思科Catalyst 2960 3750-E 3560-E 产品预览.ppt

Catalyst3750 ECatalyst3560 ECatalyst2960Overview FullLayer3Routing Layer2IntelligentServices GUI Managed MostCompleteLineofFixedConfigurationLANProducts Function Flexibility Scalability Price Performance CiscoCatalyst3560 EandCatalyst356010 100andGEconfigurations 210GEEnterprise classintelligentLayer3 4servicesModularpowersupplywith3560 EPoEconfigurationswithupto15 4Wonall48ports CiscoCatalyst296010 100and10 100 1000Layer2switching8 24 and48portconfigurationswithdual purposeGiguplinksPoEconfigurationswithupto15 4Wupto24portsEntrylevelLANLiteIOSandenhancedLANBaseIOSforintelligentservices CiscoCatalyst3750 EandCatalyst3750Stackable10 100andGEconfigurations 210GECiscoStackWise PlusandStackWisetechnologyEnterprise classintelligentLayer3 4servicesModularpowersupplywith3750 EPoEconfigurationswithupto15 4Wonall48ports CiscoCatalyst494810 100 1000 210GEwirespeedswitchingRack optimizedserverswitchingJumboframesupportDual hotswappable internalpowersuppliesHotswappablefantray CiscoCatalystExpress500Low density standalone managed10 100switchingTailoredforbusinesseswithupto250users IntroducingTheCatalyst3750 E ThenextgenerationcomplementtotheCatalyst375024or48GEportswith2x10GEuplinksWire speedperformanceTransitionto10GEwiththeTwinGigadapter a10GEmodulethatacceptstwoGESFPsStackWisePlusSupportsoriginalStackWisefeaturesDoublethespeedoforiginalStackWiseBackwardscompatiblewiththeCatalyst3750PowerModularpowersupplyandfanblowerDifferentpowersupplysizes48portsoffullIEEEPOEinasinglerackunitNewandimprovedredundantpowersupply CiscoCatalyst2960SeriesSwitches FastEthernetandGigabitEthernetin8 24 and48portconfigurationsforentry levelenterpriseandmid marketcustomersPoEconfigurationswithupto15 4Wupto24portsOffersenhancedLayer2 intelligentLANservices AvailabilityEnhancedsecurityAdvancedqualityofservice QoS SimplifiedmanagementandtroubleshootingforlowertotalcostofownershipCiscoNetworkAssistantandCiscoSmartportsLimitedlifetimehardwarewarrantyandsoftwareupdatesatnoadditionalcharge FastEthernetin24and48portconfigurationsforsmallbranchofficesandwiringclosetsOffersstandardLayer2serviceswithentry levelavailability security andQoSScalableandsecurenetworkmanagementSimplifiedmanagementandtroubleshootingforlowertotalcostofownershipCiscoNetworkAssistantandCiscoSmartportsLimitedlifetimehardwarewarrantyandsoftwareupdatesatnoadditionalcharge Catalyst2960LANBaseSeries Catalyst2960LANLiteSeries UsesCiscoASICsforsuperiorqualityandhardwareandsoftwareintegration CiscoCatalyst2960LANBaseSeries ModelOverview Enterprise classintelligentservices AdvancedQoS enhancedsecurity highavailability 4810 100ports210 100 1000uplinkports 2410 100ports210 100 1000uplinkports Catalyst2960 24TT L Catalyst2960 48TT L 2410 100ports2dual purposeuplinkports Catalyst2960 24TC L Catalyst2960 48TC L 4810 100ports2dual purposeuplinkports 2010 100 1000ports4dual purposeuplinkports Catalyst 2960G 24TC L Catalyst2960G 48TC L 4410 100 1000ports4dual purposeuplinkports 810 100ports1dual purposeuplinkportCompactform factorwithnofan Catalyst2960 8TC L 710 100 1000ports1dual purposeuplinkportCompactform factorwithnofan Catalyst2960G 8TC L SoftwareLANBaseImage 2410 100PoEports2dual purposeuplinkports Catalyst 2960 24PC L Catalyst2960 24LT L 2410 100ports 8PoEports 210 100 1000uplinkports 810 100 1000ports110 100 1000PoEInputportCompactform factorwithnofan Catalyst2960PD 8TT L CiscoCatalyst2960LANLiteSeries ModelOverview SoftwareLANLiteImage 2410 100ports Catalyst2960 24 S 2410 100ports2dual purposeuplinkports Catalyst2960 24TC S Catalyst2960 48TC S 4810 100ports2dual purposeuplinkports Note Catalyst2960SwitchescannotbeupgradedordowngradedbetweenLANBaseandLANLitesoftware EntrylevelQoS security andavailabilitywithafocusonease of useandlowertotalcostofownership Smallsize HxWxD 4 4cmx27cmx16 23cmFlexiblewallandunderthedeskmountingDurablemetalshellCableguardInternalpowersupplyandrightanglepowercordPassivecooling nofan MagnetincludedSecuritylockingslot19inchrackmountoption Catalyst2960CompactSwitches Meetinguniquephysicalrequirementsoftheofficeworkspace conferencerooms andclassrooms andmicrobranchoffices ServicesandWarrantyforTheCiscoCatalyst2960Series LimitedlifetimehardwarewarrantyAdvanceReplacementshippingwithin10businessdaysGuestaccesstoCOngoingCiscoIOSSoftwareupdatesatnoadditionalcostCiscoSMARTnet andSMARTnetOnsiteSupportAround the clock globalaccesstotheCiscoTechnicalAssistanceCenter TAC AccesstotheextensiveCknowledgebaseandtoolsNext business dayadvancehardwarereplacement premiumoptionsavailableforbusiness criticaldevices suchas2 hourreplacementandonsitepartsreplacementandinstallation CiscoSmartFoundationService formerlySMBSupportAssistant CiscoFoundationTechnologyOptimizationService Catalyst3750 EModels PoEanddataonlyoptionsAny3750 EmodelcanbeconnectedwithanotherthroughStackWisePlus3750 Emodelscanbecombinedinastackwithexisting3750modelsinamixedstack 4810 100 1000TPortsw POE 2x10GE 2410 100 1000TPortsw POE 2x10GE 4810 100 1000TPorts 2x10GE 2410 100 1000TPorts 2x10GE Catalyst3560 EModels The3560 EisforstandalonedeploymentsSimilarfeaturestothe3750 E butStackWiseisremovedSamesoftwarefeaturesSamePoEoptions 4810 100 1000TPortsw POE 2x10GE 2410 100 1000TPortsw POE 2x10GE 4810 100 1000TPorts 2x10GE 2410 100 1000TPorts 2x10GE StackWisePlus Speedimprovedto64Gbps SupportslocalswitchingLocalpacketsdonottraversethestackIntelligentlyforwardstrafficovertheStackWiseconnectionLoadBalancingQualityofServiceTrafficOptimizationBackwardcompatiblewiththeoriginalStackWiseFault tolerant Bi directional64 GbpsstackinterconnectionAutomatedConfiguration ManagementSinglenetworkinstance IP SNMP CLI Spanning TreeProtocol VLAN Master secondaryarchitecturewithmasterfailoverCross StackEtherChannel cross stackQoS Fortypicaltrafficpatterns actualperformancemaybehigherorlower StackWisePlusArchitecture A B C D LocalSwitching E F StackWisePlus 1 2 3 4 StackWisePlusRing 10GigabitEthernet Two10GEuplinkinterfacesWirerateforwardingperformanceSupportedX2TransceiversLX4 MMF 300mSMF 10km LR SMF10km SR MMF CX4 Copper ER SMF40km TwinGigAdapterconvertsanX2interfaceintodualSFPinterfacesAllSFPssupportedon3750platformaresupportedwiththeTwinGigAdapterTwinGigAdaptersarehotswappablewithX2modules OutofBandManagement TwomanagementportsRS 232serialconsoleport10 100BASE TXEthernetportOut of bandmanagementsupportsTelnet TFTP andSSHv2OneinterfacecanmanagetheentirestackofswitchesIfmultipleout of bandportsareconnectedtodifferentswitchesinastack oneisselectedforactiveuse Power FieldReplaceablePowerSupplies Widevarietyofpowersupplyoptions48portPOE 24portPOE anddataonlyoptionsDCpoweravailableineverymodelfordataonlyWiththeRPS2300 apowersupplycanbereplacedwithoutpoweringdowntheswitch ACSupply DCSupply Switchwith1225WACSupply RedundantPowerSupply RPS2300 SeamlessfailoverfromswitchtoRPSwhenPSfailsAutomaticback offtoswitchwhenitspowersupplyreturnsRPSandswitchessupportdualACpowercircuitsConnectuptosixswitchesTwoswitchescanbeactivelybackedupDualmodularpowersuppliesallowtheRPStomatchtheswitches suppliesFieldreplaceableblowermodule BackwardsCompatibleSwitches 2950 2960 2970 3550 3560 and3750Routers 2811 2821 2851 and3825 Operations IOSSoftwareFeatureSets ThreeIOSfeaturesetsIPBaseLayer2ForwardingBaseIPv6ServicesBasicRoutingSecurityIPServicesFullEIGRPandOSPFRoutingMulticastRoutingPolicyBasedRoutingAdvancedIPServicesIPv6Routing CiscoCatalystIntelligentSwitchingInfrastructure Performance Availability QoS Security Manageability IntelligentSwitchingisaCommonFoundationofCapabilitiesacrossCisco Catalyst Switches Wire speedforwardingNoperformanceeffectwithallservicesenabled Layer2 3 4classificationPolicingandshapingMultiplequeuesGranularcontrol Layer2 3 4accesscontrolIdentity basedauthenticationManagementsecurityAdmissioncontrol End to endmanageabilityforcentralizedadministrationWeb basedorcommand lineinterface CLI Analysisandplanningtools Aggregation SpeedMismatch 10Mbps 1000Mbps LANtoWAN 10Mbps 64kbps WhereCongestionExists QoSisRequired PointsofaggregationLinksandbuffersPointsofsubstantialspeedmismatchTransmitbufferstendtofill TCPwindowing Bufferingreducesloss introducesdelay CiscoCatalystSeriesExtensiveQoSFeatures RX Queue1 Queue2 Queue3 Queue4 IngressPolice Classify TX IngressQueuing SchedulingCongestionControl Mark S2 TrafficClassificationandMarkingforDifferentiatedServicesPer PortorIndividual AggregateFlowClassificationandRewritingofMACAddress 802 1pCoS DSCP IPAddress andTCP UDPPort EgressQueuing SchedulingCongestionControl WAN AutoQoS OneCommandperInterfacetoEnableandConfigureQoS ModifyGlobalandInterfaceSettingstoMakeQoSforVoIPWork Cisco CallManager CiscoUnity Software VoiceApplications VoiceGateways PhoneVLAN 110 CampusQoSConsiderationsTrustBoundaryExtensionandOperation PCVLAN 10 UnauthorizedSwitch EnterpriseServer UnauthorizedSwitch Cisco SecureACS EnterpriseServer MitigatingUnauthorizedDevices Problem Well intentionedusersplaceunauthorizednetworkdevicesonthenetwork possiblycausinginstability Solution CiscoCatalyst SwitchessupportrogueBPDUfiltering BPDUGuard RootGuard IncorrectSTPInfo BPDUGuard NetworkInstability AuthorizedSwitch AuthorizedSwitch RootGuard ProtectingAgainstWell IntentionedUsers SecureConnectivity SecureShell SSH ProtocolSSHencryptsadministrationtrafficduringTelnetsessionswhileconfiguringortroubleshootingswitches SecureSocketsLayer SSL SSLencryptsnetworkmanagementtraffic allowingthesecureuseoftoolssuchastheCisco NetworkAssistant SNMPv3 withcryptosupport SNMPv3providesnetworksecuritybyencryptingadministratortrafficduringSNMPsessiontoconfigureortroubleshootswitches KerberosKerberosauthenticatesusersandnetworkservicesusingatrustedthirdpartytoperformsecureverification SecureCopySCPprovidesasecureandauthenticatedmethodforcopyingswitchconfigurationsorswitchimagefiles SCPreliesonSSH SecuringLayer2fromSurveillanceAttacksCuttingOffMAC BasedAttacks Problem ScriptKiddie HackingToolsEnableAttackers FloodSwitchCAMTableswithBogusMACAddresses TurningtheVLANintoa Hub andEliminatingPrivacySwitchCAMTableLimitIsFiniteNumberofMACAddresses Solution PortSecurityLimitsMACFloodingAttackandLocksDownPortandSendsanSNMPTrap 00 0e 00 aa aa aa00 0e 00 bb bb bb Only3MACAddressesAllowedonthePort Shutdown 250 000BogusMACaddressesperSecond switchportport securityswitchportport securitymaximum3switchportport securityviolationrestrictswitchportport securityagingtime2switchportport securityagingtypeinactivity Voice VLAN awarePortSecurity Scenario IPphone hostonsameswitchportPortsecurity STPviolationsarenowVLAN voiceawareViolationsforthehostonlyaffect data VLANOnlyaffectedVLANisplacedinerrordisablestateVoiceVLANremainsunaffectedImprovesnetworkavailability DHCPSpoofingAttack Problem MalicioususerpretendstobethenetworkDHCPserver MisconfigureduserstartsupaDHCPserverincorrectly Malicioususercansendoutbogusaddress depletetheaddressspace orspoofthedefaultgateway SolutionDonottrustuserportssoonlyDHCPrequestscanbesent SnoopDHCPinformationforintegrity RogueDHCPOfferIP 10 1 1 20 24GW 10 1 1 1DNS 192 168 1 122 DHCPDiscoveryBroadcast Victim DHCPServer UserPortsUntrusted DHCPServer DHCPClient DHCPServer RogueServer Trusted DHCPSnoopingEnabled DHCPRequest X DHCPACK Untrusted DHCPSnooping WhatItDoes SwitchforwardsonlyDHCPrequestsfromuntrustedaccessports anddropsallothertypesofDHCPtraffic DHCPsnoopingallowsonlydesignatedDHCPportsoruplinkportstrustedtorelayDHCPmessages ItbuildsaDHCPbindingtablecontainingclientIPaddress clientMACaddress port andVLANnumber Benefit DHCPsnoopingeliminatesroguedevicesfrombehavingastheDHCPserver FlexLinks L2Redundancy AchieveLayer2redundancywithoutrequiringSTP SpanningTreeProtocol AccessswitcheswithbackuplinkstoDistributionswitches deployedasFlexlinkpairFastconvergenceuponforwardinglinkfailoverSub100mseccutoverConvergencetimeindependentofnumberofVLANsandMAC addresses Catalyst2960 Cat6K Cat6K FlexLinks L2Redundancy 1 Primarylinkdowndetected 24msecpoll 2 Backuplinkbecomestheactivelink X ActiveLink BackupLink Cat2960 FlexlinkVLANloadbalancing Primarylinkdowndetected BackupcarriesVLANs60 50 20 X PrimaryLink CarriesVLANs60 50 BackupLink carriesVLAN20 gi2 0 8 gi2 0 6 IntegratedTimeDomainReflectometer TDR Layer1TroubleshootingtoolTDRhelpstodetermine ThelengthofacableWhetherthecableiscorrectlywiredinternally pin to pinwiremapping Whetherthecablecontainsashortcircuit wirestouchingeachotherthroughdamagedormissinginsulation Whetherthecablecontainsabrokenwire calledan open Whetherthecablesuffersfromelectricalcrosstalk interference CISCO CABLE DIAG MIB UniDirectionalLinkDetection UDLD ProtectingAgainstOneWayCommunication HighlyavailablenetworksrequireUDLDtoprotectagainstonewaycommunicationorpartiallyfailedlinksandtheeffectthattheycouldhaveonprotocolslikeSTPandRSTP Primarilyusedonfiberopticlinkswherepatchpanelerrorscouldcauselinkup upwithmissmatchedtransmit receivepairs Neighboringportsshouldseetheirowndevice portID echo inthepacketsreceivedfromtheothersideFailingtoreceivethisinformationindicatesmisconfigurationandtheportiserror disabled CiscoWorksLANManagementSolution LMS Simplifiesandautomatestasksassociatedwithday to daymanagement Takinginventory configuration IOSsoftwaredeploymentandtroubleshooting Breadthofdevicesupport over400Ciscodevicetypes providesasingleapplicationsuiteformanagin