IP Source Guard provides Layer 2 source IP filtering to prevent impersonation of an unauthorized host that uses the IP address of an authorized host. This feature uses dynamic DHCP snooping and static input of the source IP address.

The S4600 series supports DHCP Snooping, which prevents attacks using an illegal DHCP server by setting trusted ports and unused ports. By enabling DHCP Snooping Binding and DHCP 82, you can combine modules such as dot1x and ARP DAI or independently implement user access control.

An access control list (ACL) can be used to restrict access to sensitive network resources by filtering packets and forwarding according to established rules. A user-defined ACL provides more flexible access control for users.

The S4600 series supports much more L2 security features such as ARP protection, ARP scanning and other ARP and MAC security technologies to protect network security and reliability.

Advanced administration of DCN switches. Network solutions configured with a well-known command-line interface (CLI) or an easy-to-use web-based graphical interface.

Monitor network traffic using sFlow or SNMP protocols.

The S4600 X series access switches offer up to 4 10 Gigabit ports that can work as a redundant link working with various ring protection functions, effectively increasing network scalability and performance.

All SFP+ ports support 10 gigabit and 1 gigabit transmission.

The Virtual Switch Framework (VSF) can combine multiple DCN switches into a single logical device, allowing information boards and data to be shared between different switches. Using this functionality, stacked devices have increased performance and the number of ports. VSF technology is also characterized by simplified management and greater operational reliability.

The S4600 X series supports 4 Gigabit ports as a master link, which can act as redundant links cooperating with various ring protection functions, effectively increasing network scalability and performance.

G.8032 (ERPS) with 50 ms network structure switching time provides protection in the event of a connection failure and recovery of L2 traffic in the ring topology. The S4600 X series supports G.8032 v2 and can be implemented in a variety of complex network topologies, including single ring, tangent ring, and intersecting rings.

Multiple Spanning Tree (MSTP) allows you to introduce multiple logical network topologies — instances to which multiple VLANs can be assigned — resulting in redundant and stable Ethernet transmission.

MRPP is a proprietary DCN protocol offering ring protection. Compared to STP, it features faster convergence (50ms), simple algorithm and lower cost of system resources, which improves network reliability.