VigorSwitch G2540x

Overview

Key Features & Benefits

High Speed 10 Gigabit SFP+ Uplinks

6 SFP+ ports allow your network to utilise 10Gbps ports to link Switches, Servers and Networked Storage with more bandwidth. This helps you reduce the risk of bottlenecks occurring in your network.

Benefits: Easily increase network throughput and meet demanding bandwidth requirements.

Manage Centrally or Stand-Alone

Configure and monitor the switch through the VigorACS cloud management platform, DrayTek's Central Switch Management for Vigor routers, or directly via the device's Web Interface.

Benefits: Saves time and money. Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.

Great Security Features

Protect your network against unauthorised access and network problems with 802.1X port authentication, DHCP Snooping, IP Source Guard and Access Control Lists. Check the features sections for more information.

Benefits: Secure & control access to your network.

Advanced Layer 2+ Routing Features

Expand your network with support for Layer 3 features such as Static Routes and VLAN Routing, to connect separate networks through the VigorSwitch.

Benefits: Provides a fast and secure bridge between networks.

Hardware Monitoring

It monitors and controls the switch's temperature and operating voltages . Email notification alerts integrated for power loss, downtime or configuration changes.

Benefits: Prevents network failure. Ensures high availability.

IP Camera Management

Manage IP Cameras easily with detection and management of ONVIF cameras. Use auto-generated IP Camera topology and Camera Snapshots to detect & troubleshoot problems.

Benefits: Easily configure, deploy & manage connected IP Cameras.

VigorSwitch G2540x

10GbE Gigabit Switch with 48 Gigabit Ports & 6 10GbE SFP+ Uplink Ports

VigorSwitch G2540x is a 54 port Gigabit L2+ Managed switch with a plethora of management options and enterprise-level features to improve network stability and security for businesses.

Use the 4 switchable SFP/RJ-45 ports and 2 dedicated SFP module slots to link with additional switches using link aggregation, or plug in a suitable SFP module to use optical Fibre as an Ethernet uplink.

Designed for centralised management, the VigorSwitch G2540x can be provisioned and monitored through both the VigorACS management platform and/or, a DrayTek Vigor router’s Central Switch Management. Easily provision the VLAN configuration through the router and clone switch configurations. Drastically reduce the setup time required for a complex network, with VLANs spanning multiple switches.

Features

Layer 2+ VLAN Routing

Use the VigorSwitch to link multiple subnets with Static Routes, VLAN Routing and integrated DHCP server.

Auto Surveillance VLAN

Recognize traffic from IP cameras and IP phones automatically and add CoS tag for QoS prioritization.

IP Conflict Prevention

Improve network stability by avoiding IP conflicts caused by a misconfigured or malicious host.

Access Control

VigorSwitch G2540x supports ACL by IP/MAC and 802.1x port access control with RADIUS to filter.

Rack Mountable & Silent

Includes rack mount fittings to fit in any 19" rack with 1u height. Quiet in operation.

Energy-Efficient Ethernet

Compliant with IEEE 802.3az to reduce power consumption.

10GbE SFP+ Ports

6 SFP+ ports provide fast, high bandwidth uplinks to Fibre, Switches, Servers & Network Attached Storage.

QoS (Quality of Service)

Improve the performance of critical traffic by prioritizing the traffic with CoS, DSCP, and IP Precedence tag.

IPv6 Ready

VigorSwitch G2540x supports IPv6 by offering MLD Snooping, IPv6 ACL, and IPv6 DNS Resolver.

ONVIF IP Camera Management

Manage and view ONVIF capable cameras, automatically detecting their topology on the network.

Central Switch Management

Set up VLAN easily from the router and get a centralized hierarchy view of the switches.

Hardware Monitor with Smart Fan

Quieter in operation at low-load. Alerts if a fan fails or switch overheats.

10GbE SFP+ Ports for High Speed Uplinks

The DrayTek VigorSwitch G2540x has 6 dedicated SFP+ ports for uplinks, each operating at up to 10 Gigabits per second. The faster 10 Gigabit uplink capability allows you to make high bandwidth links to Network Attached Storage, Servers and other switches, to help reduce the risk of bottlenecks occurring within your network.

The SFP+ ports provide compatibility with your choice of SFP / SFP+ modules (not included) and therefore the most appropriate medium for your application.

Connect a passive Direct Attach SFP+ cable such as the DrayTek DAC-CX10-01M to the SFP+ module port of 1Gbps/10Gbps capable Network Attached Storage, Servers and Switches, for a cost effective, up to 10Gbps network link.

Advanced Layer 2+ Routing Features

The VigorSwitch G2540x adds the Layer 3 features VLAN Routing, DHCP Server and Static Route, which allow the switch to provide routing between VLANs at full speed. The switch's Access Control List gives full control of what traffic routes between those networks.

VLAN Routing

A DrayTek VigorSwitch normally provides connectivity for multiple network segments with 802.1Q VLAN tags, which separate networks at Layer 2 (MAC level), relying on the router to connect different networks. VLAN Routing in the switch allows for Layer 3 (IP level) routing, to connect and route between different IP subnets with wire speed routing performance.

Static Route

Routing beyond the VigorSwitch G2540x, to the Internet and across VPNs is possible with Static Routes, using the switch to direct traffic to remote subnets through the correct gateway. Up to 512 static routes can be configured on the switch.

DHCP Server with Bind IP to MAC

The DrayTek VigorSwitch G2540x has an integrated DHCP server to provide IP addressing to as many as 8 subnets on the switch, directly or with another server through DHCP Relay.

Each DHCP Pool can have as many as 1023 IP addresses, potentially serving addresses to 8000 devices, allowing for expansive networks and taking load off of the router.

With Bind IP to MAC, IP addresses can be easily reserved for individual devices such as servers, IP phones, cameras and more.

Rack Mountable & Silent

Install the VigorSwitch on a desk, shelf or wall, or use the included rack mount fittings to install the switch in any standard 19" rack with 1U height.

Ideal for installation in quiet office environments, the VigorSwitch G2540x runs quietly, cooling without a fan.

Central Management

The DrayTek VigorSwitch G2540x can operate in standalone mode and be managed through its web interface or, if you need to manage and monitor the switch remotely, or have several DrayTek VigorSwitches to administer, you can centrally manage and monitor them either with:

Router - Switch Management	Manage VigorSwitches connected to a router and determine network topology at a glance
DrayTek VigorACS	Manage and Provision DrayTek VigorSwitches on any network, from anywhere
DrayTek VigorConnect	Manage and Provision VigorSwitches and VigorAPs on a single site

Managing a VigorSwitch through VigorACS

DrayTek's VigorACS central management system provides a centralised way to manage and view the status of any DrayTek Vigor router, VigorAP access point and VigorSwitch connected to the VigorACS server.

DrayTek VigorSwitch switches that support TR-069 management can be managed through DrayTek VigorACS 2 in the same way that a DrayTek Vigor router or VigorAP access point would be managed. Through VigorACS, you can view and manage; a single VigorSwitch, all switches on a site or all switches across an entire network spanning multiple sites in one place.

DrayTek VigorSwitches connected to VigorACS connect directly to the VigorACS server to be managed, the router or network that they are connected to needs no additional configuration beyond the VigorSwitch having access to the Internet (or if your VigorACS server is located across a private WAN / VPN connection, access to that network).

Dashboard view

Dashboard view displays an overview of the VigorSwitch G2500's port usage and port states:

Switch Configuration

View the configuration of a VigorSwitch and make changes to the configuration through VigorACS, then copy the settings from that switch to apply them to multiple VigorSwitch switches:

Central Switch Management with a DrayTek Vigor Router

DrayTek Vigor router Central Switch Management provisions and monitors VigorSwitch switches through a DrayTek Vigor router, with profiles that can be applied to multiple switches and VLAN configuration all handled within the router.

Central Switch Management requires firmware support on both the VigorSwitch and the DrayTek Vigor router*
^{*requires 3.9.3 firmware update}

This can simplify the setup of multiple subnets and VLANs, without needing in-depth knowledge of VLAN tagging and reduces setup time, with the time consuming step of configuring VLANs for each port handled by the router instead.

Switch Hierarchy

The Switch Hierarchy view provides a visual overview of interconnections between DrayTek VigorSwitch switches with the devices connected to each LAN port:

Switch Management Profiles

Switch Management profiles can be used configure schedules to enable or disable ports (including PoE) and set bandwidth limits for the ports. Descriptive names can be configured on the router which can be seen from the Switch Hierarchy view:

VLAN configuration of a VigorSwitch can be provisioned from the DrayTek Vigor router, with the router automatically configuring the Uplink port and being aware of the VLAN tags that the Vigor router and the connected LAN port have available:

ONVIF IP Camera Management

The VigorSwitch G2540x can discover, manage and configure ONVIF (Open Network Video Interface Forum) compatible IP cameras and NVR systems, allowing for easy discovery, management and troubleshooting of your connected IP cameras.

Device Management

Use the VigorSwitch to configure and manage your IP camera network; configure network & security settings, restart cameras and have the switch monitor whether cameras are responding, alerting of any issues.

Network Surveillance Topology

Simply connect ONVIF capable devices to the VigorSwitch G2540x, Discover devices and the VigorSwitch determines the network topology of connected cameras & NVR systems.

ONVIF Camera Management - Topology view

View IP Camera Output

Through the VigorSwitch web interface, you can view the video feed of connected IP cameras:

ONVIF Camera Management - Camera Display

Camera Offline Alerts with Snapshot

The VigorSwitch G2540x can store a recent snapshot of each connected IP Camera that's ONVIF compliant.

If a camera goes offline, the VigorSwitch sends out an Email alert with the last-seen snapshot from the camera that's stopped responding. Allowing you to locate the affected camera easily and troubleshoot any problems it may have, such as a disconnected cable or faulty camera.

IP Conflict Detection & Prevention

Conflict Detection

The VigorSwitch can detect and notify an administrator when an IP conflict is detected on the network. Easily track down conflicts and take action to resolve them.

Conflict Prevention

Use DrayTek's IP Conflict Prevention to allow the switch to automatically protect against IP conflicts and ARP spoofing.

IP Conflict Prevention catalogues the current network layout, giving you the option to fix the IP address and MAC information for important network devices, such as Servers and Routers.

If another device attempts to use an IP address that's in use, the VigorSwitch blocks the misconfigured or malicious device, communicating only with the known and correct device.

DrayTek VigorSwitch IP Conflict Prevention

Quality of Service & Bandwidth Control

Quality of Service

Prioritise latency-sensitive applications on your network with Quality of Service (802.1p and DSCP) support.

Auto Voice VLAN allows the switch to automatically assign VoIP devices to a separate VLAN and prioritise their traffic.

Control throughput per-port with Rate Limiting and application specific Traffic Shaping.

Network Security and Management Features

Stay in control of what's connected to your network with Port Security and 802.1X & MAC authentication, to prevent connection of unauthorised equipment.

Protect against network issues arising from connection of unwanted devices with DHCP Snooping and IP Source Guard.

Control port access for every port on your network with the VigorSwitch Access Control List - to specifically allow or deny specified traffic types moving between ports, just like a Firewall.

Access Control List	Similar to a firewall, the ACL can control which packet types (IPv4, IPv6 & MAC) are allowed to pass between ports on the switch.
AAA - 802.1X Authentication	Control access to LAN ports through a RADIUS server, which could be provided by the Vigor 2862 router on site. Authenticate and authorise network access via 802.1X, MAC address or web authentication. Track data and time usage of each user authenticated with RADIUS Accounting. Solution Focus - Wired 802.1X LAN Port Security
Management Authentication via RADIUS, TACACS+ or local accounts	Control logins to the switch management with the switch's internal user accounts or through a central RADIUS / TACACS+ server.
IGMP Snooping & Querying	Manage and control multicast IGMP traffic passing through the switch, with IGMP Snooping & Querying. With IGMP Snooping, the switch tracks IGMP traffic passing through its ports. Allowing it to limit the broadcast of multicast/IGMP packets to only the ports that have subscribed, improving overall network performance and avoiding excess network traffic. The VigorSwitch's IGMP Querier allows it to manage IGMP subscriptions on its network ports, checking which ports are members of which multicast group, if the network's router does not support multicast.
IPv6 Ready	The VigorSwitch G2540x has extensive IPv6 support, with IPv6 ACL, MLD Snooping and IPv6 DNS Resolution. Filter IPv6 packets with the Access Control List (ACL) alongside IPv4 traffic. Use IPv6 MLD Snooping to control and more efficiently manage Multicast packets in the same way that IGMP Snooping would for IPv4 Multicast packets.
DHCP Snooping	Limit DHCP server responses to only a specified port to stop unauthorised devices from affecting network connectivity.
IP Source Guard	Protects against address spoofing by comparing packets received with either statically configured source IP addresses or addresses learned from DHCP snooping.
Link Aggregation - Port Trunking	Use two or more network links to connect the VigorSwitch G2540x and another switch / server. Traffic can be shared between the two ports, effectively doubling the bandwidth of the uplink and providing resilience should one of the links fail. Up to 8 ports can be added to a single Link Aggregation Group, with up to 8 LAGs. Interoperability with other types and manufacturer's equipment is handled by the Link Aggregation Control Protocol (LACP).
Improved Jumbo Frame	The VigorSwitch G2540x supports Ethernet packets up to 12 Kilobytes in size, to further improve throughput and increase the efficiency of packet transmission across your network.
sFlow	Send sFlow data from the VigorSwitch G2540x to an sFlow Collector or VigorConnect to analyse traffic passing through the switch.
Surveillance & Voice Auto VLAN	With Voice VLAN and Surveillance VLAN, the VigorSwith G2540x simplifies the setup of connected IP Phones and IP Cameras. Move around ports on the switch without having to manually re-configure VLAN and QoS settings each time, instead the switch will auto-assign VLAN tags and Quality of Service to IP Phones and IP Cameras, ensuring that each device remains on the correct network and that essential Voice and Video data is prioritised on the network. The switch identifies cameras and phones from their MAC address (Vendor OUI), so that when connecting up an IP Phone from Yealink for instance, the switch would configure the VLAN ID and set the QoS tag for that port. Moving the phone to a different port, the switch will ensure that the VLAN settings follow the device rather than requiring a fixed VLAN & QoS configuration per-port.
Dynamic MAC-based VLAN	Assign VLAN access to individual devices instead of ports with MAC-based VLAN, to ensure that devices are assigned to the correct network regardless of which switch port they're plugged into. With MAC-based VLAN, users can move around the office and make use of the same network resources and access through any port on the switch, without requiring manual re-configuration of VLAN settings on individual ports.

Hardware Monitoring & Smart Fan Control

The VigorSwitch G2540x is passively cooled for quiet operation.

Smart Fan control ensures the switch increases its fan speed as required, slowing down the fans at lower operating temperatures.

Hardware Monitoring ensures safe and reliable operation with remote status information & alerts. Track and graph switch temperature and voltage status. View this information locally through the web interface or remotely through VigorACS central management.

This allows the switch to notify you if the switch's temperature exceeds its operating limit. For instance sending an email alert if the switch overheats for any reason.

Energy Efficient Ethernet

The VigorSwitch G2540x supports Energy Efficient Ethernet, to lower the overall power usage of the switch when ports are idle or disconnected.

The IEEE 802.3az standard allows individual Ethernet links to enter a low power state, when not transmitting or not plugged in, drawing less energy than if the ports were to run at full speed at all times.

Screenshots

DrayTek VigorSwitch G2540x - Web Interface Screenshots

Dashboard

Dashboard view displays an overview of the VigorSwitch's port usage, port states and power usage:

Advanced Layer 2+ Features - VLAN Routing

Use the VigorSwitch as a gateway between two separate Layer 3 IP subnets with the VLAN Routing facility. Define where traffic is routed to, for access to the Internet gateway with Static Routes:

IP Camera Management of ONVIF IP Cameras

Manage and view the video feed of automatically detected ONVIF IP Cameras connected to the VigorSwitch:

vigorswitch g2280x onvif1

Port Bandwidth Usage

Display live usage data of all ports on the switch, showing the quantity of data transmitted and received on each port, with the percentage displayed along with the port's speed:
i.e. 900mbps would be displayed as 90% usage for a 1Gpbs port
50mbps would be displayed as 50% usage for a 100Mbps port

DrayTek VigorSwitch Port Bandwidth Usage

Dynamic MAC table

View devices connected to each port from the Dynamic MAC table, which displays the known MAC address and their respective VLANs for each port on the switch:

Port Bandwidth Limits

Configure bandwidth limits for each LAN port, with Egress rates controlling a client's download speed from the switch and Ingress rates controlling a client's upload speed to the switch.

VLAN Configuration

Quickly create single or multiple VLAN groups. To create multiple VLANs at once, specify multiple VLAN tags separated by commas, or as a range of VLANs (i.e. 3-5 would create VLANs 3, 4 and 5):

Apply VLAN configurations to multiple ports:

Configuration of SFP+ 10Gbps ports

Set the speed and media type of the SFP+ modules connected to the switch's six SFP+ ports.

Specifications

VigorSwitch G2540x

Product Code	EAN	Product Name	Description
VSG2540x-K	4710484741462	VigorSwitch G2540x	54-port Gigabit L2+ Managed switch with 48 RJ-45 LAN ports & 6 10GbE SFP+ ports

Key Specifications

48 x RJ-45 Gigabit Ethernet Ports
6 x SFP+ 10GbE Ports for Uplink / Fibre
802.1q VLANs with Dynamic MAC-based, Voice & Surveillance VLAN
VLAN Routing & Static Route with DHCP server / relay
Virtual Router Redundancy Protocol
QoS for Application traffic prioritisation
802.1x RADIUS / TACACS+ Port Authentication with Accounting
Voice VLAN for QoS (OUI Mode)
Access Control List (ACL)
Port Mirroring & Link Aggregation
IGMP Snooping & Querying
IPv4 and IPv6 Support with IP Conflict Prevention
Hardware Monitor with smart fan control
Centrally managed or standalone operation
Console Port

Technical Specification (UK Hardware Spec.)

Physical Interfaces

48 RJ-45 Ethernet Ports – 10/100/1000Mbps
6 SFP+ Ports – 1000Mbps/10Gbps
Console Port (RJ-45 physical, RS-232 electrical)

VLAN

802.1q Tag-based VLAN
Port-based and MAC-based VLANs
QinQ (Basic)
GVRP – General VLAN Registration Protocol
Up to 256 VLANs (out of 4096 VLAN IDs)
802.1v Protocol-Based VLAN
Voice VLAN (OUI Mode)
Surveillance VLAN (OUI Mode)
Protocol VLAN
MAC-based VLAN
Management VLAN
Port Isolation

QoS

Support 8 priority queues
Port-Based rate control (Ingress & Egress)
Priority queue schedule (WRR or Strict Priority)
Rate Limit
Class of Service
- 802.1p CoS
- DSCP
- CoS-DSCP
- IP Precedence ToS

Network Security

IP Source Guard with ARP inspection
Storm Control (Broadcast, Unknown Multicast, Unknown Unicast)
DoS Attack protection
AAA Authentication
MAC Authentication
Protected Port / Port Isolation
Static Port Security
Dynamic ARP Inspection
DHCP Snooping with Option 82
Loop Detection & Prevention
Access Control Lists (ACL)
- Up to 512 ACL Entries
- Source and destination MAC
- VLAN ID
- IPv4/v6 address
- Protocol
- TCP/UDP port

Spanning Tree

Spanning Tree Protocol (STP)
Rapid Spanning Tree Protocol (RSTP)
Multiple Spanning Tree Protocol (MSTP)

Link Aggregation

Combine multiple ports to increase bandwidth
8 Aggregation Groups
Up to 8 ports in each group
LACP or Static setup
Supports traffic load balancing

Networking Performance

Switching Capacity: 216Gbps
Forwarding Rate: 160.7Mpps at 64 bytes
MAC Addresses Supported: 32,000
Jumbo Frames up to 12KB
Packet Buffer size: 16Mbit
Layer 3 Routing Table: Up to 2000 Entries

Multicast

Up to 256 multicast groups
Multicast Group Filtering / Throttling
IGMP Snooping V2/V3 (BISS)
IGMP V2/V3 Querier
Multicast VLAN registration
MLD Snooping V1/V2
- Immediate Leave
- Report Suppression
- IGMP/MLD Querier

AAA

RADIUS / TACACS+ Authentication for Management
Multiple AAA Server
MAC / Inaccessible Authentication bypass
RADIUS Authentication 802.1X
- Accounting
- Guest VLAN
- Port based Authorisation
  - 802.1X Single/Multi
  - MAC-based
  - Web-based
- Attribute Assignment
  - User Privilege
  - VLAN
TACACS+ Authentication
- Port Authorisation
- Accounting

ONVIF Surveillance Management

Discovery of ONVIF-compliant IP Cameras
Surveillance Topology
Real-Time Video Streaming
ONVIF Device Maintenance
- Device Information
- Network Settings Configuration
- Time Settings
- Reboot
- Reset to Factory Default Settings
- Ping Check with Mail Alert on disconnection

Management

Central Management
- VigorACS
- VigorConnect
- Vigor Router Switch Management (requires router firmware support)
Running/Startup/Backup Configuration
sFlow
IPv4 & IPv6 Dual-Stack
LLDP(802.1ab) + MED
Web User Interface (HTTP or HTTPS)
Firmware Upgrade/Backup by HTTP/HTTPS
HTTP (Non-TLS) can be disabled for increased security
Configuration Backup/Restore
Factory Default
System Reboot
Dual Firmware Image (Active & Backup Firmware)
Command Line Interface (CLI) via SSH/Telnet
Console Port (RJ45) for CLI management
OpenVPN Client with Certificate-based auth
SNMP v1, v2c, v3 (with Generic Traps)
RMON Groups 1, 2, 3, 9 (History, Statistics, Alarms, Events)
SNTP (Simple Network Time Protocol)

Diagnostics

Port Status & Usage display
CPU/RAM Usage display
MAC Address Table
Device Check
Syslog
Mail Alert
- Port Status
- Port Speed Change
- System Restart
- Device Check
- IP Conflict
- ONVIF IP Camera Snapshot
Port Mirroring
Ping Diagnostics
Port-based Cable Test

Hardware Monitor

Remote Monitoring through Web Interface & VigorACS
Hardware Monitor Data Recording & Graphing
Email & LED alert on Fan failure, voltage high/low and overheat
Temperature Monitoring
Voltage Monitoring
Smart Fan Control for low noise operation
Power Saving Mode

Layer 3 Networking Features

Static Route
VLAN Routing
Virtual Router Redundancy (VRRP) Protocol

IPv4 Features

DHCP Client
DNS Client
DHCP Server
- Up to 8 subnets
- Option 82, 66, 67
- DHCP Relay
- DHCP Snooping
- DHCP IP Source Guard

IPv6 Features

Auto Configuration
Static IPv6 Address & Prefix Length
Static IPv6 Default Gateway
IPv6 Neighbour Discovery (ND)
IPv6 Duplicate Address Detection
ICMPv6
DHCPv6 Client

General IEEE Standards Compliance

802.3 10Base-T
802.3u 100Base-T
802.3ab 1000Base-T
802.3ae 10GBase-T
802.3x Flow Control Capability
802.3 Auto-negotiation
802.3ad Port trunk with LACP
802.3az Energy Efficient Ethernet
802.1q VLAN
802.1p Class of Service
802.1d Spanning Tree
802.1w Rapid Spanning Tree
802.1s Multiple Spanning Tree
802.1x Port Based Network Access Control
802.1ab Link Layer Discovery Protocol (LLDP)
802.1ad QinQ

Operating Requirements

Power Input Requirements: 100-240VAC
Power supply: Internal
Maximum Input Power Consumption: 52 Watts
BTU per Hour: 174.61(BTU/h)
Cooling: Dual Smart Fan
Operating Temperature: 0 °C to 50 °C
Storage Temperature: -20 °C to 70 °C
Operating Humidity: 10% to 90% RH (non-condensing)

Physical Specifications

Dimensions: 441 x 270 x 45 mm (W x D x H)
Rack mountable: 1U
Weight: 3.97 kg (excluding SFP modules/cables)
Brackets included for rack or wall mounting

ROHS & CE Compliant

Warranty

Two (2) Year Manufacturer's RTB
Optional VigorCare Enhanced Warranty Available
- VigorCare D3 3 Year Subscription: VCARE-D3
- VigorCare D5 5 Year Subscription: VCARE-D5