With hardware-based IP routing engine and the sophisticated multilayer operating software, the ES-4024A delivers high performance dynamic IP routing, like OSPF,RIP. In addition to dynamic IP unicast or multicast, the ES-4024A supports Distance Vector Multicast Routing Protocol (DVMRP) and Internet Group Management Protocol (IGMP) snooping to handle variety of datagrams perfectly which made the ES-4024A ideal for today's multi-service network environment.  

The ES-4024A works with advanced QoS mechanism to insure significant service well-operation via a series of QoS process to prevent customers' network be impacted by network congestion. With intelligent multilayer capability, the ES-4024A can classify, police, and prioritize the incoming packets according to well-predefined QoS policies. In classification, Differentiated Services Code Point field (DSCP) and the 802.1p class of service (CoS) field are be identified the priority of the incoming packets. Classification and reclassification can be based on criteria as specific as rule-based on both IP and MAC addresses, on the other hand, for the bandwidth management, the ES-4024A has been loaded with powerful traffic management. For instance, the ES-4024A provides 4 priority queues per port for different types of traffics, allowing administrators to set rule-based shaping and rate limiting based on UDP/TCP, IP address or MAC addresses which takes full advantages of the limited network resources and guarantees the best performance.

The ES-4024A offers complete data security in data and management plane via a wide range of security features to protect users'data and administrative traffic, secure the network from unauthorized users. Remote Access Dial-In User Service (RADIUS) authentication enables centralized access control of switches and restricts unauthorized users. 802.1x authentication and Port security provide the ability to deny unauthorized users from accessing the network. Limited MAC Number by Port limits the total number of devices connected into a switch port, therefore highly reducing the risk of unknown access from mass deployed wireless network or Hubs. To cooperate with RADIUS, 802.1x is useful to prevent unauthorized access based on username and password (or other credentials) that is powerful access control for convergence network mixed wired and wireless. The ES-4024A multi-layer (L2/L3/L4) ACLs is a suite of sophisticated rule-based control mechanisms that can be easy deployed based on realistic network environment via Web GUI or command line to prevent abnormal and illegal access in advance. The rules can be defined to deny packets based on source and destination MAC addresses, IP addresses, or TCP/UDP ports.  

To compare with conventional bounded network management, ZyXEL ES-4024A demonstrates its power with advanced management capabilities; such as the ZyXEL-exclusive iStacking(™) clustering management technology that can across different floors and routing domain to locate other iStacking-capable switches in the same management cluster, and it allows administrators to manage 24 switches with one single IP. That high reduces operation cost and more flexible to maintain ZyXEL Switches. IT staff can opt for Web or command line interface to suit their convenience, and even encrypt their instructions with SSHv1/v2 and SSL/TLS. With these sophisticated functionalities, the IT staff is empowered to build a highly secure and efficient corporate network with minimum effort.