T(P)ES-3406T (IP54)

OVERVIEW

The Lantech T(P)ES-3406T (OS2 Pro platform) is a compact router switch with a PoE budget of 80W, designed for rail, metro, and vehicle 24V input Ethernet switch systems. It features 6 10/100TX + 4 10/100/1000T ports, push pull inner lock connectors for secure and efficient installation, along with 8 PoE 802.3af/at Ethernet ports (PoE model). The switch offers Layer 2 management, NAT, Ignition PoE timer off**, unique AUTO-FEED configuration, MQTT, gPTP**, advanced security functions and Health diagnostic snapshot maintenance to ensure reliable and easy onboard network deployment. It’s WebGUI and complete CLI interface make configuration straightforward for all skill levels. Additionally, the OPEN API document format enhances central management efficiency, making it ideal for fleet management and AIoT applications. Compliance with EN50155, ITxPT, and E-marking* certifications rest assured the product meets world-class standards for vehicle, rail onboard performance and reliability.

Redundant dual power input design; EN50155 verification with high ESD and inrush current prevention and reverse polarity protection; E-marking* & ITxPT certificate; ISO 16750-2 P5A compliant
T(P)ES-3406T is designed with dual power inputs that accept 9V~36V DC for 24VI vehicle use, and 16.8V-56VDC for 24TVI train model and is capable of withstanding EMI/RFI interference in the onboard network as well as environmental shocks and vibrations. The redundant power input design integrates inrush current protection also protect against polarity reversal. Additionally, the galvanic isolation feature shields the system from power transients often present in onboard networks. The switch complies with ITxPT public transport standards and E-marking*. It also meets the requirements of ISO 16750-2 P5A, reducing the impact of high-frequency pulse voltage that could be incurred by motor applications.

Embedded Inner-lock push-pull connectors ensure fast installation and connection reliability (-PP)
The built-in inner-lock push-pull connectors give the switch small-footprint design and for space-saving cabling installation. They ensure quick, tool-free installation with a simple push. Most importantly, their secure locking mechanism provides unwavering reliability, preventing accidental disconnections crucial for network uptime.

Support Perpetual*/Fast PoE*; PoE budget up to 80W for 8 Ports with PD detection, auto PD reboot, scheduling and Ethernet power input galvanic isolation with partial ports for PoE galvanic isolation
Fast PoE* and Perpetual PoE* combined provide uninterrupted power delivery for critical devices. Fast PoE instantly supplies power after startup, while Perpetual PoE maintains power during switch reboots or upgrades. Together, they ensure continuous, reliable operation of Powered devices (PD) in mission‑critical environments. T(P)ES-3406T supports maximum PoE budget of 80W with advanced PoE management features, including PoE auto-detection and scheduling. The PoE detection function can identify if a connected Powered Device (PD) becomes unresponsive and then auto-restart the PD. Moreover, PoE scheduling allows for a pre-set power feeding schedule based on a routine timetable. Each PoE port can be enabled or disabled, and it provides information on voltage, current, power (W), and temperature. There is galvanic isolation between the power input and the Ethernet power system. The PoE galvanic isolation on PoE at/af ports provides insulation between the power input and the PoE Ethernet ports, preventing cabling and grounding incidents from damaging the Ethernet switch.

Sleep Mode & efficient PoE timer under Ignition-Off State on IGN model
The PoE-IGN model supports network operation for up to 60 minutes before entering Sleep Mode (0.048W), preventing unnecessary reboots when power is restored. It also includes a configurable PoE timer, with a default delay of 10 minutes after ignition-off. The Ignition timer allows flexible configuration of both individual PoE port shutdown delays and system shutdown (Sleep Mode), ranging from 30 seconds to 60 minutes (default: 60 minutes). This design eliminates the need for additional relay wiring and enables remote PoE timer configuration anytime, from anywhere.

mDNS (Multicast DNS) and DNS server/client feature and MQTT-role of Publisher or Broker, ITxPT Inventory service, X status
T(P)ES-3406T supports mDNS (Multicast DNS), enabling hosts within the LAN to discover and communicate with each other following DNS protocol, without the need for a traditional DNS server. The switch also functions as an MQTT Publisher or Broker, sending data to the broker which then distributes the “payload” to subscribers efficiently using a lightweight protocol. In addition, the switch supports ITxPT Inventory service, X status, DNS-SD, and MQTT protocols for comprehensive remote monitoring of Ethernet switch status.

Reliable eMMC for better power efficiency and reliability
T(P)ES-3406T utilizes eMMC for firmware storage, enhancing product reliability and effectively extending its lifespan under frequent power on/off conditions.

Comprehensive Network Protection Against DDoS and Layer 2 Threats
Lantech OS2Pro generation integrates advanced security mechanisms to safeguard both switches and networks. Key features include DDoS attack mitigation, 802.1X port-based authentication, Dynamic ARP Inspection (DAI), IP Source Guard, and Port Security, providing multi-layer protection against spoofing, unauthorized access, and traffic floods. These security capabilities ensure stable, resilient network operation.

Lantech OS2 PRO Generation with L2 management and routing protocols incl. OSPF and RIP V1&V2
T(P)ES-3406T developed on the Lantech OS2 Pro generation, is equipped with comprehensive Layer 2 management and routing protocols, including inter-VLAN routing, OSPF, and RIP v1/v2. Designed for versatile vehicle applications, the generation further supports advanced networking functions such as NAT, port forwarding, multiple static IP addresses, DHCP (server/option/client/port-based), VLAN, DHCP over VLAN, IGMP, RSTP/G.8032 enhanced ring recovery, LACP, and more.

Open RESTful API for Seamless Integration and High-Performance Network Management
The switch features a lightweight and efficient Open RESTful API designed for seamless integration with centralized network management software. Using standard HTTP methods (GET, PUT, POST, DELETE) and JSON data structures, the API enables real-time access to configuration and operational data. By leveraging modern web technologies, the switch minimizes CPU overhead typically associated with traditional SNMP polling, delivering faster response times, reduced system load, and improved scalability for high-performance network environments. Auto feed configuration for swapped new switches for Seamless Network Maintenance, USB port for backup, restoring configuration and upgrading firmware T(P)ES-3406T supports Auto-Feed configuration, simplifying network switch setup and management. It ensures that new or replacement switches automatically receive the correct configurations without manual intervention. In addition, the switch supports traditional methods of firmware and configuration upload/download via USB dongle.

User-friendly GUI, Auto topology drawing, Editable configuration text file, Enhanced Environmental Monitoring, CPU watchdog, Snapshot switch information for trouble-shooting analysis
T(P)ES-3406T offers a user-friendly UI complemented by innovative auto topology drawing and topology demo features, simplifying network management. Configuration files can be exported as editable text files, facilitating easy modification and mass deployment. Its built-in watchdog function automatically reboots the switch if the CPU becomes unresponsive. It supports enhanced environmental monitoring of actual input voltage, current, ambient temperature and total power load where user can set threshold to trigger an alert or event log. Additionally, the unique Snapshot feature enables data collection—including port statistics, system core info, configurations, and event logs—either on-demand or scheduled, helping quickly identify and resolve network issues.

OPTIONAL FEATURES

Optional bypass relay prevents power loss
The optional bypass relay is set to bypass the switch to the next one when power is off in order to protect the network from crashing. Lantech bypass caters to remain in bypass mode until the switch is completely booting up when power is back to avoid another network loss. Smart bypass can be activated when switch encounters power failure. (-BT model) (only for 24TVI models)

Optional LantechView for Lantech devices maintenance
LantechView software automatically detects Lantech devices across the network, enabling seamless configuration management over multiple IP subnets and VLANs—both for individual devices and batch operations. It also offers comprehensive firmware management, supporting single or group verification and simultaneous upgrades to the latest versions. For more details on LantechView software solutions, please visit: https://www.lantechcom.tw/global/eng/download/datasheet/D-LantechView.pdf

Optional IEC 62443-4-2 Model with Physical Tamper Resistance and a Variety of Security Measures
For enhanced cybersecurity, the optional IEC 62443-4-2 is available on standard models. This includes over 90 security measures such as vulnerability checking, encrypted files, public key management, strong password enforcement, account management, and both penetration and stress testing. It emphasizes protection against unauthorized access, tampering, and malware through detailed log events and roots of trust security IC. To learn more about Lantech cybersecurity software solutions, please refer to https://www.lantechcom.tw/global/eng/download/datasheet/D-OS2.pdf (-SEC model)

Optional 802.1AS for precise time protocol
The generalized Precision Time Protocol (gPTP) is a protocol used to synchronize clocks throughout a network. The gPTP** supports two-step processing bridge mode to support 1 microsecond in 6 hops for PTP accuracy and precision. (-PTP model)