WIXLIB

Intelligent Switching for the Evolving NetworkMODUL A R SWITCHESFI X E D - CONFIGUR ATION SWITCHESCisco Catalyst 6500 SeriesCisco Catalyst 4500 SeriesCisco Catalyst 4900 SeriesCisco Catalyst 3750 SeriesCisco Catalyst 3560 SeriesCisco Catalyst 2960 SeriesOptimized for secure, convergedvoice, video, and data networks, theCatalyst 6500 offers industry-leadingscalability (32 Gbps to 720 Gbps),operational control, and investmentprotection to meet the needs ofenterprises, medium-sizedbusinesses, and service providers.Midrange modular platform offeringLayer 2 – 4 switching intelligentnetwork services up to 136 Gbps,and added investment protection forenterprises, small- to medium-sizedbusinesses, and service providers.Fixed-configuration switches offeringhigh-performance, rack-optimizedserver switching for organizationsof all sizes.Stackable switches offering multilayerswitching and Cisco StackWise technology for enterprise branchoffices and midsize organizations. Standalone fixed-configurationfor low-latency and wirespeedswitching Stackable fixed-configurationswitches featuring Cisco StackWisetechnology, a 32 Gbps interconnectfor a unified, resilient system of upto nine switchesFixed-configuration switchescombining Gigabit Ethernetconnectivity and PoE for smallenterprise LAN access and branchoffice deployments.Fixed-configuration switches offeringFast Ethernet and Gigabit Ethernetconnectivity with enhanced LANservices for mid-market and branchoffice networks. Standalone fixed-configurationswitches Standalone fixed-configurationswitches Layer 2 – 4 switching and intelligentservices with dynamic IP routingand IPv6 Layer 2 switching with intelligentLayer 2 – 4 services Flexible Options: Modular 3-, 4-, 6-,9-, and 13-slot chassis all supportredundant supervisors; LAN/WANservice modules; modular Powerover Ethernet (PoE), and forwardingengines Highest Availability: Non-stopForwarding/Stateful Switchover(NSF/SSO) offering sub-secondfailover; Cisco IOS SoftwareModularity featuring subsystemIn Service Software Upgrades(ISSUs); Generic OnlineDiagnostics (GOLD) Comprehensive Security:H/W-based Control Plane Policing(CoPP); integrated HW NetFlow;802.1x enhancements; firewall;web VPN; intrusion preventionand anomaly detection modules Enhanced Manageability:CiscoWorks; CNA; subsystemISSUs with IOS modularity;integrated TDR; EncapsulatedRemote Span (ERSPAN);Embedded Event Manager (EEM);Network Analysis Module (NAM) Highest Port Densities: Up to 1,15210/100 ports, 577 10/100/1000ports, 410 SFP Gigabit Ethernetports, or 32 10 GbE ports IP Communications: Highestintegrated PoE density;TDM/analog gateway module;advanced IP multicast and QoS Integrated Service Modules:Content switching, ApplicationOriented Networking (AON), andwireless service modules4From core to edge, Cisco Catalyst switches provide the performance, highavailability, comprehensive security, delivery optimization, and enhancedmanageability needed to get the most out of your network for years to come. Flexible Options: Modular 3- and6-slot single supervisor chassisand 7- and 10-slot redundantsupervisor chassis supportingnumerous connectivity andservice configurations Highest Availability: Redundantsupervisor engines with StatefulSwitchover offering 50ms failover;hot-swappable fan trays withredundant fans Comprehensive Security:802.1x; NetFlow; access controllists and SSH Comprehensive Management:CiscoWorks; CNA; RSPAN; TDRand NetFlow High Port Density: Up to 384Fast Ethernet or Gigabit Ethernetports available in copper or fiberin 10 Gigabit uplinks; integratedman-in-middle attack prevention;PoE (Cisco pre-standard andIEEE 802.3af) Investment Protection:Functionally transparent linecards allow for easy upgrade ofall system ports to higher levelfunctions with Supervisor upgrade. Layer 2 – 4 switching and intelligentservices with dynamic IP routingand IPv6 Up to 48 10/100/1000 ports with4 SFP ports or 48 10/100/1000ports with two 10 GbE ports Dual, hot-swappable internal ACor DC power supplies Hot-swappable fan trays Layer 2 – 4 switching and intelligentservices with dynamic IP routingand IPv6 Fast Ethernet, Gigabit Ethernet,and 10 Gigabit Ethernet (10 GbE)connectivity Up to 48 10/100/1000 ports plus4 SFP ports per stackable switch Integrated PoE (Cisco prestandard and IEEE 802.3af); up to24 ports with 15.4 watts or 48 portswith 7.3 watts Fast Ethernet and Gigabit Ethernetconnectivity Up to 48 10/100/1000 ports plus4 SFP ports Integrated PoE (Cisco pre-standardand IEEE 802.3af); up to 24 portswith 15.4 watts or 48 ports with7.3 watts Fast Ethernet and Gigabit Ethernetconnectivity Up to 48 10/100 ports or10/100/1000 ports AC power supply failure protectionwith external power supply AC power supply failure protectionwith external power supply AC power supply failure protectionwith external power supplyCisco Catalyst 2950 SeriesCisco Catalyst 2940 SeriesFixed-configuration switches offeringFast Ethernet and Gigabit Ethernetconnectivity for branch offices,small wiring closets, and industrialdeployments.Compact fixed-configurationswitches delivering Fast Ethernetconnectivity for workgroup,conference room, and classroomdeployments. Standalone fixed-configurationswitches Standalone fixed-configurationLayer 2 switches with no fan Layer 2 switching with intelligentLayer 2 – 4 services Fast Ethernet connectivity withGigabit Ethernet Uplinks Fast Ethernet connectivity withGigabit Ethernet Uplinks Up to 8 10/100 ports Up to 48 10/100 ports AC power supply failure protectionwith external power supply;DC power option availableCisco Catalyst Express 500SeriesCisco-class switches that makeadvanced network services and IPCommunications easy to managefor businesses with 20 to 250employees. Standalone fixed-configurationLayer 2 switches Fast Ethernet and Gigabit Ethernetconnectivity Up to 24 10/100 ports with optionalPoE or 12 10/100/1000 ports

T EC H N O LO GY S P OT LIGHTThe architectural foundation of theIntelligent Information Network.Cisco Systems offers the industry’s most complete range ofswitching solutions, supporting a wide variety of deploymentrequirements in networks of every size. Yet Cisco CatalystHardware IntegrationPredictable Performanceswitches are much more than a collection of point products toAt the core of Cisco’s hardware integration isapplication-specific integrated circuit (ASIC)innovation. Cisco has developed more than onehundred ASICs for the Cisco Catalyst switchingfamily since 1995, with each generationincluding more capabilities. For example,Cisco was the first vendor to integrate Layer 3switching into hardware, and has gone on tointegrate security access control lists (ACLs),quality of service (QoS) classification, andqueuing across the entire Cisco Catalyst line.Cisco is also the only switching vendor to offerhardware-based services modules, whichintegrate key functions such as firewalling,content networking, and network analysisdirectly into Catalyst 6500 switches.Cisco offers among the highest performancemodular and stackable switches in theindustry, but throughput alone is not enough.Organizations need to be assured of predictableperformance, regardless of variables likecongestion, traffic type, or the use of softwareor hardware-enabled services. That’s whyall Cisco Catalyst switches are designed tomaintain predictable performance through aunique combination of mechanisms, includingCisco Express Forwarding (CEF), TernaryContent Addressable Memory (TCAM), buffering,and congestion management. This ensures thatnetwork managers can enable complex featureswithout fear of losing speed in their networks.meet isolated IT needs; they are part of an integrated approachto the broader goals of protecting, optimizing, and growingnetworks for years to come. 6Cisco Catalyst switches provide an architectural foundation for the intelligentservices that enable new applications and uses for the network. Key elements include: High-Density Gigabit and10 Gigabit EthernetThe Catalyst portfolio leads the industry inGigabit and 10 Gigabit Ethernet (10 GbE) portdensity. Desktop Gigabit Ethernet, also called10/100/1000, provides investment protectionfor future connectivity needs while also makinguse of the “free” LAN-on-motherboard solutionsshipping on most new desktop and laptopcomputers. Additionally, the ability to processnetworked applications faster means that eachPC’s performance improves, increasingproductivity. Similarly, 10 GbE is being rapidlyadopted in many enterprise networks,particularly in the network core, distribution,and in data center networks. Together, GigabitEthernet and 10 GbE help to ensure rapidaccess into the network and betweennetwork devices.Power over EthernetCisco pioneered the delivery of Power overEthernet (PoE), simplifying the deployment ofdevices such as IP phones and wireless accesspoints by eliminating the need for additionalpower cabling. Cisco drove the 802.3af powerstandard through IEEE and today offersextensions to the IEEE standard through the useof intelligent power management. In keepingwith Cisco’s evolutionary approach, the CiscoCatalyst line includes switches that supportboth pre-standard inline power as well as IEEE802.3af-compliant devices, enabling ourcustomers to deploy new technology whilecontinuing to make the most of past investments.

T EC H N O LO GY S P OT L I G H TEnd-to-end intelligent switchingfor today’s converged network services.The LAN switching infrastructure connects users, applications,and communications systems together. That basic task has becomeCisco Catalyst switches support today’s technology trends and business goalsthrough a unique combination of intelligent capabilities. Major advantages include:much more challenging as the variety and complexity of networkIntegrated SecurityDelivery Optimizationuses have increased. Cisco Catalyst switches provide the intelligentCisco Catalyst switches help make networksself-defending. Encrypted passwords, multilevelaccount privileges, and authentication protocolsprevent unauthorized network access—aproblem exacerbated by the rapid adoption ofwireless networking. The switches can alsoprevent devices from connecting if they fail tomeet certain criteria, such as having the latestantivirus software. Users can be separated intoprivate subnets to permit varying levels ofaccess. Other features enable the switches toprotect themselves from worms and denial-ofservice (DoS) attacks, prevent routing andspanning tree information from being spoofed,and ensure malicious users can’t stealconfidential information, either from thecompany or from other employees.Today’s networks must be intelligent andadaptable enough to meet the varyingrequirements of converged data, voice, video,and storage traffic. Cisco Catalyst switchesoptimize the delivery of disparate traffic typesusing three key technologies: quality of service(QoS), multicast, and content switching. QoSallows network managers to prioritize traffic andensure low-latency traffic such as voice getshandled accordingly. Multicast makes it muchmore efficient to deliver video or music on-holdto multiple points on the network, reducing theburden on servers. The Cisco Catalyst 6500Series Content Switching Module addsadvanced Layer 4–7 load balancing to theCatalyst line’s existing Layer 2 and 3 features,further optimizing service delivery. services required to create secure, resilient networksthat optimizethe deliveryof disparateeasy to configure, services, yet remain manage, and troubleshoot. Availability and ResiliencyEnhanced ManageabilityCisco Catalyst switches help maintain thehighest levels of network availability andresiliency. Each switch is designed to protectitself from hardware, software, power, orconnection failures—or at the very least,minimize recovery times by enabling redundantbackup systems and protocols to take over inas little as a millisecond. The switches arealso designed to increase resiliency on anetwork-wide level, utilizing an array of Ciscoinnovations to recover from device, link, orprotocol failures and maintain uninterruptedaccess. Integrated security features also playa role in preserving availability in the event ofincidents like DoS attacks. Conversely, resilientdesigns help networks recover faster fromsecurity breaches, or even nullify their impact.All Cisco Catalyst switches offer enhancedcapabilities that make them much easier toconfigure, manage, and troubleshoot. Theseinclude wizards that automatically configureswitches, integrated Web-based managementtools, device discovery and intelligent powermanagement features for PoE equipment suchas IP phones and wireless access points, andan array of data collection and analysis tools.The benefits are real-time visibility, fasterresponse and repair times, more adaptive policymanagement, and reduced cost and complexity.In the case of the Cisco Catalyst 6500 Series,optional Network Analysis Modules embed arich set of management features on a singleblade, providing volumes of performanceinformation without burdening the switch itself.9

Cisco Catalyst Switches: FE ATURE C OMPARIS ONMODUL AR SWITCHESF I X E D - C O N F I G U R AT I O N S W I T C H E SCatalyst 4500Catalyst 4900Catalyst 3750Catalyst 3560Catalyst 2960Catalyst 2950Catalyst 2940CatalystExpress 500 Jumbo Frames—Gigabit Ethernet on Copper 6-portcard only L2 onlyL2 onlyL2 onlyJumbo Frames—Gigabit Ethernet on Fiber all non-blockingports L2 onlyL2 onlyL2 onlyBroadcast Suppression Multicast Suppression 802.1Q only802.1Q only802.1Q only transparentmode onlyCatalyst 6500L A N S W I T C H I N G F E AT U R E SConnectivity and FilteringEtherChannel /802.3adLayer 2ISL/802.1Q Private VLAN Edge Private VLAN IP ServicesIP ServicesVoice VLAN VLAN Trunking Protocol (VTP) GVRP GARP URT/VMPS VTP v3 VTP Bomb Protection VMPS Server Number of Active VLANs4,0964,0962,0481,0051,00525564 (SI), 128 (EI)1232Number of VLAN yer 310802.1Q onlyH/W-based MPLS/EoMPLS EIGRP IP ServicesIP ServicesOSPF IP ServicesIP ServicesBGP IP ServicesIP ServicesEqual Cost Load Balancing RIP, RIPv2 Static Routes IS-IS H/W-based IPv6 Routing in softwarein softwareAdvanced IPServicesAdvanced IPServices

Cisco Catalyst Switches: FE ATURE C OMPARIS ONMODUL AR SWITCHESF I X E D - C O N F I G U R AT I O N S W I T C H E SCatalyst 6500Catalyst 4500Catalyst 4900Catalyst 3750Catalyst 3560H/W-based Policy Routing IPv4 IP ServicesIP ServicesH/W-based Policy Routing IPv6 Multiprotocol Routing (IPX, AppleTalk) Catalyst 2960Catalyst 2950Catalyst 2940CatalystExpress 500L A N S W I T C H I N G F E AT U R E S continuedLayer 3 continued H/W FIB Entriesup to1,000,000up to128,000up to128,000up to20,000up to11,000VRF LiteIP ServicesIP ServicesIP ServicesIP ServicesIP ServicesCisco Express Forwarding (CEF)I N T E G R AT E D S E C U R I T YAccess Control ListsReflexive ACL Port ACL EI onlyTime-Based ACL Router ACL VLAN ACL * *capture andloggingcapture andlogging512300 ACP—EI only SI Option82 onlyVACL with Redirect/Capture/Logging of Denied Traffic Context-based Access Control H/W-based Access Control Entry (ACE) Counters Order Dependent ACL Merge Dedicated Hardware Resourcesfor Security ACLs 32,00032,00032,0001,0001,000ACL Scalability (ACE entries)Attack Mitigation12Control Plane Policing (Multiple CPU Rate Limiters) IP Source Guard DHCP Snooping/Option 82 Dynamic ARP Inspection MAC Address Notification Port Security H/W-based uRFP Check H/W-based MAC Learning H/W-assisted MAC Aging *As part of IP ACL in VLAN MAP but not for the entire VACL.

Cisco Catalyst Switches: FE ATURE C OMPARIS ONMODUL AR SWITCHESCatalyst 6500F I X E D - C O N F I G U R AT I O N S W I T C H E SCatalyst 4500Catalyst 4900Catalyst 3750Catalyst 3560Catalyst 2960Catalyst 2950Catalyst 2940CatalystExpress 500 I N T E G R AT E D S E C U R I T Y continuedAttack Mitigation continuedRouting Protocol Pass Through ARP Policing H/W-based Directed Broadcast Trust and Identity Management802.1x Identity-basedNetworking Port Authentication 802.1x with VLAN assignment 802.1x with Guest VLAN 802.1x with Aux. VLAN Support TACACS /RADIUS RADIUS onlySecure ConnectivityH/W-based NAT/PAT MD5 Route Authentication Multilevel Account Privilege AVA I L A B I L I T Y A N D R E S I L I E N CYSwitch RedundancyIOS Software Modularity Non-stop Forwarding/Stateful Switchover (NSF/SSO) Stateful Switchover (SSO) NSF-aware Redundant Power Supplies external onlyexternal onlyexternal onlyexternal onlyWS-CES50024PC onlyRedundant Fans 24PC only Redundant Supervisors Generic Online Diagnostics (GOLD) Real-time Diagnostics Power Supply Failure Redundancy Power Circuit Failure Redundancy Unidirectional Link Detection (UDLD) Gateway Load Balancing Protocol (GLBP) Network Protocols14

Cisco Catalyst Switches: FE ATURE C OMPARIS ONMODUL AR SWITCHESF I X E D - C O N F I G U R AT I O N S W I T C H E SCatalyst 6500Catalyst 4500Catalyst 4900Catalyst 3750Catalyst 3560 Catalyst 2960Catalyst 2950Catalyst 2940CatalystExpress 500AVA I L A B I L I T Y A N D R E S I L I E N CY continuedNetwork Protocols continuedHot Standby Routing Protocol (HSRP) Virtual Router Redundancy Protocol (VRRP) UplinkFast/BackBoneFast/802.1w PortFast Per VLAN STP (PVSTP) Multiple Instance STP (MISTP)/802.1s STP Root/BDPU/Loop Guard 444IP Event Dampening Bidirectional Forwarding Detection Digital Optical Monitoring Flexlink D E L I V E R Y O P T I M I Z AT I O NQuality of ServiceNumber of Queues per Portup to 844444Congestion Avoidance WTDWTDWTDL2–L3 Re-write/Mapping Ingress Queuing N/AN/A WTDEI onlyIngress Strict Priority N/AN/A Egress Queuing Egress Strict Priority Traffic Classification IP Service Level Agreement EI only Policers16H/W-based Policing Per-port Policers Per-VLAN Policers H/W-based Aggregate Policers Hierarchical Policers User-based (Source IP) Rate Limiting Shaped Round Robin

Cisco Catalyst Switches: FE ATURE C OMPARIS ONMODUL AR SWITCHESF I X E D - C O N F I G U R AT I O N S W I T C H E SCatalyst 2960Catalyst 2950Catalyst 2940CatalystExpress 500 Catalyst 6500Catalyst 4500Catalyst 4900Catalyst 3750Catalyst 3560H/W-based IPv6 Multicast in softwarein softwareno PIMno PIMH/W-based IPv4 Multicast H/W-based Bi-directional PIM Multicast Manager Source Specific Multicast (SSM) Multicast NSF/SSO PIM Sparse PIM Dense PIM Sparse/Dense PIM Snooping IGMP V1/V2 D E L I V E R Y O P T I M I Z AT I O N c o n t i n u e dMulticastIGMP V3 CGMP RGMP 32,00028,00028,0001,0001,000IGMP Snooping IGMP Querier SSM Mapping H/W-based Multicast Tunneling mVRF Lite Multicast VPN (mVPN) in softwarein softwareDVMRP InteroperabiityNumber of Multicast RoutesTunneling Protocols18H/W-based GRE H/W-based Multipoint GRE H/W-based IPv4 in IPv6 in softwarein softwareH/W-based IP in IP in softwarein software

Cisco Catalyst Switches: FE ATURE C OMPARIS ONMODUL AR SWITCHESCatalyst 6500F I X E D - C O N F I G U R AT I O N S W I T C H E SCatalyst 4500Catalyst 4900Catalyst 3750Catalyst 3560Catalyst 2960Catalyst 2950Catalyst 2940CatalystExpress 500 ENHANCED MANAGE AB ILIT YEmbedded Event Manager Cisco Discovery Protocol (CDP) Time Domain Reflectometry (TDR)Interface 10/100 Time Domain Reflectometry (TDR)Interface 10/100/1000 Cisco Network Assistant (CNA) Smartports NetFlow NetFlow Data Export Syslog Switch TopN SNMP RMON SPAN RSPAN El onlyERSPAN L2-Traceroute SSH v2 AutoQoS El onlyE-911 MIB Support Management Port—RJ45 Management Port—USB Compact Flash Configuration Rollback Call Home Digital Optical Monitoring NETFLOW20 Integrated H/W-based NetFlow NetFlow Top Talkers Sampled NetFlow NetFlow v9

Cisco Catalyst Switches: FE ATURE C OMPARIS ONMODUL AR SWITCHESCatalyst 6500Catalyst 4500F I X E D - C O N F I G U R AT I O N S W I T C H E SCatalyst 4900Catalyst 3750Catalyst 3560Catalyst 2960Catalyst 2950Catalyst 2940CatalystExpress 500N E TFLOW continuedMulticast NetFlow Per Interface NetFlow Data Export Bridged IP Flows NetFlow v5 NetFlow v8 Microflow Policing S O F T WA R E M O D U L A R I T YSubsystem In Service Software Upgrade (ISSU) Fault Containment Memory Protection Process Restartability A P P L I C AT I O N , S E C U R I T Y,AND MANAGE AB ILIT Y MODULESVirtualized Firewall Module Intrusion Detection and Prevention Module VPN: IPsec, SSL Module Anomaly Detection and Guard Module Network Analysis Module Communication Media Module Wireless LAN Service Module Content Switching and SSL Module Application-oriented Networking Module IPT SOLUTION22802.3af—15W on 48 ports in a module/fixed switch 802.3af—7W on 48 ports in a module/fixed switch 802.3af—15W on 24 ports in a module/fixed switch 802.3af Modular PoE Daughter Card Subsystem In Service Software Upgrade (ISSU) Fast Link Failure Detection(Bidirectional Forwarding Detection) Redundant Supervisors with Stateful Switchover

Cisco Catalyst Switches: FE ATURE C OMPARIS ONMODUL AR SWITCHESF I X E D - C O N F I G U R AT I O N S W I T C H E SCatalyst 6500Catalyst 4500Catalyst 4900Catalyst 3750Catalyst 3560Catalyst 2960Catalyst 2950Redundant Power Supply El onlyCatalyst 2940CatalystExpress 500I P T S O LUTI O N continuedRedundant Power Circuit Communication Media Module AutoQoS Encapsulated RSPAN IP Service Level Agreement SY S T E M S C A L A B I L I T YAggregate Bandwidth (Gbps)32 – 3.63.68.8–24Packets per Second (Mpps)15 – �10.12.76.5–17.9Modular Memory Upgrade For more product information on Cisco Catalyst Switches, go /index.html24

Cisco CatalystModular SwitchesThe Cisco Catalyst 6500 and 4500 Series modular switchespro

Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, . Catalyst 3560, Catalyst 2960, Catalyst 2950, Catalyst 2940, and Catalyst Express 500 Series Fixed-Configuration Switches Scalable, intelligent LAN switching for campus, branch, and .