Borderless Experience; High Availability - Cisco Catalyst 3560X-24P Datasheet

Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while
●
placing them on appropriate voice and data VLAN.
Cisco security VLAN ACLs on all VLANs prevent unauthorized data flows from being bridged within VLANs.
●
Cisco standard and extended IP security router ACLs define security policies on routed interfaces for
●
control-plane and data-plane traffic. IPv6 ACLs can be applied to filter IPv6 traffic.
Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.
●
Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3
●
(SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions.
SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software
image because of U.S. export restrictions.
Bidirectional data support on the Switched Port Analyzer (SPAN) port allows Cisco Intrusion Detection
●
System (IDS) to take action when an intruder is detected.
TACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts unauthorized
●
users from altering the configuration.
MAC Address Notification allows administrators to be notified of users added to or removed from the
●
network.
Multilevel security on console access prevents unauthorized users from altering the switch configuration.
●
Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when
●
BPDUs are received to avoid accidental topology loops.
Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator's control from
●
becoming Spanning Tree Protocol root nodes.
IGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number of
●
concurrent multicast streams available per port.
Dynamic VLAN assignment is supported through implementation of VLAN Membership Policy Server client
●
capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of
IP addresses.

Borderless Experience

Borderless network enables enterprise mobility and business-grade video services. Industry's first unified network
(wired and wireless) location services enable tracking of mobile assets and the users of those assets for both wired
and wireless devices. The true borderless experience is enabled by the following feature sets in the Cisco Catalyst
3750-X and 3560-X Series Switches:

High availability

●
High-performance IP routing
●
Superior QoS
●
Location awareness and mobility
●
High Availability
The Cisco Catalyst 3750-X Series increases availability for stackable switches. Each switch can operate both as
master controller and as forwarding processor. Each switch in the stack can serve as a master, creating a 1:N
availability scheme for network control. In the unlikely event of a single unit failure, all other units continue to forward
traffic and maintain operation.
Other high-availability features include but are not limited to:
© 2010 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Data Sheet
Page 13 of 28