Cisco Catalyst 3560E-24TD Product Support Bulletin

All contents are Copyright © 1992–2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
New Cisco IOS Software Release 12.2(35)SE2 for Cisco
Catalyst 3750-E and 3560-E Series Switches
PB380237
®
Cisco announces Cisco IOS
Series Switches. This new release furthers Cisco leadership in providing secure, reliable,
integrated data and voice LAN switching solutions.
This product bulletin contains content and delivery information for Cisco IOS Software Release
12.2(35)SE2.
This release adds support for newly launched Catalyst 3750-E and 3560-E Series Switches and
offers the following new features (introduced with Cisco IOS Software Release 12.2(35)SE for
Catalyst 3750 and 3560 Series Switches):
Multi Domain Authentication (MDA)—MDA provides enhanced security for IP phone
●
deployments. This allows an IP phone (Cisco or third-party) and a single host behind
the IP phone to independently authenticate using 802.1x. Using this method, a switch can
place the host in the data VLAN and IP phone in the voice VLAN, though they appear on
the same switch port. Data VLAN can be downloaded from the authentication,
authorization, and accounting (AAA) server. For non-802.1x devices, MAC Authentication
Bypass (MAB) can be used as the fallback to authenticate using the MAC address of the
device. For non-802.1x deployments, MAB can be used to authenticate both IP phones and
hosts.
Local Web Authentication—Allows non-802.1x users to authenticate using a login page.
●
The switch intercepts an HTTP packet from the host and sends an HTML login page.
The user keys in the credentials (such as username and password) and gets authenticated
by an AAA server.
MAC Authentication Bypass (MAB) for Voice VLAN—This feature allows non-802.1x IP
●
phones (with no 802.1x supplicant) to authenticate to the network, utilizing the MAC
address of the IP phone. The switch will initiate an Extensible Authentication Protocol (EAP)
conversation with an AAA server on behalf of the IP phone to authenticate the MAC
address itself. This process is transparent to the end user and utilizes a prepopulated
database on the AAA server.
MAB aging timer—Provides a mechanism to detect inactive hosts after they have
●
authenticated using MAB. The switch flushes the entries for hosts that remain inactive
for this duration, thus allowing new hosts to get authenticated on the same port.
Fast Stack Image Update—Updates the software images for all the stack members in
●
parallel, improving the speed and performance of image updates.
®
Software updates for Cisco Catalyst
Product Bulletin
®
3750-E and 3560-E
Page 1 of 5