IEEE 802.3u 100BASE-TX Ethernet*
IEEE 802.3ab 1000BASE-T Ethernet*
IEEE 802.3z 1000BASE-X*
IEEE 802.3af PoE*
IEEE 802.3at PoE plus*
IEEE 802.3az EEE*
IEEE 802.3x flow control
IEEE 802.1AB LLDP/LLDP-MED
IEEE 802.3ad LACP aggregation*
IEEE 802.1D Spanning Tree Protocol (STP)*
IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)*
IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
IEEE 802.1Q VLAN tagging
IEEE 802.1p Class of Service (CoS) prioritization*
IEEE 802.1X port authentication*
* Cloud and standalone modes supported features

IEEE 802.1D Spanning Tree Protocol (STP)*
IEEE 802.1w Rapid Spanning Tree Protocol(RSTP)*
IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
IEEE 802.3ad LACP
Loop guard*
Root guard
BPDU guard
ErrDisable recovery
MRSTP (Zyxel Proprietary)
Dual configuration files
Dual images*
* Cloud and standalone modes supported features

802.1Q static VLANs*/dynamic VLANs: 1 K/4 K
Port-based VLAN
Protocol-based VLAN
IP subnet-based VLAN
MAC-based VLAN
Private VLAN
Voice VLAN*
Vendor ID based VLAN*
VLAN ingress filtering
LACP algorithm of source/ destination IP or MAC
GVRP
L2PT
* Cloud and standalone modes supported features

Port security*
Layer 2 MAC filtering
Layer 3 IP filtering
Layer 4 TCP/UDP socket filtering
Static MAC forwarding
Multiple RADIUS servers*
Multiple TACACS+ servers
New for V4.70 Compound authentication
802.1x VLAN and 802.1p assignment by RADIUS
Login authentication by RADIUS
Login authentication by TACACS+
TACACS+ accounting
RADIUS accounting
Authorization on RADIUS
Authorization on TACACS+
SSH v2
SSL
MAC freeze
DHCP snooping IPv4
DHCP snooping IPv6
ARP inspection
Static IP-MAC-Port binding
Policy-based security filtering
Port isolation
IP source guard (IPv4/IPv6)
MAC search*
Guest VLAN*
ACL packet filtering (IPv4/IPv6)
CPU protection
Interface related trap enable disable (by port)
MAC-based authentication per VLAN
* Cloud and standalone modes supported features

No. of hardware queues per port: 8*
Storm control and event log: Broadcast, multicast, unknown unicast (DLF)*
Port-based rate limiting* (ingress/ egress)
Rate limiting per IP/TCP/UDP per port
Policy-based rate limiting
802.3x flow control
802.1p Class of Service (SPQ, WFQ, WRR, hybrid-SPQ combination capable)
DiffServ (DSCP)
* Cloud and standalone modes supported features

L2 multicast*
IGMP snooping (v1, v2, v3)*
IGMP snooping fast leave*
Configurable IGMP snooping timer and priority*
IGMP snooping statistics*
IGMP throttling*
MVR support
IGMP filtering*
IGMP snooping immediate leave*
IGMP proxy mode & snooping mode selection*
MLD snooping
* Cloud and standalone modes supported features