Datasheet

Data Sheet

The Cisco Catalyst 4500 Supervisor Engine 6-E also delivers a comprehensive set of

management tools to provide the required visibility and control in the network. Managed with

CiscoWorks solutions, Cisco Catalyst switches can be configured and managed to deliver end-to-

end device, VLAN, traffic, and policy management. The CiscoWorks LAN Management Solution

(LMS) bundle offers tools such as CiscoWorks Resource Manager Essentials and CiscoView.

These Web-based management tools offer several services, including automated inventory

collection, software deployment, easy tracking of network changes, views into device availability,

and quick isolation of error conditions.

Advanced Security

The Cisco Catalyst 4500 Supervisor Engine 6-E extends the rich set of industry-leading, integrated

security features to proactively lock down a critical network infrastructure by supporting unicast

Reverse Path Forwarding (uRPF) in hardware. uRPF helps prevents traffic spoofing by identifying

traffic coming in on an unexpected port. The Cisco Catalyst 4500 Supervisor Engine 6-E also

reduces network security risks with a rich set of Cisco NAC capabilities and 802.1X-based user

authentication, authorization, and accounting (AAA). The security policy enforcement is

uncompromised with the wire-rate, dedicated access control lists (ACLs) to fend off ever-

increasing virus and security attacks. The Cisco Catalyst 4500 Supervisor Engine 6-E offers

powerful, easy-to-use tools to effectively prevent untraceable man-in-the-middle attacks, control-

plane resource exhaustion, IP spoofing, and flooding attacks, without any change to the end-user

or host configurations. Secure remote access, file transfers, and network management are

accomplished with the Secure Shell (SSH Versions 1 and 2) Protocol, Secure Copy Protocol

(SCP), and SNMPv3, respectively.

Table 8. Key Supervisor Engine 6-E Security Features

Feature and Description Supervisor Engine 6-E

Security hardware entries 64,000

Cisco NAC and DHCP Snooping entries 12,000

uRPF Yes, supported in hardware

802.1X Yes

802.1X extensions Yes*

IP Source Guard, Dynamic ARP Inspection (DAI), and

DHCP Snooping

Yes

Cisco NAC Yes

* This feature will be supported in a Q1 CY’08 Release.

Please refer to the “Features at a Glance” section of this data sheet for a complete listing of

supported features.