Introduction
This document describes the features in the GS2220 for its 5.00(AB__.2)C0 release. GS2220 series is a hybrid switch with NebulaFlex technology to support operation in either Standalone mode or Nebula cloud management mode.
Supported Platforms
| Support Platform | ZyNOS Firmware version | Boot Version |
|---|---|---|
| Zyxel GS2220-10 | V5.00(ABRO.2)C0 | V1.00 | 09/20/2019 |
| Zyxel GS2220-10HP | V5.00(ABRP.2)C0 | V1.00 | 09/20/2019 |
| Zyxel GS2220-28 | V5.00(ABRQ.2)C0 | V1.00 | 09/20/2019 |
| Zyxel GS2220-28HP | V5.00(ABRR.2)C0 | V1.00 | 09/20/2019 |
| Zyxel GS2220-50 | V5.00(ABRS.2)C0 | V1.00 | 09/20/2019 |
| Zyxel GS2220-50HP | V5.00(ABRT.2)C0 | V1.00 | 09/20/2019 |
New Feature and Enhancements
- [Nebula 19.10] Support Port advisor.
- [Nebula 19.20] VLAN ingress check enabled by default.
- [Standalone, Nebula] MAC-auth support attribute: NAS-Port, NAS-Port-Type, Framed-MTU, state, calling-station-id, message-authenticator.
Bug Fix
| Bug Fix | Nebula | Standalone |
|---|---|---|
| [eITS #241100538] Fixed special characters (space, ' ," ) can be allowed in username to cause configuration error. | - | V |
| [eITS #241200595] Fixed high CPU usage triggered by client switching between trunk interfaces. | V | V |
| [eITS #250100026] Fixed abnormal crash issue when continuous queries OID 1.0.8802.1.1.2.1.5.4795.1.2.1.1 and its sub-OIDs. | V | V |
| [eITS #250200357] Switch has dropped the EAPoL unicast packet. | V | V |
| [eITS #250200815, 250400367] After deleting original and creating another mgmt VLAN and IP, pinging the new mgmt IP over LACP links will fail if one of the LACP member ports is inactive. | V | V |
| [eITS #250201088] When the RADIUS server does not provide a session-timeout attribute, the switch will re-authenticate successfully connected devices every hour by default. | V | V |
| [eITS #250301742, 250600412] Supplicants that have successfully passed 802.1X authentication may still be incorrectly assigned to guest VLAN if the reachability of RADIUS server is unstable. | - | V |
| [eITS #250302188] MAC-auth via Nebula cloud authentication becomes significantly slower in authenticating supplicants after a reboot. | V | - |
| [eITS #250302409] Fixed the device sometimes fail to connect with Nebula server. | V | V |
| [eITS #250500332] Fixed that truncated DNS packets cannot be processed causing DNS parsing failed. | V | V |
| [eITS #250500429] Fixed crash when receiving IPv6 tunnel packet. | - | V |
| [eITS #250500683] Voice VLAN (via LLDP MED) does not work properly when enabling MAC-auth under Nebula cloud authentication. | V | - |
| [eITS #250800443] Special characters in the port name cause the port information to appear blank on the Dashboard. | V | V |
Known Issue
| Known Issue | Nebula | Standalone |
|---|---|---|
| [Bandwidth Control] Ingress rate limit of TCP traffic is inaccurate when value limits above 300M. | V | V |
| [IP source guard] Create an IP static binding first, and then send an illegal IP traffic with the same MAC address but different IP address. The illegal IP traffic cannot be filtered. | V | V |
| [Green Ethernet] The status of short-reach will display incorrectly. | - | V |
| [Diagnostic] The accuracy of cable diagnostic is +-15m. When without cables, the value of distance to fault would not be 0. | V | V |
| [Diagnostic] Does not support to diagnose 10M-Full Duplex, "unknown" message will appear. | V | V |
| [Panel LED] The link LED will turn on when plug-in SFP-100TX or SFP-1000T while cable is not connected. | V | V |
| [VLAN] The VLAN Mapping doesn't work with untagged frame. | - | V |
| [Link aggregation] Only 4 criteria of link aggregation can be used at the same time. The fifth criteria set on trunks will not be implemented, but follow the first criteria. | - | V |
| [Cluster] The switch cannot access cluster member when cluster member's password been encrypted. | - | V |
Limitation of Settings
| Limitation of Setting | Nebula | Standalone |
|---|---|---|
| 802.1Q Static VLANs | 1k | 1K |
| Static MAC forwarding entry | - | 256 |
| MAC filtering entry | 256 | 256 |
| Cluster member | - | 24 |
| Port-security max address-limit number | 16K | 16K |
| Syslog server entry | 2 | 4 |
| MAC table | 16k | 16k |
| Multicast group | 1k | 1k |
| ACL | 128 | 256 |
| DHCP Relay Entry | - | 16 |
| Static ARP entry | - | 256 |
| Static route max entry | 32 | 32 |
| Trunk groups | 5/14/16 | 5/14/16 |
| Per trunk group port number | 8 | 8 |
| MSTP instance | - | 0-16 |
| Voice VLAN OUI entry | 6 | 6 |
| Vendor-ID based VLAN | 8 | 8 |
| MAC-based VLAN | - | 50 |
| ZON neighbor per-port maximum clients | 10 | 10 |
| IP source guard | 128 | 512 |
Change History
- V5.00(AB__.2) | 09/05/2025
- V5.00(AB__.1) | 03/21/2025
- V5.00(AB__.0) | 12/26/2024
- V4.80(AB__.1) | 06/21/2024
- V4.80(AB__.0) | 02/01/2023
- V4.70(AB__.6) | 10/11/2022
- V4.70(AB__.5) | 12/01/2021
- V4.70(AB__.4) | 06/18/2021
- V4.70(AB__.3) | 06/01/2021
- V4.70(AB__.2) | 03/03/2021
- V4.70(AB__.1) | 01/20/2021
- V4.70(AB__.0) | 08/04/2020
- V4.60(AB__.0) | 10/10/2019
