Data Sheet

Data Sheet
© 2011 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 7 of 15
●
802.1X Supplicant with Network Edge Access Transport (NEAT) enables extended secure access where
compact switches in the conference rooms have the same level of security as switches inside the locked
wiring closet.
Other Advanced Security Features
Other Advanced Security features include but are not limited to:
●
Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users
cannot snoop on other users' traffic.
●
Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while
placing them on appropriate voice and data VLAN.
●
Port-Based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.
●
Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3
(SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions.
SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software
image because of U.S. export restrictions.
●
Bidirectional data support on the Switched Port Analyzer (SPAN) port allows Cisco Intrusion Detection
System (IDS) to take action when an intruder is detected.
●
TACACS+ and RADIUS Authentication facilitates centralized control of the switch and restricts
unauthorized users from altering the configuration.
●
MAC Address Notification allows administrators to be notified of users added to or removed from the
network.
●
Multilevel Security on Console Access prevents unauthorized users from altering the switch configuration.
●
Bridge Protocol Data Unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when
BPDUs are received to avoid accidental topology loops.
●
Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator's control from
becoming Spanning Tree Protocol root nodes.
●
IGMP Filtering provides multicast authentication by filtering out nonsubscribers and limits the number of
concurrent multicast streams available per port.
●
Dynamic VLAN Assignment is supported through implementation of VLAN Membership Policy Server client
capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of
IP addresses.
Table 3 shows switch hardware information.
Table 3. Cisco Catalyst 3560-C and 2960-C Series Compact Switch Hardware
Description Specification
Cisco Catalyst 3560-C Cisco Catalyst 2960-C
Forwarding Bandwidth 10 Gbps 10 Gbps
Flash memory 64 MB 64 MB
Memory DRAM 128 MB 128 MB
Max VLANs 255 255
VLAN IDs 4K 4K
Maximum transmission unit (MTU) Up to 9000 bytes Up to 9000 bytes
Jumbo frames 9018 bytes 9018 bytes
Performance
Forwarding rate 64 Byte Packet Cisco Catalyst 3560-C