The NETGEAR Intelligent Edge M4100 series consists of 9 fully managed switches; ranging from 12-port to 50-port Fast and Gigabit Ethernet. They are ideal for all organizations considering reliable; affordable and simple access layer switching with CLI; advanced scripting capabilities and Layer 3 routing. As a cost-effective component of converged voice; video and data networking solutions; NETGEAR M4100 series delivers a secure edge in commercial buildings and campus LAN environments: PoE (802.3af) and PoE+ (802.3at) versions of M4100 series are perfect for Wireless access points; IP telephony and IP surveillance deployments.
Layer 2+ with static routing
- M4100 series comes with Port-based / VLAN-based / Subnet-based "static routing" Layer 2+ versions
- L3 fixed routes to the next hop towards the destination network are added to the routing table.
- L3 routing is wire-speed in M4100 series hardware with 64 static routes (IPv4)
Engineered for convergence
- Automatic multi-vendor Voice over IP prioritization based on SIP; H323 and SCCP protocol
- Voice VLAN and LLDP-MED for automatic IP phones QoS and VLAN configuration
- Advanced classifier-based hardware for L2; L3; L4 security and prioritization
- Advanced Multicast filtering with IGMP and MLD snooping and querier modes
High-value performance and IPv6 ready
- 16K MAC addresses; up to 100Gbps switching fabric; 9K jumbo frames; Green Ethernet
- IPv4/IPv6 ingress traffic filtering (ACLs) and prioritization (QoS - DiffServ)
High availability and PoE/PoE+ full power capability
- Redundant power supply option for uninterruptible operation (RPS)
- External power supply option for PoE and PoE+ full power applications (EPS up to 1;440W)
Industry Standard Management
- Industry standard command line interface (CLI)
- Fully functional NETGEAR web interface (GUI)
Industry Leading Warranty
- NETGEAR M4100 series is backed by NETGEAR ProSafe Lifetime Hardware Warranty
- Also included ProSUPPORT Lifetime 24x7 Advanced Technical Support
- Also included Lifetime Next Business Day Hardware Replacement
Product Features:
Performance
- Layer 3 hardware with L2+ software affordability
- Built upon L3 hardware platform while Layer 2+ software package allows for better budget optimization
- Uses latest generation silicon low-power 40-nanometer technology
- L2 and L3 switching features (access control list; classification; filtering; IPv4 routing) are performed in hardware at interface line rate for voice; video; and data convergence
- Layer 2+ software package provides straight forward IP static routing capabilities for physical interfaces; VLANs and subnets
- 16K MAC address table; 1K concurrent VLANs and 64 static routes for SMB and small enterprise access layers
- Increased packet buffering with up to 12 Mb dynamically shared accross all interfaces for most intensive applications
- Low latency at all network speeds
- Jumbo frames support of up to 9Kb accelerating storage performance for backup and cloud applications
Connectivity
- IEEE 802.3af Power over Ethernet (PoE) provides up to 15.4W per port
- IEEE 802.3at Power over Ethernet Plus (PoE+) provides up to 30W per port
- Desktop versions can be powered by upstream PoE+ switch
- M4100-D12G-POE+ can even redistribute PoE power from the upstream PoE+ switch to VoIP phones or other devices in meeting rooms; retail sales floors or other challenging environments without outlet
- Both IEEE 802.3at Layer 2 LLDP method and 802.3at 2-event classification methods are supported for compatibility with all PoE+ PD devices
- Automatic MDIX and Auto-negotiation on all ports select the right transmission modes (half or full duplex) as well as data transmission for crossover or straight-through cables dynamically for the admin
- 100Mbps backward compatibility on all SFP ports
- IPv6 support with multicasting (MLD for IPv6 filtering); ACLs and QoS
Ease of Use
- Fully functional Web console (GUI) for IT admins who prefer an easy to use graphical interface
- Placement outside the wiring closet (conference rooms; offices; class rooms; sales floor in retail stores; etc)
- For secure deployment in open areas ; desktop versions come with a Wall Mount Kit with four brackets
- Select desktop versions also come with a set of strong magnets for mounting on any metal surface
- Automatic configuration with DHCP and BOOTP Auto Install
- Both the Switch Serial Number and Switch primary MAC address are reported by a simple "show" command in the CLI
- Automatic Voice over IP prioritization with Auto-VoIP
- An associated Voice VLAN can be easily configured with Auto-VoIP for further traffic isolation
- When deployed IP phones are LLDP-MED compliant; the Voice VLAN will use LLDP-MED to pass on the VLAN ID; 802.1P priority and DSCP values to the IP phones; accelerating convergent deployments
- DHCP/BOOTP innovative auto-installation including firmware and configuration file upload automation
- Dual firmware image and configuration file for updates with minimum service interruption
Security
- Traffic control MAC Filter and Port Security
- DHCP Snooping monitors DHCP traffic between DHCP clients and DHCP servers to filter harmful DHCP message and prevent DHCP spoofing attacks
- IP source guard and Dynamic ARP Inspection for malicious users traffic elimination
- Layer 2 / Layer 3-v4 / Layer 3-v6 / Layer 4 Access Control Lists (ACLs) can be binded to ports; Layer 2 interfaces; VLANs and LAGs (Link Aggregation Groups or Port channel) for fast unauthorized data prevention and right granularity
- Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology consistent and predictable - unauthorized devices or switches behind the edge ports that have BPDU enabled will not be able to influence the overall STP topology by creating loops
- Spanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance; unauthorized or unexpected new equipment in the network may accidentally become a root bridge for a given VLAN
- Dynamic 802.1x VLAN assignment mode; including Dynamic VLAN creation mode and Guest VLAN / Unauthenticated VLAN are supported for rigorous user and equipment RADIUS policy server enforcement
- 802.1x MAC Address Authentication Bypass (MAB)
- Double VLANs (DVLAN - QinQ) pass traffic from one customer domain to another through the "metro core" in a multi-tenancy environment
- Private VLANs (with Primary VLAN; Isolated VLAN; Community VLAN; Promiscuous port; Host port; Trunks) provide Layer 2 isolation between ports that share the same broadcast domain
- Secure Shell (SSH) and SNMPv3 (with or without MD5 or SHA authentication) ensure SNMP and Telnet sessions are secured
- TACACS+ and RADIUS enhanced administrator management provides strict "Login" and "Enable" authentication enforcement for the switch configuration and authentication based on user domain in addition to user ID and password
Specification:
- Model Description: 48 ports Gigabit PoE+ 802.3at; Layer 2+ software package
- RJ45 Ports: 50 x 10/100/1000
- Fiber SFP (100/1000): 4 x SFP
- Power over Ethernet (PoE / PoE+): 48 x PoE+ 802.3at
- PoE Budget (Watts): 380W / 1;440W EPS
- Redundant Power Supply: RPS
- Feature Set: Layer 2+ (static routing)
- Form Factor: Rack 1U - Standalone
