7
• Media access control (MAC) authentication:
provides simple authentication based on a user's
MAC address; supports local or RADIUS-based
authentication
• Multiple user authentication methods:
– IEEE 802.1X: is an industry-standard method of
user authentication using an IEEE 802.1X
supplicant on the client in conjunction with a
RADIUS server
– Web-based authentication: similar to IEEE
802.1X, it provides a browser-based environment
to authenticate clients that do not support the IEEE
802.1X supplicant
– MAC-based authentication: authenticates the
client with the RADIUS server based on the client's
MAC address
• DHCP protection: blocks DHCP packets from
unauthorized DHCP servers, preventing
denial-of-service attacks
• Endpoint Admission Defense (EAD): provides
security policies to users accessing a network
• Port isolation: secures and adds privacy, and
prevents malicious attackers from obtaining user
information
Convergence
• LLDP-MED (Media Endpoint Discovery): is a
standard extension of LLDP that stores values for
parameters such as QoS and VLAN to automatically
configure network devices such as IP phones
• Multicast Source Discovery Protocol
(MSDP): is used for inter-domain multicast
applications, allowing multiple PIM-SM domains to
interoperate
• Internet Group Management Protocol
(IGMP): is used by IP hosts to establish and
maintain multicast groups; supports IGMPv1, v2,
and v3; utilizes Any-Source Multicast (ASM) or
Source-Specific Multicast (SSM) to manage IPv4
multicast networks
• Protocol Independent Multicast (PIM): is used
for IPv4 and IPv6 multicast applications; supports
PIM Dense Mode (PIM-DM), Sparse Mode (PIM-SM),
and Source-Specific Mode (PIM-SSM)
• Multicast Border Gateway Protocol (MBGP):
allows multicast traffic to be forwarded across BGP
networks and kept separate from unicast traffic
• Multicast Listener Discovery (MLD) protocol:
is used by IP hosts to establish and maintain
multicast groups; supports v1 and v2 and utilizes
Any-Source Multicast (ASM) or Source-Specific
Multicast (SSM) to manage IPv6 multicast networks
• Multicast VLAN: allows multiple VLANs to receive
the same IPv4 or IPv6 multicast traffic, reducing
network bandwidth demand by eliminating multiple
streams to each VLAN
• Voice VLAN: automatically assigns VLAN and
priority for IP phones, simplifying network
configuration and maintenance
Integration
• Open Application Architecture (OAA):
provides high-performance application-specific
modules fully integrated with the switching
architecture; uses the chassis high-speed backplane
to access network-related data; increases
performance, reduces costs, and simplifies network
management
• VPN firewall module:
– Provides enhanced stateful packet inspection and
filtering; supports flexible security zones and
virtual firewall containment
– Advanced VPN services with 3DES and AES
encryption at high performance and low latency
– Web content filtering
– Application prioritization and optimization
• Load-balancing module: local and global
server load-balancing module improves traffic
distribution using powerful scheduling algorithms,
including Layer 4 to 7 services; monitors the health
status of servers and firewalls
• NetStream module: provides traffic analysis and
statistics capture to allow network administrators to
rapidly identify network anomalies and security
threats, as well as capacity planning information;
supports NetFlow v5 and v9
• Wireless controller module:
– Integrated wireless controller module supports up
to 640 access points per module
– Supports IEEE 802.11a/b/g/n access points
(APs)
– Provides full user access management and QoS
policies on a per-user basis; supports
enterprise-class encryption
– Supports radio frequency monitoring and control,
MAP control, rogue AP detection, and location
policy enforcement
Additional information
• Green initiative support: provides support for
RoHS and WEEE regulations
• Low power consumption: is rated as one of the
lowest in power consumption in the industry by
Miercom independent tests
