Port-based ACLs for Layer 2 interfaces allow security policies to be applied on
individual switch ports.
Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management
Protocol Version 3 (SNMPv3) provide network security by encrypting
administrator traffic during Telnet and SNMP sessions. SSH Protocol,
Kerberos, and the cryptographic version of SNMPv3 require a special
cryptographic software image because of U.S. export restrictions.
Bidirectional data support on the Switched Port Analyzer (SPAN) port allows
Cisco Intrusion Detection System (IDS) to take action when an intruder is
detected.
and RADIUS authentication facilitates centralized control of the
switch and restricts unauthorized users from altering the configuration.
MAC Address Notification allows administrators to be notified of users added
to or removed from the network.
Port Security secures the access to an access or trunk port based on MAC
address.
Multilevel security on console access prevents unauthorized users from
altering the switch configuration.
Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-
enabled interfaces when BPDUs are received to avoid accidental topology
loops.
Spanning Tree Root Guard (STRG) prevents edge devices not in the network
administrator’s control from becoming Spanning Tree Protocol root nodes.
IGMP filtering provides multicast authentication by filtering out
nonsubscribers and limits the number of concurrent multicast streams
available per port.
Spanning Tree Features
IEEE 802.1D Spanning-Tree Protocol support for redundant backbone
connections and loop-free networks simplifies network configuration and
improves fault tolerance.
Per-VLAN Rapid Spanning-Tree (PVRST+) allows rapid spanning-tree
convergence on a per-VLAN spanning-tree basis, without requiring the
implementation of spanning-tree instances.
IEEE 802.1s Multiple Spanning-Tree Protocol (MSTP) allows a spanning-tree
instance per VLAN and enables each VLAN to use a different uplink allowing
better utilization of uplinks.
IEEE 802.1w Rapid Spanning-Tree Protocol (RSTP) provides rapid spanning-
tree convergence independent of spanning-tree timers.
Unidirectional Link Detection (UDLD) and Aggressive UDLD allow unidirectional
links to be detected and disabled to avoid problems such as spanning-tree
loops.
Trunking Features
Cisco UplinkFast and BackboneFast technologies help to ensure quick failover
recovery, enhancing overall network stability and reliability.
PVST+ allows for Layer 2 load sharing on redundant links to efficiently use the
QuickSpecs
Cisco Catalyst Blade Switch 3120 for HP
Technical Specifications
DA - 13023 Worldwide — Version 14 — May 2, 2014
Page 12
