Skip to main content


Industrial L2/L3 switch with management, strong security features and PoE ++ 10Gbit SFP ports
  • DIN rail mounting with PoE++
  • Copper ports: 8 x10/100/1000TX
  • Fiber Ports: 2 x SFP/SFP+ 1G/10G
  • Manageable, ring capable, L3 capabilities
  • Non Stop PoE
  • OSPFv2/v3 and RIPv1/v2
  • IEEE 1588 V2, PTP
  • Fanless
  • Power 48-57VDC, redundant

This robust, high-quality switch is designed for use in powerful 10, 100 and 1000MBit/s Ethernet ring network structures according to IEEE802.x. The eight copper ports feature Power over Ethernet with PoE, PoE+ and PoE++. These devices have been specially developed for video networks. The switch allows the construction of one or more error tolerant rings via two or more connections. In the event of an interruption, the ring closes automatically in less than 50ms. This increases the availability of the system. The system controls the layer 3 protocols OSPFv2/v3 and RIPv1/v2.

Two SFP sockets for 1/10 Gbit/s BaseSX/LX/ZX are available for the backbone, which can be equipped either for multimode or singlemode. The switches can also be used as stand-alone devices, for point-to-point connections or as connection modules. The extensive possibilities of the management software also allow the use of the switches in systems with high demands on the functionality of the network. Installation is very quick and easy thanks to the mounting device for mounting rails. The electrical and optical connections are ensured by standardized plugs (RJ45 or LC).

Video network special features

Active surveillance of the camera
Cameras powered by the switch via PoE are continuously monitored. In the event of a camera failure, the switch restarts the camera automatically. If this fails, the switch sends an alarm message via SNMP.

Active monitoring of PoE power supply
If, for example, a defective camera requires too much power from the switch, the switch alerts via SNMP.

Active management of PoE performance
When the switch is started up, the individual PoE ports can be started up with a time delay to prevent the PoE power supply from being overloaded.

Additional video-friendly features
Extra high backplane performance for smooth video transmission with full port occupancy. Jumbo frames up to 9600Bytes are also supported at 100MBit/s. Port security through MAC address limitation.

More information

Special featuresThe switch has extensive security features. E.g. the ACL allows to protect not only the switch itself, but also the traffic in the network.
Non-stop PoE: When the switch is rebooted, the PoE power supply to the connected cameras is not interrupted. As soon as the switch is operational again, so are the camera images.
System notesThe switch supports PTP, precision time protocol according to IEEE1588 v2 and IEC 61588, which is used in industrial automation, professional audio-video applications for audio-video bridging and telecommunications, among others.
Furthermore, the switch supports the dynamic routing protocols OSPFv2/v3 and RIPv1/v2.
S-VLAN can be used for VLAN setup with service providers.


DMS (Device Management System)

This switch has an integrated network monitoring and control system, which gives the user a very simple overview of the entire network. This DMS system has the following features:

Graphical network overview
The view of the network topology allows a quick overview of all switches and end devices available in the network, such as IP cameras or servers, with details of the IP address, device type and name. Plans and maps can be stored as background images, allowing the user to quickly access certain network devices even without knowledge of the IP structure,

Device search functions
This function allows access to a specific device even in larger networks. Newly added devices, e.g. a replaced IP camera, are displayed immediately and allow the user immediate access without requiring the IP address.

Data traffic display
The data traffic per port can be graphically displayed over a time axis.

Error handling and security
Network diagnostics between master switch and connected terminals.
Protection mechanisms such as data rate limitation provide effective protection against unwanted access.
IEEE802.3ah and IEEE802.1ag provide tools for structuring networks.



To download the firmware you need access. Please log in or register. The registration must be activated by us.


Technical data

General properties
supply voltage48 -56 VDC
power consumption
Max. 15W (without PoE) / 375W (with PoE)
MTBF25°C: 188'146h
50°C: 59'932h
operating temperature
-40°C bis +75°C
dissipation loss136 BTU, specification without considering the PoE power.
239 BTU at maximum PoE power output of 360W.
dimensions170x70x130mm (HxWxL)
weight1.15 kg
copper ports8 x 10/100/1000TX, 4 x PoE+, 4 x PoE++, RJ45
Maximum PoE power over all ports: 360W
Port 1-4 PoE+ and Port 5-8 PoE++
The maximum power of port pairs 5-6 and 7-8 is 120W per pair. This means that if
for example 90W is provided at port 5, a maximum of 30W is available at port 6.
optical fibre ports2 x SFP/SFP+, 1G/10G
We recommend the use of our barox SFPs.
The compatibility of our devices with SFPs of other brands is not tested and not guaranteed by us.
console port1 x RS232, RJ45 115,2kBit/s, 8, N, 1, RJ45
network properties
managementHTTP/HTTPS, SSH, Telnet Client, IPv6 Management
SNMP v1, v2c, v3 supports traps and USM
DHCP Client / DHCPv6 Client
DHCP Server
PTP, Precision Time Protocol, IEEE1588 v2
OSPFv2/v3 and RIPv1/v2
Embedded RMON agent supports RMON groups 1,2,3,9 (history, statistics, alarms and events) for improved traffic management, monitoring and analysis

Web GUI, DMS, SNMPv1, v2c and v3, console, Telnet, RMON
Individual management accesses can be disabled

PoE Management
Port configuration
Supports the PoE configuration function per port.

PoE Scheduling
Supports per-port PoE scheduling to power on/off PoE devices (PDs).

Automatic check
Check the connection status of the PDs. Restart the PDs if there are no responses.

Power delay
The PoE ports can be switched on with a time delay to protect the switch from overload.

Non-Stop PoE, Soft Reboot
The switch supplies the PDs with power even during the soft reboot.
port settingsPort disable/enable, Autonegotiation 10/100/100/1000Mbps, Flow Control disable/enable, data rate control on each port, max. Framesize, Power Control
port statusDisplay per port: speed, link status, flow control status, autonegotiation status, trunk status.
Switchable to PoE status display.
layer3 functionsIPv4 and IPv6 unicast: static and dynamic routing
OSPFv2/v3 / RIPv1/v2
communications redundancyStandard Spanning Tree (STP), IEEE802.1d
Rapid Spanning Tree (RSTP), IEEE802.w
Multiple Spanning Tree (MSTP), IEEE802.1s
Ethernet Linear Protection Switching (ELPS), ITU-T G.8031
Ethernet Ring Protection Switching, (ERPS), ITU-T G.8032
Tag-based VLAN according to 802.1Q
Supports up to 4K VLANs simultaneously (out of 4096 VLAN IDs)

Port-based VLAN
A port member of a VLAN can be isolated to other isolated ports of the same VLAN and private VLANs.

Private VLAN edge (PVE).
Private VLANs are based on the source port mask and there are no connections to VLANs. This means that VLAN IDs and private VLAN IDs can be identical.

Voice VLAN
The Voice VLAN feature allows voice traffic to be forwarded on the Voice VLAN.

Guest VLAN
The IEEE 802.1X Guest VLAN feature allows a guest VLAN to be configured for each 802.1X port on the device to provide restricted services to non-802.1X compliant clients.

Q-in-Q (double tag) VLAN
This can be used to set specific requirements for VLAN IDs and the number of VLANs to support.

802.1v protocol VLAN
Classifying multiple protocols into a single VLAN often forces VLAN boundaries that are unsuitable for some of the protocols. This requires the presence of a non-standard entity that forwards frames containing the protocols for which the VLAN boundaries are unsuitable between VLANs.

MAC-based VLAN
The MAC-based VLAN feature allows incoming untagged packets to be assigned to a VLAN, classifying traffic based on the source MAC address of the packet.

IP subnet-based VLAN
In an IP subnet-based VLAN, all end workstations in an IP subnet are assigned to the same VLAN. In this VLAN, users can move their workstations without having to reconfigure their network addresses.

QinQ-based S-VLAN.

Management VLAN
Management VLAN is used to manage the switch from a remote location using protocols such as Telnet, SSH, SNMP, Syslog, and so on.
link aggregationIEEE 802.3ad LACP / Static Trunk, supports five groups of 16-port trunks or static trunk.
QoSHardware queue
Supports eight hardware queues.


Port-based: Traffic QoS by port.
802.1p: VLAN priority-based Layer 2 CoS QoS class of service is a parameter used in data and voice protocols to distinguish the types of payloads included in the transmitted packet.
DSCP-based Differentiated Services (DiffServ) Layer 3 DSCP QoS: IP packets can carry either an IP priority value (IPP) or a Differentiated Services Code Point (DSCP) value. QoS supports the use of both values because DSCP values are backward compatible with IP priority values.
Classification and re-marking of TCP/IP ACLs: QoS through ACL

Ingress policing
Egress shaping and per-port speed control

Strict priority and weighted round robin (WRR): Weighted Round Robin is a scheduling algorithm that uses the weights assigned to queues to determine how much data is emptied from a queue before it is moved to the next queue.
securityCertified authentication
A private HTTPS key can be stored for management access.

User management
User rights can be freely set in up to 15 levels.

The switch allows up to 512 entries. Drop or rate restriction based on source/destination MAC/IP address or VLAN ID. Rules and conditions for incoming packets can be set per port. Rules include protocols, IP ports, and address ranges. Rules can be set using either the authorization or exclusion method. Criteria are: TCP/ UDP source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packet.

Port Security
MAC address management per port and IP source guard: MAC address can be checked in combination with IP address.

Storm Control

Prevents traffic on a LAN from being disrupted by a broadcast, multicast, or unicast flood on a port.

RADIUS Authentication, 802.1X
Authorization and accounting, MD5 hash, guest VLAN, single/multiple host mode, and single/multiple sessions.
Supports IGMP RADIUS-based 802.1X
Dynamic VLAN assignment

TACACS+ authentication
The switch supports TACACS+ authentication. Switch as a client.

Secure Shell (SSH)
SSH secures Telnet traffic into or out of the switch, SSH v1 and v2 are supported.

Secure Socket Layer (SSL)

SSL encrypts HTTP traffic, providing advanced secure access to the browser-based management GUI in the switch.

HTTPS & SSL (Secured Web)
Hyper Text Transfer Protocol Secure (HTTPS) is the secure version of HTTP.

BPDU Guard
BPDU Guard, an extension of STP, removes a node that reflects BPDUs back into the network. It enforces the boundaries of the STP domain and keeps the active topology predictable by not allowing network devices behind a BPDU Guard-enabled port to participate in STP.

DHCP Snooping
With DHCP Snooping, the switch has a feature that acts as a firewall between untrusted hosts and trusted DHCP servers.

Loop Protection
Loop Protection prevents unknown unicast, broadcast, and multicast loops in Layer 2 switching configurations.
*** Translated with (free version) ***
multicastIGMP v1/v2/v3 Snooping
IGMP restricts bandwidth-intensive multicast traffic to requesters. Supports 1024 multicast groups.

IGMP Querier
IGMP Querier is used to support a Layer 2 multicast domain of snooping switches when no multicast router is available.

IGMP Proxy
IGMP Snooping with proxy reporting or report suppression actively filters IGMP packets to reduce load on the multicast router.

MLD v1/v2 Snooping
Delivers IPv6 multicast packets only to the required receivers.

Multicast VLAN Registration (MVR).
A dedicated, manually configured VLAN, called the Multicast VLAN, to forward multicast traffic over a Layer 2 network in conjunction with IGMP snooping.
standardsIEEE 802.3 10Base-T
IEEE 802.3u 100Base-TX/100BASE-FX
IEEE 802.3z Gigabit SX/LX
IEEE 802.3ab Gigabit 1000T
IEEE 802.3x Flow Control and Back pressure
IEEE 802.3ad Port trunk with LACP
IEEE 802.1d Spanning tree protocol
IEEE 802.1w Rapid spanning tree protocol
IEEE 802.1s Multiple spanning tree protocol
IEEE 802.1p Class ofservice
IEEE 802.1Q VLAN Tagging
IEEE 802.1x Port Authentication Network Control
IEEE 802.1ab LLDP
IEEE 802.3af/at/bt Power over Ethernet
IEEE Energy Efficient Ethernet
IEEE 1588v2 PTP Precisison Time Protocol

Product variants


Version 03.11.2023, Changes without notice