Specification Sheet

© 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 17
Feature
Description
IGMP querier
Used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router
HOL blocking
Head-Of-Line (HOL) blocking
Loopback detection
Provides protection against loops by transmitting loop protocol packets out of ports on which loop protection
has been enabled. It operates independently of STP
Layer 3 routing
IPv4 routing
Wire-speed routing of IPv4 packets
Up to 32 static routes and up to 16 IP interfaces
IPv6 routing
Wire-speed routing of IPv6 packets
Layer 3 interface
Configuration of Layer 3 interface on physical port, LAG, VLAN interface, or loopback interface
Classless Interdomain Routing
(CIDR)
Support for CIDR
DHCP relay at Layer 3
Relay of DHCP traffic across IP domains
User Datagram Protocol (UDP)
relay
Relay of broadcast information across Layer 3 domains for application discovery or relaying of bootP/DHCP
packets
Security
SSL
Secure Sockets Layer (SSL) encrypts all HTTPS traffic, allowing secure access to the browser-based
management GUI in the switch
Secure Shell (SSH) Protocol
SSH is a secure replacement for Telnet traffic. Secure Copy (SCP) also uses SSH. SSH v1 and v2 are
supported
IEEE 802.1X (authenticator role)
RADIUS authentication, guest VLAN, single/multiple host mode, and single/multiple sessions
Secure Core Technology (SCT)
Ensures that the switch will receive and process management and protocol traffic no matter how much traffic
is received
Secure Sensitive Data (SSD)
A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch,
populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or
encrypted is provided according to the user-configured access level and the access method of the user
Port security
Ability to lock source MAC addresses to ports and limit the number of learned MAC addresses
RADIUS
Supports RADIUS authentication for management access. Switch functions as a client
Storm control
Broadcast, multicast, and unknown unicast
DoS prevention
Denial-of-Service (DoS) attack prevention
Access Control Lists (ACLs)
Support for up to 512 rules
Drop or rate limit based on source and destination MAC, VLAN ID or IP address, protocol, port, differentiated
services code point (DSCP)/IP precedence, TCP/UDP source and destination ports, 802.1p priority, Ethernet
type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag
STP loopback guard
Provides additional protection against Layer 2 forwarding loops (STP loops)
Quality of service
Priority levels
8 hardware queues
Scheduling
Strict priority and Weighted Round-Robin (WRR) queue assignment based on DSCP and class of service
(802.1p/CoS)
Class of service
Port based; 802.1p VLAN priority based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP based;
Differentiated Services (DiffServ); classification and re-marking ACLs, trusted QoS
Rate limiting
Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based
Congestion avoidance
A TCP congestion avoidance algorithm is required to reduce and prevent global TCP loss synchronization
Standards
Standards
IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T
Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE
802.3x Flow Control, IEEE 802.3 ad LACP, IEEE 802.1D (STP), IEEE 802.1Q/p VLAN, IEEE 802.1w RSTP,
IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, RFC 768,
RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 879, RFC 896, RFC 826, RFC 854, RFC 855, RFC
856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC
1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC
1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC
1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC
2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC
2863, RFC 3164, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330