| RG-CS88 Series |
| Feature |
Description |
| Ethernet Switching |
Jumbo frame (maximum length: 9216 bytes) |
| 802.3az EEE |
| Maximum number of VLANs that can be created: 4,094 |
| Super VLAN, Private VLAN |
| MAC address-based, port-based, protocol-based, and IP subnet-based VLAN assignment |
| GVRP |
| Basic QinQ and selective QinQ |
| STP (IEEE 802.1.d), RSTP (IEEE 802.1w), and MSTP (IEEE 802.1s) |
| ERPS (G.8032) |
| LLDP/LLDP-MED |
| MPLS |
MPLS IPv6 |
| MPLS L3VPN |
| MPLS 6VPE |
| MPLS MIB (RFC 1273, RFC 4265, and RFC 4382) |
| IP Service |
Static and dynamic ARP |
| DHCP client |
| DHCP relay |
| DHCP server |
| DHCP snooping |
| DNS |
| DHCPv6 client, DHCPv6 relay, and DHCPv6 snooping |
| GRE tunnel |
| Manual tunnel, automatic tunnel, and ISATAP tunnel for IPv6 |
| Neighbor Discovery (ND) and ND snooping |
| IP Routing |
Static routing |
| RIP and RIPng |
| OSPFv2 and OSPFv3 |
| IPv4/IPv6 IS-IS |
| BGP4 and BGP4+ |
| IPv4/IPv6 VRF |
| Policy-based routing (PBR) |
| GR |
| EVPN |
| Multicast |
IGMP v1/v2/v3 |
| IGMP proxy |
| IGMP snooping v1/v2/v3 |
| IGMP fast leave |
| PIM-DM, PIM-SM, and PIM-SSM |
| PIM-SSM for IPv4 and IPv6 |
| MSDP to achieve inter-domain multicast |
| MLDv1 and MLDv2 |
| MLD v1/v2 snooping |
| Multicast static routing |
| Multicast source IP address check Multicast source port check |
| PIM-SMv6 |
| ACL and QoS |
Standard IP ACLs (hardware ACLs based on IP addresses) |
| Extended IP ACLs (hardware ACLs based on IP addresses or TCP/UDP port numbers) |
| Extended MAC ACLs (hardware ACLs based on source MAC addresses, destination MAC addresses, and optional Ethernet type) |
| Expert-level ACLs (hardware ACLs based on flexible combinations of the VLAN ID, Ethernet type, MAC address, IP address, TCP/UDP port number, protocol type, and time range) |
| ACL80 and IPv6 ACL |
| Applying ACLs globally (hardware ACLs based on flexible combinations of the VLAN ID, Ethernet type, MAC address, IP address, TCP/UDP port number, protocol type, and time range) |
| ACL redirection |
| Port traffic identification |
| Port traffic rate limiting |
| 802.1p |
| Traffic classification based on 802.1p priorities, DSCP priorities, and IP precedences |
| Congestion management: SP, WRR, DRR, WFQ, SP+WRR, SP+DRR, and SP+WFQ |
| Congestion avoidance: tail drop, RED, and WRED |
| CAR |
| Eight priority queues per port |
| Security |
AAA |
| RADIUS authorization and accounting |
| TACACS+ |
| Portal authentication, RADIUS, and TACACS+ login authentication |
| IEEE802.1X authentication, MAC address bypass (MAB) authentication, and interface-based and MAC address-based 802.1X authentication |
| Web authentication |
| Hypertext Transfer Protocol Secure (HTTPS) |
| SSHv1 and SSHv2 |
| Global IP-MAC binding |
| ICMP |
| Port security |
| IP source guard |
| DAI |
| SAVI |
| ARP spoofing prevention |
| CPU Protect Policy (CPP) and NFPP |
| Various attack defense functions, including NFPP and ARP anti-attack |
| uRPF |
| Login authentication and password security |
| Unknown multicast packets are not sent to the CPU, and unknown unicast packets can be suppressed. |
| Reliability |
Rapid Ethernet Uplink Protection (REUP) |
| Rapid Link Detection Protocol (RLDP), Layer 2 link connectivity detection, unidirectional link detection, and VLAN-based loop control |
| Data Link Detection Protocol (DLDP) |
| IPv4 VRRP v2/v3 and IPv6 VRRP |
| VRRP for the super-VLAN |
| BFD |
| 1+1 redundancy for supervisor modules and fan modules, and N+M redundancy for power modules |
| Hot swapping of components |
| Hot patch and online installation of patches |
| GR for OSPF/IS-IS/BGP |
| BFD for VRRP/OSPF/BGP4/ISIS/ISISv6/static routing |
| Device virtualization |
VSU |
| NMS and maintenance |
SPAN, RSPAN, and ERSPAN |
| sFLOW |
| NTP |
| SNTP |
| FTP and TFTP |
| SNMP v1/v2/v3 |
| RMON (1, 2, 3, 9) |
| NETCONF |
| CWMP |
| gRPC |
| Cloud and SON |
| Console/AUX Modem/Telnet/SSH2.0 CLI configuration |
| Fault alarm and auto-recovery |
| System operation logging |