Cisco Catalyst 2960-X User Manual

◦
Support for dynamic creation or attachment of an auth-default ACL on a port that has no configured
static ACLs.
To use this feature, the switch must be running the LAN Base image.Note
◦
Flexible-authentication sequencing to configure the order of the authentication methods that a port
tries when authenticating a new host.
◦
Multiple-user authentication to allow more than one host to authenticate on an 802.1x-enabled
port.
•
TACACS+, a proprietary feature for managing network security through a TACACS server for both
IPv4 and IPv6.
•
RADIUS for verifying the identity of, granting access to, and tracking the actions of remote users through
authentication, authorization, and accounting (AAA) services for both IPv4 and IPv6.
•
Enhancements to RADIUS, TACACS+, and SSH to function over IPv6.
•
Secure Socket Layer (SSL) Version 3.0 support for the HTTP 1.1 server authentication, encryption, and
message integrity and HTTP client authentication to allow secure HTTP communications (requires the
cryptographic version of the software).
•
IEEE 802.1x Authentication with ACLs and the RADIUS Filter-Id Attribute.
•
Support for IP source guard on static hosts.
•
RADIUS Change of Authorization (CoA) to change the attributes of a certain session after it is
authenticated. When there is a change in policy for a user or user group in AAA, administrators can send
the RADIUS CoA packets from the AAA server, such as Cisco Identity Services Engine, or Cisco Secure
ACS to reinitialize authentication, and apply to the new policies.
•
IEEE 802.1x User Distribution to allow deployments with multiple VLANs (for a group of users) to
improve scalability of the network by load balancing users across different VLANs. Authorized users
are assigned to the least populated VLAN in the group, assigned by RADIUS server.
•
Support for critical VLAN with multiple-host authentication so that when a port is configured for
multi-auth, and an AAA server becomes unreachable, the port is placed in a critical VLAN in order to
still permit access to critical resources.
•
Support for Network Edge Access Topology (NEAT) to change the port host mode and to apply a
standard port configuration on the authenticator switch port.
•
VLAN-ID based MAC authentication to use the combined VLAN and MAC address information for
user authentication to prevent network access from unauthorized VLANs.
•
MAC move to allow hosts (including the hosts connected behind an IP phone) to move across ports
within the same switch without any restrictions to enable mobility. With MAC move, the switch treats
the reappearance of the same MAC address on another port in the same way as a completely new MAC
address.
•
Support for 3DES and AES with version 3 of the Simple Network Management Protocol (SNMPv3).
This release adds support for the 168-bit Triple Data Encryption Standard (3DES) and the 128-bit,
192-bit, and 256-bit Advanced Encryption Standard (AES) encryption algorithms to SNMPv3.
•
Support for Cisco TrustSec SXP protocol in LAN Base image only.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
16 OL-29048-01
Security Features Overview
Security Features Overview

Cisco Catalyst 2960-X Specifications

General

Console port	RJ-45
USB 2.0 ports quantity	2
SFP module slots quantity	4
Installed SFP modules quantity	-
Gigabit Ethernet (copper) ports quantity	48
Basic switching RJ-45 Ethernet ports type	Gigabit Ethernet (10/100/1000)
Power source	AC
Input current	5 A
AC input voltage	100 - 240 V
Power consumption (typical)	60.9 W
Number of power supply units	1
Redundant power supply (RPS) support	Yes
Operating altitude	0 - 3000 m
Non-operating altitude	0 - 4000 m
Storage temperature (T-T)	-25 - 70 °C
Operating temperature (T-T)	-5 - 40 °C
Operating relative humidity (H-H)	10 - 95 %
Switching protocols	UDP, TCP, RADIUS/TACACS+
Number of VLANs	1023
Networking standards	IEEE 802.1ab, IEEE 802.1D, IEEE 802.1p, IEEE 802.1Q, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3ae, IEEE 802.3af, IEEE 802.3ah, IEEE 802.3at, IEEE 802.3az, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Throughput	107.1 Mpps
Jumbo frames	9216
Number of queues	8
MAC address table	16000 entries
Number of static routes	1000
DHCP features	DHCP server
Authentication	MAC-based authentication, Port-based authentication
Security algorithms	802.1x RADIUS, SNMP, SSH
Access Control List (ACL) rules	3
Switch type	Managed
Switch layer	L2/L3
Safety	UL 60950-1, CAN/CSA-C22.2 No. 60950-1, EN 60950-1, IEC 60950-1, AS/NZS 60950-1
Form factor	1U
Product color	Black
Total Power over Ethernet (PoE) budget	370 W
Power over Ethernet (PoE) ports quantity	24
Power over Ethernet plus (PoE+) ports quantity	12
Memory type	DRAM
Noise level	39 dB
Flash memory	128 MB
Internal memory	512 MB
Processor frequency	600 MHz
Mean time between failures (MTBF)	276870 h

Weight and Dimensions

Depth	368 mm
Width	445 mm
Height	45 mm
Weight	5800 g