Cisco PWR-2955-AC= Datasheet download pdf (Page 3)

Cisco Systems, Inc.

Page 3 of 19

Secure Shell (SSH) Protocol and SNMPv3 protect information from tampering or eavesdropping by encrypting

information being passed along the network, thereby guarding administrative information. Private VLAN Edge

isolates ports on a switch, ensuringthat trafﬁc travels directly from the entry point to the aggregation device through

a virtual path and cannot be directed to another port.

Port-based access control parameters (ACPs) restrict sensitive portions of the network by denying packets based on

source and destination MAC addresses, IP addresses, or Transmission Control Protocol/User Datagram Protocol

(TCP/UDP) ports. ACP lookups are done in hardware, so forwarding performance is not compromised when

implementing thistype of securityin the network.In addition, time-basedACPs allow conﬁguration of differentiated

services based on time periods. ACPs can also be applied to ﬁlter trafﬁc based on differentiated services code point

(DSCP) values.Port security provides another means to ensure that appropriate users are on thenetwork, by limiting

access based on MAC addresses.

For authentication of userswith a Terminal AccessController Access ControlSystem (TACACS+)or RADIUS server,

802.1x provides port-level security. 802.1x inconjunction with aRADIUS server allows for dynamic port-based user

authentication. 802.1x-based user authentication can be extended to dynamically assign a virtual LAN (VLAN)

based on a speciﬁc user, regardless of where that user connects on the network. This intelligent adaptability provides

greater ﬂexibility and mobility to the network’s stratiﬁed user populations. By combining access control and user

proﬁles with secure network connectivity, services, and applications, customers can more effectively manage user

mobility and drastically reduce the overhead associated with granting and managing access to network resources.

With multilayer Cisco Catalyst 2955 Series switches, network managers can implement high levels of console

security. Multilevel access security on the switch console and a Web-based management interface prevent

unauthorized users from accessing or altering switch conﬁgurations. TACACS+ or RADIUS authentication enable

centralized access control of the switch and restrict unauthorized users from altering the conﬁguration. Deploying

security can be done through Cisco CMS Software Security Wizards, which ease the deployment of security features

that restrict user access to a server, a portion of the network, or the entire network.

Network Control through Advanced QoS and Rate Limiting

Cisco Catalyst 2955Series switches offer superior and highlygranular QoS based on Layers 2-4information, to help

ensure that network trafﬁc is classiﬁed and prioritized, and that congestion is avoided in the best possible manner.

These switches can classify, reclassify, police (determine if the packet is in or out of predetermined proﬁles and affect

actionson thepacket), andmark ordrop theincoming packets beforethe packetis placedin theshared buffer.Packet

classiﬁcation allows the network elements to discriminate between various trafﬁc ﬂows and to enforce rate-limiting

policies based on Layer 2 and Layer 3 QoS ﬁelds.

To implement QoS, these switches ﬁrst identify trafﬁc ﬂows or packet groups. They classify or reclassify these groups

using the DSCP ﬁeld in the IP packet and/or the 802.1p class of service (CoS) ﬁeld in the Ethernet packet.

Classiﬁcation and reclassiﬁcation can also be based on criteria as speciﬁc as the source or destination IP address,

source or destination MAC address, or the Layer 4 TCP/UDP ports. At the ingress (incoming port) level, Cisco

Catalyst 2955 Series switches can also perform policing and marking of the packet.

After the packet goes through classiﬁcation, policing, and marking, it is assigned to the appropriate queue before

exiting the switch. Cisco Catalyst 2955 Series switches support four egress (outgoing port) queues per port, allowing

the network administrator to be more discriminating and speciﬁc in assigning priorities for the various applications

on the network. Atthe egress level,the switch performsscheduling—an algorithmthat determines theorder in which

1 2 3 4 ... 19

No comments

Cisco PWR-2955-AC= Datasheet Page 3