Cisco Systems Superx Series manual IronShield Advanced Security

Key Features AND BENEFITS

Robust VoIP and Power over Ethernet

•Standards-based IEEE 802.3af PoE supporting a wide variety of endpoints

•Choice of 1250W (70 Class 3) or 2500W (140 Class 3) per PoE power supply

•Independent system and PoE power subsystems allow the addition of PoE without affecting the system power

•High-availability power design—N+1 PoE power redundancy for the 8-slot FastIron SuperX and FSX 800 chassis and N+3 PoE power redundancy for the 16-slot FSX 1600 chassis

•Intelligent PoE power management

•PoE auto-detection enables support for PoE and non-PoE devices without configuration changes

•Software accessible system and per port power consumption

•Configurable per port PoE priority for power allocation

•Proven interoperability with popular voice over IP equipment, including legacy Cisco IP phones

•Advanced QoS and cell-based fabric enable high-quality VoIP service

•Auto-configuration for VoIP endpoints

•Voice VLAN feature automatically places IP phones in their own VLAN

•Auto-detects legacy and standard 802.3af powered devices

•LLDP/LLDP-MED standards greatly simplify and enhance network management, asset management, and network troubleshooting

IronShield Advanced Security

•Multilevel access security for console access

•IronShield 360—sFlow-powered automated closed-loop threat detection and mitigation solution

•Secure Web-based management interface prevents unauthorized users from accessing or changing the switch configuration

•Terminal Access Controller Access Control Systems (TACACS/TACACS+) and RADIUS operator authentication

•Secure Shell, Secure Copy, and SNMPv3 restrict and encrypt communications to the management interface and system

•IEEE 802.1x authentication including multiple device authentication and dynamic policy configuration for authenticated clients—VLAN, ACL

•Private VLANs provide security and isolation between switch ports to help ensure that users cannot snoop on other users’ traffic

•Denial of Service Protection—Monitoring, throttling, and locking out of ICMP and TCP SYN traffic both to the management address of the switch and for transit traffic

•IP Source Guard, DHCP Snooping, and ARP Inspection protect against snooping and man- in-the-middle attacks

•Byte-based and packet-based Broadcast, Multicast, and unknown Unicast rate limiting

•ACL log reports provide source detail for denied packets

•ACL-based Port Mirroring enables IP monitoring for CALEA and related law enforcement traffic monitoring

•Enhanced MAC filtering to include Denial of Service protection

•MAC address authentication including multiple device authentication and dynamic policy configuration

•Enhanced Port security for controlling access of authorized users