BRAND NEW WITH THE FULL NETGEAR WARRANTY!!!
The NETGEAR Intelligent Edge M4100 series consists of 9 fully managed switches, ranging from 12-port to 50-port Fast and Gigabit Ethernet. They are ideal for all organizations considering reliable, affordable and simple access layer switching with CLI, advanced scripting capabilities and Layer 3 routing. As a cost-effective component of converged voice, video and data networking solutions, NETGEAR M4100 series delivers a secure edge in commercial buildings and campus LAN environments: PoE (802.3af) and PoE+ (802.3at) versions of M4100 series are perfect for Wireless access points, IP telephony and IP surveillance deployments.
- High availability and PoE/PoE+ full power capability
- Industry standard management
- Industry leading warranty
- Layer 2+ with static routing
- Engineered for convergence
- High-value performance and IPv6 ready
- Layer 3 hardware with L2+ software affordability
- Built upon L3 hardware platform while Layer 2+ software package allows for better budget optimization
- Uses latest generation silicon low-power 40-nanometer technology
- L2 and L3 switching features (access control list, classification, filtering, IPv4 routing) are performed in hardware at interface line rate for voice, video, and data convergence
- Layer 2+ software package provides straight forward IP static routing capabilities for physical interfaces, VLANs and subnets
- 16K MAC address table, 1K concurrent VLANs and 64 static routes for SMB and small enterprise access layers
- IEEE 802.3af Power over Ethernet (PoE) provides up to 15.4W per port
- IEEE 802.3at Power over Ethernet Plus (PoE+) provides up to 30W per port
- Desktop versions can be powered by upstream PoE+ switch
- M4100-D12G-POE+ can even redistribute PoE power from the upstream PoE+ switch to VoIP phones or other devices in meeting rooms, retail sales floors or other challenging environments without outlet
- Both IEEE 802.3at Layer 2 LLDP method and 802.3at 2-event classification methods are supported for compatibility with all PoE+ PD devices
- An associated Voice VLAN can be easily configured with Auto-VoIP for further traffic isolation
- When deployed IP phones are LLDP-MED compliant, the Voice VLAN will use LLDP-MED to pass on the VLAN ID, 802.1P priority and DSCP values to the IP phones, accelerating convergent deployments
- DHCP/BootP innovative auto-installation including firmware and configuration file upload automation
- Dual firmware image and configuration file for updates with minimum service interruption
- Traffic control MAC Filter and Port Security
- DHCP Snooping monitors DHCP traffic between DHCP clients and DHCP servers to filter harmful DHCP message and prevent DHCP spoofing attacks
- IP source guard and Dynamic ARP Inspection for malicious users traffic elimination
- Layer 2 / Layer 3-v4 / Layer 3-v6 / Layer 4 Access Control Lists (ACLs) can be binded to ports, Layer 2 interfaces, VLANs and LAGs (Link Aggregation Groups or Port channel) for fast unauthorized data prevention and right granularity
- Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology consistent and predictable - unauthorized devices or switches behind the edge ports that have BPDU enabled will not be able to influence the overall STP topology by creating loops
- Spanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance, unauthorized or unexpected new equipment in the network may accidentally become a root bridge for a given VLAN
- Dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN / Unauthenticated VLAN are supported for rigorous user and equipment RADIUS policy server enforcement
- 802.1x MAC Address Authentication Bypass (MAB)
- Double VLANs (DVLAN - QinQ) pass traffic from one customer domain to another through the "metro core" in a multi-tenancy environment
- Private VLANs (with Primary VLAN, Isolated VLAN, Community VLAN, Promiscuous port, Host port, Trunks) provide Layer 2 isolation between ports that share the same broadcast domain
- Secure Shell (SSH) and SNMPv3 (with or without MD5 or SHA authentication) ensure SNMP and Telnet sessions are secured
- TACACS+ and RADIUS enhanced administrator management provides strict "Login" and "Enable" authentication enforcement for the switch configuration and authentication based on user domain in addition to user ID and password