思科Caalys E E 产品预览

Catalyst3750-ECatalyst3560-E

Catalyst2960

OverviewFullLayer3RoutingLayer2IntelligentServicesGUI-ManagedMostCompleteLineofFixedConfigurationLANProductsFunction,Flexibility,ScalabilityPrice-PerformanceCiscoCatalyst3560-EandCatalyst356010/100andGEconfigurations+210GEEnterprise-classintelligentLayer3/4servicesModularpowersupplywith3560-EPoEconfigurationswithupto15.4Wonall48portsCiscoCatalyst296010/100and10/100/1000Layer2switching8,24,and48portconfigurationswithdual-purposeGiguplinksPoEconfigurationswithupto15.4Wupto24portsEntrylevelLANLiteIOSandenhancedLANBaseIOSforintelligentservicesCiscoCatalyst3750-EandCatalyst3750Stackable10/100andGEconfigurations+210GECiscoStackWise™PlusandStackWisetechnologyEnterprise-classintelligentLayer3/4servicesModularpowersupplywith3750-EPoEconfigurationswithupto15.4Wonall48portsCiscoCatalyst494810/100/1000+210GEwirespeedswitchingRack-optimizedserverswitchingJumboframesupportDual,hotswappable,internalpowersuppliesHotswappablefantrayCiscoCatalystExpress500Low-density,standalone,managed10/100switchingTailoredforbusinesseswithupto250usersIntroducingTheCatalyst3750-EThenextgenerationcomplementtotheCatalyst375024or48GEportswith2x10GEuplinksWire-speedperformanceTransitionto10GEwiththeTwinGigadapter,a10GEmodulethatacceptstwoGESFPsStackWisePlusSupportsoriginalStackWisefeaturesDoublethespeedoforiginalStackWiseBackwardscompatiblewiththeCatalyst3750PowerModularpowersupplyandfanblowerDifferentpowersupplysizes48portsoffullIEEEPOEinasinglerackunitNewandimprovedredundantpowersupplyCiscoCatalyst2960SeriesSwitches

FastEthernetandGigabitEthernetin8,24,and48portconfigurationsforentry-levelenterpriseandmid-marketcustomersPoEconfigurationswithupto15.4Wupto24portsOffersenhancedLayer2+intelligentLANservices:AvailabilityEnhancedsecurityAdvancedqualityofservice(QoS)SimplifiedmanagementandtroubleshootingforlowertotalcostofownershipCiscoNetworkAssistantandCiscoSmartportsLimitedlifetimehardwarewarrantyandsoftwareupdatesatnoadditionalchargeFastEthernetin24and48portconfigurationsforsmallbranchofficesandwiringclosetsOffersstandardLayer2serviceswithentry-levelavailability,security,andQoSScalableandsecurenetworkmanagementSimplifiedmanagementandtroubleshootingforlowertotalcostofownershipCiscoNetworkAssistantandCiscoSmartportsLimitedlifetimehardwarewarrantyandsoftwareupdatesatnoadditionalchargeCatalyst2960LANBaseSeriesCatalyst2960LANLiteSeriesUsesCiscoASICsforsuperiorqualityandhardwareandsoftwareintegrationCiscoCatalyst2960LANBaseSeries—

ModelOverviewEnterprise-classintelligent

services:AdvancedQoS,

enhancedsecurity,highavailability4810/100ports210/100/1000uplinkports2410/100ports210/100/1000uplinkportsCatalyst2960-24TT-LCatalyst2960-48TT-L2410/100ports2dual-purposeuplinkportsCatalyst2960-24TC-LCatalyst2960-48TC-L4810/100ports2dual-purposeuplinkports2010/100/1000ports4dual-purposeuplinkportsCatalyst®2960G-24TC-LCatalyst2960G-48TC-L4410/100/1000ports4dual-purposeuplinkports810/100ports1dual-purposeuplinkportCompactform-factorwithnofanCatalyst2960-8TC-L710/100/1000ports1dual-purposeuplinkportCompactform-factorwithnofanCatalyst2960G-8TC-LSoftwareLANBaseImage2410/100PoEports2dual-purposeuplinkportsCatalyst®2960-24PC-LCatalyst2960-24LT-L2410/100ports(8PoEports)210/100/1000uplinkports810/100/1000ports110/100/1000PoEInputportCompactform-factorwithnofanCatalyst2960PD-8TT-LCiscoCatalyst2960LANLiteSeries—ModelOverviewSoftwareLANLiteImage2410/100portsCatalyst2960-24-S2410/100ports2dual-purposeuplinkportsCatalyst2960-24TC-SCatalyst2960-48TC-S4810/100ports2dual-purposeuplinkportsNote:Catalyst2960SwitchescannotbeupgradedordowngradedbetweenLANBaseandLANLitesoftware.EntrylevelQoS,security,andavailabilitywithafocusonease-of-useandlowertotalcostofownershipSmallsize(HxWxD)

4.4cmx27cmx16-23cmFlexiblewallandunderthedeskmountingDurablemetalshellCableguardInternalpowersupplyandrightanglepowercordPassivecooling(nofan)MagnetincludedSecuritylockingslot19inchrackmountoptionCatalyst2960CompactSwitchesMeetinguniquephysicalrequirementsoftheofficeworkspace,conferencerooms,andclassrooms,andmicrobranchofficesServicesandWarrantyfor

TheCiscoCatalyst2960SeriesLimitedlifetimehardwarewarrantyAdvanceReplacementshippingwithin10businessdaysGuestaccesstoCOngoingCiscoIOSSoftwareupdatesatnoadditionalcostCiscoSMARTnet®andSMARTnetOnsiteSupportAround-the-clock,globalaccesstotheCiscoTechnicalAssistanceCenter(TAC)AccesstotheextensiveCknowledgebaseandtoolsNext-business-dayadvancehardwarereplacement(premiumoptionsavailableforbusiness-criticaldevices,suchas2-hourreplacementandonsitepartsreplacementandinstallation)CiscoSmartFoundationService(formerlySMBSupportAssistant)CiscoFoundationTechnologyOptimizationServiceCatalyst3750-EModelsPoEanddataonlyoptionsAny3750-EmodelcanbeconnectedwithanotherthroughStackWisePlus3750-Emodelscanbecombinedinastackwithexisting3750modelsinamixedstack4810/100/1000TPortsw/POE+2x10GE2410/100/1000TPortsw/POE+2x10GE4810/100/1000TPorts+2x10GE2410/100/1000TPorts+2x10GECatalyst3560-EModelsThe3560-EisforstandalonedeploymentsSimilarfeaturestothe3750-E,butStackWiseisremovedSamesoftwarefeaturesSamePoEoptions4810/100/1000TPortsw/POE+2x10GE2410/100/1000TPortsw/POE+2x10GE4810/100/1000TPorts+2x10GE2410/100/1000TPorts+2x10GEStackWisePlusSpeedimprovedto64Gbps*SupportslocalswitchingLocalpacketsdonottraversethestackIntelligentlyforwardstrafficovertheStackWiseconnectionLoadBalancingQualityofServiceTrafficOptimizationBackwardcompatiblewiththeoriginalStackWiseFault-tolerant,Bi-directional64-GbpsstackinterconnectionAutomatedConfiguration&ManagementSinglenetworkinstance(IP,SNMP,CLI,Spanning-TreeProtocol,VLAN)Master/secondaryarchitecturewithmasterfailoverCross-StackEtherChannel®,cross-stackQoS*Fortypicaltrafficpatterns,actualperformancemaybehigherorlowerStackWisePlusArchitectureABCDLocalSwitchingEFStackWisePlus12344Destinationswitchremovespacketsanddeliversthem2IngressPolicing3Egressqueuingandloadbalancing124or48portswirespeedNopacketstraverseStackWiseconnectionsStackWisePlusRing10GigabitEthernetTwo10GEuplinkinterfacesWirerateforwardingperformanceSupportedX2TransceiversLX4(MMF-300mSMF-10km)LR(SMF10km)SR(MMF)CX4(Copper)ER(SMF40km)TwinGigAdapterconvertsanX2interfaceintodualSFPinterfacesAllSFPssupportedon3750platformaresupportedwiththeTwinGigAdapterTwinGigAdaptersarehotswappablewithX2modulesOutofBandManagementTwomanagementportsRS-232serialconsoleport10/100BASE-TXEthernetportOut-of-bandmanagementsupportsTelnet,TFTP,andSSHv2OneinterfacecanmanagetheentirestackofswitchesIfmultipleout-of-bandportsareconnectedtodifferentswitchesinastack,oneisselectedforactiveusePowerFieldReplaceablePowerSuppliesRPS245024-PortSwitch48-PortSwitch24-PortPoESwitch48-PortPoESwitchC3K-PWR-265WDCC3K-PWR-265WACC3K-PWR-750WACC3K-PWR-1225WACPowerSupplyCiscoCatalyst3750-Eand3560-ESeriesSwitchTypeWidevarietyofpowersupplyoptions48portPOE,24portPOE,anddataonlyoptionsDCpoweravailableineverymodelfordataonlyWiththeRPS2300,apowersupplycanbereplacedwithoutpoweringdowntheswitchACSupplyDCSupplySwitchwith1225WACSupplyRedundantPowerSupply–RPS2300SeamlessfailoverfromswitchtoRPSwhenPSfailsAutomaticback-offtoswitchwhenitspowersupplyreturnsRPSandswitchessupportdualACpowercircuitsConnectuptosixswitchesTwoswitchescanbeactivelybackedupDualmodularpowersuppliesallowtheRPStomatchtheswitches’suppliesFieldreplaceableblowermoduleBackwardsCompatibleSwitches:2950,2960,2970,3550,3560,and3750Routers:2811,2821,2851,and3825OperationsIOSSoftwareFeatureSetsThreeIOSfeaturesetsIPBaseLayer2ForwardingBaseIPv6ServicesBasicRoutingSecurityIPServicesFullEIGRPandOSPFRoutingMulticastRoutingPolicyBasedRoutingAdvancedIPServicesIPv6RoutingCiscoCatalyst

IntelligentSwitchingInfrastructurePerformance,

AvailabilityQoSSecurityManageabilityIntelligentSwitchingisaCommonFoundationofCapabilitiesacrossCisco®Catalyst®SwitchesWire-speedforwardingNoperformance

effectwithallservicesenabledLayer2,3,4classificationPolicingandshapingMultiplequeuesGranularcontrolLayer2,3,4accesscontrolIdentity-basedauthenticationManagementsecurityAdmissioncontrolEnd-to-endmanageabilityforcentralizedadministrationWeb-basedorcommand-lineinterface(CLI)AnalysisandplanningtoolsAggregationSpeedMismatch10Mbps1000MbpsLANtoWAN10Mbps64kbpsWhereCongestionExists,QoSisRequiredPointsofaggregationLinksandbuffersPointsofsubstantialspeedmismatchTransmitbufferstendtofill(TCPwindowing)Bufferingreducesloss,introducesdelayCiscoCatalystSeriesExtensiveQoSFeaturesRXQueue1Queue2Queue3Queue4IngressPoliceClassifyTXIngress

Queuing/SchedulingCongestionControlMarkS2AdvancedTrafficShapingandSchedulingFourQueuesperPortShapedRoundRobinStrictPriorityQueuingAdmissionControlPreventNetworkCongestionInputandOutputPolicingperPortTrafficClassificationandMarkingforDifferentiatedServicesPer-PortorIndividual/AggregateFlowClassificationandRewritingofMACAddress,802.1pCoS/DSCP,IPAddress,andTCP/UDPPortEgress

Queuing/SchedulingCongestionControlWANAutoQoSOneCommandperInterfacetoEnableandConfigureQoS.

ModifyGlobalandInterfaceSettingstoMakeQoSforVoIPWork.Cisco®CallManagerCiscoUnity®SoftwareVoiceApplicationsVoice

GatewaysPhoneVLAN=110CampusQoSConsiderationsTrustBoundaryExtensionandOperation1SwitchandPhoneExchangeCDP;TrustBoundaryIsExtendedtoIPPhone2PhoneSetsCoSto5forVoIPandto3forCall-SignalingTraffic3PhoneRewritesCoSfromPCPortto0AllPCTrafficIsResettoCoS04SwitchTrustsCoSfromPhoneandMapsCoS

DSCPforOutputQueuing“CoS5=DSCP46”“CoS3=DSCP24”“CoS0=DSCP0”41SoIWillTrustYourCoS”“ISeeYou’reanIPPhone,TRUSTBOUNDARY“Voice=5,Signaling=3”2PCSetsCoSto5forAllTraffic3PCVLAN=10UnauthorizedSwitchEnterpriseServerUnauthorizedSwitchCisco®SecureACSEnterpriseServerMitigatingUnauthorizedDevicesProblem:Well-intentionedusersplaceunauthorizednetworkdevicesonthenetwork,possiblycausinginstability.Solution:CiscoCatalyst®SwitchessupportrogueBPDUfiltering:BPDUGuard,RootGuardIncorrectSTPInfoBPDUGuardNetworkInstabilityAuthorizedSwitchAuthorizedSwitchRootGuardProtectingAgainstWell-IntentionedUsersSecureConnectivitySecureShell(SSH)ProtocolSSHencryptsadministrationtrafficduringTelnetsessionswhileconfiguringortroubleshootingswitches.SecureSocketsLayer(SSL)SSLencryptsnetworkmanagementtraffic,allowingthesecureuseoftoolssuchastheCisco®NetworkAssistant.SNMPv3(withcryptosupport)SNMPv3providesnetworksecuritybyencrypting

administratortrafficduringSNMPsessiontoconfigure

ortroubleshootswitches.KerberosKerberosauthenticatesusersandnetworkservicesusing

atrustedthirdpartytoperformsecureverification.SecureCopySCPprovidesasecureandauthenticatedmethodforcopyingswitchconfigurationsorswitchimagefiles.SCPreliesonSSH.EncryptedDataSecuringLayer2fromSurveillanceAttacksCuttingOffMAC-BasedAttacksProblem:“ScriptKiddie”HackingToolsEnableAttackers’FloodSwitchCAMTableswithBogusMACAddresses,TurningtheVLANintoa“Hub”andEliminatingPrivacySwitchCAMTableLimitIsFiniteNumberofMACAddressesSolution:PortSecurityLimitsMACFloodingAttackandLocksDownPortandSendsanSNMPTrap00:0e:00:aa:aa:aa00:0e:00:bb:bb:bbOnly3MACAddressesAllowedonthePort:Shutdown250,000BogusMACaddressesperSecondswitchportport-securityswitchportport-securitymaximum3switchportport-securityviolationrestrictswitchportport-securityagingtime2switchportport-securityagingtypeinactivityVoice(VLAN)awarePortSecurityScenario–IPphone+hostonsameswitchportPortsecurity&STPviolationsarenowVLAN/voiceawareViolationsforthehostonlyaffect“data”VLANOnlyaffectedVLANisplacedinerrordisablestateVoiceVLANremainsunaffectedImprovesnetworkavailabilityDHCPSpoofingAttackProblem:MalicioususerpretendstobethenetworkDHCPserver.MisconfigureduserstartsupaDHCPserverincorrectly.Malicioususercansendoutbogusaddress,depletetheaddressspace,orspoofthe

defaultgateway.SolutionDonottrustuserportssoonlyDHCPrequestscanbesent.SnoopDHCPinformationforintegrity.RogueDHCPOfferIP:0/24GW:DNS:22DHCPDiscoveryBroadcastVictimDHCPServerUserPortsUntrustedDHCPServer√DHCPClientDHCPServerRogueServerTrustedDHCPSnoopingEnabledDHCPRequestXDHCPACKUntrusted√DHCPSnoopingWhatItDoes:SwitchforwardsonlyDHCPrequestsfromuntrustedaccessports,anddropsallothertypesofDHCPtraffic.DHCPsnoopingallowsonlydesignatedDHCPportsoruplinkportstrustedtorelayDHCPmessages.Itbuilds

aDHCPbindingtablecontainingclientIPaddress,clientMACaddress,port,andVLANnumber.Benefit:DHCPsnoopingeliminates

roguedevicesfrombehaving

astheDHCPserver.FlexLinks—L2RedundancyAchieveLayer2redundancywithoutrequiringSTP(SpanningTreeProtocol)Accessswitcheswithbackuplinks

toDistributionswitches—deployedasFlexlinkpairFastconvergenceuponforwarding

linkfailoverSub100mseccutoverConvergencetimeindependentofnumberofVLANsandMAC-addressesAccessDistributionCatalyst2960Cat6KCat6KFlexLinks—L2Redundancy1.Primarylinkdowndetected(24msecpoll)2.BackuplinkbecomestheactivelinkX√ActiveLinkBackupLinkCat2960FlexlinkVLANloadbalancingPrimarylinkdowndetectedBackupcarriesVLANs60,50,20XPrimaryLink-CarriesVLANs60,50BackupLink-carriesVLAN20gi2/0/8gi2/0/6IntegratedTimeDomainReflectometer(TDR)Layer1TroubleshootingtoolTDRhelpstodetermine:ThelengthofacableWhetherthecableiscorrectlywiredinternally(pin-to-pinwiremapping)Whetherthecablecontainsashortcircuit(wirestouchingeachotherthroughdamagedormissinginsulation)Whetherthecablecontainsabrokenwire(calledan“open”)Whetherthecablesuffersfromelectricalcrosstalk(interference).CISCO-CABLE-DIAG-MIBP

O

R

TCableFaultP

O

R

TUniDirectionalLinkDetection(UDLD)ProtectingAgainstOneWayCommunicationHighlyavailablenetworksrequireUDLDtoprotectagainstonewaycommunicationorpartiallyfailedlinksandtheeffectthattheycouldhaveonprotocolslikeSTPandRSTPAreYou‘Echoing’MyHellos?Primarilyusedonfiberopticlinkswherepatchpanel

errorscouldcauselinkup/up

withmissmatchedtransmit/receivepairsNeighboringportsshouldseetheirowndevice/portID(echo)inthepacketsreceivedfromtheothersideFailingtoreceivethisinformationindicatesmisconfigurationandtheportiserror-disabled.CiscoWorksLANManagementSolution(LMS)Simplifiesandautomatestasksassociatedwith

day-to-daymanagement—Takinginventory,configuration,IOSsoftwaredeploymentandtroubleshooting.Breadthofdevicesupport(over400Ciscodevicetypes)providesasingleapplicationsuiteformanagingmostCisco-labeleddevices.Providesdetailedvisibilityofusers,portsandnetworkconnectivity—topologyservices,usertracking,inventory.Automatesthechangemanagementprocessquicklyidentifyinghardware,softwareandconfigurationchanges—changeauditreports.LMSisasuiteofapplicationsdesignedtosimplifyandaugmentthedailytasksrequiredtomanageaCiscoend-to-endnetwork—reducingtotalcostofownershipandimprovingnetworkavailability.ManagementInterfacesManagesasingledeviceWeb-based—HTMLRouter,switch,

IPphone,wireless…Web-based—JavaCiscoCatalystDeviceManagerCiscoNetworkAssistantManagesa40-devicenetworkExpressSetupPoweruptheswitchandholdthemodebuttonforafewsecondsuntilallthemodeLEDsaregreen.ConnectthePCintotheEthernetportandlaunchthebrowser.LaunchtheExpressSetuppagebyenteringtheIPaddressofinthebrowser.AssigntheswitchIPaddressandmanagementVLAN;enablethesecretpassword,(optional)Telnetpassword,andSNMPconfiguration.CiscoCatalystDeviceManagerEmbeddedintheswitchViewandconfigureasingleswitchusingawebbrowserDisplayswitchtrends,status,andportstatisticsIntegratedSmartPortsforsimpleportconfigurationCiscoNetworkAssistantRelease5.09、静夜四无邻，荒居旧业业贫。。12月-2212月-22Thursday,December8,202210