Ready

VigorSwitch G2500 supports IPv6 by offering MLD Snooping, IPv6 ACL, and IPv6 DNS Resolver.

IP Conflict Prevention

Improve network stability by avoiding IP conflicts caused by a misconfigured or malicious host.

QoS (Quality of Service)

Improve the performance of critical traffic by prioritizing the traffic with CoS, DSCP, and IP Precedence tag.

Multiple Admin Accounts

Multiple Admin accounts with two levels of administrator privilege.

6 SFP Ports

Uplink to Fiber or direct-attach to additional switches, with 6x Gigabit SFP Ports.

Auto Surveillance VLAN

Recognize traffic from IP cameras and IP phones automatically and add CoS tag for QoS prioritization.

Quality of Service & Bandwidth Control

Quality of Service

Prioritise latency-sensitive applications on your network with Quality of Service (802.1p and DSCP) support.

Auto Voice VLAN allows the switch to automatically assign VoIP devices to a separate VLAN and prioritise their traffic.

Control throughput per-port with Rate Limiting and application specific Traffic Shaping.

Network Security and Management Features

Stay in control of what's connected to your network with Port Security and 802.1X & MAC authentication, to prevent connection of unauthorised equipment.

Protect against network issues arising from connection of unwanted devices with DHCP Snooping and IP Source Guard.

Control port access for every port on your network with the VigorSwitch Access Control List - to specifically allow or deny specified traffic types moving between ports, just like a Firewall.

Wired 802.1X Authentication	Control access to LAN ports through a RADIUS server, which could be provided by the Vigor 2862 router on site. Solution Focus - Wired 802.1X LAN Port Security
Management Authentication via RADIUS, TACACS+ or local accounts	Control logins to the switch management with the switch's internal user accounts or through a central RADIUS / TACACS+ server.
IPv6 Ready	The VigorSwitch G2500 has extensive IPv6 support, with IPv6 ACL, MLD Snooping and IPv6 DNS Resolution. Filter IPv6 packets with the Access Control List (ACL) alongside IPv4 traffic. Use IPv6 MLD Snooping to control and more efficiently manage Multicast packets in the same way that IGMP Snooping would for IPv4 Multicast packets.
Voice VLAN & Surveillance (IP Camera) VLAN	Automatically assign VLANs and QoS configuration to devices with matching MAC address OUI (manufacturer identifier i.e. 00-1D-AA-00-11-22 = DrayTek) upon connection to the switch.
DHCP Snooping	Limit DHCP server responses to only a specified port to stop unauthorised devices from affecting network connectivity.
IP Source Guard	Protects against address spoofing by comparing packets received with either statically configured source IP addresses or addresses learned from DHCP snooping.
Access Control List	Similar to a firewall, the ACL can control which packet types (IPv4, IPv6 & MAC) are allowed to pass between ports on the switch.
Link Aggregation - Port Trunking	Use two or more 1Gb/s network links to connect the VigorSwitch G2500 and another switch / server. Traffic can be shared between the two ports, effectively doubling the bandwidth of the uplink and providing resilience should one of the links fail.
Improved Jumbo Frame	The VigorSwitch G2500 supports Ethernet packets up to 12 Kilobytes in size, to further improve throughput and increase the efficiency of packet transmission across your network.

6 SFP Ports for Fibre Connectivity and Switch Uplinks

The DrayTek VigorSwitch G2500 has 2 dedicated SFP module ports for uplinks, along with 4 switchable Gigabit SFP ports, which can be used instead of the corresponding RJ-45 ports Nos. 45-48.

SFP slots are typically used for fibre transceivers and interlinks between switches. In comparison to 'copper' (RJ-45) cables, using fibre for connectivity provides longer range and resilience from electrical interference.

The SFP ports provides compatibility with your choice of SFP modules (not included) and therefore the most appropriate medium for your application.

Use a passive Direct Attach SFP adapter such as the DrayTek DAC-CX10-01M, to connect directly to the SFP module port of another switch, similarly to an RJ-45 network connection, instead of using the SFP module slot for a Fibre or RJ-45 Transceiver.

Central Management

The DrayTek VigorSwitch G2500 can operate in standalone mode and be managed through its web interface or, if you need to manage and monitor the switch remotely, or have several DrayTek VigorSwitches to administer, you can centrally manage and monitor them either with:

A DrayTek router which supports switch management
(connected directly to the switch)

and / or
DrayTek's VigorACS management platform

Managing a VigorSwitch through VigorACS

DrayTek's VigorACS central management system provides a centralised way to manage and view the status of any DrayTek Vigor router, VigorAP access point and VigorSwitch connected to the VigorACS server.

DrayTek VigorSwitch switches that support TR-069 management can be managed through DrayTek VigorACS 2 in the same way that a DrayTek Vigor router or VigorAP access point would be managed. Through VigorACS, you can view and manage; a single VigorSwitch, all switches on a site or all switches across an entire network spanning multiple sites in one place.

DrayTek VigorSwitches connected to VigorACS connect directly to the VigorACS server to be managed, the router or network that they are connected to needs no additional configuration beyond the VigorSwitch having access to the Internet (or if your VigorACS server is located across a private WAN / VPN connection, access to that network).

Dashboard view

View the state of a VigorSwitch through the Dashboard, with PoE usage, uptime and connected ports all visible in one place:

Switch Configuration

View the configuration of a VigorSwitch and make changes to the configuration through VigorACS, then copy the settings from that switch to apply them to multiple VigorSwitch switches:

Central Switch Management with a DrayTek Vigor Router

DrayTek Vigor router Central Switch Management provisions and monitors VigorSwitch switches through a DrayTek Vigor router, with profiles that can be applied to multiple switches and VLAN configuration all handled within the router.

Central Switch Management requires firmware support on both the VigorSwitch and the DrayTek Vigor router*
^{*requires 3.9.1 firmware update (est Q2 '19)}

This can simplify the setup of multiple subnets and VLANs, without needing in-depth knowledge of VLAN tagging and reduces setup time, with the time consuming step of configuring VLANs for each port handled by the router instead.

Switch Hierarchy

The Switch Hierarchy view provides a visual overview of interconnections between DrayTek VigorSwitch switches with the devices connected to each LAN port:

Switch Management Profiles

Switch Management profiles can be used configure schedules to enable or disable ports (including PoE) and set bandwidth limits for the ports. Descriptive names can be configured on the router which can be seen from the Switch Hierarchy view:

VLAN configuration of a VigorSwitch can be provisioned from the DrayTek Vigor router, with the router automatically configuring the Uplink port and being aware of the VLAN tags that the Vigor router and the connected LAN port have available:

DrayTek VigorSwitch Operating System

The VigorSwitch G2500 features our latest generation of DrayTek's own switch operating system which is used across our range of enhanced switches. This enables a consistent user-experience and look-and-feel so that once you're familiar with one model, the others feel the same.

The new UI is designed to be intuitive and efficient, whilst providing access to all of the product's advanced features.

The Dashboard view displays an overview of port usage, power usage (on PoE models) and other important details in one place.

Hardware Monitoring

The VigorSwitch G2500 ensures safe and continuous operation with Hardware Monitoring. Track and graph switch temperatures and voltages. View this information locally through the web interface or remotely through VigorACS central management.

This allows the switch to notify you if the switch's temperature exceeds its operating limit. Sending an email alert if the switch overheats for any reason.

Screenshots

DrayTek VigorSwitch G2500 - Web Interface Screenshots

Dashboard

Dashboard view displays an overview of the VigorSwitch G2500's port usage and port states:

Port Bandwidth Usage

Display live usage data of all ports on the switch, showing the quantity of data transmitted and received on each port, with the percentage displayed along with the port's speed:
i.e. 900mbps would be displayed as 90% usage for a 1Gpbs port
50mbps would be displayed as 50% usage for a 100Mbps port

DrayTek VigorSwitch Port Bandwidth Usage

Dynamic MAC table

View devices connected to each port from the Dynamic MAC table, which displays the known MAC address and their respective VLANs for each port on the switch:

Port Bandwidth Limits

Configure bandwidth limits for each LAN port, with Egress rates controlling a client's download speed from the switch and Ingress rates controlling a client's upload speed to the switch.

VLAN Configuration

Quickly create single or multiple VLAN groups. To create multiple VLANs at once, specify multiple VLAN tags separated by commas, or as a range of VLANs (i.e. 3-5 would create VLANs 3, 4 and 5):

Apply VLAN configurations to multiple ports:

Specifications

VigorSwitch G2500

Product Code	EAN	Description
VSG2500-K	4712909127721	VigorSwitch G2500

Technical Specification (UK Hardware Spec.)

Physical Interfaces
- 44 10/100/1000BaseT Ethernet Ports (RJ-45 IEEE 802.3/3u/ab)
- 4 Selectable Ports (Nos. 45-48), use as either:
  - 10/100/1000BaseT (Gigabit) Ethernet or
  - SFP (802.3z)
- 2 SFP Ports (100Mbps / 1Gbps)
- Console Port (RJ-45 physical, RS-232 electrical)
VLAN
- 802.1q Tag-based VLAN
- Port-based and MAC-based VLANs
- QinQ (Basic)
- GVRP
- Up to 4K VLANs (out of 4096 VLAN IDs)
- 802.1v Protocol-Based VLAN
- Voice VLAN (OUI Mode)
- Surveillance VLAN (OUI Mode)
- Protocol VLAN
- MAC-based VLAN
- Management VLAN
QoS
- Support 8 priority queues
- Port-Based rate control
- Priority queue schedule (WRR or Strict Priority)
- Class of Service
  - 802.1p CoS
  - DSCP
  - CoS-DSCP
  - IP Precedence ToS
- Rate Limit
Network Security
- Access Control Lists (ACL)
  - Up to 512 ACL Entries
  - Source and destination MAC
  - VLAN ID
  - IPv4/v6 address
  - Protocol
  - TCP/UDP port
- IP Source Guard
- Storm Control (Broadcast, Unknown Multicast, Unknown Unicast)
- DoS Attack protection
- AAA Authentication
- MAC Authentication
- Protected Port / Port Isolation
- Static Port Security
- Dynamic ARP Inspection
- DHCP Snooping with Option 82
- Loop Detection & Prevention
Spanning Tree
- Spanning Tree Protocol (STP)
- Rapid Spanning Tree Protocol (RSTP)
- Multiple Spanning Tree Protocol (MSTP)
Link Aggregation
- Combine multiple ports to increase bandwidth
- 16 Aggregation Groups
- Up to 8 ports in each group
- LACP or Static setup
- Supports traffic load balancing
Networking Performance
- Switching Capacity: 100Gbps
- Forwarding Rate: 74.4Mpps
- MAC Addresses Supported: 16K
- Jumbo Frames up to 12KB
- Packet Buffer size: 12MB
Multicast
- Up to 256 multicast groups
- IGMP Snooping V2/V3 (BISS)
- IGMP V2/V3 Querier
- Filtering / Throttling
- MLD Snooping V1/V2
- Immediate Leave
- Multicase VLAN registration
AAA
- 802.1x - Single / Multiple
  - Port based
  - Mac Based
- Guest VLAN
- RADIUS / TACACS+ Authentication for Management
Management
- IPv4 & IPv6 Dual-Stack
- LLDP(802.1ab) + MED
- Web User Interface (HTTP or HTTPS)
- Firmware Upgrade/Backup by HTTP/HTTPS
- HTTP (Non-TLS) can be disabled for increased security
- Configuration Backup/Restore
- Factory Default
- System Reboot
- Dual Firmware Image (Active & Backup Firmware)
- Command Line Interface (CLI) via SSH/Telnet
- Console Port (RJ45) for CLI management
- DrayTek Switch Management support via router (requires 3.9.1 router firmware)
- VigorACS Compatible (TR-069)
- SNMP v1, v2c, v3 (with Generic Traps)
- RMON Groups 1, 2, 3, 9 (History, Statistics, Alarms, Events)
- SNTP (Simple Network Time Protocol)
Diagnostics
- Port Status & Usage display
- PoE active display
- CPU/RAM Usage display
- Event Log via Syslog
- Port Mirroring
- Ping
- Port-based cable test
Hardware Monitor
- Remote Monitoring through VigorACS & Web Interface
- Data Recording & Graphing
- Supports Email & LED alert on overheat
- Temperature Monitoring
- Voltage Monitoring
- Power Saving Mode
IPv4 Features
- DHCP
- DNS Client
IPv6 Features
- DHCPv6 Client
- Auto Configuration
- Static IPv6 Address & Prefix Length
- Static IPv6 Default Gateway
- IPv6 Neighbour Discovery (ND)
- IPv6 Duplicate Address Detection
- ICMPv6
General IEEE Standards Compliance
- 802.3 10Base-T
- 802.3u 100Base-T
- 802.3ab 1000Base-T
- 802.3x Flow Control Capability
- 802.3 Auto-negotiation
- 802.1Q VLAN
- 802.1p Class of Service
- 802.1d Spanning Tree
- 802.1w Rapid Spanning Tree
- 802.1s Multiple Spanning Tree
- 802.1x Port Based Network Access Control
- 802.1ab Link Layer Discovery Protocol (LLDP)
- 802.3ad Port trunk with LACP
- 802.3az Energy Efficient Ethernet
Operating Requirements
- Power Input Requirements: 220-240VAC
- Power supply: Internal
- Maximum Input Power Consumption: 31.4 Watts
- Operating Temperature:~0 °C to ~45 °C
- Storage Temperature:-20 °C to ~70 °C
- Operating Humidity: 10% to 90% RH (non-condensing)
Physical Specifications
- Dimensions: 441 x 270 x 45 mm (W x D x H)
- Rack mountable: 1U
- Brackets included for rack or wall mounting
- Weight: 5Kg (excluding SFP modules/cables)
ROHS & CE Compliant
Warranty : 2 Year Manufacturer's RTB