Cambium Networks cnMatrix EX2016M-P
Improve network performance while reducing the time and cost of provisioning and management

Quality of Service (QoS)

• ACL mapping and marking of ToS/DSCP (CoS)
• ACL mapping and marking of 802.1p
• ACL mapping to priority queue
• DiffServ support
• Honoring DSCP and 802.1p (CoS)
• Traffic shaping/metering
• Priority queue management using Weighted Round Robin (WRR), Strict Priority (SP), or a combination of both

Traffic Management

• ACL-based inbound rate limiting policies
• Broadcast, multicast, and unknown unicast rate limiting
• Inbound and outbound rate limiting per port or queue

Security

• 802.1x authentication
• MAC authentication*
• DHCP snooping
• RADIUS authentication/authorization
• RADIUS / TACACS / TACACS+ AAA support
• Secure shell (SSH)
• Secure copy (SCP)*
• Local username/password authentication

Management

• cnMaestro or XMS (cloud management)
• Industry standard Command Line Interface (CLI)
• DHCP Client and Embedded DHCP Server
• Embedded Web Management (HTTP/HTTPS)
• USB file management and storage
• Out-of-Band Ethernet Management
• SSH / SSH v2, SNMP v1/v2/v3
• DHCP relay, Simple Network Time Protocol (SNTP)
• Local/remote system logging
• Policy Based Automation
• Display log messages on multiple terminals*
• TFTP / SFTP / Telnet client-server support
• IPv6 management
• Password management
• Autoinstall support for firmware images and config files

Layer 2 Feature Set

• 802.1s Multiple Spanning Tree
• VLAN, Port, Protocol, 802.1q, QinQ*
• 802.1d
• 802.1x authentication
• Auto MDI/MDIX
• BPDU Guard, Root Guard
• IGMP Snooping v1/v2/v3*, Fast Leave
• LLDP/LLDP MED
• IGMP Proxy
• Static MAC, Flow Control per port
• Per VLAN STP (PVST/PVRST)
• Port Mirroring: port-based, ACL-based, VLAN-based
• Port Isolation / Private VLAN Edge
• Link Aggregation Groups (Static/LACP)
• Rate Limiting / Storm Control
• Jumbo frame (9k)
• DHCP Snooping
• BPDU filtering
• Broadcast / Multicast / Unlearned Unicast (Storm Control)
• DoS Protection
• Ping / TraceRoute / ICMPv6

Layer 3 Feature Set

• Inter-VLAN Routing
• Static ARPs and Static Routes
• DHCP Relay
• Dynamic Routing – RIPv1/v2, OSPFv2
• Route Redistribution

Security Classification Parameters

Permit/Deny actions for inbound IP and Layer 2 traffic classification based on:

• Source/Destination IP address
• TCP/UDP Source/Destination port
• IP Protocol Type
• Type of Service (ToS) or DSCP field
• Source/Destination MAC address
• EtherType
• IEEE 802.1p user priority
• VLAN ID
• RFC 1858 — Security Considerations for IP Fragment Filtering