Cisco Catalyst 4500 Series, Руководство по настройке программного обеспечения

Страница: 113 / 2086

1-33
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 1 Product Overview
Security Features
Web Content Communication Protocol (WCCP) Version 2 Layer 2 redirection enables Catalyst 4500
series switches to transparently redirect content requests to the directly connected content engines by
using a Layer 2 and MAC address rewrite. The WCCPv2 Layer 2 redirection is accelerated in the
switching hardware, and is more efficient than Layer 3 redirection using Generic Routing Encapsulation
(GRE). The content engines in a cache cluster transparently store frequently accessed content, and then
fulfills successive requests for the same content, eliminating repetitive transmissions of identical content
from the original content servers. It supports the transparent redirection of HTTP and non-HTTP traffic
with ports or dynamic services, such as Web caching, HTTPS caching, File Transfer Protocol (FTP)
caching, proxy caching, media caching, and streaming services. WCCPv2 Layer 2 redirection is
typically deployed for transparent caching at network edge, such as regional or branch sites. WCCPv2
Layer 2 redirection cannot be enabled on the same input interface with PBR or VRF-lite. ACL-based
classification for Layer 2 redirection is not supported.
For information on WCCP, see Chapter 81, “Configuring WCCP Version 2 Services.”
Wireshark
Note
Wireshark is supported only on Supervisor Engine 7-E, Supervisor Engine 7L-E, Supervisor Engine 8-E,
and Catalyst 4500X.
Starting with Cisco IOS Release XE 3.3.0SG and the IP Base and Enterprise Services feature sets, the
Catalyst 4500 series switch supports Wireshark. This is a packet analyzer program, formerly known as
Ethereal that supports multiple protocols and presents information in a graphical and text-based user
interface. Wireshark is applied or enabled on an individual interface; global packet capture is not
supported.
For information on Wireshark, see Chapter 68, “Configuring Wireshark.”
XML-PI
eXtensible Markup Language Programmatic Interface (XML-PI) Release 1.0 leverages the Network
Configuration Protocol (NETCONF). It provides new data models that collect running configurations
and
show command output down to the keyword level without requiring the technologies or external
XML-to-command line interface (CLI) gateways. XML-PI allows you to develop XML-based network
management applications to control any number of network devices simultaneously.
Refer to the following link for more details:
http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_xmlpi_v1.html
Security Features
The Catalyst 4500 series switch offers network management and control through the CLI or through
alternative access methods, such as SNMP. The switch software supports these security features:
•
802.1X Identity-Based Network Security, page 1-34
• Dynamic ARP Inspection, page 1-37
•
Cisco TrustSec Security Architecture, page 1-36
• Cisco TrustSec Security Groups, SGTs and SGACLs, page 1-36