Advanced Security

∙TACACS+ and RADIUS, which enable centralized control of the

∙Standard and extended ACLs on all ports

∙802.1x user authentication (with VLAN assignment, port security, voice VLAN, and guest VLAN extension)

∙802.1x accounting

∙802. 1x authentication failure

∙802. 1x Private VLAN assignment

∙802. 1x Private Guest VLAN

∙802. 1x Radius-supplied time out

∙Trusted boundary

∙Router ACLs (RACLs) on all ports (no performance penalty)

∙VLAN ACLs (VACLs)

∙Port ACLs (PACLs)

∙PVLANs on access and trunk ports

∙DHCP snooping

∙DHCP Option 82

∙DHCP Option 82 insertion

∙DHCP Option 82 pass through

∙Port security

∙Trunk port security

∙Sticky port security

∙SSHv1 and v2

∙VLAN Management Policy Server (VMPS) client

∙Unicast MAC filtering

∙Unicast port flood blocking

∙Dynamic Address Resolution Protocol (ARP) inspection switch and restrict unauthorized users from altering the configuration

∙IP source guard

∙Community PVLAN

∙Control Plane Policing

∙802.1x Unidirectional Controlled Port

∙Voice VLAN Sticky Port Security

∙Secure Copy Protocol (SCP)

∙802.1x Inaccessible Authentication Bypass

∙MAC Authentication Bypass

Traffic and Congestion Management

∙Number of queues: four queues per port

∙Packet buffering: Dynamic, 16 MB shared memory

∙CPU speed: 266 MHz

∙Flash memory: 64 MB

∙Synchronous dynamic RAM (SDRAM): 256 MB

Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com.

Page 6 of 16