DrayTek VSFX2120-K VigorSwitch FX2120 12-Port Layer 2+ Managed Rackmount 10-Gigabit SFP+ Switch

The DrayTek FX2120 VigorSwitch 12-Port Layer 2+ Managed Rackmount 10-Gigabit SFP+ Switch has a plethora of management options and enterprise-level features to improve network stability and security for businesses. The SFP+ module slots are ideal for core and distribution network deployments. Use faster links to connect with business-critical appliances including NAS drives, distribution switches and servers. Designed for centralised management, the VigorSwitch FX2120 can be provisioned and monitored through both the VigorACS management platform and/or, a DrayTek Vigor router’s Central Switch Management. Easily provision the VLAN configuration through the router and clone switch configurations. Drastically reduce the setup time required for a complex network, with VLANs spanning multiple switches.

10GbE SFP+ Ports for High-Speed Uplinks
The DrayTek VigorSwitch FX2120 has 12 dedicated SFP+ ports, each operating at up to 10 Gigabits per second. The faster 10 Gigabit uplink capability allows you to make high bandwidth links to Network Attached Storage, Servers and other switches, to help reduce the risk of bottlenecks occurring within your network. The SFP+ ports provide compatibility with your choice of SFP / SFP+ modules (not included) and therefore the most appropriate medium for your application. Connect a passive Direct Attach SFP+ cable such as the DrayTek DAC-CX10-01M (sold separately) to the SFP+ module port of 1Gbps/10Gbps capable Network Attached Storage, Servers and Switches, for a cost-effective, up to 10Gbps network link.

Advanced Layer 2+ Routing Features
The VigorSwitch FX2120 adds the Layer 3 features VLAN Routing, DHCP Server and Static Route, which allow the switch to provide routing between VLANs at full speed. The switch’s Access Control List gives full control of what traffic routes between those networks.

VLAN Routing
A DrayTek VigorSwitch normally provides connectivity for multiple network segments with 802.1Q VLAN tags, which separate networks at Layer 2 (MAC level), relying on the router to connect different networks. VLAN Routing in the switch allows for Layer 3 (IP level) routing, to connect and route between different IP subnets with wire speed routing performance.

Static Route
Routing beyond the VigorSwitch FX2120, to the Internet and across VPNs is possible with Static Routes, using the switch to direct traffic to remote subnets through the correct gateway. Up to 512 static routes can be configured on the switch.

DHCP Server with Bind IP to MAC
The DrayTek VigorSwitch FX2120 has an integrated DHCP server to provide IP addressing to as many as 8 subnets on the switch, directly or with another server through DHCP Relay. Each DHCP Pool can have as many as 1023 IP addresses, potentially serving addresses to 8000 devices, allowing for expansive networks and taking load off of the router. With Bind IP to MAC, IP addresses can be easily reserved for individual devices such as servers, IP phones, cameras and more.

Rack Mountable & Silent
Install the VigorSwitch on a desk, shelf or wall, or use the included rack mount fittings to install the switch in any standard 19″ rack with 1U height. Ideal for installation in quiet office environments, the VigorSwitch FX2120 runs quietly, cooling with a hardware-monitored fan.

Central Management
The DrayTek VigorSwitch FX2120 can operate in standalone mode and be managed through its web interface or, if you need to manage and monitor the switch remotely, or have several DrayTek VigorSwitches to administer, you can centrally manage and monitor them either with:

Router – Switch Management
Manage VigorSwitches connected to a router and determine network topology at a glance.

DrayTek VigorACS
Manage and Provision DrayTek VigorSwitches on any network, from anywhere.

DrayTek VigorConnect
Manage and Provision VigorSwitches and VigorAPs on a single site.

Managing a VigorSwitch through VigorACS
DrayTek’s VigorACS central management system provides a centralised way to manage and view the status of any DrayTek Vigor router, VigorAP access point and VigorSwitch connected to the VigorACS server. DrayTek VigorSwitch switches that support TR-069 management can be managed through DrayTek VigorACS 3 in the same way that a DrayTek Vigor router or VigorAP access point would be managed. Through VigorACS, you can view and manage; a single VigorSwitch, all switches on a site or all switches across an entire network spanning multiple sites in one place. DrayTek VigorSwitches connected to VigorACS connect directly to the VigorACS server to be managed, the router or network that they are connected to needs no additional configuration beyond the VigorSwitch having access to the Internet (or if your VigorACS server is located across a private WAN / VPN connection, access to that network).

Dashboard View
Dashboard view displays an overview of the VigorSwitch FX2120’s port usage and port states.

Switch Configuration
View the configuration of a VigorSwitch and make changes to the configuration through VigorACS, then copy the settings from that switch to apply them to multiple VigorSwitch switches.

Central Switch Management with a DrayTek Vigor Router
DrayTek Vigor router Central Switch Management provisions and monitors VigorSwitch switches through a DrayTek Vigor router, with profiles that can be applied to multiple switches and VLAN configuration all handled within the router. Central Switch Management requires firmware support on both the VigorSwitch and the DrayTek Vigor router. This can simplify the setup of multiple subnets and VLANs, without needing in-depth knowledge of VLAN tagging and reduces setup time, with the time-consuming step of configuring VLANs for each port handled by the router instead.

Switch Hierarchy
The Switch Hierarchy view provides a visual overview of interconnections between DrayTek VigorSwitch switches with the devices connected to each LAN port.

Switch Management Profiles
Switch Management profiles can be used to configure schedules to enable or disable ports (including PoE) and set bandwidth limits for the ports. Descriptive names can be configured on the router which can be seen from the Switch Hierarchy view. VLAN configuration of a VigorSwitch can be provisioned from the DrayTek Vigor router, with the router automatically configuring the Uplink port and being aware of the VLAN tags that the Vigor router and the connected LAN port have available.

ONVIF IP Camera Management
The VigorSwitch FX2120 can discover, manage and configure ONVIF (Open Network Video Interface Forum) compatible IP cameras and NVR systems, allowing for easy discovery, management and troubleshooting of your connected IP cameras.

Device Management
Use the VigorSwitch to configure and manage your IP camera network; configure network & security settings, restart cameras and have the switch monitor whether cameras are responding, alerting of any issues.

Network Surveillance Topology
Simply connect ONVIF capable devices to the VigorSwitch FX2120, Discover devices and the VigorSwitch determines the network topology of connected cameras & NVR systems.

View IP Camera Output
Through the VigorSwitch web interface, you can view the video feed of connected IP cameras.

Camera Offline Alerts with Snapshot
The VigorSwitch FX2120 can store a recent snapshot of each connected IP Camera that’s ONVIF compliant. If a camera goes offline, the VigorSwitch sends out an Email alert with the last-seen snapshot from the camera that’s stopped responding, allowing you to locate the affected camera easily and troubleshoot any problems it may have, such as a disconnected cable or faulty camera.

IP Conflict Detection & Prevention
Conflict Detection
The VigorSwitch can detect and notify an administrator when an IP conflict is detected on the network. Easily track down conflicts and take action to resolve them.

Conflict Prevention
Use DrayTek’s IP Conflict Prevention to allow the switch to automatically protect against IP conflicts and ARP spoofing. IP Conflict Prevention catalogues the current network layout, giving you the option to fix the IP address and MAC information for important network devices, such as Servers and Routers. If another device attempts to use an IP address that’s in use, the VigorSwitch blocks the misconfigured or malicious device, communicating only with the known and correct device.

Quality of Service & Bandwidth Control
Prioritise latency-sensitive applications on your network with Quality of Service (802.1p and DSCP) support. Auto Voice VLAN allows the switch to automatically assign VoIP devices to a separate VLAN and prioritise their traffic. Control throughput per-port with Rate Limiting and application-specific Traffic Shaping.

Network Security and Management Features
Stay in control of what’s connected to your network with Port Security and 802.1X & MAC authentication, to prevent connection of unauthorised equipment. Protect against network issues arising from the connection of unwanted devices with DHCP Snooping and IP Source Guard. Control port access for every port on your network with the VigorSwitch Access Control List – to specifically allow or deny specified traffic types moving between ports, just like a Firewall.

Access Control List
Similar to a firewall,the ACL can control which packet types (IPv4, IPv6 & MAC) are allowed to pass between ports on the switch.

AAA – 802.1X Authentication
Control access to LAN ports through a RADIUS server, which could be provided by the Vigor 2862 router on site (sold separately). Authenticate and authorise network access via 802.1X, MAC address or web authentication. Track data and time usage of each user authenticated with RADIUS Accounting.

Management Authentication via RADIUS, TACACS+ or local accounts
Control logins to the switch management with the switch’s internal user accounts or through a central RADIUS / TACACS+ server.

IGMP Snooping & Querying
Manage and control multicast IGMP traffic passing through the switch, with IGMP Snooping & Querying. With IGMP Snooping, the switch tracks IGMP traffic passing through its ports. Allowing it to limit the broadcast of multicast/IGMP packets to only the ports that have subscribed, improving overall network performance and avoiding excess network traffic. The VigorSwitch’s IGMP Querier allows it to manage IGMP subscriptions on its network ports, checking which ports are members of which multicast group, if the network’s router does not support multicast.

IPv6 Ready
The VigorSwitch FX2120 has extensive IPv6 support, with IPv6 ACL, MLD Snooping and IPv6 DNS Resolution. Filter IPv6 packets with the Access Control List (ACL) alongside IPv4 traffic. Use IPv6 MLD Snooping to control and more efficiently manage Multicast packets in the same way that IGMP Snooping would for IPv4 Multicast packets.

DHCP Snooping
Limit DHCP server responses to only a specified port to stop unauthorised devices from affecting network connectivity.

IP Source Guard
Protects against address spoofing by comparing packets received with either statically configured source IP addresses or addresses learned from DHCP snooping.

Link Aggregation – Port Trunking
Use two or more network links to connect the VigorSwitch FX2120 and another switch / server. Traffic can be shared between the two ports, effectively doubling the bandwidth of the uplink and providing resilience should one of the links fail. Up to 8 ports can be added to a single Link Aggregation Group, with up to 8 LAGs. Interoperability with other types and manufacturer’s equipment is handled by the Link Aggregation Control Protocol (LACP).