| S5720-28X-SI-AC Specifications | 
| Switching Capacity | 336 Gbit/s | 
| Forwarding Performance | 42 Mpps/57 Mpps/78 Mpps/96 Mpps/132 Mpps | 
| Fixed Ports | 24 Ethernet 10/100/1,000 ports, 4 of which are dual-purpose
10/100/1,000 or SFP | 
| P series: 4 Gig SFP | 
| X series: 4 x 10 Gig SFP+ | 
| MAC Address Table | 16K | 
| Ring Protection | RRPP ring topology and RRPP multi-instance | 
| Smart Link tree topology and Smart Link multi-instance, providing
the millisecond-level protection switchover | 
| SEP | 
| ERPS (G.8032) | 
| STP (IEEE 802.1d), RSTP (IEEE 802.1w), and MSTP (IEEE 802.1s) | 
| BPDU protection, root protection, and loop protection | 
| IP Routing | Static route, RIPv1, RIPv2, RIPng, ECMP, OSPF, OSPFv3, BGP, BGP4+,
IS-IS, IS-ISv6, VRRP, and VRRP6 | 
| Multicast | PIM-DM, PIM-SM, and PIM-SSM | 
| IGMP v1/v2/v3 snooping and IGMP fast leave | 
| Multicast forwarding in a VLAN and multicast replication between
VLANs | 
| Multicast load balancing among member ports of a trunk | 
| Controllable multicast | 
| Port-based multicast traffic statistics | 
| Security | User privilege management and password protection | 
| DoS attack defense, ARP attack defense, and ICMP attack defense | 
| Binding of the IP address, MAC address, interface, and VLAN | 
| Port isolation, port security, and sticky MAC | 
| Blackhole MAC address entries | 
| MAC Forced Forwarding (MFF) | 
| Limit on the number of learned MAC addresses | 
| 802.1x authentication and limit on the number of users on an
interface | 
| AAA authentication, RADIUS authentication, HWTACACS+
authentication, and NAC | 
| SSH v2.0 | 
| Hypertext Transfer Protocol Secure (HTTPS) | 
| CPU defense | 
| Blacklist and whitelist | 
| 802.1x authentication, MAC address authentication, and combined
authentication on a per port basis | 
| Portal authentication on a per VLANIF interface basis | 
| MACSec (hardware ready) | 
| Super Virtual Fabric (SVF) | Working as an SVF client that is plug-and-play with zero
configuration | 
| Automatically loading the system software package and client
patches | 
| One-click and automatic delivery of service configurations | 
| Supports independent running client | 
| Management and Maintenance | iStack | 
| Virtual cable test | 
| SNMP v1/v2c/v3 | 
| RMON | 
| Web-based NMS | 
| System logs and alarms of different levels | 
| sFlow | 
| Interoperability | VLAN-based Spanning Tree (VBST) (interoperating with PVST, PVST+,
and RPVST) | 
| Link-type Negotiation Protocol (LNP) (similar to DTP) | 
| VLAN Central Management Protocol (VCMP) (similar to VTP) |