- ページ 7

スイッチ Cisco 2950SX 48 SI - Catalyst SwitchのPDF データシートをオンラインで閲覧またはダウンロードできます。Cisco 2950SX 48 SI - Catalyst Switch 15 ページ。 Catalyst 2950 series switches

Feature

Security

Networkwide

security features

Quality of Service

Layer 2 QoS

Benefit

• A private VLAN edge provides security and isolation between ports on a switch, ensuring

that voice trafﬁc travels directly from its entry point to the aggregation device through a

virtual path and cannot be directed to a different port.

• Support for the 802.1x standard allows users to be authenticated regardless of which LAN

ports they are accessing, and it provides unique beneﬁts to customers who have a large

base of mobile (wireless) users accessing the network.

• 802.1x with voice VLAN permits an IP phone access to the voice VLAN regardless of the

authorized or unauthorized state of the port.

• 802.1x with Port Security authenticates the port and manages network access for all MAC

addresses, including that of the client.

• Port Security secures the access to a port based on the MAC address of a user's device.

The aging feature removes the MAC address from the switch after a speciﬁc time to allow

another device to connect to the same port.

• MAC Address Notiﬁcation allows administrators to be notiﬁed of new users added or

removed from the network.

• Multilevel security on console access prevents unauthorized users from altering the

switch conﬁguration.

• Trusted Boundary provides the ability to trust the QoS priority settings if an IP phone is

present and disable the trust setting in the event that the IP phone is removed, thereby

preventing a rogue user from overriding prioritization policies in the network.

• TACACS+ and RADIUS authentication enables centralized control of the switch and

restricts unauthorized users from altering the conﬁguration.

• SNMPv3 (non-crypto) monitors and controls network devices, manages conﬁgurations,

statistics collection, performance, and security.

• Cisco CMS software security wizards ease the deployment of security features for

restricting user access to a server, a portion of the network, or access to the network.

• Support for reclassifying frames is based either on 802.1p class-of-service (CoS) value or

default CoS value per port assigned by network manager.

• Four queues per egress port are supported in hardware.

• The Weighted Round Robin (WRR) scheduling algorithm ensures that low-priority queues

are not starved.

• Strict priority queue conﬁguration via Strict Priority Scheduling ensures that

time-sensitive applications such as voice always follow an expedited path through the

switch fabric.

Cisco Systems, Inc.

Page 7 of 15