Cisco WS-C3550-12G Software Configuration Manual page 37

Chapter 1 Overview
Table 1-1 Features (continued)
Redundancy
Hot Standby Router Protocol (HSRP) for command switch and Layer 3 router redundancy
•
UniDirectional Link Detection (UDLD) on all Ethernet ports for detecting and disabling unidirectional links on
•
fiber-optic interfaces caused by incorrect fiber-optic wiring or port faults
IEEE 802.1D Spanning Tree Protocol (STP) for redundant backbone connections and loop-free networks. STP has these
•
features:
Per-VLAN Spanning Tree (PVST) for balancing load across VLANs
–
Port Fast mode for eliminating forward delay by enabling a port to immediately change from a blocking state to a
–
forwarding state
UplinkFast, cross-stack UplinkFast, and BackboneFast for fast convergence after a spanning-tree topology change
–
and for achieving load balancing between redundant uplinks, including Gigabit uplinks and cross-stack Gigabit
uplinks
STP root guard for preventing switches outside the network core from becoming the STP root
–
The switch supports up to 128 spanning-tree instances.
Note
VLAN Support
• Support for up to 1005 VLANs for assigning users to VLANs associated with appropriate network resources, traffic
patterns, and bandwidth
• VLAN Query Protocol (VQP) for dynamic VLAN membership
• Inter-Switch Link (ISL) and IEEE 802.1Q trunking encapsulation on all ports for network moves, adds, and changes;
management and control of broadcast and multicast traffic; and network security by establishing VLAN groups for
high-security users and network resources
Dynamic Trunking Protocol (DTP) for negotiating trunking on a link between two devices and for negotiating the type
•
of trunking encapsulation (802.1Q or ISL) to be used
• VLAN Trunking Protocol (VTP) and VTP pruning for reducing network traffic by restricting flooded traffic to links
destined for stations receiving the traffic
Security
• Password-protected access (read-only and read-write access) to management interfaces (CMS and CLI) for protection
against unauthorized configuration changes
• Multilevel security for a choice of security level, notification, and resulting actions
• Static MAC addressing for ensuring security
Protected port option for restricting the forwarding of traffic to designated ports on the same switch
•
Port security option for limiting and identifying MAC addresses of the stations allowed to access the port
•
Bridge Protocol Data Unit (BPDU) Guard for shutting down a Port Fast-configured port when an invalid configuration
•
occurs
Standard and extended IP access control lists (ACLs) for defining security policies on routed interfaces
•
• VLAN ACLs (VLAN maps) for providing intra-VLAN security by filtering traffic based on information in the MAC, IP,
and TCP/User Datagram Protocol (UDP) headers
Source and destination MAC-based ACLs for filtering non-IP traffic
•
• IEEE 802.1X port-based authentication to prevent unauthorized devices (clients) from gaining access to the network
78-11194-03
Catalyst 3550 Multilayer Switch Software Configuration Guide
Features
1-3