Quality Of Service; Vpn And Firewall Features - Cisco WS C4224V 8FXS - 200Mbps Ethernet Switch Software Configuration Manual

Chapter 1 Product Overview

Quality of Service

VPN and Firewall Features

OL-2031-02
The Catalyst 4224 provides the performance and intelligent services of Cisco IOS
software for branch office applications. The Catalyst 4224 can identify user
applications—such as voice or multicast video—and classify traffic with the
appropriate priority levels. Quality of service (QoS) policies are enforced using
Layer 2 and 3 information such as 802.1p and IP precedence. The Catalyst 4224
queues use weighted random early detection (WRED), weighted round-robin
(WRR), and type-of-service/class-of-service (ToS/CoS) mapping to ensure that
QoS is maintained as packets traverse the network.
To ease the deployment of QoS, the Catalyst 4224 supports Cisco QoS Policy
Manager (QPM). QPM is a complete policy management tool that enables
provisioning of end-to-end differentiated services across network infrastructures
with converged voice, video, and data applications. The combination of QPM and
CiscoWorks Service Management Solution enables network administrators to
adjust service levels in accordance with defined QoS policies. The end result is
network-wide intelligent and consistent QoS that enables performance protection
for voice applications while reducing costs for growing networks.
The Catalyst 4224 provides the same security to voice and video networks that is
available for data networks. The Catalyst 4224 supports the optional Cisco IOS
Software Firewall Feature Set, IP Security (IPsec) with data encryption standard
(DES), and Triple DES (3DES). Hardware encryption using the onboard
encryption accelerator provides higher performance than software-based
encryption, and frees processor capacity for other services.
The Catalyst 4224 supports the following encryption features:
56-bit DES encryption using Cipher Block Chaining (CBC) mode
•
168-bit 3DES encryption using CBC mode
•
MD5 and SHA-1 hashing, including support for the HMAC transform with
•
IPsec AH and ESP
Support for Dif-fie-Hellman key exchange
•
RSA and DSA public key signature and verification (when implemented by
•
IOS IPsec Crypto Engine)
Catalyst 4224 Access Gateway Switch Software Configuration Guide
IP Routing and WAN Features
1-9