07-09-08 Council Agenda - Laserfiche WebLink

Home Browse Search

Brochure The Cisco Catalyst 3560 Series also delivers high - performance, hardware -based IP routing for either unicast or multicast traffic. The Cisco Express Forwarding -based routing architecture allows for very high -speed lookups while delivering the stability, performance, and scalability necessary to meet the needs of future requirements. Implementing routed uplinks to the core will improve network availability by enabling faster failover protection and simplifying the Spanning Tree Protocol algorithm by terminating all Spanning Tree Protocol instances at the aggregator switch. Additionally, routed uplinks allow better bandwidth utilization by implementing equal cost routing (ECR) on the uplinks to perform load balancing. Routed uplinks optimize the utility of uplinks out of the wiring closet by eliminating unnecessary broadcast data flows into the network backbone. Private VLANs improve scalability and provide IP address management benefits and Layer 2 security by partitioning a regular VLAN domain into subdomains. Support for the IPv6 Industry standard in the Cisco Catalyst 3560 Series also alleviates address space problems. Advanced Quality of Service The Cisco Catalyst 3560 Series provides intelligent services to keep everything flowing smoothly. Industry- leading mechanisms for marking, classifying, and scheduling deliver best -in -class performance for data, voice, and video traffic -all at wire speed. Important features include Shaped Round Robin scheduling and policing /rate limiting as well as innovations like Scavenger Traffic Queuing functions. The IP Services license (formerly called the Enhanced Muitilayer Image, or EMI) provides a richer set of enterprise -class features, including advanced hardware -based IP Unicast and IP Multicast routing as well as policy -based routing (PBR). The Advanced IP Services license, although not available as a pre - installed option, upgrades Cisco Catalyst 3560 Series switches to include IPv6 routing and IPv6 ACL support. Upgrade licenses are available to upgrade a switch from the IP Base license to the IP Services license or Advanced IP Services license as well as from the IP Services license to the Advanced IP Service license. Enhanced Security The Cisco Catalyst 3560 Series uses the following capabilities to protect sensitive data and network resources from internal and external threats: • The Cisco Catalyst 3560 Series supports Network Admission Control (NAC), an industry initiative sponsored by Cisco Systems° that uses the network infrastructure to enforce security - policy compliance on all devices seeking to access network computing resources, thereby limiting damage from viruses and worms, Using NAC, organizations can provide network access to endpoint devices such as PCs, personal digital assistants (PDAs), and servers that are verified to be fully compliant with established security policy. NAC can also identify noncompliant devices and deny them access, place them in a quarantined area, or give them restricted access to computing resources. • Dynamic ARP Inspection and IP Source Guard are security features in the Cisco Catalyst 3560 Series that protect the network from certain man -in- the - middle attacks. Dynamic ARP Inspection validates Address Resolution Protocol (ARP) packets in a network and ensures that only valid ARP requests and responses are relayed. IP Source Guard restricts IP traffic from unlrusted sources. • VPN Routing /Forwarding Lite (VRF Lite) in the Cisco Catalyst 3560 Series helps enable unique VPNs without additional equipment at the customer site. • The IEEE 802.1x standard supported by the Cisco Catalyst 3560 Series prevents unauthorized clients from connecting to a LAN through publicly accessible ports unless they are properly authenticated. All contents are Copyright@ 1992 -2006 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 3 of 0 6