24 port uplink stacked Layer 3 NMS switches

TL-NS680-24F4G4T2Q is a box-type 10 Gigabit uplink stacked Layer 3 network management switch newly developed by TP-LINK, which adopts a new generation of high-performance hardware and software platform, provides flexible Gigabit access and cost-effective 10 Gigabit uplink ports, supports stacking, multiple Layer 3 routing protocols, rich business functions, and perfect security protection mechanisms, which is easy to manage and maintain, and can be used in application scenarios such as high-speed wireless device access, campus network access/aggregation layer, and enterprise network core layer.

• 24 Gigabit SFP ports, 4 independent 10/100/1000Base-T RJ45 ports
• 4 x 10 Gigabit SFP+ ports and 2 x 21G QSFP+ stacking ports
• It supports TP-LINK commercial cloud platform management
• It supports intelligent deployment, automatic configuration networking, and graphical topology display
• Stacking support, up to 8 stacking units
• Supports BGP, OSPF, RIP dynamic routes, and static routes
• DHCP server, DHCP relay, and DHCP snooping are supported
• Supports quaternary binding, ARP/IP/DoS protection, VLAN, QoS, ACL, and IPv6

Gigabit access, 10 Gigabit uplink

• The TL-NS680-24F4G4T2Q provides 24 Gigabit SFP optical ports, 4 independent Gigabit RJ45 electrical ports, 4 10 Gigabit SFP+ optical ports, and 2 21G QSFP+ stacking ports.
• All ports are capable of wire-speed forwarding.

Strong business processing capabilities

• Supports BGP, OSPF, RIP dynamic routing protocols, and static routing protocols to solve the routing and routing problems after complex networks are divided into subnets.
• Host route entries up to 16K.
• DHCP Server and DHCP Relay are supported, and IP addresses are assigned to hosts in the network.
• Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.
• IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.
• GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.
• The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.
• It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.
• ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.
• It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.

Complete security protection mechanism

• Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.
• Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.
• IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.
• DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.
• It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.
• Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.
• Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.

Versatile reliability protection

• Stacking is supported, and the stacked system is virtualized into a "distributed device", which can simplify management and improve system reliability.
• Supports STP/RSTP/MSTP production tree protocols to eliminate Layer 2 loops and implement link backup.
• Spanning tree security functions are supported to prevent devices in a spanning tree network from various forms of malicious attacks.
• Static aggregation and dynamic aggregation are supported, effectively increasing link bandwidth, implementing load balancing, link backup, and improving link reliability.
• Provide redundant power interface, support external redundant power supply to achieve backup, to ensure that the equipment works uninterrupted and stable for a long time.

Easy operation and maintenance

• It supports multiple management and maintenance methods, such as TP-LINK cloud platform management, web management, CLI command line (Console, Telnet), and SNMP (V1/V2/V3).
• Supports HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods for safer management.
• RMON, system logs, and port traffic statistics are supported, which is convenient for network optimization and transformation.
• Supports cable detection, ping detection, and Tracert detection operations to easily analyze faulty network nodes.
• It supports LLDP, which is convenient for the network management system to query and judge the communication status of the link.
• CPU monitoring, memory monitoring, ping detection, Tracert detection, and cable detection are supported.

Hardware specifications

Software Specifications