Table of Contents
Advertisement
v Security
– Bridge protocol data unit (BPDU) guard for shutting down a Port
Fast-configured port when an invalid configuration occurs
– Protected port option for restricting the forwarding of traffic to designated
ports on the same switch
– Password-protected access (read-only and write-only access) to
management interfaces (the device manager and CLI) for protection
against unauthorized configuration changes
– Port security option for limiting and identifying MAC addresses of the
station allowed to access the port
– Port security aging to set the aging time for secure addresses on a port
– Multilevel security for a choice of security level, notification, and resulting
actions
– MAC-based port-level security for restricting the use of a switch port to a
specific group of source addresses and preventing switch access from
unauthorized stations
– Terminal Access Controller Access Control System Plus (TACACS+), a
proprietary feature for managing network security through a TACACS
server
– IEEE 802.1X port-based authentication to prevent unauthorized devices
from gaining access to the network
– IEEE 802.1X port-based authentication with VLAN assignment for
restricting 802.1X-authenticated users to a specified VLAN
– IEEE 802.1X port-based authentication with port security for
authenticating the port and managing network access for all MAC
addresses, including that of the client
– IEEE 802.1X port-based authentication with voice VLAN to allow an IP
phone access to the voice VLAN irrespective of the authorized or
unauthorized state of the port
– IEEE 802.1X port-based authentication with guest VLAN to provided
limited services to non-802.1X-compliant users
– Standard and extended IP access control lists (ACLs) for defining security
policies
v Quality of Service (QoS) and Class of Service (CoS)
– Classification
- IEEE 802.1p CoS with eight priority queues on the Gigabit Ethernet
switch-module ports for prioritizing mission-critical and time-sensitive
traffic from data, voice, and telephony applications
- IP Differentiated Services Code Point (IP DSCP) and CoS marking
priorities on a per-port basis for protecting the performance of
mission-critical applications
Chapter 1. Introducing the Gigabit Ethernet switch module
5
Advertisement
Table of Contents
