VigorSwitch P2121

Overview

This product is now EOL (discontinued) - Replaced by the VigorSwitch P1280 series or the VigorSwitch P2280x series

Key Features & Benefits

Manage Centrally or Stand-Alone

Configure and monitor the switch through the VigorACS cloud management platform, through VigorConnect, through a DrayTek Vigor router, or directly via the device's Web Interface.

Benefits: Save time and money. Easily provision, monitor and manage remote sites without on-site IT or dedicated staff.

4 SFP Ports for Uplinks

Uplink to Fibre or direct-attach to additional switches, with 4x Gigabit SFP Ports. Connect switches over long distances with SFP Fibre modules.

Benefits: Flexible installation. Surpass the 100m limit of copper cabling.

Protect your network against unauthorised access and network problems with 802.1X port authentication, DHCP Snooping, IP Source Guard and Access Control Lists. Check the features sections for more information.

Benefits: Secure & control access to your network.

Smart Power over Ethernet

Provides ample power through Ethernet to each of the 8 PoE / PoE+ enabled Gigabit LAN ports. PoE scheduling, priority & Device Check features ensure your PoE devices are powered and working.

Benefits: Power and manage IP cameras, IP phones and Wireless APs.

IP Camera Management

Manage IP Cameras easily with detection and management of ONVIF cameras. Use PoE Device Check, auto-generated IP Camera topology and Camera Snapshots to detect & troubleshoot problems.

Benefits: Easily configure, deploy & manage connected IP Cameras.

Rack Mountable & Fanless PoE switch

Fit the VigorSwitch P2121 with the included rack mounting kit into any standard 19” rack.
Fanless and with a 140-watt PoE power budget, it's ideal for use in a quiet office environment.

Benefits: Quiet in operation, with a great PoE power budget for its size.

VigorSwitch P2121

12-Port L2 Managed Gigabit Switch with 8 Gigabit RJ-45 PoE+ Ports & 4 SFP/RJ-45 Uplink Ports

The VigorSwitch P2121 is a high-performance, Fully Managed Gigabit Ethernet switch, with advanced features such as 802.1x port authentication and IP camera management.

The 8 PoE+ (Power over Ethernet) RJ-45 LAN ports are ideal for powering connected IP phones, IP cameras and wireless access points. The 140 watt PoE power budget provides ample power through Ethernet to each of these 8 PoE / PoE+ enabled LAN ports.

An additional 4 Gigabit RJ-45 / SFP Fibre module ports allow for high speed uplinks, with options for port trunking, spanning tree and connectivity for more devices.

Designed for centralised management, the VigorSwitch P2121 can be provisioned and monitored with the VigorACS management platform, the free VigorConnect single site management system and/or, with a DrayTek Vigor router’s Central Switch Management. Easily provision VLAN configuration through the router and clone switch configurations. Drastically reduce the setup time required for a complex network and configure an entire DrayTek network remotely.

Features

PoE (Power over Ethernet)

Deliver power and data over one ethernet cable. Power up to 8 devices at up to 30 watts per port.

Cloud Management

Manage the VigorSwitch P2121 from anywhere with VigorACS Cloud Management.

Automatic VLAN Assignment

Network port changes are easier to manage with MAC-based VLANs automating port re-configuration.

ONVIF IP Camera Management

Manage and view ONVIF capable cameras, automatically detecting their topology on the network.

IP Conflict Detection & Prevention

Improve network stability by avoiding IP conflicts caused by a misconfigured or malicious host.

Great Security Features

Protect your network against unauthorised access with DoS Defence, ACL port level Firewall & IP Source Guard.

PoE Management

Schedule PoE device power. Monitor PoE device status, automatically restarting devices if they stop responding.

Central Site Management

Easily configure switches remotely with a DrayTek Vigor router or VigorConnect.

802.1X Port Authentication

Control access to your network with 802.1x and RADIUS authentication for each device that's connected.

4 SFP Ports for Uplinks

Uplink to Fiber or direct-attach to additional switches, with 4x Gigabit SFP Ports.

QoS (Quality of Service)

Improve the performance of critical traffic by prioritizing the traffic with CoS, DSCP, and IP Precedence tag.

Rack Mountable & Silent

Includes rack mount fittings to fit in any 19" rack with 1u height. Quiet in operation.

Power over Ethernet

The VigorSwitch P2121 is an 8-port PoE (Power over Ethernet) switch, providing power on all ports to any PoE-enabled device, such as IP phones, wireless access points or IP cameras over the Ethernet cable.

As well as removing the need for local (at the desk) power supplies, making for tidier installations, PoE ensures power efficiency, providing only the power needed, as well as allowing for time schedules for powering up/down and remote rebooting.

Power is provided only when required and allows for installation of devices where there is no mains power, particularly useful for wireless access points such as the ceiling mounted VigorAP 912C.

The VigorSwitch P2121 has 8 PoE ports with a power budget of up to 140 watts for all connected PoE devices, allowing for connection of both standard PoE (802.3af) and High-Power PoE (802.3at) devices at up to 30 watts per port.

Power over Ethernet Management

Device Check

The Device Check feature can monitor connectivity to a device / remote IP - if it stops responding, for instance an IP camera stops transmitting - the VigorSwitch will automatically power cycle the port it's connected to, allowing it to restart and work normally again.

Scheduling

Set time schedules to turn connected PoE devices on/off at certain times of the day, for instance turning off wireless access points overnight.

Save power and prevent network access outside of the set operation times.

PoE Priority

In the event that the PoE power usage exceeds the power budget of the switch, important devices can be given priority so that they remain on. Less important devices can be turned off by the switch, to ensure constant operation of essential systems.

Central Management

The DrayTek VigorSwitch P2121 can operate in standalone mode and be managed through its web interface or, if you need to manage and monitor the switch remotely, or have several DrayTek VigorSwitches to administer, you can centrally manage and monitor them either with:

Router - Switch Management	Manage VigorSwitches connected to a router and determine network topology at a glance
DrayTek VigorACS	Manage and Provision DrayTek VigorSwitches on any network, from anywhere
DrayTek VigorConnect	Manage and Provision VigorSwitches and VigorAPs on a single site

Managing a VigorSwitch through VigorACS

DrayTek's VigorACS central management system provides a centralised way to manage and view the status of any DrayTek Vigor router, VigorAP access point and VigorSwitch connected to the VigorACS server.

DrayTek VigorSwitch switches that support TR-069 management can be managed through DrayTek VigorACS 2 in the same way that a DrayTek Vigor router or VigorAP access point would be managed. Through VigorACS, you can view and manage; a single VigorSwitch, all switches on a site or all switches across an entire network spanning multiple sites in one place.

DrayTek VigorSwitches connected to VigorACS connect directly to the VigorACS server to be managed, the router or network that they are connected to needs no additional configuration beyond the VigorSwitch having access to the Internet (or if your VigorACS server is located across a private WAN / VPN connection, access to that network).

Dashboard view

View the state of a VigorSwitch through the Dashboard, with PoE usage, uptime and connected ports all visible in one place:

Switch Configuration

View the configuration of a VigorSwitch and make changes to the configuration through VigorACS, then copy the settings from that switch to apply them to multiple VigorSwitch switches:

Central Switch Management with a DrayTek Vigor Router

DrayTek Vigor router Central Switch Management provisions and monitors VigorSwitch switches through a DrayTek Vigor router, with profiles that can be applied to multiple switches and VLAN configuration all handled within the router.

Central Switch Management requires firmware support on both the VigorSwitch and the DrayTek Vigor router.

This can simplify the setup of multiple subnets and VLANs, without needing in-depth knowledge of VLAN tagging and reduces setup time, with the time consuming step of configuring VLANs for each port handled by the router instead.

Switch Hierarchy

The Switch Hierarchy view provides a visual overview of interconnections between DrayTek VigorSwitch switches with the devices connected to each LAN port:

Switch Management Profiles

Switch Management profiles can be used configure schedules to enable or disable ports (including PoE) and set bandwidth limits for the ports. Descriptive names can be configured on the router which can be seen from the Switch Hierarchy view:

VLAN configuration of a VigorSwitch can be provisioned from the DrayTek Vigor router, with the router automatically configuring the Uplink port and being aware of the VLAN tags that the Vigor router and the connected LAN port have available:

Automatic VLAN Assignment

Dynamic MAC-based VLAN

Assign VLAN access to individual devices instead of ports with MAC-based VLAN, to ensure that devices are assigned to the correct network regardless of which switch port they're plugged into.

With MAC-based VLAN, users can move around the office and make use of the same network resources and access through any port on the switch, without requiring manual re-configuration of VLAN settings on individual ports.

Surveillance & Voice Auto VLAN

With Voice VLAN and Surveillance VLAN, the VigorSwith P2121 simplifies the setup of connected IP Phones and IP Cameras. Move around ports on the switch without having to manually re-configure VLAN and QoS settings each time, instead the switch will auto-assign VLAN tags and Quality of Service to IP Phones and IP Cameras, ensuring that each device remains on the correct network and that essential Voice and Video data is prioritised on the network.

The switch identifies cameras and phones from their MAC address (Vendor OUI), so that when connecting up an IP Phone from Yealink for instance, the switch would configure the VLAN ID and set the QoS tag for that port. Moving the phone to a different port, the switch will ensure that the VLAN settings follow the device rather than requiring a fixed VLAN & QoS configuration per-port.

ONVIF IP Camera Management

The VigorSwitch P2121 can discover, manage and configure ONVIF (Open Network Video Interface Forum) compatible IP cameras and NVR systems, allowing for easy discovery, management and troubleshooting of your connected IP cameras.

Device Management

Use the VigorSwitch to configure and manage your IP camera network; configure network & security settings, restart cameras and have the switch monitor whether cameras are responding, alerting of any issues.

Network Surveillance Topology

Simply connect ONVIF capable devices to the VigorSwitch P2121, Discover devices and the VigorSwitch determines the network topology of connected cameras & NVR systems.

View IP Camera Output

Through the VigorSwitch web interface, you can view the video feed of connected IP cameras:

ONVIF Camera Management - Camera Display

Camera Offline Alerts with Snapshot

The VigorSwitch P2121 can store a recent snapshot of each connected IP Camera that's ONVIF compliant.

If a camera goes offline, the VigorSwitch sends out an Email alert with the last-seen snapshot from the camera that's stopped responding. Allowing you to locate the affected camera easily and troubleshoot any problems it may have, such as a disconnected cable or faulty camera.

In addition, with Device Check on a PoE VigorSwitch, the switch can automatically power cycle the affected camera when problems occur, resolving issues with a freezing camera without requiring manual intervention.

IP Conflict Detection & Prevention

Conflict Detection

The VigorSwitch can detect and notify an administrator when an IP conflict is detected on the network. Easily track down conflicts and take action to resolve them.

Conflict Prevention

Use DrayTek's IP Conflict Prevention to allow the switch to automatically protect against IP conflicts and ARP spoofing.

IP Conflict Prevention catalogues the current network layout, giving you the option to fix the IP address and MAC information for important network devices, such as Servers and Routers.

If another device attempts to use an IP address that's in use, the VigorSwitch blocks the misconfigured or malicious device, communicating only with the known and correct device.

Quality of Service & Bandwidth Control

Quality of Service

Prioritise mission-critical services such as Voice over IP and optimise traffic on your network with Quality of Service. 802.1p Class of Service allows the switch to identify essential traffic, moving it ahead in the queue at busy uplinks, ensuring that important data arrives on time when passing through the switch.

Auto Voice & Surveillance VLAN allow the switch to automatically assign VoIP Phones and IP Cameras to their specified VLAN and prioritise their traffic without manual port configuration.

Control and manage throughput per-port with Rate Limiting and application specific Traffic Shaping.

Network Security and Management Features

Stay in control of what's connected to your network with Port Security and 802.1X & MAC authentication, to prevent connection of unauthorised equipment.

Protect against network issues arising from connection of unwanted devices with DHCP Snooping and IP Source Guard.

Control port access for every port on your network with the VigorSwitch Access Control List - to specifically allow or deny specified traffic types moving between ports, just like a Firewall.

Access Control List	Similar to a firewall, the ACL can control which packet types (IPv4, IPv6 & MAC) are allowed to pass between ports on the switch.
AAA - 802.1X Authentication	Control access to LAN ports through a RADIUS server, which could be provided by the Vigor 2862 router on site. Authenticate and authorise network access via 802.1X or MAC address. Track data and time usage of each user authenticated with RADIUS Accounting. Solution Focus - Wired 802.1X LAN Port Security
Management Authentication via RADIUS, TACACS+ or local accounts	Control logins to the switch management with the switch's internal user accounts or through a central RADIUS / TACACS+ server.
IGMP Snooping & Querying	Manage and control multicast IGMP traffic passing through the switch, with IGMP Snooping & Querying. With IGMP Snooping, the switch tracks IGMP traffic passing through its ports. Allowing it to limit the broadcast of multicast/IGMP packets to only the ports that have subscribed, improving overall network performance and avoiding excess network traffic. The VigorSwitch's IGMP Querier allows it to manage IGMP subscriptions on its network ports, checking which ports are members of which multicast group, if the network's router does not support multicast.
IPv6 Ready	The VigorSwitch P2121 has extensive IPv6 support, with IPv6 ACL, MLD Snooping and IPv6 DNS Resolution. Filter IPv6 packets with the Access Control List (ACL) alongside IPv4 traffic. Use IPv6 MLD Snooping to control and more efficiently manage Multicast packets in the same way that IGMP Snooping would for IPv4 Multicast packets.
DHCP Snooping	Limit DHCP server responses to only a specified port to stop unauthorised devices from affecting network connectivity.
IP Source Guard	Protects against address spoofing by comparing packets received with either statically configured source IP addresses or addresses learned from DHCP snooping.
Link Aggregation - Port Trunking	Use two or more network links to connect the VigorSwitch P2121 and another switch / server. Traffic can be shared between the two ports, effectively doubling the bandwidth of the uplink and providing resilience should one of the links fail. Up to 8 ports can be added to a single Link Aggregation Group, with up to 8 LAGs. Interoperability with other types and manufacturer's equipment is handled by the Link Aggregation Control Protocol (LACP).
Improved Jumbo Frame	The VigorSwitch P2121 supports Ethernet packets up to 9 Kilobytes in size, to further improve throughput and increase the efficiency of packet transmission across your network.

Rack Mountable & Silent

Install the VigorSwitch on a desk, shelf or wall, or use the included rack mount fittings to install the switch in any standard 19" rack with 1U height.

Ideal for installation in quiet office environments, the VigorSwitch P2121 runs quietly, cooling without a fan.

4 SFP Ports for Fibre Connectivity and Switch Uplinks

The DrayTek VigorSwitch P2121 has 4 switchable Gigabit SFP ports for uplinks, which can be used instead of the corresponding RJ-45 ports Nos. 9-12.

SFP slots are typically used for fibre transceivers and interlinks between switches. In comparison to 'copper' (RJ-45) cables, using fibre for connectivity provides longer range and resilience from electrical interference.

The SFP ports provide compatibility with your choice of SFP modules (not included) and therefore the most appropriate medium for your application.

Use a passive Direct Attach SFP adapter such as the DrayTek DAC-CX10-01M, to connect directly to the SFP module port of another switch, similarly to an RJ-45 network connection, instead of using the SFP module slot for a Fibre or RJ-45 Transceiver.

Screenshots

DrayTek VigorSwitch P2121 - Web Interface Screenshots

Dashboard

Dashboard view displays an overview of the VigorSwitch's port usage, port states and power usage:

IP Camera Management of ONVIF IP Cameras

Manage and view the video feed of automatically detected ONVIF IP Cameras connected to the VigorSwitch:

Port Bandwidth Usage

Display live usage data of all ports on the switch, showing the quantity of data transmitted and received on each port, with the percentage displayed along with the port's speed:
i.e. 900mbps would be displayed as 90% usage for a 1Gpbs port
50mbps would be displayed as 50% usage for a 100Mbps port

DrayTek VigorSwitch Port Bandwidth Usage

Dynamic MAC table

View devices connected to each port from the Dynamic MAC table, which displays the known MAC address and their respective VLANs for each port on the switch:

Port Bandwidth Limits

Configure bandwidth limits for each LAN port, with Egress rates controlling a client's download speed from the switch and Ingress rates controlling a client's upload speed to the switch.

Power over Ethernet Management

The web interface displays the total power budget available for the switch, with the configuration and power usage of each port. The Power Cycle button restarts the PoE device connected to the port:

Power over Ethernet Watchdog

Configure the VigorSwitch to restart a PoE port the specified IP address stops responding to pings, for instance if an IP camera should stop responding, the VigorSwitch will automatically power cycle it to allow it to respond again:

Power over Ethernet Scheduling

Schedule times that PoE ports are active and powered for, to automatically enable and disable connected wireless access points to operate only during specified times, such as during business hours on weekdays:

VLAN Configuration

Quickly create single or multiple VLAN groups. To create multiple VLANs at once, specify multiple VLAN tags separated by commas, or as a range of VLANs (i.e. 3-5 would create VLANs 3, 4 and 5):

Apply VLAN configurations to multiple ports:

Specifications

VigorSwitch P2121

Product Code	EAN	Product Name	Description
VSP2121-K	4712909127202	VigorSwitch P2121	12-Port L2 Managed Gigabit Switch with 8 Gigabit RJ-45 PoE+ Ports & 4 SFP/RJ-45 Uplink Ports

Key Specifications

8 x RJ-45 Gigabit Ethernet Ports with PoE+
4 x RJ-45 / SFP Gigabit Ethernet Ports
140-watt Power-over-Ethernet budget for demanding applications
Cloud Managed with VigorACS
802.1q VLANs with Dynamic MAC-based, Voice & Surveillance VLAN
802.1x RADIUS Port Authentication with Accounting
ONVIF IP Camera Surveillance Management with PoE Device Check
Access Control List (ACL) for port & traffic level security
Port Mirroring & Link Aggregation
IGMP Snooping & Querying
IPv4 and IPv6 Support with IP Conflict Prevention
Centrally managed or standalone operation
Desktop, Wall or Rack mountable with included fittings

Technical Specification (UK Hardware Spec.)

Physical Interfaces

8 RJ-45 Ethernet Ports – 10/100/1000Mbps
4 Selectable Ports (Nos. 9-12), use as either:
- 10/100/1000BaseT (Gigabit) Ethernet
- or SFP (1000M) Ports for Uplink / Fibre
Console Port (RJ-45 physical, RS-232 electrical)

PoE Specification

8-ports 802.3af & 802.3at (High Power) PoE PSE
140 Watts Total Power Budget for PoE
Up to 30 watts per port
Scheduling
PoE PD Priority
Restart PoE PD if not responding to ping
Restart PoE IP Camera if not providing camera output
Auto Detection of Powered Device (PD) and Consumption Levels
Per Port PoE Status LED Indicators
Alert LED for high PoE Usage
Port Power Consumption Monitoring via Web Interface & CLI
Circuit Protection to Prevent Power Interference between Ports
PoE PD Monitoring & Maintenance Features (per port)
- Scheduling
- PoE PD Priority
- Restart PoE PD if not responding to ping
- Restart PoE IP Camera if not providing camera output

VLAN

802.1q Tag-based VLAN
Port-based and MAC-based VLANs
QinQ (Basic)
GVRP – General VLAN Registration Protocol
Up to 256 VLANs (out of 4096 VLAN IDs)
802.1v Protocol-Based VLAN
Voice VLAN (OUI Mode)
Surveillance VLAN (OUI Mode)
Protocol VLAN
MAC-based VLAN
Management VLAN
Port Isolation

QoS

Support 8 priority queues
Port-Based rate control (Ingress & Egress)
Priority queue schedule (WRR or Strict Priority)
Rate Limit
Class of Service
- 802.1p CoS
- DSCP
- CoS-DSCP
- IP Precedence ToS

Network Security

IP Source Guard with ARP inspection
Storm Control (Broadcast, Unknown Multicast, Unknown Unicast)
DoS Attack protection
AAA Authentication
MAC Authentication
Protected Port / Port Isolation
Static Port Security
Dynamic ARP Inspection
DHCP Snooping with Option 82
Loop Detection & Prevention
Access Control Lists (ACL)
- Up to 512 ACL Entries
- Source and destination MAC
- VLAN ID
- IPv4/v6 address
- Protocol
- TCP/UDP port

Spanning Tree

Spanning Tree Protocol (STP)
Rapid Spanning Tree Protocol (RSTP)
Multiple Spanning Tree Protocol (MSTP)

Link Aggregation

Combine multiple ports to increase bandwidth
8 Aggregation Groups
Up to 8 ports in each group
LACP or Static setup
Supports traffic load balancing

Networking Performance

Switching Capacity: 24Gbps
Forwarding Rate: 17.8Mpps at 64 bytes
MAC Addresses Supported: 8,000
Jumbo Frames up to 9KB
Packet Buffer size: 4.1Mbit

Multicast

Up to 256 multicast groups
Multicast Group Filtering / Throttling
IGMP Snooping V2/V3 (BISS)
IGMP V2/V3 Querier
Multicast VLAN registration
MLD Snooping V1/V2
- Immediate Leave
- Report Suppression
- IGMP/MLD Querier

AAA

RADIUS / TACACS+ Authentication for Management
Multiple AAA Server
MAC / Inaccessible Authentication bypass
RADIUS Authentication 802.1X
- Accounting
- Guest VLAN
- Port based Authorisation
  - 802.1X Single/Multi
  - MAC-based
- Attribute Assignment
  - User Privilege
  - VLAN

ONVIF Surveillance Management

Discovery of ONVIF-compliant IP Cameras
Surveillance Topology
Real-Time Video Streaming
ONVIF Device Maintenance
- Device Information
- Network Settings Configuration
- Time Settings
- Reboot
- Reset to Factory Default Settings
- Ping Check with Mail Alert on disconnection

Management

Central Management
- VigorACS
- VigorConnect
- Vigor Router Switch Management (requires router firmware support)
Running/Startup/Backup Configuration
IPv4 & IPv6 Dual-Stack
LLDP(802.1ab) + MED
Web User Interface (HTTP or HTTPS)
Firmware Upgrade/Backup by HTTP/HTTPS
HTTP (Non-TLS) can be disabled for increased security
Configuration Backup/Restore
Factory Default
System Reboot
Dual Firmware Image (Active & Backup Firmware)
Command Line Interface (CLI) via SSH/Telnet
Console Port (RJ45) for CLI management
OpenVPN Client with Certificate-based auth
SNMP v1, v2c, v3 (with Generic Traps)
RMON Groups 1, 2, 3, 9 (History, Statistics, Alarms, Events)
SNTP (Simple Network Time Protocol)

Diagnostics

Port Status & Usage display
CPU/RAM Usage display
MAC Address Table
Device Check
Syslog
Mail Alert
- Port Status
- Port Speed Change
- System Restart
- Device Check
- IP Conflict
- ONVIF IP Camera Snapshot
Port Mirroring
Ping Diagnostics
Port-based Cable Test

IPv4 Features

DHCP Client
DNS Client

IPv6 Features

Auto Configuration
Static IPv6 Address & Prefix Length
Static IPv6 Default Gateway
IPv6 Neighbour Discovery (ND)
IPv6 Duplicate Address Detection
ICMPv6
DHCPv6 Client

General IEEE Standards Compliance

802.3 10Base-T
802.3u 100Base-T
802.3ab 1000Base-T
802.3x Flow Control Capability
802.3 Auto-negotiation
802.3ad Port trunk with LACP
802.3az Energy Efficient Ethernet
802.3af PoE
802.3at PoE+
802.1q VLAN
802.1p Class of Service
802.1d Spanning Tree
802.1w Rapid Spanning Tree
802.1s Multiple Spanning Tree
802.1x Port Based Network Access Control
802.1ab Link Layer Discovery Protocol (LLDP)
802.1ad QinQ

Operating Requirements

Power Input Requirements: 100-240VAC
Power supply: Internal
Maximum Input Power Consumption: 164 Watts
Cooling: Passively cooled, no fan
Operating Temperature: 0 °C to 45 °C
Storage Temperature: -20 °C to 70 °C
Operating Humidity: 10% to 90% RH (non-condensing)

Physical Specifications

Dimensions: 330 x 230 x 44 mm (W x D x H)
Rack mountable: 1U
Weight: 2.43Kg (excluding SFP modules/cables)
Brackets included for rack or wall mounting

ROHS & CE Compliant

Warranty

Two (2) Year Manufacturer's RTB
Optional VigorCare Enhanced Warranty Available
- VigorCare B3 3 Year Subscription: VCARE-B3
- VigorCare B5 5 Year Subscription: VCARE-B5