Cisco 3750E-24TD - Catalyst Switch - Stackable Manual de usuario Pagina 6

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 20
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 5
Data Sheet
© 2010 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 20
Superior Quality of Service
The Cisco Catalyst 3750-E Series offers Gigabit Ethernet speed with intelligent services that keep everything flowing
smoothly, even at 10 times the normal network speed. Industry-leading mechanisms for marking, classification, and
scheduling deliver superior performance for data, voice, and video traffic, all at wire speed.
Following are some of the QoS features supported in the Cisco Catalyst 3750-E Series Switches:
Cross-stack QoS allows QoS to be configured across the entire stack.
802.1p class of service (CoS) and differentiated services code point (DSCP) field classification is provided,
using marking and reclassification on a per-packet basis by source and destination IP address, MAC
address, or Layer 4 TCP/UDP port number.
Cisco control-plane and data-plane QoS ACLs on all ports help ensure proper marking on a per-packet basis.
Eight egress queues per port help enable differentiated management of different traffic types across the
stack. Four queues are user configurable and four are reserved for system use.
Shaped Round Robin (SRR) scheduling helps ensure differential prioritization of packet flows by intelligently
servicing the ingress queues and egress queues.
Weighted Tail Drop (WTD) provides congestion avoidance at the ingress and egress queues before a
disruption occurs.
Strict priority queuing helps ensure that the highest-priority packets are serviced ahead of all other traffic.
The Cisco committed information rate (CIR) function provides bandwidth in increments as low as 8 Kbps.
Rate limiting is provided based on source and destination IP address, source and destination MAC address,
Layer 4 TCP/UDP information, or any combination of these fields, using QoS ACLs (IP ACLs or MAC ACLs),
class maps, and policy maps.
Up to 64 aggregate or individual policers are available per Fast Ethernet or Gigabit Ethernet port.
Advanced Security
The Cisco Catalyst 3750-E Series supports a comprehensive set of security features for connectivity and access
control, including ACLs, authentication, port-level security, and identity-based network services with 802.1x and
extensions. This set of comprehensive features not only helps prevent external attacks, but defends the network
against “man-in-the-middle” attacks, a primary concern in today’s business environment. The switch also supports
the Network Admission Control (NAC) security framework.
Dynamic ARP Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the
insecure nature of the ARP protocol.
DHCP Snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses.
This feature is used by other primary security features to prevent a number of other attacks such as ARP
poisoning.
IP source guard prevents a malicious user from spoofing or taking over another user’s IP address by creating
a binding table between the client’s IP and MAC address, port, and VLAN.
Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turning a
broadcast segment into a nonbroadcast multi-access-like segment.
Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users
cannot snoop on other users’ traffic.
Unicast RPF feature helps mitigate problems caused by the introduction of malformed or forged (spoofed) IP
source addresses into a network by discarding IP packets that lack a verifiable IP source address.
IEEE 802.1x allows dynamic, port-based security, providing user authentication.
Vista de pagina 5
1 2 3 4 5 6 7 8 9 10 11 ... 19 20

Comentarios a estos manuales

Sin comentarios