Cisco Catalyst 2960 48 Port 2 10/100/1000 Uplink Switch with LAN Base Image

Borderless experience is only possible with intelligent network elements designed and architected to meet the needs of a global workspace. Cisco Network Access is a primary component of this architecture, enabling various borderless network services such as mobility, security, sustainability, EnergyWise and ease of operations for increased productivity and operational efficiency. When network access is intelligent, it knows the identity of the user, as well as where the user is on the network. It knows what is connecting to the network, to automatically provision the network for QoS and delivery. It becomes services-aware to optimize user experience. Only with intelligent access network, your enterprise can go borderless securely and transparently. Your business can save energy, simplify operations with better business efficiency and have an optimized total cost of ownership.

EnergyWise encompasses a highly intelligent network-based approach to communicate messages that measure and control energy between network devices and endpoints. The network discovers Cisco EnergyWise-manageable devices, monitors their power consumption and takes action based on business rules to reduce power consumption. EnergyWise uses a unique domain-naming system to query and summarize information from large sets of devices, making it simpler than traditional network management capabilities. Cisco EnergyWise's management interfaces allow facilities and network management applications to communicate with endpoints and each other using the network as a unifying fabric. The management interface uses standard SNMP or TCP to integrate Cisco and third-party management systems.

• Port Security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address flooding.
• DHCP Snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning.
• Dynamic ARP Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of the ARP protocol.
• IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between the client's IP and MAC address, port and VLAN.

• Flexible authentication that supports multiple authentication mechanisms including 802.1X, MAC Authentication Bypass and web authentication using a single, consistent configuration.
• Open mode that creates a user friendly environment for 802.1X operations.
• Integration of device profiling technology and guest access handling with Cisco switching to significantly improve security while reducing deployment and operational challenges.
• RADIUS Change of Authorization and downloadable calls for comprehensive policy management capabilities.
• 802.1X Supplicant with Network Edge Access Transport (NEAT) enables extended secure access where compact switches in the conference rooms have the same level of security as switches inside the locked wiring closet.

• Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turning a broadcast segment into a nonbroadcast multiaccesslike segment.
• Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users' traffic.
• Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on appropriate voice and data VLAN.
• Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.
• Secure Shell (SSH) Protocol, Kerberos and Simple Network Management Protocol Version 3 (SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH Protocol, Kerberos and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions.
• Bidirectional data support on the Switched Port Analyzer (SPAN) port allows Cisco Intrusion Detection System (IDS) to take action when an intruder is detected.
• TACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration.
• MAC Address Notification allows administrators to be notified of users added to or removed from the network.
• Multilevel security on console access prevents unauthorized users from altering the switch configuration.
• Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops.
• Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator's control from becoming Spanning Tree Protocol root nodes.
• IGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number of concurrent multicast streams available per port.
• Dynamic VLAN assignment is supported through implementation of VLAN Membership Policy Server client capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of IP addresses.

• Cross-Stack EtherChannel provides the ability to configure Cisco EtherChannel technology across different members of the Cisco FlexStack for high resiliency.
• Flexlink provides link redundancy with convergence time less than 100 ms.
• IEEE 802.1s/w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) provide rapid spanning-tree convergence independent of spanning-tree timers and also offer the benefit of Layer 2 load balancing and distributed processing. Stacked units behave as a single spanning-tree node.
• Per-VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning-tree reconvergence on a per-VLAN spanning-tree basis, without requiring the implementation of spanning-tree instances.
• Switch-port autorecovery (Errdisable) automatically attempts to reactivate a link that is disabled because of a network error.

• 802.1p class of service (CoS) and differentiated services code point (DSCP) field classification are provided, using marking and reclassification on a per-packet basis by source and destination IP address, MAC address, or Layer 4 TCP/UDP port number.
• Cisco control-plane and data-plane QoS ACLs on all ports help ensure proper marking on a per-packet basis.
• Four egress queues per port help enable differentiated management of different traffic types across the stack.
• Shaped Round Robin (SRR) scheduling helps ensure differential prioritization of packet flows by intelligently servicing the ingress queues and egress queues.
• Weighted Tail Drop (WTD) provides congestion avoidance at the ingress and egress queues before a disruption occurs.
• Strict priority queuing helps ensure that the highest-priority packets are serviced ahead of all other traffic.
• Trusted Boundary provides the ability to trust the QoS priority settings if an IP phone is present and to disable the trust setting if the IP phone is removed, thereby preventing a malicious user.
• Rate limiting is provided based on source and destination IP address, source and destination MAC address, Layer 4 TCP/UDP information, or any combination of these fields, using QoS ACLs (IP ACLs or MAC ACLs), class maps and policy maps.
• Up to 64 aggregate or individual policers are available per Fast Ethernet or GbE port.

• Network visibility and control provide centralized visibility into wired and wireless devices on the network and their location.
• Location-assisted client troubleshooting enables tracking of wired or wireless clients for quick problem resolution.
• Asset tracking and improved security provide centralized inventory of wired and wireless devices and asset management for improved business processes.
• Location based policy allows greater control and visibility. With EnergyWise, power policies can be set up (to reduce the power or shut down the power from a port) based on the location.
• Cisco Emergency Responder (CER) enhances emergency calling from Cisco Unified CallManager. It helps assure that Cisco Unified CallManager sends emergency calls to the appropriate Public Safety Answering Point (PSAP) for the caller's location.