Tiếng Việt
中文 (中国)
EXPORT GUIDE FOR ETHERNET LAYER-2 SWITCHES
An Ethernet Layer-2 switch primarily forwards frames using MAC addresses. A move to routing-dominant L3 functions, integrated radio, MACsec/VPN, firewall/UTM, or separately shipped chassis/modules can change HS classification, licensing and destination-market requirements.
Before shipment, lock actual L2 role – ports/speed – PoE – hardware/firmware revision – encryption – destination – origin – test/certification scope. This guide follows the v1.4 eight-step E2E workflow through post-shipment.
1. QUICK OVERVIEW
Comparison of United States – Hong Kong – Indonesia – Malaysia, selected from 2026 commercial shipment intelligence, not official national statistics.
An ordinary wired L2 switch is not automatically licence-controlled; screen cryptography, cybersecurity, dual-use and end-use/end-user.
8517.62.49
Strong model-specific benchmark: Customs Notice 16181/TB-CHQ (2026) for Cisco C9200L-24T-4G-E operating at Layer 2.
RCEP HS 8517.62: CTSH or RVC40. Review AHKFTA for Hong Kong and ASEAN/RCEP routes for Indonesia/Malaysia; no Vietnam-US bilateral preferential FTA.
Decree 341/2026 is a major trigger for IPsec VPN/TLS VPN/MACsec; Decree 332/2026 applies only where the product actually matches a cybersecurity-product function.
Freeze model, HW rev, firmware, ports, PoE budget, MACsec/security, PSU, HS and origin before Cargo Ready.
Air for NPI/urgent; Sea for volume. Use ESD, shock/moisture and port protection plus serial/MAC traceability.
2. PRODUCT SCOPE & DETAILED CLASSIFICATION
| VARIANT | TECHNICAL INDICATORS | EVIDENCE | HS / POLICY DIRECTION | SPLIT POINT |
|---|---|---|---|---|
| Unmanaged L2 | MAC forwarding, no routing | Datasheet, port map, switching capacity | Review 8517.62.49 where the wired switching description fits | Split bridge/converter/module products |
| Managed L2 | VLAN, STP/RSTP/MSTP, LACP, LLDP, SNMP/CLI | Manual, feature matrix, HW/FW rev | 8517.62.49 is a strong direction if L2 switching remains principal | Crypto screening if MACsec/VPN |
| L2+ / static routing | L2 switching plus limited routing | Routing feature list | Do not extend the L2 conclusion if routing becomes principal | Split to L3 when routing protocols dominate |
| PoE L2 | 802.3af/at/bt and PoE budget | Power/PSU/thermal spec | HS by principal switching function; separate PSU may classify independently | Split separately shipped PSU/battery |
| Industrial L2 | DIN rail, dual DC, redundancy, extended temperature | Industrial spec | Review 8517.62; destination standards may differ | Split materially different industrial role |
| L2 with MACsec/security | 802.1AE or traffic-security functions | Crypto matrix, key management | Screen Decree 341/2026; Decree 332 only when cybersecurity product function matches | Do not group with simple ACL/802.1X |
| Wireless/controller/security appliance | Wi-Fi/BT/cellular, controller, firewall/UTM/VPN | RF/security architecture | May change HS and market compliance | Separate article |
| Chassis/line card/SFP/PSU | Not a complete switch | BOM and shipped configuration | Classify actual component status | Separate review |
3. EXPORT MARKETS & MARKET ACCESS
3.1. PRODUCT-SPECIFIC MARKET SCAN
Volza displays 177 Layer-2 Switch export shipments from Vietnam (page updated 4 Feb 2026). Because the public exact-L2 page does not expose a complete destination split, this guide supplements it with the broader Gigabit Switch dataset updated 23 May 2026: United States 993, Hong Kong 250, Indonesia 246 and Malaysia 127 shipments. These are commercial shipment-intelligence signals, not official Vietnam Customs statistics.
| MARKET | TRADE SIGNAL | MARKET ACCESS | FTA / ORIGIN | KEY COMPLIANCE | LOGISTICS |
|---|---|---|---|---|---|
| United States | Largest foreign signal in the broad dataset | Review digital-device/unintentional-radiator path; radio models separate | No bilateral preferential VN-US FTA | FCC Part 15; SDoC or Certification depending device; no blanket FCC-ID statement | Air/Sea; ESD and serial/MAC trail |
| Hong Kong | 250 shipments in supplemental dataset | Determine whether equipment is wireline CPE directly connected to PTN | AHKFTA if origin requirements met | HKTEC VCS/CCS; most TE is VCS, so certification is not universally mandatory | Air/Sea; re-export/origin traceability |
| Indonesia | 246 shipments; exact-L2 global data also shows strong import demand | Map exact model to current telecom certification system | RCEP; compare ASEAN route | Permen Kominfo No.3/2024 certification framework; local applicant confirms technical standard | Air/Sea; exact certificate/model match |
| Malaysia | 127 shipments in supplemental dataset | Review communications-equipment certification scope | RCEP; compare ATIGA/CPTPP where useful | MCMC/SIRIM QAS compliance/type approval according to exact technical code | Air/Sea; certification/import docs before shipping |
4. VIETNAM EXPORT CONDITIONS / POLICY
CONCLUSION
A normal wired L2 switch should not be treated as licence-controlled merely because it is Chapter 85 equipment. Encryption, dedicated cybersecurity functions, strategic/dual-use characteristics and sensitive end-use/end-users require separate screening.
LEGAL BASIS
On 3 Sep 2026, Decree 69/2018 remains the operative foreign-trade framework; Decree 292/2026 takes effect 5 Sep 2026. Decree 341/2026 on civil cryptography has been effective since 1 Sep 2026; Decree 332/2026 on cybersecurity products since 19 Aug 2026; Circular 42/2026/MOIT dual-use list starts 12 Sep 2026.
ACTION
Run exact model → L2/L3 → radio → MACsec/VPN → cybersecurity function → end-use/end-user → destination → HS → licence conclusion before contract and booking.
5. HS CODE – EXPORT DUTY – EXPORT VAT
| PRODUCT / VARIANT | REFERENCE HS | CLASSIFICATION BASIS | EXPORT DUTY | EXPORT VAT | EVIDENCE |
|---|---|---|---|---|---|
| Complete L2 Ethernet switch, switching-dominant | 8517.62.49 – strong reference | Notice 16181/TB-CHQ: Layer-2 Cisco C9200L-24T-4G-E using MAC/VLAN/SFP | Check Decree 26/2023 as amended by Decree 201/2026 against final HS | 0% only where export-VAT conditions/documentation are met | Catalogue, manual, block diagram, port map |
| L2+ / routing-dominant | Do not pre-fix 8517.62.49 | Reassess if routing is principal | Check final HS | Same conditional analysis | Routing protocols/architecture |
| SFP/PSU/line card shipped separately | Do not use finished-switch HS automatically | Classify actual part/function | Check final HS | Same conditional analysis | Part datasheet, BOM/config |
EXPORT DUTY – CONCLUSION → BASIS → ACTION
Do not state 0% automatically. Decree 201/2026, effective 23 Jul 2026, amends selected Export Tariff rates under Decree 26/2023. Freeze the 8-digit HS first, then check the current line on declaration date.
EXPORT VAT – CONCLUSION → BASIS → ACTION
Zero-rating is conditional. Maintain the required contract, payment, customs and delivery/transport evidence for the actual transaction.
6. C/O – FTA – RULES OF ORIGIN
| ROUTE | FTA | ORIGIN DOCUMENT | PSR TO REVIEW | ORIGIN ISSUE | AUDIT TRAIL |
|---|---|---|---|---|---|
| Indonesia | RCEP; compare ATIGA | Selected proof | RCEP 8517.62: CTSH or RVC40 | Imported ASIC/PCBAs/PSU affect CTC/RVC | BOM, input HS, supplier origin, costing, production/test |
| Malaysia | RCEP; compare ATIGA/CPTPP | Selected proof | RCEP fixed; re-check other exact PSRs | Made-in-Vietnam label is not sufficient proof | BOM, SMT/assembly, costing, serial/MAC |
| Hong Kong | AHKFTA | AHKFTA proof where eligible | Re-check exact 8517.62 PSR before issue | Re-export/direct-consignment evidence may matter | Invoice, B/L/AWB, BOM, origin records |
| United States | No bilateral preferential FTA | Non-preferential COO evidence | No preferential FTA PSR | COO depends on actual processing | Manufacturing route, component origins, labels |
7. PRODUCT-SPECIFIC COMPLIANCE
| TRIGGER | OPERATIONAL CONCLUSION | BASIS / MARKET | FILE TO FREEZE |
|---|---|---|---|
| MACsec / IPsec VPN / TLS VPN | Screen Decree 341 Appendix II using actual crypto characteristics plus customs description/HS context. | Decree 341/2026, effective 1 Sep 2026; IP-flow security expressly includes these technologies | Crypto datasheet, algorithms, key management, firmware/licence |
| Attack prevention / monitoring / cybersecurity assessment | HS alone is insufficient; actual product function must match cybersecurity-product list. | Decree 332/2026 Appendix II | Security architecture and product positioning |
| Sensitive end-use/end-user | Screen strategic/dual-use only when exact control criteria are met. | Decree 259/2025; Circular 42/2026 from 12 Sep 2026 | End-user/end-use statement and technical file |
| U.S. wired digital device | Review Part 15 unintentional radiator route; SDoC or Certification depending product. | 47 CFR §15.101 | Test/compliance information and responsible party |
| Hong Kong wireline CPE | Determine direct PTN connection and VCS/CCS category. | OFCA HKTEC / I 412 | Interface/use and certification category |
| Indonesia telecom equipment | Local importer confirms exact technical standard and certification. | Permen Kominfo No.3/2024 | Model, test report, applicant/certificate |
| Malaysia communications equipment | Review MCMC/SIRIM type/compliance approval for exact technical code. | MCMC/SIRIM QAS | Technical report, local certificate, label/import docs |
8. EXPORT DOCUMENTS & SUBMISSION
| FILE GROUP | CHECKLIST | STEP | OWNER | MUST MATCH | COMMON ERROR |
|---|---|---|---|---|---|
| Commercial | Contract/PO, Invoice, Packing List | Customs/booking/buyer | Sales/Docs | Model, qty, price, Incoterm, origin | Generic “network device” description |
| Technical/HS | Datasheet, manual, block diagram, ports, HW/FW list | Classification | Engineering/Compliance | L2 role, ports, PoE, routing, security | Family catalogue instead of exact revision |
| Crypto/cyber | Crypto matrix, security feature list, licence status | Pre-contract/Cargo Ready | Security/Compliance | MACsec/VPN/algorithms/principal function | Management TLS confused with IP-flow security product |
| Origin | Proof, BOM, supplier docs, RVC/CTC working | FTA | Docs/Factory/Procurement | HS, criterion, invoice, lot | No input-HS mapping |
| Market compliance | FCC/HKTEC/Komdigi/MCMC-SIRIM evidence | Market access | QA/Compliance/Importer | Exact model/HW/FW/test scope | Certificate misses revision |
| Transport/bank | Booking, SI, VGM, B/L/AWB, insurance/L-C docs | Cut-off/post-shipment | Forwarder/Docs/Finance | Packages, weights, marks, consignee | SI/VGM delay or model mismatch |
9. LEGAL BASIS – THREE-LAYER MATRIX
| LAYER | INSTRUMENT / SOURCE | AUTHORITY | EFFECTIVE / TIMING | PROVISION | APPLICATION | OLD → NEW / NOTE |
|---|---|---|---|---|---|---|
| Vietnam – HS | Notice 16181/TB-CHQ (2026) | Customs | 13 May 2026 | Advance classification result | Cisco C9200L L2 → 8517.62.49 | Model-specific benchmark |
| Vietnam – foreign trade | Decree 69/2018 → 292/2026 | Government | 292 from 5 Sep 2026 | Effect/transition | Foreign-trade framework | 3 Sep is still pre-effective-date transition |
| Vietnam – cryptography | Decree 341/2026 | Government | 1 Sep 2026 | Appendix II | Licensed civil-crypto scope; IPsec/TLS VPN/MACsec trigger | Current basis |
| Vietnam – cybersecurity | Decree 332/2026 | Government | 19 Aug 2026 | Appendix II | Cybersecurity products by function; includes some 8517.62.43/.49 lines | Do not infer from HS alone |
| Vietnam – dual-use | Decree 259/2025 + Circular 42/2026 | Government / MOIT | Circular from 12 Sep 2026 | Detailed list | Technical/end-use/end-user screening | Not yet effective on 3 Sep |
| Vietnam – export tariff | Decree 26/2023 + 201/2026 | Government | 201 from 23 Jul 2026 | Annex I | Export duty check | No automatic 0% |
| RCEP origin | Circular 05/2022 + 32/2022 | MOIT | Current | PSR 8517.62 | CTSH or RVC40 | When RCEP route chosen |
| U.S. | 47 CFR §15.101 | FCC | Current | Part 15 | Unintentional radiator: SDoC or Certification | Radio route separate |
| Hong Kong | HKTEC / OFCA I 412 | OFCA | Current | VCS/CCS | Wireline CPE direct PTN | VCS may connect without certification |
| Indonesia | Permen Kominfo No.3/2024 | Kominfo/Komdigi | Current | Certification framework | Telecom equipment | Exact standard by model |
| Malaysia | CMA 1998 + Technical Standards Regulations / SIRIM | MCMC / SIRIM QAS | Current framework | Type/compliance approval | Communications equipment | Exact technical code/model |
10. PRACTICAL E2E EXPORT PROCESS
PRODUCT + MARKET SCAN
Confirm complete wired L2 switch scope and screen managed/unmanaged/PoE/industrial, L2+, radio and security variants.
HS – POLICY – ORIGIN
Compare exact model with Notice 16181; screen Decrees 341/332 and dual-use controls; choose origin route.
CONTRACT + BUYER REQUIREMENTS
Freeze PO/contract, Incoterm, payment, importer, compliance deliverables, firmware region and RMA terms.
COMPLIANCE + ORIGIN
Complete destination evidence, triggered licences, and origin audit trail.
PACKING + BOOKING
Select Air/Sea; ESD, port caps, shock/moisture protection; confirm package/weights and battery/DG.
EXPORT DECLARATION
Declare a sufficiently technical Layer-2 switching description and cross-check all documents.
SI – VGM – CY/CFS – LOADING
Freeze carrier data, SI/VGM, draft B/L/AWB and on-board details.
FINAL DOCS – PAYMENT – ARCHIVE
Release final transport/origin/compliance/bank set and retain classification, security, test and RMA evidence.
11. PRE-ETD / CARGO READY / CUT-OFF TIMELINE
| MILESTONE | LOCK | DATA / DOCUMENT | OWNER | DELAY RISK |
|---|---|---|---|---|
| Before Contract | L2 scope, market, HS draft, crypto/security, origin | Datasheet, buyer requirements, preliminary BOM | Sales/Compliance/Engineering | Order accepted without feasible compliance |
| Before Cargo Ready | Test/cert, licence if any, origin, packing | Compliance file, origin working, packing data | QA/Compliance/Factory | Goods ready but legal file incomplete |
| Before CY/CFS | Customs, trucking, gate-in | Declaration, booking, weights | Ops/Customs/Forwarder | Roll/storage |
| Before SI/VGM | B/L master data, VGM | SI, shipper/consignee/marks | Docs/Forwarder | Amendment/discrepancy |
| Post on-board | Origin/final transport/buyer-bank docs | On-board data, B/L/AWB, C/O/proof | Docs/Finance/Compliance | Document/payment/origin delay |
12. INCOTERMS – TRANSPORT – PACKING – COST
| ITEM | L2 SWITCH PRACTICE | CONTROL |
|---|---|---|
| Incoterm | FCA/FOB/CPT/CIP/DAP depending booking and delivery strategy | Do not confuse risk-transfer point with cost allocation |
| Air | NPI/sample/RMA/urgent | Chargeable weight, ESD, shock |
| Sea | Volume shipments | Moisture, stacking, VGM/cut-off |
| Packing | ESD bag/foam, port/SFP caps, carton/pallet | Map serial/MAC to cartons |
| DG | Usually non-DG unless battery/UPS/other regulated accessory is present | Run exact battery/DG screen |
| Cost | Compliance, permits if triggered, C/O, packing, trucking, freight, insurance | No absolute cost figure without quote |
13. RISKS & CONTROLS
| RISK | ROOT CAUSE | IMPACT | CONTROL | TIMING |
|---|---|---|---|---|
| Wrong L2/L3 classification | Family catalogue hides routing/radio/security | HS/policy/C/O error | Exact feature matrix + Notice 16181 benchmark | Pre-contract |
| MACsec missed | Encryption not reviewed | Licence/shipment hold | Decree 341 crypto screen | Before Contract/Cargo Ready |
| Decree 332 inferred from HS | Function not checked | Over/under-compliance | Appendix function match | Classification |
| Origin fails | Imported content not meeting CTSH/RVC | Preference denied | Origin Audit Trail | Before proof |
| Wrong U.S. FCC route | Blanket FCC-ID assumption or Part 15 omission | Market delay | Unintentional vs intentional radiator analysis | Before Cargo Ready |
| HK/ID/MY scope mismatch | Local technical/certification scope not confirmed | Importer hold/retest | Local importer + exact model certificate | Pre-shipment |
| Missed cut-off | Customs/SI/packing delay | Roll/storage | Milestone ownership | Cut-off |
| Lost traceability | Serial/MAC/HW rev not mapped | RMA/audit issues | Serial-MAC-package archive | Packing/post-shipment |
14. FAQ
1. Can a wired Ethernet L2 switch be exported normally from Vietnam?
Usually yes under the ordinary electronics export process, subject to exact-model screening for cryptography, cybersecurity, dual-use/end-use and destination requirements.
2. What is the strongest reference HS direction?
8517.62.49 is strongly supported by Customs Notice 16181/TB-CHQ for a comparable Cisco Layer-2 switch, but it is not universal.
3. Do VLAN/STP/SNMP features make it civil cryptography?
Not by themselves. Identify actual encryption/decryption and Appendix-II technical functions, especially IPsec VPN, TLS VPN and MACsec.
4. Why is MACsec a high-priority gate?
Decree 341/2026 expressly lists MACsec within IP-flow security technologies, so the exact model needs licence-scope screening.
5. Does HS 8517.62.49 automatically trigger Decree 332?
No. Cybersecurity-product control depends on the product function matching the Appendix, not HS alone.
6. What RCEP origin rule applies to 8517.62?
CTSH or RVC40, supported by BOM/input-HS/production/cost evidence.
7. Does every U.S.-bound wired switch need an FCC ID?
No. Part 15 can use SDoC or Certification depending the device; intentional radio transmitters follow a separate route.
8. Is OFCA certification always mandatory in Hong Kong?
No. HKTEC distinguishes VCS and CCS; VCS wireline CPE may connect without mandatory certification.
9. What should be locked for Indonesia and Malaysia?
The local importer should confirm exact certification/model scope under Komdigi in Indonesia and MCMC/SIRIM QAS in Malaysia before Cargo Ready.
10. What should be retained after shipment?
Keep customs/transport/origin documents plus technical classification, crypto/cyber screening, destination test/cert scope, BOM/origin working and model-HW/FW-serial-MAC mapping.
15. POST-SHIPMENT OUTPUTS & ARCHIVE
- Completed export declaration and customs file.
- Final B/L/AWB/Sea Waybill.
- Origin proof and Origin Audit Trail.
- Destination FCC/HKTEC/Komdigi/MCMC-SIRIM evidence where applicable.
- Decree 341/332/dual-use screening and licence where triggered.
- Buyer/bank/payment/insurance/claim file.
- Technical classification evidence.
- Model/HW/FW/serial/MAC/package traceability map.
TGIMEX SOLUTIONS
Operational control for L2-switch exports: freeze exact model/HS/policy before Cargo Ready, align destination access and origin, and reconcile documents through post-shipment.
HS, Decree 341/332/dual-use, FTA/PSR, BOM and audit-trail review by exact model.
Booking, customs, SI/VGM/cut-offs, B/L/AWB, buyer documents and archive.
NEED TO REVIEW IMPORT PROCEDURES OR A SHIPPING PLAN?
Send us the product name, shipping route, current dossier, or implementation request in advance so we can suggest a suitable approach that is practical, focused, and aligned with your shipment.
Vietnam Import Procedure for Fruit Wine: HS, Food Safety, Alcohol Stamps and 2026 Taxes
Import procedure guide for herbal alcoholic drinks
Sparkling wine import procedures into Vietnam 2026: licensing, food safety, e-stamps, taxes and origin
Import procedure guide for whisky
Import Procedures for Sake / Soju into Vietnam: HS, Food Safety, E-stamps, SCT and C/O 2026
Brandy / Cognac Import Procedures into Vietnam: HS, Alcohol Licence, Food Safety, Stamps and 2026 Taxes
Import procedure guide for energy drinks
Herbal Drink Import Procedures in Vietnam: HS, Food Safety, Self-Declaration and Labelling 2026
Bottled / Canned Coffee Import Procedure in Vietnam: HS, Food Safety, VAT and Labeling 2026
Beer Import Procedures into Vietnam: HS, Food Safety, SCT, VAT, Origin and Labelling 2026
Baijiu and distilled spirits import procedures into Vietnam 2026: HS, licensing, food safety, stamps and taxes
Guide to Vietnam import procedure for bottled/canned milk tea
Import procedures for carbonated soft drinks into Vietnam: HS, food safety, VAT, excise tax, C/O and labels
Import Procedures for Fruit Juice into Vietnam 2026
Vietnam bottled tea import procedures: HS, food safety, labeling, VAT and sugar tax