• Network Essentials IOS-XE Image Features:
o Layer 2 switching:
o IEEE 802.1, 802.3 standard, NTP, UDLD, CDP, LLDP, unicast MAC filter, VTPv2,
VTPv3, EtherChannel, voice VLAN, PVST+, MSTP, and RSTP
o Layer 3 Routing
o Static IP routing (for dynamic routing, see Network Advantage option)
o Multicast:
o IGMPv1, v2, v3 snooping, IGMP filtering, IGMP querier
o Management:
o Web UI, MIB, SmartPort, SNMP, syslog, DHCP server, SPAN session, Full Flexible
Netflow (FnF)
o Precision Timing:
o IEEE-1588v2 Precision Timing Protocol (PTP): hardware time-stamping supported on
1GBaseT ports for real time clock synchronization of devices with sub-microsecond
accuracy (transparent / boundary clock)
o Security:
o Port security, Access Control Lists (ACLs), 802.1x, Dynamic Host Configuration
Protocol (DHCP) snooping, DHCP-port based allocation, dynamic ARP inspection, IP
source guard, guest VLAN. MAC authentication bypass, 802.1x multi-domain
authentication, storm control - unicast, multicast, broadcast, SCP, SSH, SNMPv3,
TACACS+, RADIUS server/client, MAC address notification, BPDU guard, RMON,
MACsec-128
o Layer 2 Line-rate Encryption and Information Assurance (IA):
o IEEE 802.1AE MACsec support on 1GBaseT ports for point-to-point authentication
and encryption of Ethernet LAN traffic
o MACsec supports key exchange from switch-to-switch or switch-to-end-points using
SAP/MKA protocols
o Cisco ESS-3300 on NSA Commercial Systems for Classified (CSfC) MACSec
Ethernet Encryption Device list and National Information Assurance Partnership
(NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS) List
o Declassification:
o Data zeroization support to erase nonvolatile Flash memory and return device to
factory default configuration (initiated via discrete input)
o Quality of Service (QoS):
o Ingress policing, rate limit, egress queuing/shaping, autoQoS
o Layer 2 IPv6:
o IPv6 host support, HTTP over IPv6, SNMP over IPv6
• Network Advantage IOS-XE License Features:
o All features supported in Network Essential IOS-XE License, plus:
o Dynamic routing protocol support:
▪ Open Shortest Path First (OSPF), v2, v3, v4 and v6
▪ Enhanced Interior Gateway Routing Protocol (EIGRP), v4 and v6
▪ Routing Information Protocol (RIP), v1 and v2