The Grandstream GWN7802 is a Layer 2+ managed Ethernet switch designed for small-to-medium enterprises that need scalable, secure and high-performance business networking. With 16× Gigabit Ethernet ports and 4× Gigabit SFP uplink ports, it is ideal as a core or aggregation switch in modern IP networks.

Part of the GWN7800 series, the GWN7802 supports advanced VLAN for flexible traffic segmentation, advanced QoS for traffic prioritisation, and IGMP Snooping for multicast optimisation. It also delivers comprehensive security features to protect against a wide range of network attacks. PoE variants within the GWN7800 family provide smart dynamic PoE/PoE+ output for powering IP phones, cameras, Wi-Fi access points and other endpoints.

16× Gigabit Ethernet + 4× Gigabit SFP Ports		Smart PoE/PoE+ Power (on PoE models in series)		IPv4 & IPv6 Ready Future-proof networking
ARP Inspection, IP Source Guard, DoS Protection & DHCP Snooping		Managed via Web UI, GWN.Cloud & GWN Manager		Advanced QoS Traffic Prioritisation

Key Features & Benefits

• 16× Gigabit Ethernet ports and 4× Gigabit SFP uplink ports.
• Layer 2+ managed switch with advanced VLAN and traffic segmentation.
• Smart power control for dynamic PoE/PoE+ allocation (on PoE models in the GWN7800 series).
• Supports deployment in IPv4, IPv6 and hybrid IPv4/IPv6 networks.
• Quaternary binding of IP, MAC, VLAN and port for tighter access control.
• Advanced security: ARP Inspection, IP Source Guard, DoS protection, port security & DHCP snooping.
• Local Web UI plus central management via GWN.Cloud and GWN Manager.
• Built-in QoS for prioritising voice, video and critical data traffic.

Powerful Processing & L2+ Capabilities

• Unicast routing via ACL for data routing between network segments.
• Integrated DHCP Server and Relay for automatic IP address assignment.
• GVRP for dynamic VLAN distribution, registration and attribute propagation to reduce manual configuration.
• Comprehensive QoS: port priority, priority mapping, queue scheduling, traffic shaping and rate limiting.
• Access Control Lists (ACLs) to filter packets by flexible matching rules and time-based policies.
• IGMP Snooping and MLD Snooping for efficient multicast in surveillance, VoIP and video deployments.
• Full support for IPv6 and IPv4 addressing and routing scenarios.

Multi-Layer Security Protection

• Static and dynamic MAC tables with filtering to reduce attack surface.
• Packet filtering based on IP, MAC, VLAN and port bindings.
• ARP Inspection to prevent ARP spoofing, flooding and man-in-the-middle attacks.
• IP Source Guard to stop IP/MAC/VLAN spoofing and unauthorised host access.
• Extensive DoS protection (Land, Smurf, TCP SYN flood, Ping flood and more).
• 802.1X, RADIUS, AAA and TACACS+ for strong device authentication and authorisation.
• Port security that disables ports automatically when MAC limits are exceeded.
• DHCP Snooping to ensure only trusted DHCP servers can issue leases.

Network Optimisation & Resilience

• STP/RSTP/MSTP for fast convergence, redundancy and network stability.
• Loopback detection to identify and remove switching loops.
• VRRP to minimise downtime caused by default gateway failures.
• Link aggregation to increase available bandwidth and improve reliability.
• Storm control to prevent interruptions from broadcast, multicast or unknown unicast storms.

Smart PoE Capabilities (PoE Models in Series)

• Smart power control for dynamic PoE/PoE+ power allocation per port.
• IEEE 802.3af/at support for powering Wi-Fi APs, IP cameras, VoIP phones and more.
• Configurable PoE schedules to control port power by time of day.
• PoE port prioritisation when total available power is limited.
• Up to 30W per port with configurable maximum power thresholds.
• Dynamic power negotiation and discovery via LLDP-MED.

Easy Management & Maintenance

• Central management via GWN.Cloud, GWN Manager and embedded controller.
• Additional management options: Web GUI, CLI (Console/Telnet) and SNMP v1/v2c/v3.
• CPU and memory usage monitoring for switch health visibility.
• Built-in diagnostic tools including Ping, Traceroute, UDLD (TBD) and Copper Test.
• RMON, Syslog, traffic statistics and sFlow (pending) for optimisation and troubleshooting.
• LLDP and LLDP-MED for automatic discovery, provisioning and management of edge devices.
• IPv4/IPv6 dual stack with limited static routing support (pending) for flexible topologies.

Specifications