Product Description:

The NETGEAR Intelligent Edge M4100 series consists of 9 fully managed switches, ranging from 12-port to 50-port Fast and Gigabit Ethernet. They are ideal for all organizations considering reliable, affordable and simple access layer switching with CLI, advanced scripting capabilities and Layer 3 routing. As a cost-effective component of converged voice, video and data networking solutions, NETGEAR M4100 series delivers a secure edge in commercial buildings and campus LAN environments: PoE (802.3af) and PoE+ (802.3at) versions of M4100 series are perfect for Wireless access points, IP telephony and IP surveillance deployments.

Product Details:

Layer 2+ with static routing
M4100 series comes with Port-based / VLAN-based / Subnet-based "static routing" Layer 2+ versions
L3 fixed routes to the next hop towards the destination network are added to the routing table.
L3 routing is wire-speed in M4100 series hardware with 64 static routes (IPv4)

Engineered for convergence
Automatic multi-vendor Voice over IP prioritization based on SIP, H323 and SCCP protocol
Voice VLAN and LLDP-MED for automatic IP phones QoS and VLAN configuration
Advanced classifier-based hardware for L2, L3, L4 security and prioritization
Advanced Multicast filtering with IGMP and MLD snooping and querier modes

High-value performance and IPv6 ready
16K MAC addresses; up to 100Gbps switching fabric; 9K jumbo frames; Green Ethernet
IPv4/IPv6 ingress traffic filtering (ACLs) and prioritization (QoS - DiffServ)

High availability and PoE/PoE+ full power capability
Redundant power supply option for uninterruptible operation (RPS)
External power supply option for PoE and PoE+ full power applications (EPS up to 1,440W)

Industry Standard Management
Industry standard command line interface (CLI)
Fully functional NETGEAR web interface (GUI)

NETGEAR M4100 Series
As a cost-effective component of converged voice, video and data networking solutions, NETGEAR M4100 series offers ideal, advanced features for a secure edge in commercial buildings and campus LAN environments.

High availability and PoE/PoE+ full power capability
Industry standard management
Industry leading warranty
Layer 2+ with static routing
Engineered for convergence
High-value performance and IPv6 ready

Performance
Layer 3 hardware with L2+ software affordability
Built upon L3 hardware platform while Layer 2+ software package allows for better budget optimization
Uses latest generation silicon low-power 40-nanometer technology
L2 and L3 switching features (access control list, classification, filtering, IPv4 routing) are performed in hardware at interface line rate for voice, video, and data convergence
Layer 2+ software package provides straight forward IP static routing capabilities for physical interfaces, VLANs and subnets
16K MAC address table, 1K concurrent VLANs and 64 static routes for SMB and small enterprise access layers
Increased packet buffering with up to 12 Mb dynamically shared accross all interfaces for most intensive applications
Low latency at all network speeds
Jumbo frames support of up to 9Kb accelerating storage performance for backup and cloud applications

Connectivity
IEEE 802.3af Power over Ethernet (PoE) provides up to 15.4W per port
IEEE 802.3at Power over Ethernet Plus (PoE+) provides up to 30W per port
Desktop versions can be powered by upstream PoE+ switch
M4100-D12G-POE+ can even redistribute PoE power from the upstream PoE+ switch to VoIP phones or other devices in meeting rooms, retail sales floors or other challenging environments without outlet
Both IEEE 802.3at Layer 2 LLDP method and 802.3at 2-event classification methods are supported for compatibility with all PoE+ PD devices
Automatic MDIX and Auto-negotiation on all ports select the right transmission modes (half or full duplex) as well as data transmission for crossover or straight-through cables dynamically for the admin
100Mbps backward compatiblity on all SFP ports
IPv6 support with multicasting (MLD for IPv6 filtering), ACLs and QoS

Ease of Use
Fully functional Web console (GUI) for IT admins who prefer an easy to use graphical interface
Placement outside the wiring closet (conference rooms, offices, class rooms, sales floor in retail stores, etc)
For secure deployment in open areas , desktop versions come with a Wall Mount Kit with four brackets
Select desktop versions also come with a set of strong magnets for mounting on any metal surface
Automatic configuration with DHCP and BootP Auto Install
Both the Switch Serial Number and Switch primary MAC address are reported by a simple "show" command in the CLI
Automatic Voice over IP prioritization with Auto-VoIP
An associated Voice VLAN can be easily configured with Auto-VoIP for further traffic isolation
When deployed IP phones are LLDP-MED compliant, the Voice VLAN will use LLDP-MED to pass on the VLAN ID, 802.1P priority and DSCP values to the IP phones, accelerating convergent deployments
DHCP/BootP innovative auto-installation including firmware and configuration file upload automation
Dual firmware image and configuration file for updates with minimum service interruption

Security
Traffic control MAC Filter and Port Security
DHCP Snooping monitors DHCP traffic between DHCP clients and DHCP servers to filter harmful DHCP message and prevent DHCP spoofing attacks
IP source guard and Dynamic ARP Inspection for malicious users traffic elimination
Layer 2 / Layer 3-v4 / Layer 3-v6 / Layer 4 Access Control Lists (ACLs) can be binded to ports, Layer 2 interfaces, VLANs and LAGs (Link Aggregation Groups or Port channel) for fast unauthorized data prevention and right granularity
Bridge protocol data unit (BPDU) Guard allows the network administrator to enforce the Spanning Tree (STP) domain borders and keep the active topology consistent and predictable - unauthorized devices or switches behind the edge ports that have BPDU enabled will not be able to influence the overall STP topology by creating loops
Spanning Tree Root Guard (STRG) enforces the Layer 2 network topology by preventing rogue root bridges potential issues when for instance, unauthorized or unexpected new equipment in the network may accidentally become a root bridge for a given VLAN
Dynamic 802.1x VLAN assignment mode, including Dynamic VLAN creation mode and Guest VLAN / Unauthenticated VLAN are supported for rigorous user and equipment RADIUS policy server enforcement
802.1x MAC Address Authentication Bypass (MAB)
Double VLANs (DVLAN - QinQ) pass traffic from one customer domain to another through the "metro core" in a multi-tenancy environment
Private VLANs (with Primary VLAN, Isolated VLAN, Community VLAN, Promiscuous port, Host port, Trunks) provide Layer 2 isolation between ports that share the same broadcast domain
Secure Shell (SSH) and SNMPv3 (with or without MD5 or SHA authentication) ensure SNMP and Telnet sessions are secured
TACACS+ and RADIUS enhanced administrator management provides strict "Login" and "Enable" authentication enforcement for the switch configuration and authentication based on user domain in addition to user ID and password