Networking & Communications
Gigabit Switch
L2 Plus Managed Switch
Gigabit Switch
FGS-2924R: 16-Port SFP + 8-Port Combo Port GbE L2 Plus Managed Switch
FGS-2924RD: 16-Port SFP + 8-Port Combo Port GbE L2 Plus Managed Switch (36-72VDC)
Key Features
16-Port Gigabit SFP fiber interface
8-Port dual media with Gigabit TP/
SFP for flexible connection
Support Jumbo Frame size up to
IEEE 802.1X Access Control
improves network security
Port Mirroring helps supervisor
monitoring network
Support Q-in-Q(Double-tag)
IEEE802.1Q tag-base VLAN, 4094
entries and port-base VLAN
IEEE 802.1D Compatible, 802.1w
Rapid Spanning Tree and 802.1s
Multiple Spanning Tree
Unknown Unicast/Broadcast/
Multicast Storm Control
Multicast VLAN Registration for
IP-MAC-Port binding for security
Support QoS (QCL/QCE) for traffic
ACL based on Ethernet Type / ARP
/ IPv4 for packets permit or deny,
rate limitation and port copy
DHCP Snooping (Including DHCP
Option 82)
Support IGMPv3 snooping and
IGMP proxy
Support SSL/SSH for network
Support TACACS+ for
management security and
Support "power saving" for Green
Ethernet requirement
Support LLDP (Link Layer
Discovery Protocol) provides a
standards-based method for
QoS with four priority queues
The QoS(Quality Of Service) Control List (QCL) feature provides four
internal queues to support four different classifications of traffic. High
priority packet streams experience less delay inside the switch, which
supports lower latency for certain delay-sensitive traffic. The
FGS-2924R/RD can classify the packet as one of the four priorities
according to vip port, 802.1p priority tag, DiffServ. The QoS operates at
full wire speed. The actual scheduling can be based upon a strict
priority, weighted round robin.
Port Mirroring
This mechanism helps track network errors or abnormal packet
transmission without interrupting the flow of data. Allow ingress traffic
to be monitored by a single port that is defined as mirror capture port.
The mirror capture port can be any 10/100 port, 10/100/1000 port.
Mirroring multiple ports is possible but can create congestion at the
mirror capture port.
Q-in-Q VLAN for performance & security
The Q-in-Q (Double-Tag) VLAN feature in the switch offers the benefits
of both security and performance. VLAN is used to isolate traffic
between different users and thus provides better security. Limiting the
broadcast traffic to within the same VLAN broadcast domain also
enhances performance and use of double VLAN tags.
Isolated Group, provides protection for certain ports
The isolated group feature allows certain ports to be designated as
protected. All other ports are non-isolated. Traffic between isolated
group members is blocked. Traffic can only be sent from isolated group
to non-isolated group.
Mac-based 802.3ad LACP with automatic link fail-over
Dynamic fail-over means packets will not get assigned to any trunk
member port that has failed. If one of the ports were to fail, traffic will
automatically get distributed to the remaining active ports.
802.1X Access Control improves network security
802.1x features enable user authentication for each network access
attempt. Port security features allow you to limit the number of MAC
addresses per port in order to control the number of stations for each
port. Static MAC addresses can be defined for each port to ensure only
registered machines are allowed to access. By enabling both of these
features, you can establish an access mechanism based on user and
machine identities, as well as control the number of access stations.
802.1D Compatible, 802.1w Rapid Spanning Tree and 802.1s
Multiple Spanning Tree
For mission critical environments with multiple switches supporting
STP, you can configure the switches with a redundant backup bridge
path, so transmission and reception of packets can be guaranteed in
event of any fail-over switch on the network.
Networking & Communications
Gigabit Switch
L2 Plus Managed Switch
Gigabit Switch
enabling switches to advertise
Support Syslog for device
management as well as generalized
informational, analysis, and
debugging messages.
DC Power 48 VDC (36~72VDC)
add DC power through the
removable terminal block from
external DC power source
installation (FGS-2924RD only)
FGS-2924R/RD, a 24-port Gigabit L2 Plus
Managed Switch, is a standard switch that
meets all IEEE 802.3/u/x/z Gigabit, Fast
Ethernet specifications. The switch includes
16-Port Gigabit SFP and 8-Port Combo
Gigabit TP/SFP Fiber dual media
management Ethernet switch. The switch
can be managed through RS-232 serial port,
or through Ethernet port using CLI or Webbased management unit, associated with
SNMP agent.
With the SNMP agent, the network
administrator can logon the switch to
monitor, configure and control each port's
activity in a friendly way. The overall
network management is enhanced and the
network efficiency is also improved to
accommodate high bandwidth applications.
In addition, the switch features
comprehensive and useful functions such
as DHCP Snooping (includes Option 82),
QoS (Quality of Service), Spanning Tree/
Rapid Spanning Tree/ Multiple Spanning
Tree, VLAN, Port Trunking, Bandwidth
Control, Advanced Security(IP-MAC-Port
Binding, ACLs, SSL/SSH, TACACS+,
802.1x), MVR,SNMP/RMON, LLDP and
IGMPv3 Snooping capability via the
intelligent software. It is suitable for both
metro-LAN and office applications.
Others the switch increase support the
Power saving for reduce the power
consumption with Power Management
technique. It could efficient saving the
switch power with auto detect the client
idle and cable length to provide different
power. The serial products have two kinds
model with FGS-2924R (AC Power Input)
and FGS-2924RD (DC Power Input)
MSTP is according to IEEE 802.1Q 2005 Clause 13 Multiple Spanning
Tree Protocol. MSTP allows frames assigned to different VLANs to
follow separate paths, each based on an independent Multiple
Spanning Tree Instance (MSTI), within Multiple Spanning Tree (MST)
Regions composed of LANs and or MST Bridges.
DHCP Snooping (Including DHCP Option 82)
This DHCP Snooping enables the Dynamic Host Configuration
Protocol (DHCP) relay agent information (option 82) was included in
the feature. To include information about itself and the attached client
when forwarding DHCP requests from a DHCP client to a DHCP server
via Trust Port. The DHCP server can use this information to assign IP
addresses gateway subnet mask DNS for each subscriber of a
service-provider network. The DHCP Snooping is using Trust Port and
Trust DHCP Server IP Address to filter the illegal DHCP server traffic.
IGMPv3 Snooping
By default, layer 2 Ethernet switches treat IP multicast traffic in the
same manner as broadcast traffic namely, by forwarding frames
received on one interface to all other interfaces. This may create
excessive traffic on the network and degrade the performance of hosts
attached to the switches. The IGMPv3 snooping can significantly
reduce traffic from streaming media and other bandwidth-intensive IP
multicast applications.
IGMP Proxy
The IGMP proxy and IGMPv3 Snooping is the same functional target,
but mechanism has some thing different as below:
---IGMP Proxy can send v1/v2 IGMP query together.
---IGMP Proxy supports General Query Mac Response Timeout for
checking the "client alive status" and speed up the convergence of
multicast group member.
---IGMP Proxy provides Specific (Last member) Query to check (can be
multiple times) whether other members interest in the same multicast
group exist when the port receives IGMP leave.
---IGMP Proxy checks (can be multiple times) the latest status of the
group member by scheduled polling from General/Specific Query. It
avoids instant port link-down that makes the members to be removed
from multicast group.
The IGMP Proxy is providing better performance than IGMPv3
Snooping for IGMP join and leave message exchange in the switch.
8 dual media ports for flexible fiber connection
8-Port dual media ports are provided for flexible fiber connection. You
can select to install optional transceiver modules in these slots for
short, medium or long distance fiber backbone attachment. Use of the
SFP will disable their corresponding built-in 10/100/1000Base-T
Broadcast/Multicast/Unknown-Unicast Storm Control
To limit too many broadcast/multicast/unknown-unicast flooding in the
network, broadcast/multicast storm control is used to restrict excess
traffic. Threshold values are available to control the rate limit for each
port. Packets are discarded if the count exceeds the configured upper
Multicast VLAN Registration (MVR) can support carrier to serve
content provider using multicast for Video streaming application in the
network. Each content provider Video streaming has a dedicated
multicast VLAN. The MVR routes packets received in a multicast
source VLAN to one or more receive VLANs. Clients are in the receive
VLANs and the multicast server is in the source VLAN.
IP-MAC-Port Binding
The IP network layer uses a four-byte address. The Ethernet link layer
uses a six-byte MAC address. Binding these two address types to
gether allows the transmission of data between the layers. The primary
purpose of IP-MAC binding is to restrict the access to a switch to a
Networking & Communications
Gigabit Switch
L2 Plus Managed Switch
Gigabit Switch
number of authorized users. Only the authorized client can access the Switch's port by checking the pair of IPMAC Addresses and port number with the pre-configured database. If an unauthorized user tries to access an IP
-MAC binding enabled port, the system will block the access by dropping its packet.
Access Control List (ACL)
The ACLs are divided into EtherTypes. IPv4, ARP protocol, MAC and VLAN parameters etc. Here we will just go
over the standard and extended access lists for TCP/IP. As you create ACEs for ingress classification, you can
assign a policy for each port, the policy number is 1-8, however, each policy can be applied to any port. This makes
it very easy to determine what type of ACL policy you will be working with.
Support Two RADIUS Authentication Server
The switch supports the RADIUS authentication for secure switch port security. It provides more secure
authentication for management. The switch can assign two RADIUS server for redundant authentication server
SSL and SSH for secure Managemen(Optional by Project requirement)
Secure Sockets Layer (SSL) supports the encryption for all HTTP traffic, allowing secure access to the browserbased management GUI in the switch. And Secure Shell (SSH) which supports the encryption for all transmitted
data for secure, remote command-line interface (CLI) access over IP networks
Support Two TACACS+ for Management Authentication(Optional by Project requirement)
The switch supports the TACACS+ authentication for secure switch CLI Logon. It provides more secure
authentication for management. The switch can assign two TACACS+ server for redundant authentication server
The Syslog is a standard for logging program messages . It allows separation of the software that generates
messages from the system that stores them and the software that reports and analyzes them. It is supported by a
wide variety of devices and receivers across multiple platforms.
LLDP (IEEE 802.1AB Link Layer Discovery Protocol)
The switch supports the LLDP that automated device discovery protocol for easy mapping by network management
Power Saving
The Power saving provides detection the client idle and cable length provide the different power. It could efficient to
save the switch power and reduce the power consumption.
Technical Specifications
Standard compliance
---IEEE 802.3 10Base-T Ethernet (Twisted-pair Copper)
---IEEE 802.3u 100Base-TX Ethernet (Twisted-pair Copper)
---IEEE 802.3ab 1000Base-TX Ethernet (Twisted-pair Copper)
---IEEE 802.3z 1000Base-X Ethernet
---IEEE 802.3x Flow Control Capability
---ANSI/IEEE 802.3 Auto-negotiation
---IEEE 802.1Q VLAN
---IEEE 802.1p Class of Service
---IEEE 802.1X Access Control
---IEEE 802.1D Spanning Tree
---IEEE 802.1w Rapid Spanning Tree
---IEEE 802.1s Multiple Spanning Tree
---IEEE 802.3ad Link Aggregation Control Protocol (LACP)
---IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
RoHS Compliance
Power Saving for green ethernet Requirement
LLDP (IEEE802.1AB) automated device discovery protocol for easy mapping by network management
The Syslog allows for switch events to be sent to a central Syslog server in standard message format to
store and analyze the.
Switching capacity:
---Throughput: 35.712Mpps
---8K MAC addresses
---48Gbps Switch Capacity
---Supports Jumbo frame support, up to 9K
---Unknown Unicast/Broadcast/Multicast Storm Suppression
---Port Mirroring
Networking & Communications
Gigabit Switch
L2 Plus Managed Switch
Gigabit Switch
Subscriber Interface
---16 ports are SFP Fiber
---Port 1 to 8 are Dual Media TP/SFP Fiber auto sense
---Auto-Negotiation and Auto-MDIX
---Backpressure flow control for half duplex
---802.3x flow control for full duplex
---Connector: 16 SFP and 8 dual media, RJ-45/SFP
---Supports SVL/IVL configuration to meet your VLAN requirement
---Port-base VLAN
---IEEE802.1Q tag-base VLAN, up to 4k active VLANs
---Support the Q-in-Q (Double-tag)
---Support MVR (Multicast VLAN Registration)
VSM (Virtual Stacking Management):
---Up to 16 switches can be managed via Single IP limited to any specific Ruby Tech models.
---Virtual stacking, no extra stacking hardware is required
---Distributed stacking, no physical central wiring closet is needed
---Supports Port Based, 802.1p and Diffserv (IPv4 ) QoS packet classification
---Supports two scheduling, WRR and Strict
---Supports 802.1p QoS with four level priority queue
Bandwidth Control
---Supports bandwidth rating per port ingress and egress rate limit 500Kbps~1000Mbps with 1Kbps
Port Mirroring
---Support 1: N mirroring
---Supports port sniffer function with Ingress and Egress.
---Port trunking with 12 trunking group
---Up to 16 ports for each group.
---802.1Q with GVRP/ GARP
---Supports IGMPv3 snooping including active and passive mode
---Supports IGMP proxy including active and passive mode
Network Security
---802.1X access control for port based and MAC based authentication
---Management Access Policy Control
---Access Control List
---IP-MAC-Port binding
---DHCP snooping and DHCP option 82
---SSL/ SSH for Management (Optional by Project Requirement)
---TACACS+ for Management Authentication (Optional by Project Requirement)
Snmpv1,v2c Network Management
---Interface MIB
---Statistics Group 1
---Address Translation MIB
---History Group 2
---Alarm Group 3
---Event Group 9
RFC 1493 Bridge MIB
RFC 1643 Ethernet MIB
Enterprise MIB
*SNMP v3 (Optional by Project Requirement)
Networking & Communications
Gigabit Switch
L2 Plus Managed Switch
LED Description
System LED
10/100/1000Ethernet TP Port 1 to 8 LED
Lit when +5V DC power is on and good
Lit when connection with remote device is good
Blinks when any traffic is present
Off when cable connection is not good
Lit green when 1000Mbps speed is active
Lit ember when 100Mbps speed is active
Off when 10Mbps speed is active
Gigabit Switch
1000SX/LX Gigabit Fiber Port 1, 24 LED
Lit when connection with the remote device is good
Blinks when any traffic is present
Off when module connection is not good
Network Interface
1000Mbps SFP Fiber Module Dual Media Auto Detection
1000Mbps SFP Fiber Module
TP(RJ-45) / SFP
1 to 8
9 to 24
Hardware Spec.
Power Characteristics
Ambient Temperature
Input Voltage: 100~240V
Frequency: 50~60 Hz
Power Supply: 40W
Input Voltage: 36~72VDC (48VDC)
Max. Power Consumption: 40W
0 to 40 C
5% to 90%
44(H) x 442(W) x 209(D) mm
2.9 Kg
Comply with FCC Part 15 Class A & CE Mark Approval
Packing Information
Carton Dimensions (mm)
N.W (KG)
G.W (KG)
18.5 Kg
19.5 Kg
Ordering Information
16-Port SFP + 8-Port Combo Port GbE L2 Plus Managed Switch
16-Port SFP + 8-Port Combo Port GbE L2 Plus Managed Switch (36-72VDC)
Optional SFP Module
1000Base-SX GE SFP Fiber Module, LC Multi-Mode 850nm
1000Base-SX GE SFP Fiber Module, LC Multi-Mode 1310nm 2km
1000Base-LX GE SFP Fiber Module, LC Single-Mode 10km
1000Base-LX GE SFP Fiber Module, LC Single-Mode 30km
1000Base-LX GE SFP Fiber Module, LC Single-Mode 50km
1000Base-LX GE SFP Fiber Module, Bidi LC Single-Mode 10km, 1310nm
1000Base-LX GE SFP Fiber Module, Bidi LC Single-Mode 10km, 1550nm
1000Base-LX GE SFP Fiber Module, Bidi LC Single-Mode 20km, 1310nm
1000Base-LX GE SFP Fiber Module, Bidi LC Single-Mode 20km, 1550nm
We recommend the SFP transceiver from the following vendors:
1.Ruby Tech Corporation
2.Agilient Technologies
3.AVAGO Technologies
4.Finisar Corporation
Ruby Tech Corp.
3F, No.1, Lane 50, Nan Kang Road, Sec.3, Taipei, Taiwan
TEL:886-2-2785-3961 FAX:886-2-2786-3012
Technical information listed is subject to change without prior notice. All brand names and trademarks are property of their respective owners.
Copyright c Ruby Tech Corp. All rights reserved.
2010.11.23 - Version A
Download PDF