product description

>TL-ST5008F is the latest full 10 Gigabit Layer 3 network management switch launched by TP-LINK. It adopts a new generation of high-performance hardware and software platform, provides full 10 Gigabit optical ports, supports Layer 3 routing protocols, complete security protection mechanisms, and perfect Its ACL/QoS strategy and rich VLAN functions are easy to manage and maintain, and are widely used in small and medium-sized enterprises, hotels and campus network convergence, core and other application scenarios.
>>Full 10G optical ports
>TL-ST5008F provides 8 10G SFP+ ports to meet the needs of long-distance optical fiber networking.
>>Powerful business processing capabilities
>Support RIP dynamic routing protocol, dynamically generate and update routing tables, and solve the routing problem of small and medium-sized networks after subnetting.
>Support static routing. Administrators manually configure routing entries to realize communication between different network segments, which is simple, efficient and reliable.
>Support DHCP server to assign IP addresses to hosts in the network.
>Support DHCP relay, switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
>Support proxy ARP, so that hosts in different physical networks on the same network segment can communicate normally.
>Support IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, Private VLAN, users can flexibly divide VLAN according to different needs.
>Support GVRP, realize the dynamic distribution, registration and attribute propagation of VLAN, reduce the amount of manual configuration, and ensure the correctness of the configuration.
>Support VLAN VPN function, encapsulate the outer VLAN tag for the user's private network message at the public network access end, so that the message carries two VLAN tags through the public network.
>Support QoS, support three priority modes based on port, 802.1P and DSCP and four queue scheduling algorithms of Equ, SP, WRR, SP+WRR.
>Support ACL, filter data packets by configuring matching rules, processing operations and time permissions, and provide flexible security access control strategies.
>Support IGMP V1/V2 multicast protocol, support MLD Snooping, IGMP Snooping, and meet the needs of multi-terminal high-definition video monitoring and video conference access.
>Support IPv6 to meet the needs of the network transition from IPv4 to IPv6.
>>Complete security protection mechanism
>Support IP address, MAC address, VLAN and port four-element binding to filter data packets.
>Support ARP protection, protect against ARP spoofing and ARP flooding attacks, such as gateway spoofing and man-in-the-middle attacks that are common in local area networks.
>Support IP source protection to prevent illegal address counterfeiting including MAC spoofing, IP spoofing, and MAC/IP spoofing.
>Support DoS protection, support protection against Land Attack, Scan SYNFIN, Xmascan, Ping Flooding and other attacks.
>Support 802.1X authentication, provide authentication function for LAN computers, and control the authorization status of controlled ports according to the authentication result.
>Support port security, stop learning when the number of MAC addresses learned by the port reaches the maximum number to prevent MAC address attacks and control port network traffic.
>Support DHCP Snooping, effectively prevent private DHCP server and ensure the legality of DHCP server.
>>Various reliability protections
>Support STP/RSTP/MSTP spanning tree protocol, eliminate two-layer loop and realize link backup.
>Support the spanning tree security function to prevent the devices in the spanning tree network from suffering various forms of malicious attacks.
>Support static aggregation and dynamic aggregation, effectively increase link bandwidth, realize load balancing, link backup, and improve link reliability.Easy operation and maintenance
>Support diversified management and maintenance methods such as Web network management, CLI command line (Console, Telnet), SNMP (V1/V2/V3).>Support HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods, making management more secure.>Support RMON, system log, port traffic statistics, which is convenient for network optimization and transformation.
>Support cable detection, Ping detection and Tracert detection operations, easily analyze failed network nodes.>Support LLDP, which is convenient for the network management system to query and judge the communication status of the link.
>Support CPU monitoring, memory monitoring, Ping detection, Tracert detection, cable detection.

Specifications

>Routing
>Support RIP V1/V2 dynamic routing
>Support static routing
>Support ARP proxy
>>DHCP
>Support DHCP server
>Support DHCP relay
>Support DHCP Snooping
>Support Option138, Option82, Option60 >>VLAN
>Support 4K VLANs
>Support 802.1Q VLAN, MAC VLAN, Protocol VLAN, Private VLAN
>Support Guest VLAN, Voice VLAN >Support VLAN VPN (QinQ)
>Support GVRP protocol
>Support 1:1 and N:1 VLAN Mapping function
>>MAC address table
>Follow IEEE 802.1d standard
>Support MAC address automatic learning and aging>Support static, dynamic, Filter address table
>>Security features>Based on user hierarchical management and password protection
>Support to restrict user access based on port number, IP address, MAC address>Support HTTPS, SSL V3, TLS V1, SSH V1/V2
>Support IP-MAC-PORT-VLAN four Meta binding
>Support ARP protection, IP source protection, DoS protection
>Support DHCP Snooping, DHCP attack protection
>Support 802.1X authentication
>Support port security, port isolation
>Support CPU protection function
>>Access control (ACL)
>Support L2( Layer 2)～L4(Layer 4) packet filtering function
>Support port mirroring, port redirection, flow rate limiting, QoS re-marking
>>Quality of Service (QoS)
>Support 8 port queues
>Support port priority, 802.1P priority Level, DSCP priority
>Support SP, WRR, SP+WRR, Equ priority scheduling algorithm
>>Spanning tree
>Support STP (IEEE 802.1d), RSTP (IEEE 802.1w) and MSTP (IEEE 802.1s) protocols
>Support ring Road protection, root bridge protection, TC protection, BPDU protection, BPDU filtering
>>Multicast
>Support PIM-DM, PIM-SM, static multicast routing
>Support IGMP v1/v2/v3 Snooping
>Support fast leave mechanism
>Support multicast VLAN
>Support multicast filtering, message statistics, unknown multicast Discard
>>Management and maintenance
>Support WEB network management (HTTP, HTTPS, SSL V3, TLS V1)
>Support CLI (Telnet, SSH V1/V2, local serial port)
>Support SNMP V1/V2/V3, compatible with public MIBS and TP-LINK Private MIBs
>Support LLDP, RMON
>Support CPU monitoring, memory monitoring
>Support system log, hierarchical warning
>Support Ping, Tracert detection, cable detection
>>Shell size (mm)
>250*158×44
>>Input power
>100～240VAC, 50/60Hz
>>Use environment
>Working temperature: 0℃～40℃
>Storage temperature: -40℃～70℃
> Working humidity: 10%～90% RH non-condensing
> Storage humidity: 5%～90% RH non-condensing

Recommended supporting optical module/electrical port module

1.Optical module TL-SM512LS-10KM
2.Optical module TL-SM512LM-300m
3.Optical module TL-SM311LSA/B-20KM
4.Optical module TL-SM311LSA/B-2KM
5.Optical module TL-SM311SSA/B-2KM
6.Optical module TL-SM312LS-40KM
7.Optical module TL-SM312LS-20KM
8.Optical module TL-SM312LS-20KM industrial grade
9.TOptical module TL-SM311LM
10.Electric port module TL-SM510U
11.Electric port module TL-SM310U