Cisco Catalyst 2960-X User Manual

◦
IP phone detection enhancement to detect and recognize a Cisco IP phone.
◦
Guest VLAN to provide limited services to non-802.1x-compliant users.
◦
Restricted VLAN to provide limited services to users who are 802.1x compliant, but do not have
the credentials to authenticate via the standard 802.1x processes.
To use authentication with restricted VLANs, the switch must be running the LAN Base
image.
Note
◦
802.1x accounting to track network usage.
◦
802.1x with wake-on-LAN to allow dormant PCs to be powered on based on the receipt of a specific
Ethernet frame.
◦
802.1x readiness check to determine the readiness of connected end hosts before configuring IEEE
802.1x on the switch.
To use 802.1x readiness check, the switch must be running the LAN Base image.Note
◦
Voice aware 802.1x security to apply traffic violation actions only on the VLAN on which a security
violation occurs.
To use voice aware 802.1x authentication, the switch must be running the LAN Base
image.
Note
◦
MAC authentication bypass (MAB) to authorize clients based on the client MAC address.
To use MAC authentication bypass, the switch must be running the LAN Base image.Note
◦
Network Admission Control (NAC) Layer 2 802.1x validation of the antivirus condition or posture
of endpoint systems or clients before granting the devices network access.
To use NAC, the switch must be running the LAN Base image.Note
◦
Network Edge Access Topology (NEAT) with 802.1X switch supplicant, host authorization with
CISP, and auto enablement to authenticate a switch outside a wiring closet as a supplicant to another
switch.
◦
IEEE 802.1x with open access to allow a host to access the network before being authenticated.
◦
IEEE 802.1x authentication with downloadable ACLs and redirect URLs to allow per-user ACL
downloads from a Cisco Secure ACS server to an authenticated switch.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 15
Security Features Overview
Security Features Overview

Cisco Catalyst 2960-X Specifications

General

Console port	RJ-45
USB 2.0 ports quantity	2
SFP module slots quantity	4
Installed SFP modules quantity	-
Gigabit Ethernet (copper) ports quantity	48
Basic switching RJ-45 Ethernet ports type	Gigabit Ethernet (10/100/1000)
Power source	AC
Input current	5 A
AC input voltage	100 - 240 V
Power consumption (typical)	60.9 W
Number of power supply units	1
Redundant power supply (RPS) support	Yes
Operating altitude	0 - 3000 m
Non-operating altitude	0 - 4000 m
Storage temperature (T-T)	-25 - 70 °C
Operating temperature (T-T)	-5 - 40 °C
Operating relative humidity (H-H)	10 - 95 %
Switching protocols	UDP, TCP, RADIUS/TACACS+
Number of VLANs	1023
Networking standards	IEEE 802.1ab, IEEE 802.1D, IEEE 802.1p, IEEE 802.1Q, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3ae, IEEE 802.3af, IEEE 802.3ah, IEEE 802.3at, IEEE 802.3az, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Throughput	107.1 Mpps
Jumbo frames	9216
Number of queues	8
MAC address table	16000 entries
Number of static routes	1000
DHCP features	DHCP server
Authentication	MAC-based authentication, Port-based authentication
Security algorithms	802.1x RADIUS, SNMP, SSH
Access Control List (ACL) rules	3
Switch type	Managed
Switch layer	L2/L3
Safety	UL 60950-1, CAN/CSA-C22.2 No. 60950-1, EN 60950-1, IEC 60950-1, AS/NZS 60950-1
Form factor	1U
Product color	Black
Total Power over Ethernet (PoE) budget	370 W
Power over Ethernet (PoE) ports quantity	24
Power over Ethernet plus (PoE+) ports quantity	12
Memory type	DRAM
Noise level	39 dB
Flash memory	128 MB
Internal memory	512 MB
Processor frequency	600 MHz
Mean time between failures (MTBF)	276870 h

Weight and Dimensions

Depth	368 mm
Width	445 mm
Height	45 mm
Weight	5800 g