SWITCH CISCO

Layer 2 switching

MAC table

Up to 8,192 MAC addresses

Spanning Tree Protocol (STP)

Standard 802.1d Spanning Tree support, enabled by default

Fast convergence using 802.1w (Rapid Spanning Tree [RSTP])

Multiple Spanning Tree instances using 802.1s (MSTP)

16 instances are supported

Port grouping

Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP)

Load balance based on source and destination MAC address, or source and destination MAC/IP

VLAN

Support for up to 256 VLANs simultaneously

Port-based and 802.1Q tag-based VLANs

Management VLAN

Guest VLAN

Auto voice VLAN

Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS

QinQ VLAN

VLANs transparently cross a service provider network while isolating traffic among customers

Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP)

Protocols for automatically propagating and configuring VLANs in a bridged domain

Head-Of-Line (HOL) blocking

HOL blocking prevention

Jumbo frame

Frame sizes up to 9216 supported

Loopback detection

Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP.

Automatic Media-Dependent Interface Crossover (MDIX)

Automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight-through) is installed.

Security

ACLs

Drop or rate limit based on source and destination MAC, VLAN ID or IP address, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, TCP/UDP source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag

Support up to 512 rules

Port security

Creates the ability to lock source MAC addresses to ports; limits the number of learned MAC addresses

IEEE 802.1X (authenticator role)

802.1X: RADIUS authentication; guest VLAN;

Single-host, multiple-host, and multisession mode

RADIUS, TACACS+

Supports RADIUS and TACACS authentication; switch functions as a client

MAC address filtering

Supported

Storm control

Broadcast, multicast, and unknown unicast

DoS protection

DOS attack prevention

STP Bridge Protocol Data Unit (BPDU) Guard

This security mechanism protects the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port

Spanning Tree Loop Guard

This feature provides additional protection against Layer 2 forwarding loops (STP loops).

Secure Shell (SSH) Protocol

SSH is a secure replacement for Telnet traffic. SCP also uses SSH. SSH v1 and v2 are supported

Secure Sockets Layer (SSL)

SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch

QoS

Priority levels

8 hardware queues per port

Scheduling

Strict priority and Weighted Round-Robin (WRR) queue assignment based on DSCP and class of service (802.1p/CoS)

Class of service

Port-based; 802.1p VLAN priority-based; IPv4/v6 IP precedence, Type of Service (ToS), and DSCP-based; Differentiated Services (DiffServ); classification and re-marking ACLs, trusted QoS

Rate limiting

Ingress policer; egress shaping and rate control; per VLAN, per port, and flow-based

Congestion avoidance

A TCP congestion avoidance algorithm is required to reduce and prevent global TCP loss synchronization