Data Sheet

Network Monitoring and Discovery Services
ISDP (Industry Standard Discovery Protocol) Yes Can interoperate with devices running CDP
802.1ab LLDP Yes
802.1ab LLDP - MED Yes
SNMP V1, V2, V3
RMON 1,2,3,9 Yes
sFlow Yes (IPv4 and IPv6 headers)
Security
Network Storm Protection, DoS
Broadcast, Unicast, Multicast DoS Protection
Denial of Service Protection (control plane)
Denial of Service Protection (data plane)
Yes
Yes
Yes
Switch CPU protection
Switch Trafc protection
DoS Attacks Protection SIPDIP
SMACDMAC
FIRSTFRAG
TCPFRAG
TCPFLAG
TCPPORT
UDPPORT
TCPFLAGSEQ
TCPOFFSET
TCPSYN
TCPSYNFIN
TCPFINURGPSH
L4PORT
ICMP
ICMPV4
ICMPV6
ICMPFRAG
PINGFLOOD
SYNACK
CPU Rate Limiting
Yes Applied to IPv4 and IPv6 multicast packets with unknown L3 addresses when IP routing/
multicast enabled
ICMP throttling Yes Restrict ICMP, PING trafc for ICMP-based DoS attacks
Management
Management ACL (MACAL)
Max Rules
Yes
64
Protects management CPU access through
the LAN
Out of band Management Yes
In-band management can be shut down
entirely when out-of-band management
network
Radius accounting Yes RFC 2565 and RFC 2866
TACACS+ Yes
Malicious Code Detection Yes
Software image les and Conguration les
with digital signatures
Network Trafc
Access Control Lists (ACLs) L2 / L3 / L4 MAC, IPv4, IPv6, TCP, UDP
Time-based ACLs Yes
Protocol-based ACLs Yes
ACL over VLANs Yes
Dynamic ACLs Yes
IEEE 802.1x Radius Port Access Authentication Yes
Up to 48 clients (802.1x) per port are sup-
ported, including the authentication of the
users domain
802.1x MAC Address Authentication Bypass (MAB) Yes
Supplemental authentication mechanism
for non-802.1x devices, based on their MAC
address only
Network Authentication Successive Tiering Yes
Dot1x-> MAP -> Captive Portal successive
authentication methods based on cong-
ured time-outs
Port Security Yes
IP Source Guard Yes IPv4 / IPv6
DHCP Snooping Yes IPv4 / IPv6
Dynamic ARP Inspection Yes IPv4 / IPv6
IPv6 RA Guard Stateless Mode Yes
Intelligent Edge Managed Switches
Data Sheet | M4300 series
PAGE 42 of 60