Skip to main content
NETWORKING · SWITCHING

What Is a Managed Switch?

A managed switch is an Ethernet switch you can configure, through a web interface, command line or SNMP, to set up VLANs, quality of service, redundancy and monitoring. An unmanaged switch is plug-and-play with no settings at all. Managed switches suit networks that are segmented, critical or monitored remotely.

01

What a managed switch is

A managed switch is an Ethernet switch with a configuration layer on top of the basic job of forwarding traffic. It does everything an unmanaged switch does, and adds settings you can reach through a web interface, a command line or a network management system using SNMP. Through those settings you decide how traffic is segmented, which traffic goes first, how the network recovers from a broken link and what you can see from a remote site.

An unmanaged switch, by contrast, is plug-and-play. It learns which device is on which port and forwards frames between them, with no options to change. That suits a small, flat network where every device can see every other and nobody needs to look inside.

The trade-off is control against simplicity. A managed switch gives you control over how the network behaves, at the cost of having to configure, document and secure it. Between the two sits the smart or web-managed switch, which offers a subset of managed features through a simple web page.

02

What a managed switch adds

Most managed switches share a core set of features built on IEEE and IETF standards.

  • //
    VLANs. IEEE 802.1Q VLANs split one physical network into separate logical networks, so cameras, controllers and office PCs share switches without seeing each other’s traffic. Our VLAN FAQ explains how tagging works.
  • //
    Quality of service. QoS uses 802.1p and DSCP markings to send time-critical traffic, such as control or voice, ahead of bulk transfers when a link is busy. See our explainer on what QoS is.
  • //
    Redundancy. RSTP and MSTP block loops while keeping a backup path ready, and ring protocols such as ITU-T G.8032 ERPS can recover from a cable break in typically under 50 ms.
  • //
    Link aggregation. LACP bundles several ports into one faster, fault-tolerant link between switches or to a server.
  • //
    Monitoring and diagnostics. SNMP, port statistics, syslog and port mirroring let you see errors, load and faults from a central system, and capture traffic for troubleshooting.
  • //
    Security. 802.1X port authentication, access control lists and the option to disable unused ports keep unknown devices off the network.
03

Managed vs smart vs unmanaged switches

Feature Unmanaged Smart (web-managed) Managed
Configuration None Web page Web, CLI, SNMP, scripts
VLANs No Basic port and tag VLANs Full 802.1Q, often hundreds of VLANs
QoS Fixed or none Basic priority Per-port and per-class policies
Redundancy No Usually STP or RSTP RSTP, MSTP, ring protocols
Monitoring Link LEDs Port statistics SNMP, syslog, mirroring, alarms
Best for Small, fixed, flat networks Small sites needing a few controls Segmented, critical or remote networks
04

Managed switch features and the standards behind them

Managed switch datasheets list features by protocol name. The table maps the common ones to the standard that defines each and to the job it does on an industrial network.

Feature Standard What it does
STP and RSTP IEEE 802.1D and 802.1w, now part of IEEE 802.1Q Blocks loops in a meshed or ring network while keeping a backup path ready. RSTP typically recovers in a few seconds or less, against 30–50 seconds for classic STP
IGMP snooping IETF RFC 4541 (informational) Sends multicast streams, such as camera video or EtherNet/IP I/O traffic, only to the ports that joined them instead of flooding every port
LLDP IEEE 802.1AB Each device advertises its name, port and management address to its neighbours, so network software can draw the topology
VLANs IEEE 802.1Q Split one physical network into separate logical networks
QoS IEEE 802.1p priority (in 802.1Q) and DSCP (RFC 2474) Queues time-critical traffic ahead of bulk transfers when a link is busy
Link aggregation IEEE 802.3ad, now IEEE 802.1AX (LACP) Combines several ports into one faster, fault-tolerant link
SNMP IETF; SNMPv3 in RFC 3411–3418 Lets a network management system read counters and status and receive alarms (traps)
Port mirroring Vendor feature, often called SPAN Copies a port’s traffic to a monitoring port for a protocol analyser or intrusion detection sensor
Jumbo frames No IEEE standard; each vendor sets the maximum Carry payloads above the standard 1,500-byte MTU, typically up to around 9,000 bytes, to cut overhead on camera and storage traffic

Not every switch supports every feature, so check the datasheet for the model. Across the managed industrial switches we list, nearly every model supports RSTP and MSTP, IGMP snooping, LACP and QoS; most list SNMP, and many add LLDP, jumbo frames and port mirroring. Redundancy protocols matter most in a ring topology, where one blocked port keeps the loop safe until a cable breaks. Jumbo frames and IGMP snooping matter most on networks carrying machine vision or CCTV streams, where large, multicast video traffic would otherwise load every port.

05

How a managed switch is configured

Small sites usually configure each switch through its web interface. Larger networks use the command line over SSH, which can be scripted so every switch gets the same settings, or a central management system that reads status over SNMP and pushes configuration to many switches at once. Whatever the method, a few habits keep a managed network healthy: change default passwords, turn off unused services such as Telnet, keep a backup of every switch’s configuration, record which VLAN and port each device uses, and update firmware on a planned schedule. Many industrial switches can also store their configuration on a removable card, so a failed switch can be swapped and restored in minutes.

06

When you need a managed switch

Choose managed when traffic types share the network, when uptime needs failover, when you will monitor or grow the network, or when any traffic is time-critical. In practice that covers most industrial sites: a production line where PLCs, vision cameras and MES traffic share cabling, a substation or rail network that must recover from a cut cable, or a remote cabinet where the only way to diagnose a fault is over the network. An unmanaged switch still fits a small isolated cell, such as a machine with a controller and a few drives, where nothing else connects. Our selection guide on managed vs unmanaged industrial Ethernet switches goes through the decision in detail.

FAQ · 01
Is a managed switch the same as a Layer 3 switch?
Not always. Most managed switches work at Layer 2, forwarding by MAC address and VLAN. A Layer 3 managed switch also routes between VLANs and subnets in hardware, which can remove the need for a separate router inside a site.
Read the full FAQ —
07

Managed switches in industrial networks

Industrial managed switches add the same features in a form built for cabinets and vehicles: fanless DIN-rail or panel housings, wide operating temperatures, redundant DC power inputs and alarm relays that signal a fault to a controller. Many also add IEEE 1588 PTP for clock synchronisation, IGMP snooping for multicast video, and awareness of industrial protocols such as PROFINET, EtherNet/IP and Modbus TCP. Some support Time-Sensitive Networking for deterministic traffic, covered in our TSN guide. Our managed industrial switches range from compact DIN-rail models to rack-mount switches with 10G SFP+ fibre uplinks.

08

Quick answers on managed switches

Managed switches: common questions

What is the difference between a managed and unmanaged switch?

Configuration. An unmanaged switch has no settings. A managed switch lets you set VLANs, QoS, redundancy, security and monitoring, so you control how traffic moves.

Do I need a managed switch?

If the network is shared, critical or remote, usually yes. For a small isolated group of devices with no need for segmentation or monitoring, an unmanaged switch is fine.

Can a managed switch work like an unmanaged one?

Yes. Out of the box most managed switches forward traffic on all ports with default settings. Change the default password, though, before connecting one to a live network.

What is a smart switch?

A partly managed switch. It offers a subset of managed features, such as basic VLANs and QoS, through a web page, without a full command line or SNMP.

What is a managed PoE switch?

A managed switch with powered ports. It adds per-port power monitoring, priorities and remote power-cycling to the usual managed features.

We supply managed industrial switches and set up VLANs, QoS and redundancy to the site plan as part of every networked system we integrate. Send us your topology and device list, and we will specify and configure the switches to match.