
Agile L2 Access Switch Solution for
Converged Data, Video and Voice Networking
• Fully managed Layer 2 switching
solution
• GbE RJ-45, GbE combo (RJ-45/SFP)
and xed GbE SFP connectivity
• Complies with IEEE 802.3af PoE
and 802.3at PoE Plus
• High 375 W power budget
• L2 multicast, IGMP snooping, and
MVR for convergence
• Enhanced network protection
with IP source guard, DHCP
snooping, ARP inspection, CPU
protection
• L2, L3 and L4 ltering, MAC freeze,
port isolation, guest VLAN for
improved isolation and access
control
• Future-proofed with IPv6 support
Incorporating data, video and voice communications into a single IP network provides more
eective communications, centralized IT management, and lower overall deployment cost for the
entire organization. This is why an increasing amount of businesses, educational institutions, and
hotels are adopting such IP-based services as VoIP, video conferencing, IP surveillance, and IPTV.
Yet such converged deployments pose many challenges to the IP network. IT sta need to ensure
consistent performance for critical applications, provide sucient isolation and network security,
and shape network trac to meet the demands of diverse deployments.
The ZyXEL GS2210 Series are fully featured Layer 2 Gigabit access switches designed to meet
these converged data, video and voice networking challenges. The 48-port models have a exible
port conguration of forty-four (44) GbE RJ-45 ports, two (2) GbE SFP ports, and four (4) GbE
combo (RJ-45/SFP) ports. The PoE models comply with the IEEE 802.3af PoE and 802.3at PoE Plus
standards and provide a high PoE power budget of 375 watts. The complete GS2210 Series has a
rich Layer 2 feature set with advanced trac shaping, network isolation, and security features—
making it the perfect L2 access switch solution for converged data, video and voice networking.
Benets
Agile trac control for converged networking applications
Designed for access layer converged data, video and voice applications, the ZyXEL GS2210 Series
has a rich Layer 2 feature set that can shape the trac for diverse VoIP, video conference, IPTV and
IP surveillance deployments. Supporting L2 multicast and IGMP snooping, the GS2210 Series can
support large IPTV deployments, while using bandwidth eciently by directing multicast trac to
the subscribers only. The Multicast VLAN Registration (MVR) function ensures better network security
by allowing a single multicast VLAN to be shared in the network while subscribers remain in separate
VLANs. These advanced trac control features of the GS2210 Series provide hotels, businesses and
educational institutions greater agility and more eective trac management for the converged
applications of today.
GS2210 Series
48-port GbE L2 Switch
Intelligent and high-powered Power over Ethernet (PoE)
The ZyXEL GS2210 Series PoE switches feature advanced and intelligent PoE functions that simplify and
lower the cost of PoE deployments such as IP telephony, WLAN and IP surveillance. This Series of L2 PoE
switches support the IEEE 802.3af PoE and 802.3at PoE Plus standards, which provide up to 30 watts of
power per port for advanced Powered Devices (PD) like 802.11ac wireless APs and video IP phones. The
high power budget of 375 watts enables the GS2210 PoE switches to comfortably accommodate the PDs
required in a modern network edge.

GS2210 Series
48-port GbE L2 Switch
Model List
GS2210-48
48-port GbE L2 Switch
• 44 x GbE RJ-45 ports
• 2 x GbE SFP ports
• 4 x GbE combo (RJ-45/SFP) ports
GS2210-48HP
48-port GbE L2 PoE Switch
• 44 x GbE PoE RJ-45 ports
• 2 x GbE SFP ports
• 4 x GbE combo (RJ-45/SFP) ports
The intelligent PoE technology used in the GS2210 PoE switches enables more ecient use of power
resources that delivers better ROI for businesses. Setting the PoE switch to Consumption Mode, it
can automatically detect the power consumption status of each Powered Device and supply only
the amount of power required. This intelligent power allocation function minimizes the waste of
unused power, helps businesses save money, and enables the PoE switch to power more PDs.
High level network and access security
Equipped with an extensive array of access security, trac security and network storm protection
features, the ZyXEL GS2210 Series oers enhanced control and isolation for improved convergence
of video, voice and data. Such advanced defense mechanisms as IP source guard, DHCP snooping,
and ARP inspection can detect and block intentional network attacks. The CPU protection function
ensures normal switch operation by preventing malicious trac from trying to shut down the
switch. Combining multiple L2, L3 and L4 ltering mechanisms with such education- and hospitality-
friendly features as MAC freeze, port isolation and guest VLAN, the ZyXEL GS2210 Series oers a high
level of security, exibility and control for diverse access layer deployments.
Future-proof connectivity for evolving networks
The ZyXEL GS2210 Series helps businesses and organizations stay ahead and get ready for future
IPv6 networks. It supports dual stack (IPv4 and IPv6) and IPv6 host that allows businesses and
organizations to deploy the GS2210 switch at the network edge today, and easily migrate to the
next-generation Internet Protocol in the future. With support for IPv6 ACL packet ltering, the
GS2210 L2 Gigabit switch can create secured IPv6 networks that are protected from illegal IPv6
clients. The GS2210 Series is designed with a comprehensive set of IPv6 management features that
include ICMPv6, neighbor discovery and DHCPv6 relay, which facilitate the migration to next-
generation networking applications without an extensive equipment upgrade.
Key Applications
IPTV deployment (hospitality)
• Each guest room can be assigned a dedicated
data VLAN to provide better isolation and
security to the Internet users
• The MVR function allows a single IPTV multicast
VLAN to be shared with all the set-top boxes
while the subscribers remain in separate data
VLANs
• Enabling the IGMP snooping function allows
IPTV trac to be directed to the subscribers
only, which reduces the waste of bandwidth
caused by multicasting IPTV trac to all ports
• The rich QoS feature set provides eective
bandwidth prioritization and control to ensure
optimal IPTV quality and prevent bandwidth
abuse from P2P applications
Ch 1
Set-top Box 1
Multicast VLAN
Guest Room 1
Data VLAN 1
Unied Security Gateway
24-port GbE L2+ Switch
48-port GbE L2 Switch
USG1000
XGS3700-24
with 10GbE Uplink
GS2210-48
Set-top Box 2
Multicast VLAN
Guest Room 2
Data VLAN 2
Ch 5
Set-top Box 3
Multicast VLAN
Guest Room 3
Data VLAN 3
Internet
IPTV Server
Multicast
VLAN
Server Room
Ch 1
Set-top Box 4
Multicast VLAN
Guest Room 4
Data VLAN 4
10GbE Fiber
Gigabit
2

PoE deployment (hospitality)
• The PoE models have a high power budget of
375 W for large PoE deployments with multiple
APs and IP cameras
• With IEEE 802.3at PoE Plus compliance, the
PoE models can supply up to 30 W per port to
power high power consuming PDs like video IP
phones and 802.11ac APs
• In Consumption Mode, the PoE switch
automatically detects the power consumption
status of each PD and supplies only the amount
of power required to provide more ecient
power usage
• With MVR and IGMP snooping, the GS2210
Series switch can separate surveillance trac
from data trac, and direct surveillance
footage to the NVR and/or selected monitors
with high exibility
GS2210 Series
48-port GbE L2 Switch
USG1000
Unied Security
Gateway
24-port GbE L2+ Switch
48-port GbE L2 PoE Switch
GS3700-24
GS2210-48HP
IP Camera 1
Multicast VLAN
NWA5123-NI
802.11 a/b/g/n
Dual-Radio Unified
Access Point
Internet
NVR
NXC5200
Multicast
Wireless LAN
VLAN
Controller
Monitoring and Control Center
Guest Rooms
IP
Camera 4
Monitor 1
Multicast
VLAN
NWA5301-NJ
802.11 b/g/n Wall-Plate
Unified Access Point
Camera 1
Monitor 2
Multicast
VLAN
IP
Robust network infrastructure (education)
• The high power budget (375 W) and high port
density make the GS2210-48HP perfect for
classroom WLAN deployments with many APs
for student digital textbooks
• The GS2210 Series switch can separate the
teacher’s network from the student’s network
and grant dierent bandwidth privileges
with port-based and ACL-based bandwidth
management
• Support for 8 hardware queues per port and
QoS based on 802.1p and DSCP reduces trac
congestions for latency-sensitive interactive
learning applications
• Advanced defense mechanisms like IP source
guard, DHCP snooping and ARP inspection
safeguards the network from intentional
attacks
NWA5123-NI
802.11 a/b/g/n
Dual-Radio Unified
Access Point
Lobby Meeting Room
USG1000
Unied Security
Gateway
24-port GbE L2+ Switch
48-port GbE L2 PoE Switch
GS3700-24
GS2210-48HP
NWA5123-NI
802.11 a/b/g/n
Dual-Radio Unified
Access Point
ES3500-8PD
8-port FE L2 Switch
Video IP Phone
NWA5123-NI
802.11 a/b/g/n
Dual-Radio Unified
Access Point
IP
Camera 2
IP
Camera 3
Hallways
Multicast VLAN
Internet
Server Room
NWA5123-NI
802.11 a/b/g/n Dual-Radio
Unified Access Point
IP
Camera 4
NXC5200
Wireless LAN
Controller
Servers
IP
Camera 5
Interactive
Whiteboards
IP
Camera 6
Gigabit
Gigabit PoE
Computers
Oce
Teacher Network
Computers
Computer Room
Student Network
3
Printer
Digital Textbooks
SSID 1: Teacher Network; SSID 2: Student Network
Classrooms
Gigabit
Gigabit PoE

GS2210 Series
48-port GbE L2 Switch
Specications
Model GS2210-48 GS2210-48HP
48-port GbE L2 Switch 48-port GbE L2 PoE Switch
Product name
Switch class Layer 2 Layer 2
Port Density
Total port count 50 50
100/1000 Mbps 44 -
100/1000 Mbps PoE - 44
Gigabit SFP 2 2
Gigabit combo (SFP/RJ-45) 4 4
Performance
Switching capacity (Gbps) 100 100
Forwarding rate (Mpps) 74 74
Packet buffer (byte) 1.5 M 1.5 M
MAC address table 16 K 16 K
Power
Input 100 - 240 V AC, 50/60 Hz 100 - 240 V AC, 50/60 Hz
Max. power consumption (watt) 40 461
Total PoE power budget (watt) - 375
Physical Specifications
Dimensions (WxDxH)(mm/in.) 440 x 200 x 44.5/17.32 x 7.87 x 1.75 440 x 330 x 44.5/17.32 x 12.99 x 1.75
Weight (kg/lb.) 3.04/6.7 5.13/11.3
Environmental Specifications
Operating
Storage
MTBF (hr) 255,579.8 120,760.8
Heat dissipation (BTU/hr) 136.40 1,572.01
Temperature 0°C to 50°C/32°F to 122°F 0°C to 50°C/32°F to 122°F
Humidity 10% to 95% (non-condensing) 10% to 95% (non-condensing)
Temperature -40°C to 70°C/-40°F to 158°F -40°C to 70°C/-40°F to 158°F
Humidity 10% to 90% (non-condensing) 10% to 90% (non-condensing)
4

Features
GS2210 Series
48-port GbE L2 Switch
Standard Compliance
• IEEE 802.3 10BASE-T Ethernet
• IEEE 802.3u 100BASE-TX Ethernet
• IEEE 802.3ab 1000BASE-T Ethernet
• IEEE 802.3z 1000BASE-X
• IEEE 802.3af PoE
• IEEE 802.3at PoE plus
• IEEE 802.3az EEE
• IEEE 802.3x ow control
• IEEE 802.3ad LACP aggregation
• IEEE 802.1AB LLDP/LLDP-MED
• IEEE 802.1D Spanning Tree Protocol (STP)
• IEEE 802.1w Rapid Spanning Tree Protocol
(RSTP)
• IEEE 802.1s Multiple Spanning Tree Protocol
(MSTP)
• IEEE 802.1Q VLAN tagging
• IEEE 802.1p Class of Service (CoS)
prioritization
• IEEE 802.1X port authentication
Resilience and Availability
• IEEE 802.1D Spanning Tree Protocol (STP)
• IEEE 802.1w Rapid Spanning Tree Protocol
(RSTP)
• IEEE 802.1s Multiple Spanning Tree Protocol
(MSTP)
• IEEE 802.3ad LACP (Max # Trunks/Links per
Trunk): 8/8
• Virtual Router Redundancy Protocol (VRRP)
• Loop guard
• ErrDisable recovery
• MRSTP (ZyXEL Proprietary)
• Dual conguration les
• Dual images
Trac Control
• 802.1Q static VLANs/dynamic VLANs: 1 K/4 K
• Port-based VLAN
• Protocol-based VLAN
• IP subnet-based VLAN
• VLAN ingress ltering
• LACP algorithm of source/destination IP
• GVRP
• L2PT
Security
• 802.1X
• Port security
• Layer 2 MAC ltering
• Layer 3 IP ltering
• Layer 4 TCP/UDP socket ltering
• BPDU transparency
• Static MAC forwarding
• Multiple RADIUS servers
• Multiple TACACS+ servers
• 802.1x VLAN and 802.1p assignment by
RADIUS
• Login authentication by RADIUS
• Login authentication by TACACS+
• TACACS+ accounting
• Authorization on RADIUS
• Authorization on TACACS+
• SSH v1/v2
• SSL
• Intrusion lock
• MAC freeze
• DHCP snooping
• ARP inspection
• Static IP-MAC-Port binding
• Policy-based security ltering
• Port isolation
• IP source guard
• Limit number of MAC per VLAN
• MAC search
• Guest VLAN
• ACL packet ltering (IPv4/IPv6)
• CPU protection
• Interface related trap enable/disable (by port)
Quality of Service (QoS)
• No. of hardware queues per port: 8
• 802.1p queuing method: SPQ, WRR, WFQ
• Storm control: Broadcast, multicast, unknown
unicast (DLF)
• Port-based rate limiting (ingress/egress):
64/64 Kbps
• Rate limiting per IP/TCP/UDP per port
• Policy-based rate limiting
• Policy-based bandwidth control granularity
• 802.3x ow control
• 802.1p Class of Service (SPQ, WFQ, SPQ/WFQ
combination capable)
• DiServ (DSCP)
Layer 2 Multicast
• L2 multicast
• IGMP snooping (v1, v2, v3)
• IGMP snooping fast leave
• Congurable IGMP snooping timer and
priority
• IGMP snooping statistics
• IGMP throttling
• MVR support
• IGMP ltering
• IGMP snooping immediate leave
• IGMP proxy mode & snooping mode selection
Manageability
• SNMP v1, v2c, v3
• SNMP trap group
• RMON (1, 2, 3, 9)
• ICMP echo/echo reply
• Syslog
• IEEE 802.1AB LLDP
• IEEE 802.1AB LLDP-MED
IPv6 Management
• IPv6 over Ethernet (RFC 2464)
• IPv6 addressing architecture (RFC 4291)
• Dual stack (RFC 4213)
• ICMPv6 (RFC 4443)
• Path MTU (RFC 1981)
• Minimum path MTU size of 1280 (RFC 5095)
• Encapsulation for maximum PMTU of 1500
• Neighbor discovery (RFC 4861)
• DHCPv6 relay
Device Management
• ZyXEL iStacking
• Web interface
• Management through Console, Telnet, SNMP
• Firmware upgrade by FTP
• Remote rmware upgrade by FTP/Web
• Conguration saving and retrieving
• Multiple logins supported
• Congure clone
• Multilevel CLI
• CLI (Cisco-like)
• DHCP relay per VLAN
• DHCP client
• DHCP option 82
• DHCP option 82 prole
• Daylight saving
• NTP
• Port mirroring
• RS-232 out-of-band console port
TM
5

GS2210 Series
48-port GbE L2 Switch
MIB
• ZyXEL new private MIB
• RFC 1066 TCP/IP-based MIB
• RFC 1213, 1157 SNMPv2c/v3 MIB
• RFC 1493 bridge MIB
• RFC 1643 Ethernet MIB
• RFC 1757 RMON group 1, 2, 3, 9
• RFC 2011, 2012, 2013 SNMPv2 MIB
• RFC 2233 SMIv2 MIB
• RFC 2358 Ethernet-like MIB
• RFC 2674 bridge MIB extension
• RFC 2819, 2925 remote management MIB
• RFC 3621 power Ethernet MIB
• RFC 4022 management information base for
transmission control protocol
• RFC 4113 management information base for
user datagram protocol
• RFC 4292 IP forwarding table MIB
• RFC 4293 Management Information Base
(MIB) for IP
Accessories
Certications
Safety
• LVD
• BSMI
EMC
• FCC Part 15 (Class A)
• CE EMC (Class A)
• BSMI ENC
RoHS
• Level A
Transceivers (Optional)
Model Speed Connector Wavelength Max. Distance DDMI
SFP-1000T Gigabit RJ-45 - 100 m (109 yd) -
SFP-BX1310-10-D Gigabit LC
SFP-BX1490-10-D Gigabit LC
SFP-LHX1310-40-D Gigabit LC 1310 nm 40 km (43744 yd) Yes
SFP-LX-10-D Gigabit LC 1310 nm 10 km (10936 yd) Yes
SFP-SX-D Gigabit LC 850 nm 550 m (601 yd) Yes
SFP-ZX-80-D Gigabit LC 1550 nm 80 km (87488 yd) Yes
SFP-100BX1310-20-D Fast Ethernet LC
SFP-100BX1550-20-D Fast Ethernet LC
SFP-100FX-2 Fast Ethernet LC 1310 nm 2 km (2187 yd) -
SFP-100LX-20 Fast Ethernet LC 1310 nm 20 km (21872 yd) -
1310 nm (Tx)
1490 nm (Rx)
1490 nm (Tx)
1310 nm (Rx)
1310 nm (Tx)
1550 nm (Rx)
1550 nm (Tx)
1310 nm (Rx)
10 km (10936 yd) Yes
10 km (10936 yd) Yes
20 km (21872 yd) Yes
20 km (21872 yd) Yes
F o r m or e p r od uc t i nf or ma ti o n , v is i t u s o n t h e w e b a t w w w. Z y X E L . co m
Copyright © 2013 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logoare registered trademarks
of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of
their respective owners. All specications are subject to change without notice.
5-100-01013018 12/13