Cisco Catalyst 2960 Series Product Bulletin

All contents are Copyright © 1992–2006 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
New Cisco IOS Software Release 12.2(35)SE for Cisco
Catalyst 3750, 3560, 3550, 2960, 2970 Series Switches;
and CBS30x0 Series Blade Switches
PB380237
®
Cisco announces Cisco IOS
2960, 2970 Series Switches and CBS30x0 Series Blade Switches. This new release
furthers Cisco leadership in providing secure, reliable, integrated data and voice LAN
switching solutions.
This product bulletin contains content and delivery information for Cisco IOS Software
Release 12.2(35)SE.
The following new features are available with Cisco IOS Software Release 12.2(35)SE for
enterprise Ethernet switches:
Multi Domain Authentication (MDA)—MDA provides enhanced security for IP phone
●
deployments. This allows an IP phone (Cisco or third-party) and a single host behind the IP
phone to independently authenticate using 802.1x. Using this method, a switch can place
the host in the data VLAN and IP phone in the voice VLAN, though they appear on the
same switch port. Data VLAN can be downloaded from the authentication, authorization,
and accounting (AAA) server. For non-802.1x devices, MAC Authentication Bypass (MAB)
can be used as the fallback to authenticate using the MAC address of the device. For
non-802.1x deployments, MAB can be used to authenticate both IP phones and hosts.
Local Web Authentication—Allows non-802.1x users to authenticate using a login page.
●
The switch intercepts an HTTP packet from the host and sends an HTML login page. The
user keys in the credentials (such as username and password) and gets authenticated by
an AAA server.
MAC Authentication Bypass (MAB) for Voice VLAN—This feature allows non-802.1x IP
●
phones (with no 802.1x supplicant) to authenticate to the network, utilizing the MAC
address of the IP phone. The switch will initiate an Extensible Authentication Protocol (EAP)
conversation with an AAA server on behalf of the IP phone to authenticate the MAC
address itself. This process is transparent to the end user and utilizes a prepopulated
database on the AAA server.
MAB aging timer—Provides a mechanism to detect inactive hosts after they have
●
authenticated using MAB. The switch flushes the entries for hosts that remain inactive
for this duration, thus allowing new hosts to get authenticated on the same port.
Fast Stack Image Update—Updates the software images for all the stack members
●
in parallel, improving the speed and performance of image updates.
®
Software updates for Cisco Catalyst
Product Bulletin
®
3750, 3560, 3550,
Page 1 of 5