Quantcast
Channel: Cisco Router, Network Switches Tips
Viewing all 107 articles
Browse latest View live

The Cool Cisco IOx

$
0
0
Cisco IOx combines Cisco IOS and the Linux OS for highly secure networking.

The Cisco IOx application framework combines IoT application execution within the fog, secure connectivity with Cisco IOS Software, and powerful services for rapid, reliable integration with Internet of Things (IoT) sensors and the cloud. By bringing application execution capability to the source of IoT data, customers overcome challenges with high volumes of data and the need for automated, near–real time system responsiveness.
The Cisco IOx application framework offers consistent management and hosting across network infrastructure products, including Cisco routers, switches, and compute modules.
Cisco IOx allows application developers to work in the familiar Linux application environment with their choice of languages and programming models with familiar open-source development tools.
Major Components of the Cisco IOx Application Framework

The value of running applications on IOx enabled network infrastructure extends to the enterprise as well. Customers seeking automation and insights from IT data may use Cisco IOx to securely execute and manage applications at scale.
Benefits
● Reach business outcomes associated with IoT initiatives more rapidly with application execution within the fog
● Reach production scale rapidly by offering flexible application development and deployment approaches
● Build new business with the ability to process high volumes of data in the fog and deliver closed-loop system control in real time

Key Features-The Cisco IOx Application


Network Infrastructure Products Supported
The following Cisco network infrastructure products listed in the Table currently support Cisco IOx.
IOx-Enabled Network Infrastructure Products

Product

Description
IR829Cisco 829 industrial Integrated Services Router
IR809Cisco 809 industrial Integrated Services Router
C819Cisco 819 industrial Integrated Services Router
C88x (4G SKUs)Cisco 88x industrial Integrated Services Router
C800mCisco 800 industrial Integrated Services Router
C89x (LTE SKUs)Cisco 800 industrial Integrated Services Router
ASR1000Cisco ASR 1000 Series Aggregation Services Routers
ISR4000Cisco 4000 Series Integrated Services Routers

The data sheet reference fromhttp://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/iox/datasheet-c78-736767.html

More Related…
The New Cisco IOx and Fog Applications
Introducing the Cisco IOS XE Open Service Containers
Cisco ONE for WAN-Benefits
Cisco DNA is a Game Changer for the Digital Era?
Cisco Boosts IOS XR Software Solutions…for ‘Cloud-Scale’ Networking

C6800-SUP6T vs. C6800-SUP6T-XL

$
0
0

We introduced one of Cisco’s new Switching Innovations before, the Cisco Catalyst 6800 Series Supervisor Engine 6T. In this article we will share some more detailed features of the Cisco Catalyst 6800 Supervisor Engine 6T.

The Supervisor 6T is made up of three main physical components:
● The Baseboard with Integrated MSFC6
● The 4th generation Enhanced Policy Feature Card (PFC4-E)
● The New 6 Tbps Switch Fabric

Supervisor 6T Board Layout


The Baseboard on the Supervisor 6T houses Front Panel ports, Integrated RP Complex, Forwarding ASIC (PFC4) and Switch Fabric daughter Boards. The Supervisor 6T supports two baseboard models that offer different levels of scalability based on the PFC4-E forwarding engine present. The two models are C6800-SUP6T (Lite) and C6800-SUP6T-XL (Heavy).

The following Table outlines some high level differences between two models.
Comparison of Supervisor 6T Baseboards

Hardware Options

C6800-SUP6T

C6800-SUP6T-XL
PFCLiteHeavy
System CPUDual Core 2.5GhzDual Core 2.5Ghz
System Memory1x4GB1x4GB
IPv4/IPV6 Routing Capability256K/128K1024K/512K
Security and QoS ACL64K (Shared)256K (Shared)
Flexible NetFlow512K1024K
Multicast Routes (IPv6)128K128K
Number of Adjacencies256K1M
MAC Addresses128K128K
IPV4/IPV6 Routing720/390Mpps720/390Mpps

In the following part we will compare the C6800-SUP6T to C6800-SUP6T-XL in the scalability, virtualization, security features, the NetFlow and Multicast features. This comparison may help you select and use the new Supervisor Engine 6T wisely.

C6800-SUP6T vs. C6800-SUP6T-XL
Base System Scalability

Attribute

C6800-SUP6T

C6800-SUP6T-XL
MAC entries128K128K
Routes256K (IPv4)
128K (IPv6)
Up to 1024K (IPv4)
Up to 512K (IPv6)
ACL entries64K shared for QoS and security256K shared for QoS and security
NetFlow entries512K per PFC4/4XL1024K per PFC4/4XL
Multicast routesUp to 128K (IPv4)
Up to 128K (IPv6)
Up to 128K (IPv4)
Up to 128K (IPv6)
IPv4 routingIn hardware
Up to 780 Mpps*
In hardware
Up to 780 Mpps*
IPv6 routingIn hardware
Up to 390 Mpps*
In hardware
Up to 390 Mpps*
Layer 2 bridgingIn hardware
Up to 780 Mpps
In hardware
Up to 780 Mpps
Jumbo frame supportUp to 9216 bytes
(for bridged and routed packets)
Up to 9216 bytes
(for bridged and routed packets)
VLAN4K4K
Bridge domains16K16K
MPLSMPLS in hardware to support use of Layer 3 VPNs and Ethernet over (EoMPLS) tunneling
Up to 8192 VRFs, with a total of up to 256K forwarding entries per system
MPLS in hardware to support use of Layer 3 VPNs and EoMPLS tunneling
Up to 8192 VRFs, with a total of up to 1024K forwarding entries per system
Logical interfaces128K128K
EtherChannel hash8 bits8 bits
VPLSIn hardware (up to 390 Mpps)In hardware (up to 390 Mpps)
Generic Routing Encapsulation (GRE)In hardware (up to 390 Mpps)In hardware (up to 390 Mpps)
Network Address Translation (NAT)Hardware assistedHardware assisted
Onboard memory4 GB4 GB
Ingress buffers1.25 MB per 10-Gb port in 2:1 mode
2.5 MB per 10-Gb port in 1:1 mode
(10 MB per port ASIC)
1.25 MB per 10-Gb port in 2:1 mode
2.5 MB per 10-Gb port in 1:1 mode
(10 MB per port ASIC)
Egress buffers250 MB per 10-Gb port in 2:1 mode
1 GB per 40-Gb port in 2:1 mode

500 MB per 10-Gb port in 1:1 mode
2 GB per 40-Gb port in 1:1 mode

(2 GB per fabric interface and replication engine (FIRE) ASIC)
250 MB per 10-Gb port in 2:1 mode
1 GB per 40-Gb port in 2:1 mode

500 MB per 10-Gb port in 1:1 mode
2 GB per 40-Gb port in 1:1 mode

(2 GB per fabric interface and replication engine (FIRE) ASIC)
* Requires a fully populated 6513-E chassis with Distributed Forwarding Card4 (DFC4) and DFC4XL

QoS Features and Scalability

Feature

C6800-SUP6T

C6800-SUP6T-XL
Layer 3 classification and marking access control entries (ACEs)64K shared for QoS and security256K shared for QoS and security
Aggregate traffic rate-limiting policers16,34816,348
Flow-based rate-limiting method; number of ratesPer source address, destination address, or full flow; 64 ratesPer source address, destination address, or full flow; 64 rates
Layer 2 rate limiters20 ingress, 6 egress20 ingress, 6 egress
MAC access control lists (ACLs) featuring per-port and per-VLAN granularityYesYes
Distributed policersYesYes
Shared uFlow policersYesYes
Egress uFlow policersYesYes
Packet or byte policersYesYes
Per port per VLANYesYes
Class of service (CoS) and differentiated services code point (DSCP)-based queue mappingYesYes
Deficit Weighted Round Robin Scheduler (DWRR) and Weighted Random Early Detection Scheduler (WRED)YesYes
Traffic shapingYesYes
Hierarchical QoS2-level2-level
Receive and transmit queuesDefault: 1p7q4t
Configurable: 2p6q4t
Default: 1p7q4t
Configurable: 2p6q4t

Security Features and Scalability
FeatureC6800-SUP6TC6800-SUP6T-XL
Port securityYesYes
IEEE 802.1x and 802.1x extensionsYesYes
VLAN and router ACLs and port ACLsYesYes
1:1 mask ratio to ACE valuesYesYes
Security ACL entries64K shared for QoS and security256K shared for QoS and security
CPU rate limiters (DoS protection)5757
Unicast Reverse Path Forwarding (uRPF) check (IPv4/IPv6)Up to 16Up to 16
Number of interfaces with a unique ACL16K16K
RPF interfaces1616
Private VLANsYesYes
MAC ACLs on IPYesYes
Layer 2 and Layer 3 Cisco TrustSec®
(Security Group Tagging and Security Group Access Control List)
YesYes
IEEE 802.1ae (MACsec) Layer 2 encryption in hardwareYesYes
CPU hardware rate limiters by PPS or BPSYesYes
Control Plane Policing (CoPP) for multicastLayer 2 and 3 supportLayer 2 and 3 support
CoPP for exceptions (MTU, TTL)YesYes
CoPP exceptions NetFlow supportYesYes
ACL labels16K16K
Port ACL8K8K
ACL dry runYesYes
Hitless ACL changesYesYes

MPLS and Virtualization Features

Feature

C6800-SUP6T

C6800-SUP6T-XL
Virtual Switching System (VSS)YesYes
Instant accessYesYes
Label imposition and disposition (MPLS‑PE), swapping (MPLS‑P)YesYes
Label Distribution Protocol (LDP)YesYes
MPLS VPNYesYes
Virtual Route Forwarding (VRF) LiteYesYes
Easy Virtual Network (EVN)YesYes
QoS mechanisms using experimental (EXP) bitsYesYes
MPLS-RSVP-TEYesYes
MPLS TE tunnels1K1K
MPLS differentiated services (diffserv)-aware traffic engineering (MPLS-DS-TE)YesYes
MPLS tracerouteYesYes
EoMPLSYesYes
EoMPLS tunnels16K16K
IPv4 and IPv6 in IPv6 tunnelingYesYes
IPv6 in IPv4 tunneling (Intra-Site Automatic Tunnel Addressing Protocol [ISATAP], 6to4, GRE)YesYes
QoS support for uniform, short pipe, and pipe mode tunnelYesYes
Native virtual private LAN services (VPLS) in hardwareYesYes
Hierarchical VPLSYesYes
VPLS pseudo-wire4K4K
Native Layer 2-over-multipoint GREYesYes
VRF-aware operational contextsYesYes
VPN NetFlow supportYesYes
VPN-aware NATYesYes
VRF-lite scalabilityVLAN reuse per subinterfaceVLAN reuse per subinterface
Per-VPN interface statisticsYesYes

NetFlow Features
FeatureC6800-SUP6TC6800-SUP6T-XL
NetFlow support in hardwareYesYes
Flexible NetFlowYesYes
Sampled NetFlowYesYes
Ingress and egress NetFlowYesYes
L2 NetFlowYesYes
MPLS ingress and egress NetFlowYesYes
Copy-based samplingYesYes
Yielding NDEYesYes
Per-VRF NetFlowYesYes
Multiple exportersYesYes
IPFIXYesYes

Multicast Features
FeatureC6800-SUP6TC6800-SUP6T-XL
IGMPv3 snooping in hardwareYesYes
IPv6 MLDv2 snooping in hardwareYesYes
PIM registers in hardwareYesYes
Label Switched Multicast (LSM)YesYes
Ingress and egress replication in hardwareYesYes
More about the Platform Support and Compatibility, such as the Product Compatibility and Specifications, Optics Support, Product Compliance and Ordering Information you can read the Full Data Sheet from http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/catalyst-6800-series-supervisor-engine-6t/datasheet-c78-736408.html
More Related info about the Cisco Catalyst 6500/6800 Supervisor 6T Architecture, such as the Chassis Options for Supervisor 6T, Supported Chassis, Fan, and Power Supply for Supervisor 6T, Chassis Supervisor Slots, Supervisor 6T-Compatible Line Cards, etc. you can read here
http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6500-series-switches/white-paper-c11-737405.html

More Related Topics
Introducing Cisco Catalyst 6800 Series Supervisor Engine 6T
Move to 40G Today? Yes!
To Know about the New 32-port 10-Gb Line Cards on Catalyst 6800 &6500-E Series
Catalyst 4500E & 4500X Series 10 GbE Review
Cisco 4500E Supervisor 8E vs. Supervisor 7E vs. Supervisor 7LE
Cisco S-Class Optics vs. Non-S-Class Optics
Is It Possible to Interconnect SFP, SFP+ and XENPAK/X2…?

Updated: Cisco Aironet 1530 Series Outdoor Access Point

$
0
0
Cisco never stops updating its technology and products. Yes, there is something new on Cisco Outdoor Access Point-the Aironet 1530 Series.
The Cisco Aironet 1530 Series Outdoor Access Points incorporate a low-profile design that is aesthetically pleasing, yet they can withstand the most rugged outdoor conditions.

Cisco brings engineering innovation to the platform with unique Cisco Flexible Antenna Port technology that allows the same antenna ports to be used either for dual-band antennas to reduce the antenna footprint or for single-band antennas to optimize radio coverage. This flexibility allows antenna changes to be made on the fly, and saves on sparing costs.
And the Cisco Aironet 1530 Series brings all the same robust Wi-Fi features that operators have come to expect from Cisco, including radio resource management, BandSelect to automatically take advantage of the 5‑GHz band, and VideoStream for high-quality video performance over Wi-Fi. Only Cisco delivers all of these features in a hardened outdoor access point that is ideal for any urban setting.

Enterprise customers are also looking to expand their wireless coverage and provide seamless network access from indoor to outdoor areas. The Cisco Aironet 1530 Series Outdoor Access Points are small enough and light enough to be unobtrusively mounted on street light poles or building facades.

The integrated antenna version is just 9 x 7 x 4 inches (23 x 17 x 10 cm) and weighs 5 pounds (2.3 kg). A solar shield/cover option is also available, and can be painted to match its surroundings to allow the access point to be even less noticeable.

  1. The Cisco Aironet 1530I Outdoor Access Point includes a dual-band, integrated antenna radome. This antenna has three omnidirectional antenna elements with antenna gains of 3 dBi (2.4 GHz) and 5 dBi (5 GHz). More information, including antenna patterns, can be found in the Cisco Aironet Antennas and Accessories Guide: http://www.cisco.com/en/US/products/hw/wireless/ps469/index.html.

  2. The innovatively designed Cisco Aironet 1530E Outdoor Access Point is designed with antenna Cisco Flexible Antenna Port technology, which can support either dual-band or single-band antennas on the same platform and is configurable via software. When configured for dual-band ports, the Aironet 1530E uses the bottom two antenna ports to connect to dual-band omnidirectional or directional antennas. Alternatively, and for additional radio coverage flexibility, the Aironet 1530E can be software-configured, enabling two separate 2.4-GHz and two 5-GHz antenna ports. This flexibility allows customers to use high-gain directional antennas for backhaul on 5 GHz while deploying omnidirectional antennas for access on 2.4 GHz. Refer to the Cisco Aironet 1530 Series Ordering Guide for the latest information on supported antennas.

Cisco Aironet 1530E with Flexible Antenna Port Antenna Technology

The Cisco Aironet 1530 Series provides high-performance device access through improved radio sensitivity and range with 802.11a/b/g/n multiple-input multiple-output (MIMO) technology, with two or three spatial streams and up to 300‑Mbps data rates. The Aironet 1530 Series can be deployed in the following configurations:
● Access point:Either in controller-based or standalone operation, provides Wi-Fi connectivity concurrently to clients on both 2.4-GHz and 5-GHz radios.
● Mesh network: as dedicated backhaul or universal access, the 5-GHz radio is used for wireless network connections to adjacent mesh nodes.
● Bridging:Provides point-to-point, high-capacity data links, as well as point-to-multipoint bridging for campuses.
● Workgroup bridge: Enables LAN mobility, such as on a vehicle.
● Serial backhaul: Extends linear mesh with two colocated Aironet 1530 Series access points connected via the LAN port (Figure 3).

Serial Backhaul Using Two Cisco Aironet 1530 Series Access Points


More specifications for the Cisco Aironet 1530 Series you can read the newest data sheet of Aironet 1530 Series Outdoor APs

More Cisco Wireless AP Topics
Cisco Aironet 1530 Series Outdoor Access Point-Features & Models
Cisco Aironet 1552E/EU vs. Aironet 1552C/CU vs.1552I vs.1552H Outdoor Points
The New Cisco Aironet 1570 Series Access Point
Cisco Aironet 802.11n G2 Series Indoor Access Point Comparison

Modular Switches and Fixed Configuration Switches

$
0
0
The main two types of Ethernet Switches: Modular and Fixed Configuration

Modular switches, as the name described “Modular”, allows you to add expansion modules into the switches as needed, thereby delivering the best flexibility to address changing networks. Examples of expansion modules are application-specific (such as Firewall, Wireless, or Network Analysis), modules for additional interfaces, power supplies, or cooling fans. Cisco Catalyst 4K and 6K are good examples of Modular switches.

Fixed Configuration switches are switches with a fixed number of ports and are typically not expandable. Cisco Catalyst 2K, 3K and the Cisco300/500 series are good examples of Fixed Configuration switches.

The Fixed configuration switch category is further broken down into: Unmanaged Switches, Smart Switches and Managed L2 and L3 Switches
1. Unmanaged Switches
This category of switch is the most cost effective for deployment scenarios that require only basic layer 2 switching and connectivity. As such, they fit best when you need a few extra ports on your desk, in a lab, in a conference room, or even at home.

With some unmanaged switches, you can even get capabilities such as cable diagnostics, prioritization of traffic using default QoS settings, Energy savings capabilities using EEE (Energy Efficient Ethernet) and even PoE(Power over Ethernet). However, these switches generally cannot be modified /managed. You simply plug them in and they require no configuration at all.
Cisco 100 Series switches are good examples of this Unmanaged Switches.

2. Smart Switches(also known as Lightly Managed Switches)
This category of switches is the most blurred and fastest changing. The general rule here is that these switches offer certain levels of Management, QoS, Security, etc. but is “lighter” in capabilities and less scalable than the Managed switches. It therefore makes them a cost-effective alternative to Managed switches. As such, Smart switches fit best at the edge of a large network (with Managed Switches being used in the core), as the infrastructure for smaller deployments, or for low complexity networks in general.

The capabilities available for this Smart switch category vary widely. All of these devices have an interface for Management – historically a browser-based interface used to be the only way to configure these devices, though nowadays you can manage some of these devices with CLI and/or SNMP/RMON as well. Regardless, these capabilities are lighter than what you will find in their Managed switch counterparts.  Smart switches tend to have a management interface that is more simplified than what Managed Switches offer.

Smart switches allow you to segment the network into workgroups by creating VLANs, though with a lower number of VLANs and nodes (MAC addresses) than you’d get with a Managed switch.
They also offer some levels of security, such as 802.1x endpoint authentication, and in some cases with limited numbers of ACLs (access control lists), though the levels of control and granularity would not be the same as a Managed switch.

In addition, Smart switches support basic quality-of-service (QoS) that facilitates prioritization of users and applications based on 802.1q/TOS/DSCP, thereby making it quite a versatile solution.

Cisco 200 Series switches are good examples of this category.

3. Fully Managed L2 and L3 Switches
Managed Switches are designed to deliver the most comprehensive set of features to provide the best application experience, the highest levels of security, the most precise control and management of the network, and offer the greatest scalability in the Fixed Configuration category of Switches. As a result, they are usually deployed as aggregation/access switches in very large networks or as core switches in relatively smaller networks. Managed switches should support both L2 switching and L3 IP routing though you’ll find some with only L2 switching support.
From a Security perspective, Managed switches provide protection of the data plane (User traffic being forwarded), control plane (traffic being communicated between networking devices to ensure user traffic goes to the right destination), and management plane (traffic used to manage the network or device itself). Managed switches also offer network storm control, denial-of-service protection, and much more.

The Access Control List capabilities allows for flexibly dropping, rate limiting, mirroring, or logging of traffic by L2 address, L3 address, TCP/UDP port numbers, Ethernet type, ICMP or TCP flags, etc.

Managed switches are rich in features that enable them to protect themselves and the network from deliberate or unintended Denial of Service attacks.  It includes Dynamic ARP Inspection, IPv4 DHCP snooping, IPv6 First Hop Security with RA Guard, ND Inspection, Neighbor Binding Integrity, and much more.

Additional Security capabilities may include Private VLANs for securing communities of users or device isolation, Secure Management (downloads through SCP, Web-based Authentication, Radius/TACACS AAA, etc), Control Plane Policing(CoPP) for protecting the CPU of the switch, richer support for 802.1x (time-based, Dynamic VLAN Assignment, port/host-based, etc)
These devices have large table sizes so that you can create large numbers of VLANs (for workgroups), devices (MAC table size), IP routes, and ACL policies for flow-based security/QoS purposes, etc.

For highest network availability and uptime, Managed switches support L3 redundancy using VRRP (Virtual Router Redundancy Protocol), large numbers of Link Aggregation groups (which is used both for scalability and resiliency), and capabilities for protecting L2 such as Spanning Tree Root Guard and BPDU Guard.

Talking about QoS and Multicast features, the richness of capabilities goes far beyond what you’d see in a Smart Switch. Here you’d see things such as IGMP and MLD Snooping with Querier functions for optimizing IPv4/v6 multicast traffic in the LAN, TCP Congestion Avoidance, 4 or 8 queues to treat traffic differently by importance, setting/tagging traffic by L2 (802.1p) or L3 (DSCP/TOS), and rate limiting traffic.

In terms of Management, things such as multiple ways to configure (using CLI, Web GUI, SNMP Management application), discovering of neighbor devices in the networks (using CDP, LLDP, Bonjour, etc), and troubleshooting capabilities (such as VLAN and Port Mirroring, Traceroute, Ping, Syslog, Cable Diagnostics, RMON, etc) are all included.

The Good Examples: Cisco Catalyst and Cisco 300 Series and 500 Series Switches

Managed Switches can go even further than what we explained above.For example, there’s even richer support for Dynamic Unicast and Multicast Routing protocols, deeper flow intelligence or macro flow statistics with Netflow/SFlow, non-Stop Forwarding capabilities, MPLS/VRF support, Policy enforcement, and many others.
Now, to take a deeper dive into these switch categories and talk about various options, you can select the switches based on: Speed, Number of Ports, POE versus non-POE and Stackable versus Standalone.

a. Speed:You can find Fixed Configuration switches in Fast Ethernet (10/100 Mbps), Gigabit Ethernet (10/100/1000 Mbps), Ten Gigabit (10/100/1000/10000 Mbps) and even some 40/100 Gbps speeds. These switches have a number of uplink ports and a number of downlink ports. Downlinks connect to end users – uplinks connect to other Switches or to the network infrastructure. Currently, Gigabit is the most popular interface speed though Fast Ethernet is still widely used, especially in price-sensitive environments. Ten Gigabit has been growing rapidly, especially in the datacenter and, as the cost comes down, it will continue to expand into more network applications. With 10GBase-T Ten Gigabit copper interfaces being integrated into LOM (LAN on the Motherboard) and 10G-Base-T switches becoming available now  (see the new Cisco SG500XG-8F8T 16-port 10-Gigabit switch), building a Storage or Server farm with 10 Gigabit interfaces has never been easier or more cost-effective. 40G/100G is still emerging and will be mainstream in a few years.

b. Number of Ports: Fixed Configuration Switches typically come in 5, 8, 10, 16, 24, 28, 48, and 52-port configurations. These ports may be a combination of SFP/SFP+ slots for fiber connectivity, but more commonly they are copper ports with RJ-45 connectors on the front, allowing for distances up to 100 meters. With Fiber SFP modules, you can go distances up to 40 kilometers

c. POE versus non-POE: Power over Ethernet is a capability that facilitates powering a device (such as an IP phone, IP Surveillance Camera, or Wireless Access Point) over the same cable as the data traffic.  One of the advantages of PoE is the flexibility it provides in allowing you to easily place endpoints anywhere in the business, even places where it might be difficult to run a power outlet. One example is that you can place a Wireless Access Point inside a wall or ceiling.

Switches deliver power according to a few standards–IEEE 802.3af delivers power up to 15.4 Watts on a switch port whereas IEEE 802.3at (also known as POE+) delivers power up to 30 Watts on a switch port. For most endpoints, 802.3af is sufficient but there are devices, such as Video phones or Access Points with multiple radios, which have higher power needs. It’s important to point out that there are other PoE standards currently being developed that will deliver even high levels of power for future applications. Switches have a power budget set aside for running the switch itself, and also an amount of power dedicated for POE endpoints.

To find the switch that is right for you, all you need to do is choose a switch according to your power needs. When connecting to desktops or other types of devices which do not require POE, the non-POE switches are a more cost-effective option.

d. Stackable versus Standalone:As the network grows, you will need more switches to provide network connectivity to the growing number of devices in the network. When using Standalone switches, each switch is managed, troubleshot, and configured as an individual entity.

In contrast, Stackable switches provide a way to simplify and increase the availability of the network. Instead of configuring, managing, and troubleshooting eight 48-port switches individually, you can manage all eight like a single unit using a Stackable Switches. With a true Stackable Switch, those eight switches (total 384 ports) function as a single switch – there is a single SNMP/RMON agent, single Spanning Tree domain, single CLI or Web interface–i.e. single management plane. You can also create link aggregation groups spanning across multiple units in the stack, port mirror traffic from one unit in the stack to another, or setup ACLs/QoS spanning all the units. There are valuable operational advantages to be gained by this approach.

Be careful about products in the market which are sold as “Stackable” when they merely offer a single user interface, or central management interface, for getting to each individual switch unit. This approach is not stackable, but really “clustering”. You still have to configure every feature such as ACLs, QoS, Port mirroring, etc, individually on each switch.

Use the following as a proof point–can I create a link aggregation group with one port in one unit of the stack and another port of that group in another unit of the stack? Can I select a port on one unit in the stack and mirror the traffic to a port on another unit of the stack? When I configure an ACL for Security purposes, can I apply that to any port on any unit in the stack?If the answer is “No” to any of these questions, you’re probably not working with a stackable switch.

There are other advantages of True Stacking as well. You can connect the stack members in a ring such that, if a port or cable fails, the stack will automatically route around that failure, many times at microsecond speeds. You can also add or subtract stack members and have it automatically recognized and added into the stack. Cisco Catalyst 2K-X and 3K or Cisco 500 Series Switches are examples of Switches in this category.

More Says: As you can see there’s a multitude of switch options to choose from. So, have a close look at your current deployment and future needs to determine the right switch for your network.

The original article written by Ivor Diedricks from Cisco Blogs: http://blogs.cisco.com/smallbusiness/understanding-the-different-types-of-ethernet-switches

More Cisco Switch Topics
How Much You Know about the Cisco Catalyst Switches?
A New Featured Product-Cisco IE4010 Series Switches
How to Change a Switch Member Number in a Cisco 3850 Stack?
How to Choose a Fibre Switch?

Updated: Cisco ISR 4221 Added into Cisco 4000 Series

$
0
0
Is it true that the ISR 4000 Series could not have been introduced at a better time? Recently, Cisco updated its ISR 4000 series. And the new Cisco 4421 of Cisco ISR 4000 family is available. More features are updated on Cisco 4000 Series. What’s new?

“With the ISR 4000s, you’re in good hands.”

The ISR 4000 Series can Deliver Speed, Scale and Services without Compromise

To solve today’s many IT obstacles, customers need speed, scale and services – and the ISR 4000 Series can deliver all three without compromise.

Speed
This platform is 4-10 times faster than the ISR G2, ranging from 50 Mbps to 2 Gbps. This will help address the growth in throughput demands that Gartner predicts!

Scale
The ISR provides pay-as-you-grow performance and services. That means IT only needs to buy what they require today, because if their business needs change, they can get a software license to turn on additional performance and/or services as needed. This means that the platform can not only quickly respond to new business requirements, but also support the organization for a long time without becoming outdated.

The ISR 4000 is also designed for zero touch deployment, where IT can ship the device directly to the remote site, preloaded with customer configurations, and the router can securely ‘call home’ to get credentials and connect up to the network.  Moreover, when new modules need to be added to the device, ISR 4000 supports online-insertion-removal, so that the site does not have to go down to implement the update.

ISR 4000 is also ‘SDN ready.’ The Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) will be coming to market early 2015, so developers and customers will finally be able to move away from device-by-device management to a system approach based on business policy and application rules.

Services
To build on its speed and scale, the ISR 4000 has been redesigned with dedicated processors for the control, data and services planes. This allows IT to add multiple advanced services – VPN, firewall, application visibility, path selection, WAN optimization, voice, video surveillance, and more – all on one platform with minimal performance impact.

In fact, the architecture supports service containers that are essentially virtual pluggable machines. This means IT can carve out dedicated resources to ensure high reliability as if it was operating on a dedicated appliance, but benefit from a consolidated form factor – resulting less devices to manage at remote sites.

IT can also expand the platform to add up to 8 TB of compute services that address a variety of branch office needs, including local application hosting for better performance, data back-up, and local analytics.

ISR has been the industry leader in branch networking technology and that tradition is still going strong. In the words of industry analyst Zeus Kerravala, “Cisco flat out makes the best router and has never taken its eye off the router ball.” The re-architected ISR 4000 Series is further evidence of that focus, work that has earned the product broad industry recognition and more than 1,000 customers who have adopted the new platform to drive greater business agility.

“With the ISR 4000s, you’re in good hands.”

The Cisco ISR 4000s provide those layers of security protection for your branch offices, with:

  • IOS zone-based firewall

  • Snort IPS

  • Umbrella Branch

  • Firepower Threat Defense

  • Stealthwatch Learning Network License

And now Cisco added the new Cisco ISR 4421 into the Cisco 4000 router family.

There are six platforms of Cisco 4000 ISRs: the Cisco 4451, 4431, 4351, 4331, 4321 and 4221 ISRs.

The ISR 4221 is mightier than the ISR G2, vis-à-vis ISR 1921 and 1941. It is a desktop-like, industrially designed 1RU box priced cost-effectively for mid-markets.
Cisco ISR 4221 Key Highlights:
1. It meets all digital network requirements
You can check the newest Benefits of Migrating to Cisco 4000 Series Integrated Services Routers here:
2. With respect to performance, the ISR 4221 kicks it up a notch with throughput starting at 35 and upgradeable up to 75 Mbps.
3. Despite a 1RU form factor, this economical “Swiss Army Knife” has unmatched values in its class for a few reasons:
a. It has multi-services support for SD-WAN and is programmable and automated   with APIC-EM controller and IWAN app for consistent business-driven and policy-based operations across network domains.
b. It is an application-aware platform complete with Intelligent Path Control (PfR), application visibility (NBAR2) and Network Contention Control (H/QoS).
c. It comes with Cisco IOS built-in security features for complete branch threat defense, such as Zone-based Firewall, FirePOWER Threat Defense, Network Address Translation (NAT), and IPSec VPN.
d. It is a standard-based Linux virtualization platform. With Linux Virtual Container (LXC), signed network service like Snort IPS can be spin up as virtual machine any time.
e. It is equipped with up to 2×8 integrated switch ports – a true all-in-one platform – for pop-up or micro branches where the average square footage is as little as 350-sf.
f. It supports IPv6 and legacy WAN connectivity, such as 3G/4G LTE, for IoT use cases such as ATM/Kiosk or industrial environments without dedicated MPLS transport.
For in-depth details, you can check out Model Comparison: ISR 4321 vs. 4331 vs. 4351 vs. 4431 vs. 4451 Router

The new Cisco ISR 4221 is available beginning mid-November. And it will ship with latest Cisco IOS-XE release.
Introducing the Cisco IOS XE Open Service Containers

More about the New ISR 4421: The New ISR 4221, the New Cisco DNA-Ready Platform

Cisco 4000 Series ISRs provide you with Cisco Intelligent WAN (IWAN) software features and a converged branch infrastructure. Along with superior throughput, these capabilities form the building blocks of next-generation branch-office WAN solutions.

Note: Cisco Intelligent WAN (IWAN): Cisco IWAN is a set of intelligent software services that allow you to reliably and securely connect users, devices, and branch office locations across a diverse set of WAN transport links. IWAN-enabled routers like the 4000 Series dynamically route traffic across the “best” link based on up-to-the-minute application and network conditions for great application experiences. You get tight control over application performance, bandwidth usage, data privacy, and availability of your WAN links—control that you need as your branches conduct greater volumes of mission-critical business.

Read the original updated info of Cisco 4000 Series.http://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/datasheet-c78-732542.html#_ftn7

More Related
The New ISR 4221, the New Cisco DNA-Ready Platform
Say Something about Cisco 4400 and 4300 Series
Migrating to Cisco 4000 Series ISR…Benefits You Get
Cisco 4000 Series ISR, Top Choice for Today’s Branch Offices

Cisco 4000 Series Integrated Services Routers FAQ
http://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/qa_c67-728261.html#_ftnref2

How to Register the LAP with the WLC?

$
0
0
The WLCs and Cisco LAPs are part of the Cisco Unified Wireless Network architecture. The Cisco Unified Wireless Network architecture centralizes WLAN configuration and control on the WLC. The LAPs cannot act independently of the WLC. The WLC manages the LAP configurations and firmware. The LAPs are "zero touch" deployed, and no individual configuration of LAPs is required.
In order for the WLC to be able to manage the LAP, the LAP should discover the controller and register with the WLC. After the LAP has registered to the WLC, LWAPP messages are exchanged and the AP initiates a firmware download from the WLC (if there is a version mismatch between the AP and WLC). If the AP's onboard firmware is not the same as the WLC's, the AP will download firmware to stay in sync with the WLC. The firmware download mechanism utilizes LWAPP. Then, the WLC provisions the LAP with the configurations that are specific to the WLANs so that the LAP can accept client associations.
These WLAN-specific configurations include:

  • Service set identifier (SSID)

  • Security parameters

  • IEEE 802.11 parameters, such as:

    • Data rate

    • Radio channels

    • Power levels


There are different methods that a LAP uses in order to discover the WLC. This document discusses the different methods that the LAP can use in order to register the WLC. But first, the document explains the sequence of events that occur when a LAP registers with the WLC.
Note: The Management interface is the default interface for in-band management of the WLC and connectivity to enterprise services such as AAA servers.The management interface is also used for layer two communications between the WLC and access points. The Management interface is the only consistently "pingable" in-band interface IP address on the WLC.
Note: A WLC has one or more AP Manager Interfaces that are used for all Layer 3 communications between the WLC and the lightweight access points after the access point discovers the controller. The AP Manager IP address is used as the tunnel source for LWAPP packets from the WLC to the access point, and as the destination for LWAPP packets from the access point to the WLC. The AP Manager must have a unique IP address. Usually this is configured on the same subnet as the Management interface, but this is not necessarily a requirement. An AP Manager IP address is not pingable from outside the WLC. Refer to the Configuring Ports and Interfaces section of Wireless LAN Controller Configuration Guide for more information.

How to Register the LAP with the WLC?
This sequence of events must occur in order for a LAP to register to a WLC:

  1. The LAPs issue a DHCP discovery request to get an IP address, unless it has previously had a static IP address configured.

  2. The LAP sends LWAPP discovery request messages to the WLCs.

  3. Any WLC that receives the LWAPP discovery request responds with an LWAPP discovery response message.

  4. From the LWAPP discovery responses that the LAP receives, the LAP selects a WLC to join.

  5. The LAP then sends an LWAPP join request to the WLC and expects an LWAPP join response.

  6. The WLC validates the LAP and then sends an LWAPP join response to the LAP.

  7. The LAP validates the WLC, which completes the discovery and join process. The LWAPP join process includes mutual authentication and encryption key derivation, which is used to secure the join process and future LWAPP control messages.

  8. The LAP registers with the controller.

The first problem that the LAP faces is how to determine where to send the LWAPP discovery requests (step 2). The LAP uses a hunting procedure and a discovery algorithm in order to determine the list of WLCs to which the LAP can send the discovery request messages.
This procedure describes the hunting process:

  1. The LAP issues a DHCP request to a DHCP server in order to get an IP address, unless an assignment was made previously with a static IP address.

  2. If Layer 2 LWAPP mode is supported on the LAP, the LAP broadcasts an LWAPP discovery message in a Layer 2 LWAPP frame. Any WLC that is connected to the network and that is configured for Layer 2 LWAPP mode responds with a Layer 2 discovery response. If the LAP does not support Layer 2 mode, or if the WLC or the LAP fails to receive an LWAPP discovery response to the Layer 2 LWAPP discovery message broadcast, the LAP proceeds to step 3.

  3. If step 1 fails, or if the LAP or the WLC does not support Layer 2 LWAPP mode, the LAP attempts a Layer 3 LWAPP WLC discovery.

See the Layer 3 LWAPP WLC Discovery Algorithm section of this document.

  1. If step 3 fails, the LAP resets and returns to step 1.

Note: If you want to specify an IP address for an access point instead of having one assigned automatically by a DHCP server, you can use the controller GUI or CLI to configure a static IP address for the access point. Refer to the Configuring a Static IP Address on a Lightweight Access Point section of the WLC Configuration guide for more information. If the LAP is assigned a static IP address and cannot reach the WLC, it falls back to DHCP.

…More detailed examples of Layer 2 & Layer 3 LWAPP WLC Discovery Algorithm and AP Fail-over Between Different Mobility Groups you can refer to http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/70333-lap-registration.html

More Related:
Something about the Cisco Wireless APs Supporting Cisco WLC

How does Cisco DNA Make Things Simpler?

$
0
0
The life becomes easier the more mobile and more automated it is. We shared Chris Oggerino’s article of Enabling Mobile Applications with Cisco Digital Network Architecture, which talked about a few extra really interesting things: Cisco Mobile Experiences (CMX), Cisco Identity Services Engine (ISE), and Cisco Application Policy Infrastructure Controller–Enterprise Module (APIC-EM).

How does Cisco DNA make things simpler? This question is best answered by looking at the three pillars of Cisco DNA:
Cisco DNA Delivers Real Business Benefits


Lower Cost and Complexity. This is the key component of automation and assurance, as Cisco DNA simplifies deployment and streamlines operations with better user experiences and confidence.How does automation and mobility work together? Cisco DNA provides an always-on, always-ready infrastructure that self-optimizes to deliver optimal performance in a dynamic environment. For example, when Wi-Fi demand increases, the network will automatically increase capacity. The network also automatically uses optimized roaming, which connects the mobile device to the optimal access point without impacting the end user.This optimization is further augmented on Apple mobile devices resulting in eight times faster roaming—Cisco is the only network provider to jointly deliver this functionality with Apple. Optimal network performance for critical apps can be ensured at all times. This is done through the Apple partnership for iOS applications as well as through application visibility and control.
Higher Compliance and Lower Risk. Wireless is your first line of defense and Cisco DNA takes care of your security and compliance needs. According to the white paper: “High Powered Network Edge 2016” published by ZK Research, 80% of security breaches occurring inside the perimeter, Cisco DNA prevents unauthorized access. It also limits the impact of incidents, logically segments your network with granular policies and protects the airwaves from: rogues, wireless attacks and interference.Cisco Identity Service Engine is the brains behind Cisco DNA security. It includes device profiling which encompasses user, device, and app-specific policies to enforce role based access control. It also allows for the ability to intelligently segment the network for users, guests, and IoT device traffic to limit the threat surface and track anomalous behavior.
This means:

  • Greater control of policy segmentation for consistent policy and enforcement end-to-end.

  • Network wide visibility, tracking anomalous behavior and delivering improved security activity monitoring.

  • Quickly identifying and quarantining infected hosts, thus preventing attacks from propagating.

  • Protecting all devices including less capable IoT and legacy devices, that do not support 802.1x.

  • Securing the edge by Identifying rogue access points and devices to protect against wireless attacks and malware.

Faster Innovation. With insights and experiences provided by Cisco DNA, you will make better business decisions and drive user engagement. You tell Cisco DNA what you want to learn from your network and the solution provides you with easy-to-understand analytics. Built-in features such as Cisco Connected Mobile Experiences (CMX) give you the network insights to make faster business decisions based on customer behavior or what your employees are doing.
You know that when it comes to a network it isn’t just about connecting devices and then calling it a day. Mobility is much too important for that, 56% of Line of Businesses say a mobility strategy is very or extremely important to their objectives.  This translates into a demand for the network to have high reliability, conquer overall complexity and still be cost-effective.
What does this all mean though? Customers that have deployed the Cisco DNA solutions have seen key improvements such as:

  • A five-Year ROI of 402% and a nine-month payback period with an average of $48K annual benefits (per 100 users)

  • 42% faster WAN branch deployments

  • 17% faster delivery of applications

  • 28% more efficient IT networking staff teams

Still not convinced you’re a step away from the future? Check out this table comparing Cisco to our competition, you’ll see that we truly have the DNA in us.
Reference from http://blogs.cisco.com/wireless/future-of-mobility-cisco-dna

More Related…
With Cisco DNA You can…
Cisco DNA is a Game Changer for the Digital Era?
When You Buy Cisco ONE…
More info: The Cisco Digital Network Architecture Vision–An Overview
http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/cisco-digital-network-architecture/white-paper-c11-736842.pdf

What’s New on Cisco Firepower NGFW?

$
0
0
Now, it’s time to new era of network security-Next-generation Firewall. How much do you know the next-generation firewall?Here we share some the latest information of Cisco Firepower NGFW, which may help you know the next-generation firewall better.

The Cisco Firepower NGFW(next-generation firewall) is the industry’s first fully integrated, threat-focused next-gen firewall with unified management. It uniquely provides advanced threat protection before, during, and after attacks.

Performance Highlights
Table1 summarizes the performance highlights of the Cisco Firepower 4100 Series NGFW, 9300 Series Security Appliances, and select Cisco ASA 5500-X appliances.
Table1. Performance Highlights


1HTTP sessions with an average packet size of 1024 bytes
21024 bytes TCP firewall performance
Note: NGFW performance varies depending on network and traffic characteristics. Consult your Cisco representative for detailed sizing guidance. Performance is subject to change with new software releases.

Platform Support
The Cisco Firepower NGFW includes Application Visibility and Control (AVC), optional next-gen IPS (NGIPS), Cisco Advanced Malware Protection (AMP) for Networks, and URL Filtering. The Cisco Firepower 2100 Series, 4100 Series, and 9300 appliances use the Cisco Firepower Threat Defense software image. Alternatively, the Cisco Firepower 4100 Series and 9300 appliances can support the Cisco Adaptive Security Appliance (ASA) software image.

The Cisco Firepower Management Center (formerly FireSIGHT) provides centralized management of the Cisco Firepower NGFW, as well as Cisco Firepower NGIPS and Cisco AMP for Networks.

The Cisco Firepower Device Manager is available for local management of 2100 Series and 5500-X Series devices running the Cisco Firepower Threat Defense software image.

The Cisco Adaptive Security Device Manager is available for local management of the Cisco Firepower 4100 Series, Cisco Firepower 9300 Series, and Cisco ASA 5500-X Series devices running the ASA software image.

Cisco Defense Orchestrator cloud-based management is also available for consistent policy management across Cisco security devices.
Also available, on select Cisco Firepower appliances, and direct from Cisco, is the Radware Virtual DefensePro (vDP) distributed denial of service (DDoS) mitigation capability.

Cisco Firepower 2100 Series Appliances
The Cisco Firepower 2100 Series is a family of four threat-focused NGFW security platforms that deliver business resiliency through superior threat defense. It offers exceptional sustained performance when advanced threat functions are enabled. These platforms uniquely incorporate an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions simultaneously. The series’ firewall throughput ranges from 1.9 to 8.5 Gbps, addressing use cases from the Internet edge to the data center.



Cisco Firepower 4100 Series Appliances
The Cisco Firepower 4100 Series is a family of four threat-focused NGFW security platforms. Their throughput ranges from 35 to 75 Gbps, addressing data center use cases. They deliver superior threat defense, at faster speeds, with a smaller footprint.




Cisco Firepower 9300 Security Appliance
The Cisco Firepower 9300 is a scalable (beyond 1 Tbps when clustered), carrier-grade, modular platform designed for service providers, high-performance computing centers, large data centers, campuses, high-frequency trading environments, and other environments that require low (less than 5-microsecond offload) latency and exceptional throughput. Cisco Firepower 9300 supports flow-offloading, programmatic orchestration, and the management of security services with RESTful APIs. It is also available in Network Equipment Building Standards (NEBS) - compliant configurations.
no title



Cisco ASA 5500-FTD-X Series Appliances
The Cisco ASA 5500-FTD-X Series is a family of eight threat-focused NGFW security platforms. Their throughput ranges from 750 Mbps to 4 Gbps, addressing use cases from the small or branch office to the Internet edge. They deliver superior threat defense in a cost-effective footprint

If you want to read more details of Cisco Firepower NGFW, such as the Performance Specifications and Feature Highlights, Hardware Specifications, Ordering Information, etc. you can visit here: http://www.cisco.com/c/dam/en/us/products/collateral/security/firepower-4100-series/datasheet-c78-736661.pdf . More table details tell you the new features of Cisco Firepower NGFW.

More Related Topics
The New Cisco Firepower 2100 Series
Cisco’s High-end Next Generation Firewalls-Firepower 4100 and 9300 Series
What are the Considerations While Buying a Cisco Next-Generation Firewall?
How to Start Cisco Firepower 9300 ASA Security Module?
Find Your Cisco’s Next-Generation Firewalls

Cisco UCS C-Series Rack Servers as Standalone Systems

$
0
0
Cisco UCS C-Series Rack Servers extend unified computing innovations to a rack-mount form factor. They are the only servers that can be used either standalone or integrated as part of the Cisco Unified Computing System (Cisco UCS). When used as standalone servers, these systems can be managed through the Cisco Integrated Management Controller (IMC), integrated management software that provides network-based access to every aspect of server management, from power state and firmware revisions to remote keyboard, video, and mouse (KVM) devices.

The flexibility to manage rack servers as standalone servers or as part of Cisco UCS makes Cisco UCS C-Series Rack Servers the preferred choice for many organizations. These organizations may also prefer Cisco UCS C-Series Rack Servers for their high I/O bandwidth, the large memory configurations they can support, and high capacity internal disk space.

Flexible, Standards-Based Standalone Server Management
As standalone systems, Cisco UCS C-Series servers provide a flexible, standards-based set of management interfaces that enable organizations to take advantage of Cisco servers’ innovative features in heterogeneous data centers. Cisco IMC provides administrators with the tools they need to control servers and manage servers, including remote KVM devices, power state, and firmware revisions. The Cisco IMC supports industry-standard protocols, including Intelligent Platform Monitoring Interface Version 2 (IPMI v2), Simple Network Management Protocol versions 2 and 3 (SNMP v2 and v3), an open Extensible Markup Language (XML) API and a command-line interface (CLI).

Physical Management Interfaces
Cisco UCS C-Series servers provide up to three management interfaces that can be accessed by in-band or out-of-band tools and techniques (Figure1):
• Ethernet network access to the Cisco IMC (WebUI, CLI and XML API)
• Agent and agentless management with third-party tools through in-band data-plane connections
• Front-or back-panel access for video, USB (with the capability to boot from a USB CD/DVD drive), and serial console access

Figure1. Manage Cisco UCS Rack Servers Through Physical and Logical Management Interfaces

Logical Management Interfaces
The Cisco IMC runs in the system’s baseboard management controller (BMC) and can be accessed through the server network management ports. It provides out-of-band management that can be accessed through standard management protocols, CLIs, and web-based interfaces.
IPMI v2: Provides support for out-of-band management through thirdparty tools including commercial enterprise management systems and open-source tools such as ipmitool. IPMI allows these tools to manage server power states and monitor operation parameters available through temperature, fan-speed, power-supply voltage, and power sensors.
SNMP v2 and v3: Supports out-of-band management with third-party tools including network management tools that use SNMP to monitor system status variables and receive SNMP traps in the event that the status falls outside predetermined ranges.
Open XML API: Cisco IMC supports an open XML API that enables third-party software to access all the system’s features and capabilities discussed in “Cisco IMC Features and Capabilities” later in this document.
Command-Line Interface: The CLI can be accessed through a Secure Shell (SSH) connection to the Cisco IMC. Through this interface, administrators can perform server control and administration tasks, and they can script configuration tasks so that they can be reliably reproduced on a number of servers without errors.
Web User Interface: Supports out-of-band management through a standard web browser. It includes server management, remote KVM, virtual media, and administration capabilities:
• Server management includes power management, server reset, component inventory, and event logging.
• Virtual media enables peripherals such as CD and DVD drives to appear as if they were connected directly to the server, facilitating remote OS and application software installation.
• Remote KVM capability gives remote administrators the same level of control, including console video, as when they are physically connected to the server.

Managing Through Enterprise Management Tools
Third-party management tools typically use a combination of in-band and out-of-band management techniques, both of which are supported by Cisco UCS C-Series servers.
• In-band management is performed through the server’s data network connection. Different tools use different techniques, including interaction with the host operating system with and without the use of agents. In-band management can interact with OSbased management tools to accomplish tasks including inventory, performance management, troubleshooting, and OS and interface provisioning.
• Out-of-band management tools such as Altiris Deployment Solution, BMC BladeLogic, CA Spectrum, HP IT Performance Suite, IBM Tivoli, Nagios and Microsoft System Center use Cisco IMC interfaces available through the network management port. These tools typically interact with servers through IPMI, SNMP, or the open XML API.


Cisco IMC Features and Capabilities
With the Cisco IMC, administrators can perform the following server management tasks with role-based access that is easily defined on a per-user basis:
• Virtual (Remote) KVM with recorder and chat
• Crash Capture and Boot Capture
• RAID Controller configuration
• Manage server BIOS settings
• Configure the server boot order (including Precision Boot)
• Configure Cisco Virtual Interface Cards (VICs)
• Configure network-related settings, including network interface card (NIC) properties, IPv4, VLANs, and network security
• Configure communication services, including HTTP, SSH, and IPMI over LAN
• Create and manage local user accounts and connect to external authentication and authorization systems, including LDAP & Microsoft Active Directory
• Power on, power off, power cycle, reset, and shut down the server
• Toggle the locator LED
• View server properties and sensors
• Manage certificates
• Update system firmware
• Monitor faults, alarms, and server status


The Main Models of Cisco UCS C-Series

Reference from http://www.cisco.com/c/dam/en/us/products/collateral/servers-unified-computing/ucs-c-series-rack-servers/at-a-glance-c45-737177.pdf

More Related…
Cisco’s New Storage Optimized UCS Server-UCS S3260

Cisco SecGW Solution

$
0
0
With the evolution to 4G/LTE and 5G, mobile network architectures have become more IPbased. While we’ve seen data standards change in the past, the transition from 4G LTE to LTE-A and eventually 5G will dramatically escalate already lofty network requirements. At the same time, customers will continue to expect total geographic coverage, blazing fast transmission speeds, and absolute security when they use your network. Ubiquitous eNodeB equipment has delivered connectivity but also has significantly increased your attack surface.

In order to stay safe, your security solution must contain and block attacks that can disrupt the mobile network, provide end-to-end security and confidentiality for customers, keep up with the latest mobile technologies, and allow for management integration with existing systems to protect your investment.

On your macro network you run a risk of data interception at a few key areas. Unsecured backhaul is a primary vector for this risk, but your data has the potential to be pulled down at any stage in transmission between the mobile device and EPC.

The proliferation of cell towers presents an explosion in the number of staging points for an attack that could bring down your mobile network. To protect from this type of threat, you need a security gateway solution that authenticates and encrypts traffic from the eNodeB to protect the EPC and reduce the potential for network disruption.

Security Gateway minimizes the potential damage of interception by providing end-to-end encryption and secure IPsec tunnels. Security Gateway also makes sure that the eNodeB is authenticated against a centralized certificate authority and strengthens the perimeter between the radio access network (RAN) and the EPC.
Threats coming from cell sites are compartmentalized and contained inside your RAN network. We route this traffic through the Security Gateway for deep packet inspection and policy enforcement, effectively stopping threats in their tracks before they can attach to your infrastructure and potentially cause an outage.
What all of this means for you is that your customers and network get total, end-to-end protection from the most pressing attack and breach possibilities.

Partnership for Vodafone Hutchison Australia
Cisco and Ericsson are partnering to transform and virtualize an end-to-end telecom cloud infrastructure that includes both virtualized and physical security technologies such as the Adaptive Security Appliance and security gateway capabilities on Cisco Firepower to better prepare for new emerging services.

Cisco Security Gateway Solutions Offer
• Carrier-class performance with low latency
• Carrier-grade scalability and reliability
• Comprehensive security
• Supports multiple deployment options

When it comes to comprehensive security that adapts to changing threats and supports business agility, only Cisco delivers. Our scalable, intelligent, and adaptive threat-centric approach to security protects against the evolving threat landscape: one that enables the protections of data flows and workloads with consistent security policy in physical, virtualized, and cloud infrastructure that includes not only Cisco carrier-class threat defense security services, but also tightly integrated additional services, like DDoS mitigation, from our security ecosystem partners.

Centralized Solutions
Cisco Security Gateway (SecGW) is based on the proven power of the Cisco Firepower Series so you get carrier-class throughput, latency, and scalability. Cisco Firepower 9300 and 4100 Series and ASAv all come with the same industry-leading carrier class firewall capabilities, so deployments are consistent either with physical on-premises hardware or virtually in the cloud.

Cisco Firepower SecGW consolidates multiple security services on a single platform for improved threat visibility and security service orchestration, including:
• ASA stateful firewalling with:
-Comprehensive Layer 3–4 infrastructure protection
-SCTP and diameter application inspection
-Encryption of traffic between the eNodeB and LTE network core

• Management of security services with RESTful APIs
• DDoS mitigation
• Unique clustering technologies on Firepower; 5 Cisco Firepower 9300 chassis or up to 16 Cisco Firepower 4100 Series chassis for highly scalable performance

Distributed Solutions
The Cisco ASR 900 Series Aggregation Services Routers are the cornerstone of modern edge and carrier Ethernet networks. Programmable and scalable ASRs provide the highest single platform density, low power consumption, and virtualization capabilities. They optimize network performance and efficiency and reduce operational costs and complexity.

The Adaptive Security Virtual Appliance (ASAv) brings the power of ASA to the virtual domain. It runs the same software as the physical appliance to deliver proven security functionality. You can use it to flexibly move the SecGW across your network. You can expand, contract, or shift the location of these workloads over time and span physical and virtual infrastructures.

End-to-End Protection
• End-to-end encryption and authentication
• Secure IPsec backhaul tunnels
• CMPv2, IKEv2
Simplified Deployment and Management
• SDN and NFV ready
• Diverse ecosystem partners
• Proven and rich UI
• Physical or virtual solutions
Reliability You Can Count On
• Grow with confidence
• Provide geo-redundancy and clustering
• Carrier-class availability
Today and Tomorrow
• Cisco paves the way for the adoption of 5G
• High-connectivity deployments with small cell and macro cell

Reference fromhttp://www.cisco.com/c/en/us/solutions/collateral/service-provider/service-provider-security-solutions/at-a-glance-c45-738562.pdf

More Related…
Migration to Cisco NGFW
The New Cisco Firepower 2100 Series
Cisco’s High-end Next Generation Firewalls-Firepower 4100 and 9300 Series
Compare Cisco ASA 5505, ASA 5512-X and ASA 5515-X
How to Recover the Password for Your ASA?

Cisco ASR 1001-X Router-High Performance Cloud Services Here

$
0
0
The ASR 1001-X is a popular model of the ASR 1000 family of routers that packs 20Gbps forwarding capacity and 8G of Layer 3 Crypto throughput in a compact 1RU form factor!
Some of the key benefits of the ASR 1001-X we are highlighting are:

  • Investment Protection: Pay-as-you-grow forwarding throughput upgradable from 2.5 to 5,10 and 20Gbps

  • Robust Security: Up to 8Gbps of Suite-B encryption combined with Layer 2 MAC Security.

  • Data Center Interconnect (DCI): For workload mobility, high-availability application clusters and layer 2 extension for legacy applications support.

  • Cisco IWAN: Application Visibility and Control, AppNav and Performance Routing enable inexpensive business-class Internet links as a WAN transport

  • Advanced Routing: Locator/ID Separation Protocol (LISP) to enable Host mobility, Ingress traffic load-balancing, high VPN scale, and IPv6 transition

  • Route Reflector: Up to 13M IPv4 routes (selective download)

  • Multimedia Edge: Cisco Unified Border Element (CUBE) Enterprise Edition to offer 16k calls

  • Ease of Management: Seamless integration and management with Cisco Prime Infrastructure.

The Data Center Interconnect must provide secure access to satisfy a key requirement for the consumption of services from the cloud. Before the advent of the cloud, the network traffic that flowed in the interconnecting network fabric or the IP NGN was unidirectional – it flowed from the client to the server in the network and back to the network client. Cloud and virtualization has made the network traffic multi-dimensional. The network traffic not only moves to and from client and network server it can also move across servers that are located in geographically dispersed data centers that are interconnected using DCI technologies. VMware virtual machine motion is an example of that. Based on this criteria, the ASR 1001-X supports the following DCI technologies:

  • Virtual Extensible LAN Services

  • Overlay Transport Virtualization

  • Virtual Private LAN Services

  • Ethernet over MPLS

  • Layer 2 Tunneling Protocol v3


More about the Cisco ASR 1000 Series Aggregation Services Routers
The Cisco ASR 1000 family’s architecture supports a redundant design for five-nines (99.999 percent) availability. ASR 1006-X and ASR 1009-X chassis models support N+1 redundancy of power supply, for the flexibility to balance uptime, cost, and the size of your carbon footprint. A variety of models and licensing options help you meet the changing speed and budget requirements of your various locations. You can choose from router models that support speed ranges from 2.5 to 200 Gbps to get just the right price/performance ratio for a particular site.

TheCisco ASR 1000 Series contains nine ASR models in form factors ranging from a single rack unit (RU) to 13 RUs.Nine Platforms of the Cisco ASR 1000 Series:
●   Cisco ASR 1001-X Router
●   Cisco ASR 1001-HX Router
●   Cisco ASR 1002-HX Router
●   Cisco ASR 1002-X Router
●   Cisco ASR 1004 Router
●   Cisco ASR 1006 Router
●   Cisco ASR 1006-X Router
●   Cisco ASR 1009-X Router
●   Cisco ASR 1013 Router
ASR1001-X-details.jpg

More Related
The New ASR1001-HX—The Most Powerful Compact Service Router
The New Cisco ASR 1001-X Router
The New Cisco ASR 1009-X & Cisco ASR 1006-X Router
Cisco ASR 1000 Series Can Help Solve…
 

Cisco Wireless Portfolio

$
0
0
What Cisco Achieved in Wireless Solutions

§ 12 years plus Gartner MQ leadership
§ 600,000+ unique WLAN customers
§ Comprehensive on premise and cloud-managed wireless and wired portfolios
§ Installed in 95% of the Fortune 1,000 companies
§ Wireless R&D spend >$400mil per year

Best in Class 802.11ac Wave 2 Access Point

* Post-FCS

Enterprise-Class 802.11ac Wave 2 Access Points



Cisco Aironet Outdoor Access Points


Cisco Comprehensive Aironet Access Point Portfolio


Cisco Aironet Access Points Transition Guide


Cisco Aironet Controller Portfolio



Cisco Wireless Controller Deployment Mode Compatibility Comparison

*1. Cisco Aironet 1560 Series are to be supported in future software release.
*2. Cisco Wireless Controller Software release 7.3.112.0 is required.
*3. Cisco AireOS 8.1 and higher are not supported


From http://www.cisco.com/c/dam/m/en_sg/cisco-start/assets/pdfs/Cisco_Start_wireless_Flipbook_FINAL.pdf

More Related…
Mobility Express-even better than before
Aironet 2800 vs. Aironet 3800 SERIES ACCESS POINTS
Which Aironet 1815 Model Is Right for You?
With SDN It can Help You Unify…
With Cisco DNA You can…
Wireless/Mobility, Switching & Routing…The Year of Network Innovations
Something about the Cisco Wireless APs Supporting Cisco WLC

Cisco Next Generation Firewalls Overview

$
0
0
Cisco Firepower NGFW is the industry’s first fully integrated threat-focused next-generation firewall that keeps customers safer, mitigates advanced threats more quickly, and streamlines operations better. This allows customers to stop more threats and get more from their resources and positions security as a growth engine to seize new business opportunities.
Next Generation Firewall (NGFW) Essentials


Cisco NGFW Platforms




Introducing four new high-performance models

• 10-Gbps and 40-Gbps interfaces
• Up to 80-Gbps throughput
• 1-rack-unit (RU) form factor
• Low latency

• Integrated inspection engines for FW, NGIPS, Application Visibility and Control (AVC), URL, Cisco Advanced Malware Protection (AMP)
• Radware DefensePro DDoS
• ASA and other future third party

• Single management interface with Firepower Threat Defense
• Unified policy with inheritance
• Choice of management deployment options


High-speed, scalable security

Standard Network Modules



ASA 5506 Security Levels
Q: I have an ASA 5506-x with a bunch of vlans (sub-interfaces) is there any way to disable the security levels and purely use ACL's?
A: You can essentially set them all to the same security level and use the system command which allows traffic to traverse interfaces with the same security levels. Just go into your int config, give them all a nameif, and then set their security levels to something benign.
There are two variations of the command //same-security-traffic permit inter-interface and <intra-interface>
Intra-between the same interface and itself
Inter-between two different interfaces.
The first of which allows a sort of hair pinning to occur,
You'll still need ACLs, to meter which traffic you want to egress each interface toward the other subnets.
From https://communities.cisco.com/thread/78177

More Cisco Firewall Topics you can read from here: http://blog.router-switch.com/category/reviews/cisco-firewalls-security/

ASA 5506-X/5506W-X/5506H-X/5508-X and 5516-X with FirePOWER Services

$
0
0
Both small and midsized businesses and distributed enterprises have advanced threat protection needs. Until now, however, they have been underserved by unified threat management (UTM) products and competing next-generation firewalls (NGFWs).

In contrast to these legacy approaches, Cisco NGFWs feature both Advanced Malware Protection (AMP) and next-generation IPS (NGIPS).
The newest additions to the Cisco ASA with FirePOWER Services NGFW family are tailor-made for small and medium businesses (SMB) and branch office applications, delivering integrated threat defense, low procurement and operating costs, and simplified security management.

  1. The solution is available in both desktop (5506-X) and 1RU rack-mount (5508-X, 5516-X) form factors.

  2. Variants of the desktop model are available with an integrated wireless access point (5506W-X) to simplify SMB networking.

  3. A ruggedized appliance (5506H-X) is specifically designed for industrial control systems and critical infrastructure applications. It features an extended operating temperature range and is available for desktop or DIN rail1, rack or wall mount deployment.

Cisco ASA 5506-X, 5506W-X, 5506H-X, 5508-X, and 5516-X with FirePOWER Services
User/node SupportUnlimited by default
Desktop Form Factor (5506-X, 5506W-X)7.92” x 8.92” x 1.73”
Rack Mount Form Factor (5508-X, 5516-X)17.2” x 11.288” x 1.72”
Ruggedized Form Factor (5506H-X)9.05” x 9.05” x 2.72”
Integrated I/O Ports8 x 1GE
VPN
VPN peers50-300
Mobility SupportAnyConnect 4.x; native Apple iOS and Android clients
Throughput
Max Stateful Firewall750 Mbps–1.8 Gbps
Max AVC250–850 Mbps
Max AVC and NGIPS125–600 Mbps
High AvailabilityYes: Active/Standby Mode* Active/Active (5508-X and 5516-X only)
NGFW Capabilities
AVCIncluded with SmartNet
Supported applicationsMore than 3,000
URL FilteringSubscription
Categories; Total80+ ; 280+ million
NGIPSSubscription
Signatures6000+
AMP-Threat DefenseSubscription
Management
Integrated On-box ManagementIncluded by default
Centralized ManagementOptional License
* Requires Security Plus License

Cisco ASA with FirePOWER Services Standard Features
Granular Cisco Application Visibility and Control (AVC): Cisco AVC supports more than 3000 application-layer and risk-based controls. For example, you can make popular social media applications readonly to enable compliance with regulations like Financial Industry Regulatory Authority (FINRA) and the Health Insurance Portability and Accountability Act (HIPAA) and to enforce acceptable-use policies.
Leading network firewall, and site-to-site and remote access VPN support: Cisco delivers the world’s most trusted and widely deployed firewall and VPN. The optional Cisco AnyConnect VPN Client can be easily integrated with Cisco ASA with FirePOWER Services. Cisco AnyConnect 4.0 features granular, always-on, application-level VPN. Additionally, Cisco ASA supports Cisco AnyConnect mobile and native Android and iOS VPN clients.

Cisco ASA 5500-X Series Migration Options
Legacy FirewallsMigration to Cisco NGFW
Cisco ASA 5505Cisco ASA 5506-X
Cisco ASA 5510Cisco ASA 5508-X
Cisco ASA 5512-XCisco ASA 5516-X
Cisco ASA 5515-XCisco ASA 5516-X
Cisco ASA 5520Cisco ASA 5525-X or Cisco FirePower 2100 Series
Cisco ASA 5540Cisco ASA 5545-X or Cisco FirePower 2100 Series
Cisco ASA 5550Cisco ASA 5555-X or Cisco FirePower 2100 Series
Cisco ASA 5580Cisco FirePower 4100 Series
Cisco ASA 5585-XCisco FirePower 4100 Series

Throughput Performance Enhancements 
Appliance (Maximum Throughput)Firewall + Application Control (AVC)Firewall + Application Control (AVC) and IPS
Cisco ASA 5506-X250 Mbps125 Mbps
Cisco ASA 5506W-X250 Mbps125 Mbps
Cisco ASA 5506H-X250 Mbps125 Mbps
Cisco ASA 5508-X450 Mbps250 Mbps
Cisco ASA 5512-X300 Mbps150 Mbps
Cisco ASA 5515-X500 Mbps250 Mbps
Cisco ASA 5516-X850 Mbps450 Mbps
Cisco ASA 5525-X1,100 Mbps650 Mbps
Cisco ASA 5545-X1,500 Mbps1,000 Mbps
Cisco ASA 5555-X1,750 Mbps1,250 Mbps
Cisco ASA 5585-X w/ SSP-104.5 Gbps2 Gbps
Cisco ASA 5585-X w/ SSP-207 Gbps3.5 Gbps
Cisco ASA 5585-X w/ SSP-4010 Gbps6 Gbps
Cisco ASA 5585-X w/ SSP-6015 Gbps10 Gbps
Cisco Firepower 21001.9 Gbps1.9 Gbps
Cisco Firepower 21203 Gbps3 Gbps
Cisco Firepower 21304.75 Gbps4.75 Gbps
Cisco Firepower 21408.5 Gbps8.5 Gbps
Cisco Firepower 411012 Gbps10 Gbps
Cisco Firepower 412020 Gbps15 Gbps
Cisco Firepower 414025 Gbps20 Gbps
Cisco Firepower 415030 Gbps24 Gbps
Cisco Firepower 9300 w/ 3 SM-44135 Gbps133 Gbps

More Related Topics
The New Cisco Firepower 2100 Series
Cisco’s High-end Next Generation Firewalls-Firepower 4100 and 9300 Series
What are the Considerations While Buying a Cisco Next-Generation Firewall?
NGFW-Cisco ASA with FirePOWER Services
How to Enable the Wireless Access Point (ASA 5506W-X)?
The Most Common NGFW Deployment Scenarios
EoS and EoL Announcement for the Cisco ASA 5512-X and ASA 5515-X
Migration to Cisco NGFW

Cisco 860 and 880 Migration Options

$
0
0
Positioning of Cisco 860 and 880 Series Integrated Services Routers

The Cisco 860 and 880 Series routers complement the Cisco 850 and 870 Series by adding support for new technologies such as 3G WWAN, voice, and 802.11n WLAN to the Cisco 800 Series portfolio.

In this article, we collected the list of End-of-Sale models for Cisco 800 Series. You can read the following tables to find the detailed Cisco 860 and 880 Migration options.


End of Sale for Cisco 881 Series Routers
End-of-Sale Product Part NumberProduct DescriptionReplacement Product Part NumberReplacement Product Description
CISCO881G-G-K9881G FE Sec Router with Adv IP Serv, 3G Global GSM/HSPAC881G+7-K9WAN FE (non-US) 3.7G HSPA+ R7 w/SMS/GPS (MC8705)
CISCO881G-K9Cisco 881G Ethernet Sec Router w/3G B/UC881G+7-K9WAN FE (non-US) 3.7G HSPA+ R7 w/SMS/GPS (MC8705)
CISCO881G-S-K9881G FE Sec Router bundle with Adv IP Serv, 3G SprintC881G-S-K9C881 3G Sprint EV-DO Rev A/0/1xRTT 800/1900MHz w/SMS/GPS
CISCO881G-V-K9881G FE Sec Router bundle with Adv IP Serv, 3G VerizonC881G-V-K9C881 3G Verizon EV-DO Rev A/0/1xRTT 800/1900MHz w/SMS/GPS
CISCO881W-GN-A-K9Cisco 881 Ethernet Sec Router 802.11n FCC CompC881W-A-K9Cisco 881 Eth Sec Router with 802.11n FCC Compliant
CISCO881W-GN-E-K9Cisco 881 Ethernet Sec Router 802.11n ETSI CompC881W-E-K9Cisco 881 Eth Sec Router with 802.11n ETSI Compliant
CISCO881W-GN-P-K9Cisco 881 Ethernet Sec Router 802.11n Japan CompC881W-P-K9Cisco 881 Eth Sec Router with 802.11n Japan Compliant -?? Not in DCT

End of Sale for Cisco 886 Series Routers
End-of-Sale Product Part NumberProduct DescriptionReplacement Product Part NumberReplacement Product Description
CISCO886-K9Cisco 886 ADSL2/2+ AnnexB RouterCISCO886VA-K9Cisco 886 VDSL/ADSL over ISDN Multi-mode Router
CISCO886-SEC-K9Cisco 886 ADSL2/2+ AnnexB Sec Router w/Adv IPCISCO886VA-SEC-K9Cisco 886 VDSL/ADSL over ISDN Multi-mode Router w/Adv IP
CISCO886G-K9886G ADSL2/2+ AnnexB Sec Router w/Adv IP, 3G Global GSM/HSPACheck announcement for detailed information on replacing this product.
CISCO886GW-GN-E-K9Cisco 886 ADSL2/2+ Annex B Router w/3G 802.11n ETSICheck announcement for detailed information on replacing this product.
CISCO886W-GN-E-K9Cisco 886 ADSL2/2+ Annex B Router w/802.11n ETSI CompCheck announcement for detailed information on replacing this product.

End of Sale for Cisco 887 Series Routers
End-of-Sale Product Part NumberProduct DescriptionReplacement Product Part Number
Replacement Product Description
CISCO887-K9Cisco 887 ADSL2/2+ Annex A RouterCISCO887VA-K9Cisco 887 VDSL/ADSL over POTS Multi-mode Router
CISCO887-SEC-K9Cisco 887 ADSL2/2+ Annex A Sec Router w/Adv IPCISCO887VA-SEC-K9Cisco 887 VDSL/ADSL over POTS Multi-mode Router w/Adv IP
CISCO887G-K9887G ADSL2/2+ AnnexA Sec Router w/Ad.IP, 3G Global GSM/HSPAC887VAG+7-K9VDSL2/ADSL2+ over POTS (non-US) 3.7G HSPA+ R7 w/SMS/GPS
CISCO887GW-GN-A-K9Cisco 887 ADSL2/2+ Annex A Router w/3G 802.11n FCC CompCheck announcement for detailed information on replacing this product.
CISCO887GW-GN-E-K9Cisco 887 ADSL2/2+ Annex A Router w/3G 802.11n ETSI CompCheck announcement for detailed information on replacing this product.
CISCO887MW-GN-E-K9Cisco 887 ADSL2/2+ Annex M Router 802.11n ETSI CompCheck announcement for detailed information on replacing this product.C887VA-M-W-E-K9 ??
CISCO887W-GN-A-K9Cisco 887 ADSL2/2+ Annex A Router 802.11n FCC CompCheck announcement for detailed information on replacing this product.C887VA-W-A-K9 ??
CISCO887W-GN-E-K9Cisco 887 ADSL2/2+ Annex A Router 802.11n ETSI CompCheck announcement for detailed information on replacing this product.C887VA-W-E-K9 ??

End of Sale for Cisco 886 Series Routers
End-of-Sale Product Part NumberProduct DescriptionReplacement Product Part NumberReplacement Product Description
CISCO888G-K9Cisco 888 G.SHDSL Sec Router w/3G B/UC888EG+7-K9G.SHDSL w/EFM (non-US) 3.7G HSPA+ R7 w/SMS/GPS
CISCO887M-K9Cisco 887 ADSL2/2+ Annex M RouterCISCO887VA-M-K9Cisco 887 VDSL/ADSL Annex M over POTS Multi-mode Router

More info from http://www.cisco.com/c/en/us/products/collateral/routers/800-series-routers/qa_c67_458826.html

More Related
Cisco 800 Series Router Migration Option
Upgrade Your Cisco Routers
The New Cisco RV Series VPN Routers-RV340, RV345
Cisco 809 Industrial ISR vs. 829 Industrial ISR
The “Always On” ISR 4000 Will Replace the Popular Cisco 1900/2900/3900 Series
Cisco’s IoT Part-The IR809, Cisco’s Smallest Multimode 3G and 4G LTE Wireless Router
Cisco’s IoT Part-The Cisco 829 Industrial Integrated Services Routers

The Interfaces, Wi-Fi Options Support for 890 Series ISRs

$
0
0
The 890 ISRs are ideal for medium-sized branch offices with up to 25-30 remote workers. These fixed-configuration routers come with powerful management tools, such as the web-based Cisco Configuration Professional, which simplifies setup and deployment.

Cisco 890 Series ISRs come with an 8-port managed switch, providing LAN ports to connect multiple devices. An optional Power-over-Ethernet (PoE) capability can also supply power to IP phones and other devices. Eleven Cisco 890 Series models are available.

Cisco 892FSP ISR, Front and Back

The Interfaces, Wi-Fi Options Support for 890 Series ISRs
Table1 describes the interfaces, Wi-Fi options, and integrated capabilities supported by each of the Cisco 890 Series ISR models.
Table1. Platform Support for 890 Series ISRs

Model

WAN Interfaces

LAN Interfaces

802.11a/g/n Option

Integrated USB 2.0/AUX/Console

Integrated Dial Backup
Cisco 892FSP1-port GE or 1‑port SFP
1-port GE
8-port 10-/100-/1000-Mbps managed switchNoYesNo
Cisco 896VA1-port GE or 1‑port SFP
VDSL/ADSL2+ Annex B
8-port 10-/100-/1000-Mbps managed switch (4‑ports PoE capable with 125W power supply adapter)NoYesISDN
Cisco 897VA1-port GE or 1‑port SFP
VDSL/ADSL2+ Annex A/M
8-port 10-/100-/1000-Mbps managed switch (4‑ports PoE capable with 125W power supply adapter)Yes
Cisco CleanAir®technology
YesISDN (only on Cisco 897VA-K9)
Cisco 897VAB1-port GE or 1‑port SFP
VDSL/ADSL2+ Annex A with Bonding
8-port 10-/100-/1000-Mbps managed switch (4‑ports PoE capable with 125W power supply adapter)NoYesNo
Cisco 898EA1-port GE or 1‑port SFP
4 pair Ethernet in the first mile (EFM)
8-port 10-/100-/1000-Mbps managed switch (4‑ports PoE capable with 125W power supply adapter)NoYesNo
Cisco 891F1-port GE or 1‑port SFP
1-port FE
8-port 10-/100-/1000-Mbps managed switch (4‑ports PoE capable with 125W power supply adapter)Yes
Cisco CleanAir technology
YesV.92 analog modem
ISDN BRI
Cisco 891-24X2-port GE or 2‑port SFP24-port 10-/100-/1000-Mbps managed switch (8-ports PoE capable with integrated power supply)NoYesNo

The following Table2 lists the part numbers and Cisco IOS Software and WLAN software image details for each of the 890 Series ISR models.
Table2. Product Part Numbers and Software Images

Product Part Number

Product Description
Integrated Services Routers
C892FSP-K9Cisco 892FSP Gigabit Ethernet security router with SFP
C896VA-K9Cisco 896VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex B
C897VA-K9Cisco 897VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex A
C897VAW-A-K9Cisco 897VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex A with Wireless
C897VAW-E-K9Cisco 897VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex A with Wireless
C897VA-M-K9Cisco 897VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex M
C897VAM-W-E-K9Cisco 897VA Gigabit Ethernet security router with SFP and VDSL/ADSL2+ Annex M with Wireless
C897VAB-K9Cisco 897VA Gigabit Ethernet security router with SFP and VDSL2/ADSL2+ Bonding over POTS
C898EA-K9Cisco 898EA Gigabit Ethernet security router with SFP and 4 channel multimode G.SHDSL (EFM/ATM)
C891F-K9Cisco 891F Gigabit Ethernet security router with SFP
C891-24X/K9Cisco 891 Gigabit Ethernet security router with SFP and 24-ports Ethernet Switch
C891FW-A-K9Cisco 891F Gigabit Ethernet security router with SFP and Dual Radio 802.11n Wifi for FCC -A domain
C891FW-E-K9Cisco 891F Gigabit Ethernet security router with SFP and Dual Radio 802.11n Wifi for ETSI -E domain
Cisco 892FSP is supported only on Cisco IOS Software Release 15.2(4)M and later
Cisco 896, 897, 898EA is supported only on Cisco IOS Software Release 15.2(4)M1 and later
Cisco 891F is supported only on Cisco IOS Software Release 15.3(3)M2, 15.4(1)T and later
C897VAB is supported only on Cisco IOS Software Release 15.4(3)M1 and later
C891-24X is supported only on Cisco IOS Software Release 15.5(1)T and later
Memory Options
FL-8XX-512U1GB512 MB DRAM upgrade to 1 GB for Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F model (Feature License)
Router Software Images
ImageC800-universalk9-mz: Universal image for Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F, 891-24X
Access Point Software Images
ap802-k9w7-tarAutonomous software image for ap802
ap802-rcvk9w8-tarLightweight Access Point Protocol (LWAPP) recovery image for ap802
Power over Ethernet Options
800-IL-PM-4 with 125W PSU4-port 802.3af capable internal power module for C896, C897, C898, C891F routers
Security Services
Scan SafeCloud Web Security
ScanSafe Connectorhttp://www.cisco.com/en/US/prod/vpndevc/ps6525/ps6538/ps6540/isr_web_security.html.
Supported SFP Types on the Cisco 892F Series and Cisco 892FSP, 896VA, 897VA, 897VAB, 898EA, 891F
GLC-LH-SM1000BASE-LX/LHSFP transceiver module for MMF and SMF, 1300-nm wavelength, dual LC/PC connector
GLC-SX-MM1000BASE-SXSFP transceiver module for MMF, 850-nm wavelength, dual LC/PC connector
GLC-ZX-SM1000BASE-ZXSFP transceiver module for SMF, 1550-nm wavelength, dual LC/PC connector
GLC-BX-D1000BASE-BX10SFP module for single-strand SMF, 1490-nm TX/1310-nm RX wavelength, single LC/PC connector
GLC-BX-U1000BASE-BX10SFP module for single-strand SMF, 1310-nm TX/1490-nm RX wavelength, single LC/PC connector
GLC-T1000BASE-T standard
GLC-GE-100FXCisco 100BASE-FX SFP for Gigabit Ethernet SFP ports with multimode fiber-optic (MMF) link
GLC-FE-100LXCisco 100BASE-LX10SFP with single-mode fiber-optic (SMF) link
GLC-FE-100BX-U100BASE-BX10-U SFP module for 100-MB ports, 1310 nm TX/1550 nm RX wavelength, 10 km over single-strand SMF
GLC-FE-100BX-D100BASE-BX10-D SFP module for 100-MB ports, 1550 nm TX/1310 nm RX wavelength, 10 km over single-strand SMF
CWDM-SFP-1470=Cisco Coarse-Wavelength Division Multiplexing (CWDM) 1470-nm SFP Gigabit Ethernet and 1G/2G fibre Channel
GLC-LH-SMD*1000BASE-LX/LH SFP transceiver module for MMF and SMF, 1300-nm wavelength
GLC-ZX-SMD*1000BASE-ZX SFP transceiver module for SMF, 1550-nm wavelength, dual LC/PC connector
GLC-EX-SMD*1000BASE-EX SFP transceiver module for SMF, 1310-nm wavelength
*Not supported on the Cisco 892F
Rack Mount Kit for 890
ACS-890-RM-19Rackmount kit for all 890s, except C891-24X
ACS-2901-RM-19Rackmount kit for 891-24X
WAASX Feature License
FL-C890-WAASXWAASx Feature License
Data Sheet Reference from http://www.cisco.com/c/en/us/products/collateral/routers/800-series-routers/data_sheet_c78-519930.html

More Related
Cisco 800 Series Router Migration Option
How to Add PoE Power Supply for Cisco 890 Series Router?
EoS and EoL Announcement for the Cisco 800 Series ISR Power Supply

Migrating to Cisco Catalyst 3850 and 3650 Switches

$
0
0
Why migrate to the Cisco Catalyst 3850 and 3650 Series switches? Compare and see what you’ve been missing. Aging switches were not designed to handle today’s digital challenges. Get up-to-date switching solutions with the Cisco Catalyst 3850 and 3650 Series switches.

These enterprise-class access switches will get you ready for 802.11ac Wave 2 with Cisco Catalyst Multigigabit Technology to deliver speeds beyond 1 Gigabit on existing Category 5e/6 cables.

Improvements over previous generations include:
• Better customer and employee experiences through higher performance and improved support for mobility with converged wired and wireless
• Advanced security to handle increasing threats
• Reduced cost and complexity through support for software defined networking (SDN) and SmartOperations

Without the right switching solutions—the applications, services, and devices you deploy cannot live up to their potential. Digital transformation makes having the right foundation to stay competitive more important than ever before. See the benefits you could be receiving now by comparing the Cisco Catalyst 3850 and 3650 Series to older switches (see table below).


Catalyst 3850/3650-Differences & Similarities


 More Related
The New Catalyst 9000 Switches Simplify IoT & Cloud Requirements
The Roles Campus LAN Switches Play in a Modern Enterprise Network
Cisco 800 Series Router Migration Option
Why Migrate to the Cisco Catalyst 6800 Series Switches?

Q and A: Cisco Catalyst 9400 Overview

$
0
0
As the most important member of Cisco Catalyst 9000 family, Cisco Catalyst 9400 Series switches are built for security, IoT and cloud.

Catalyst 9400 Series form the foundational building block for SD-Access―Cisco’s lead enterprise architecture.

The platform provides unparalleled investment protection with a chassis architecture that is capable of supporting up to 9Tbps of system bandwidth and unmatched power delivery for high density IEEE 802.3BT (60W PoE). Redundancy is now table stakes across the portfolio.

The Catalyst 9400 delivers state-of-the-art High Availability (HA) with capabilities like uplink resiliency, N+1/N+N redundancy for power supplies.

The platform is enterprise optimized with an innovative dual-serviceable fan tray design, side to side airflow and is closet-friendly with ~16” depth.
A single system can scale up to 384 access ports with your choice of 1G copper UPoE and PoE+ options.

The platform also supports advanced routing and infrastructure services, SD-Access capabilities and network system virtualization. These features enable optional placement of the platform in the core and aggregation layers of small to medium-sized campus environments.

Q: What is the system architecture on the Cisco Catalyst 9400?
A: The Catalyst 9400 system is based on centralized architecture using the Cisco UADP ASIC 2.0 running open Cisco IOS XE Software. This architecture has several key benefits including simplicity of upgrades, investment protection, and superior high availability.

Q: What are the different chassis models available on the Cisco Catalyst 9400?
A: The Catalyst 9400 supports two chassis types, 7-slot and 10-slot, and both support redundant supervisor slots. The 7-slot chassis has 5 line-card slots that can serve up to 240 line-card ports and the 10-slot chassis has 8 line-card slots that can serve up to 384 line-card ports.

Q: What are the different datasheets and SKUs on the Cisco Catalyst 9400?
A: Refer to the Cisco Catalyst 9400 data sheets that provide the technical and product details of the series:
Catalyst 9400 Chassis data sheet
Catalyst 9400 Supervisor data sheet
Catalyst 9400 Line Card data sheet
Cisco Catalyst 9500 Latest Datasheet Version

Q: What uplink combination is available on the Cisco Catalyst 9400 Supervisor?
A: The Cisco Catalyst 9400 offers a flexible uplink architecture for both 10 and 40 Gigabit Ethernet deployments, helping ensure your investment will be protected for the future.
The supervisor supports one of the following combinations of uplink ports in a standalone configuration:
• Native 40 Gigabit Ethernet uplinks: 2x QSFP
• Native 10 Gigabit Ethernet uplinks: 8x SFP+
• Mixed uplink deployment: 1x QSFP+ and 4x SFP+

Q: On the Cisco Catalyst 9400, what is the uplink combination with redundant supervisors?
A: In redundant supervisor configuration, one of the following combination of uplinks ports is supported:
• 1x QSFP on each supervisor
• 4x SFP+ on each supervisor

Q: What are the SSD onboard storage options on the Cisco Catalyst 9400?
A: On the supervisor module, you can order an optional SSD for onboard storage. The supervisor module supports 240-, 480-, or 960-GB configurations. It is recommended to configure this module on both supervisors (active and redundant) at the time of order. For dual-supervisor configuration, it is recommended that you order the same size of SSD module on both supervisors.

Q: What line cards are available on the Cisco Catalyst 9400?
A: The Cisco Catalyst 9400 supports the following line-card modules to serve the diverse needs of modular campus deployments:
• 48-port UPoE RJ-45 (All 10/100/1000-Mbps)
• 48-port data RJ-45 (All 10/100/1000-Mbps)


Q: What is the airflow design on the Cisco Catalyst 9400?
A: The Catalyst 9400 supports a side-to-side airflow design that is most common in campus modular access deployments.

Q: What is unique about the Cisco Catalyst 9400 fan-tray design?
A: The Catalyst 9400 has an innovative fan-tray design that allows you to service the fan tray from the front or the back using the same fan tray. In certain rack deployments, this design allows you to retain your cable connectivity to the modules while servicing the fan tray from the rear.

Q: What is unique about the Cisco Catalyst 9400 power design?
A: The Catalyst 9400 power-design architecture is unique and superior in many ways. The novel design supports:
• Modular power supply
• Superior high-availability capabilities to support N + 1 or N + N modes of operation • Combined mode of operation
• Ability to mix-and-match inputs from 110V and 220V sources
• Platinum rated efficient power supplies
• Power shared across data, PoE and system components

Q: How many power supplies can the 7- and 10-slot chassis hold?
A: Both 7- and 10-slot chassis support up to 8 modular power supplies.

Q: How do I decide the number of power supplies I need on the Cisco Catalyst 9400?
A: Use the Cisco Power Calculator to estimate the power requirements on the Catalyst 9400. This tool allows you to configure current and future power needs based on the devices, line cards, and access endpoints and recommends the number of power supplies you need for your deployment:
http://www.cisco.com/c/en/us/support/web/tools-catalog.html

Q: Do the power supplies separate the power into data and inline (POE) categories?
A: No. The power from the power supplies is shared between data, PoE and other system components.

Q: What redundant mode does the Cisco Catalyst 9400 system support?
A: The Catalyst 9400 system supports N + N redundant mode and N+1 redundant mode. The system allows changing of the power supply modes with a simple CLI. For N + N mode, N power supplies are active and N are in standby. For N+1 mode, N power supplies are active and 1 is in standby.

Q: On the Cisco Catalyst 9400, what is the default power supply mode?
A: The default mode is a combined mode; User can change the mode of operation either N+N or N+1 mode.

Q: Do the Cisco Catalyst 9400 Switches come with built-in RFID?
A: Yes, the Catalyst 9400 switches come with built-in passive RFID tags on all the components so that you have an inventory of the different components, including separated RFID tags for the supervisor, all line-card modules, the power supplies, the fan tray, and the chassis.

Q: What management ports are available on the Cisco Catalyst 9400?
A: The Catalyst 9400 comes with a mini-B type USB console port and a 10/100/1000 Ethernet (RJ-45) dedicated management port on the front panel of the switch. The Ethernet port is in a separate VRF instance called “Mgmt-vrf”. This setup segments the management traffic from the global routing table of the switch.

Q: Can I use both console ports simultaneously on the Cisco Catalyst 9400?
A: No. The RJ-45 port is the default and console switches to USB when the USB cable is connected.

Q: Do the Cisco Catalyst 9400 Switches support Online Insertion and Removal (OIR)?
A: Yes, OIR is supported on all the modules and power supplies.

Q: What pluggable transceiver modules do the Cisco Catalyst 9400 switches support?
A: Refer to the Cisco Transceiver Module Compatibility Matrixes for the supported list
http://www.cisco.com/c/en/us/support/interfaces-modules/transceiver-modules/products-device-support-tables-list.html



More Related…
Why Migrate to Cisco Catalyst 9300 Switches?
Why Migrate to the Cisco Catalyst 9400 Series Switches?
Why Migrate to Cisco Catalyst 9500 Switches?
The New Catalyst 9000 Switches Simplify IoT & Cloud Requirements

The RV340W Dual WAN Gigabit VPN Router with Wireless-Specs

$
0
0
Nowadays, small business requires more secure networking. And now the Cisco Small Business RV Series Routers can meet the needs of small businesses.

Cisco Small Business RV Series Routers, offering virtual private networking (VPN) technology, can help your remote workers connect to your network through a secure Internet pathway.

The RV340W, a part of the RV34x Series, is the wireless counterpart of the RV340 Router.


With several added security features such as Web Filtering, Application Control, and IP Source Guard, the RV340W delivers highly secure, broadband, wired and wireless connectivity to small offices and remote employees. These new security features also provide the ease of fine-tuning permitted activity on the network.

In this article we will list the main specifications of the RV340W Dual WAN Gigabit VPN Router with Wireless.

Note: To read more about the RV340W Dual WAN Gigabit VPN Router with Wireless, click here.

Product Specifications


Specifications

Description
Standards802.11 (Wi-Fi), 802.11ac, 802.1n, 802.11g, 802.11b, 802.11a, 802.3u, 802.1D, 802.1p, 802.1w (Rapid Spanning Tree), 802.1X (security authentication), 802.1Q Virtual Local Area Network (VLAN), IPv4 (RFC 791), IPv6 (RFC 2460), Routing Information Protocol (RIP) v1 (RFC 1058), RIP v2 (RFC 1723)
Operating SystemLinux
Cabling TypeCategory 5e or better
PortsLAN, WAN, USB, Console

Physical Interfaces
SpecificationsDescription
Ports4 RJ-45 10/100/1000 Ethernet
2 WAN
2 USB ports
1 Console
ButtonsReset button, Wi-Fi button
SwitchPower Switch
Physical Security
KensingtonYes
Physical Specifications
Physical dimensions
(W x D x H)
280 x 44 x 170 mm (11.0 x 1.45 x 6.69 in)
Weight1.2 kg (2.65 lbs)


Network Capabilities
SpecificationsDescriptions
VLAN SupportYes; Port-based and 802.1Q tag-based VLANs
Network ProtocolsDynamic Host Configuration Protocol (DHCP) server
Point-to-Point Protocol over Ethernet (PPPoE)
Point-to-Point Tunneling Protocol (PPTP)
Domaine Name System (DNS) proxy
Internet Group Management Protocol (IGMP) proxy and multicast forwarding
Rapid Spanning Tree Protocol (RSTP)
Dynamic Domain Name System (DynDNS, NOIP)
Network Address Translation (NAT), Port Address Translation (PAT)
One-to-one NAT
Port management
Port mirroring
Number of VLANs1 management VLAN (1-4096 range), up to 32 VLANs
802.1X supplicantYes
Routing ProtocolsStatic routing
Dynamic routing
RIP v1 and v2
NATPAT, Network Address Port Translation (NAPT) protocol
Network edge (DMZ)Software-configurable to any LAN IP address
Spanning treeYes
Load balancingYes
IPv6Dual-stack IPv4 and IPv6
6to4 tunneling
Stateless address auto-configuration
DHCPv6 Server for IPv6 Clients on LAN
DHCP v6 client for WAN connectivity
Internet Control Message Protocol (ICMP) v6
Static IPv6 Routing
Dynamic IPv6 Routing with RIPng
IPv6 host support
IPv6 RADIUS,
Network Time Protocol (NTP)
Layer 2802.1Q-based VLANs, 32 active VLANs plus one management VLAN


Security
SpecificationsDescription
Access controlYes, management access control list (ACL) plus MAC ACL
Secure ManagementHTTPS
FirewallStateful packet inspection (SPI) firewall, port forwarding and triggering, Denial-of-Service (DoS) prevention, software-based DMZ
DoS attacks prevented:

  • SYN Flood

  • Echo Storm

  • ICMP Flood

  • UDP Flood

  • TCP Flood

Blocks Java, cookies, active-X, HTTP proxy
Web FilterFilters malicious and blocks harmful websites
Content FilterStatic URL blocking or keyword blocking
Application ControlYes

VPN

Specifications

Description
IPSec50 simultaneous connections (any combination of Remote Access and site-to-site), up to 650 Mbps throughput
IPSec Remote AccessYes
L2TP over IPSecYes
GRE over IPSecYes
Cisco SSL VPN (Cisco AnyConnect)2 tunnels included. Max 50 tunnels with optional router licenses. Up to 33 Mbps throughput
PPTP25 connections, up to 100 Mbps throughput
Teleworker mode (Cisco IPSec VPN)Router acts as a client to connect to central VPN gateway in teleworker mode.
VPN PassthroughIPSec, PPTP, L2TP

Configuration

Specifications

Description
Web user interfaceSimple, browser-based configuration (HTTP, HTTPS)
Command-line interface (CLI)Command line using SSH
Management protocolsWeb browser, Simple Network Management Protocol (SNMP) v3, Bonjour
Remote managementYes
Event loggingLocal, remote syslog, email alerts
Network diagnosticsLogging, Ping, Traceroute, DNS lookup, and Port Mirror
Web firmware upgradeFirmware upgradable through web browser, imported and exported configuration file
Dynamic Host Configuration Protocol (DHCP)DHCP Client
IPv6 hostYes
HTTP redirectYes
System timeSupports NTP, daylight savings manual entry
LanguagesGUI supports English


Wireless

Specifications

Description
Radio and modulation typeDual radio, Orthogonal Frequency Division Multiplexing (OFDM) IEEE 802.11a/n: OFDM (BPSK/QPSK/16QAM.64AM/256AM)
IEEE 802.11ac: OFDM (BPSK/QPSK/16QAM.64AM/256AM)
WLAN802.11n/ac
4x4 MIMO with 2 spatial streams at 5 GHz
3x3 MIMO with 2 spatial streams at 2.4 GHz
20-, 40-, and 80-Mhz channels for 802.11ac
20- and 40-Mhz for 802.11n
PHY data rate up to 2.7Gbps:
- 2.4 GHz: 450Mbps (64-QAM), 600Mbps (256-QAM)
- 5 GHz: 1.7Gbps (256-QAM), 2.1Gbps (1024-QAM)
802.11 Dynamic Frequency Selection (DFS)
Operating channels11 North America, 13 most of Europe, auto-channels selection
Wireless isolationWireless isolation between clients
External antennas4
Antenna gain in dBi2.4 GHz: 3 dBi per antenna
5 GHz: 5 dBi per antenna
Receiver sensitivity2.4 GHz:
-802.11b: -82 dBm at 11 Mbps,
-802.11g: -71 dBm at 54 Mbps,
802.11n (HT20): -69 dBm at MCS7,
HT20, -65 dBm at mcs15, HT40

5 GHz:
-802.11ac (VHT20): -59 dBm at MCS8
-802.11ac (VHT40): -54 dBm at MCS9
-802.11ac (VHT80): -51 dBm at MCS9
Radio frequencyDual-band, works on 2.4 GHz and 5 GHz
Active WLAN clientsSupports up to 50 concurrent clients
Multiple SSIDsSupports multiple Service Set Identifiers (SSIDs), up to 8 separate virtual networks, 4 per radio.
Wireless VLAN MapSupports SSID to VLAN mapping with wireless client isolation
WLAN SecurityWired Equivalent Privacy (WEP), WPA, WPA2-PSK, WPA2-ENT, 802.11i
Wi-Fi Multimedia (WMM)WMM, WMM power save (WMM-PS)

Environmental
SpecificationsDescription
Power12V 1.5 A
CertificationsFCC, CE, IC, Wi-Fi
Operating temperature0° to 40°C (32° to 104°F)
Storage temperature0° to 70°C (32° to 158°F)
Operating humidity10% to 85% non-condensing
Storage humidity5% to 90% non-condensing

Info from https://supportforums.cisco.com/document/13322301/product-specifications-rv340w-dual-wan-gigabit-vpn-router-wireless

More Related
Cisco RV340W VPN Router, For Any Small-business Network that Requires…
How to Install your Cisco RV340W and Launch the Web-based Device Manager?
The New Cisco RV Series VPN Routers-RV340, RV345

Cisco Updates Catalyst 2960-X Series Switches to Meet Customers’ Needs

$
0
0

Cisco updated the hot Catalyst 2960-X/XR Series in bright features.
The Cost-effective access switches that scale: Get the enterprise-class features you want at a great price. Our 2960-X Series are stackable Gigabit Ethernet Layer 2 and Layer 3 access switches.
The simple Catalyst 2960-X/XR Series are easy to deploy, manage, and troubleshoot. They offer automated software installation and port configuration. And they help you cut costs with energy-efficient features.

Product Highlights
Cisco Catalyst 2960-X switches feature:
●   24 or 48 Gigabit Ethernet ports with line-rate forwarding performance
●   Gigabit Small Form-Factor Pluggable (SFP) or 10G SFP+ uplinks
●   FlexStack Plus for stacking of up to 8 switches with 80 Gbps of stack throughput (optional)
●   Power over Ethernet Plus (PoE+) support with up to 740W of PoE budget
●   24-port PoE fanless switch for deployment outside the wiring closet
●   Reduced power consumption and advanced energy management features
●   USB and Ethernet management interfaces for simplified operations
●   Application visibility and capacity planning with integrated Full (Flexiable) NetFlow and NetFlow-Lite
●   LAN Base or LAN Lite Cisco IOS software features
●   Enhanced limited lifetime warranty (E-LLW) offering next-business-day hardware replacement
●   Identify, classify and control of trusted internal network traffic through Domain Name System as an Authoritative Source (DNS-AS)

FlexStack-Plus on Cisco Catalyst 2960-X Series Switches

FlexStack and FlexStack Plus Supported Combinations
2960-XR IP Lite2960-X LAN Base2960-S/SF LAN Base
2960-XR IP LiteYes--
2960-X LAN Base-YesYes
2960-S or 2960-SF LAN Base-YesYes

FlexStack-Plus Scalability and Performance
Stack MembersStack BandwidthStack LimitCisco IOS Feature Set
2960-XR IP Lite80G8IOS IP Lite
2960-XLAN Base80G8IOS LAN Base
2960-X LAN Base mixed with
2960-S/SF LAN Base
40G4IOS LAN Base

Cisco Catalyst 2960-XR models also offer:
●   Power resiliency with optional dual field-replaceable power supplies
●   IP Lite Cisco IOS software with dynamic routing and Layer 3 features

Switch Models and Configurations
Catalyst 2960-X switches include a single fixed power supply and are available with either the Cisco IOS LAN Base or LAN Lite feature set.
Catalyst 2960-XR switch models include a field-replaceable modular power supply and can accommodate a second power supply. Catalyst 2960-XR is available only with the Cisco IOS IP Lite feature set.

Learn more: Cisco Catalyst 2960-X vs. 2960-XR Series Switches

Catalyst 2960-X Series Software Features
All Catalyst 2960-X Series Switches use a single Universal Cisco IOS Software Image for all SKUs. Depending on the switch model, the Cisco IOS image automatically configures the LAN Lite, LAN Base, or IP Lite feature set.

LAN Lite models have reduced functionality and scalability for small deployments with basic requirements. Cisco Catalyst 2960-X Family of Switches are available with the LAN Base and LAN Lite feature sets and Catalyst 2960-XR Family of switches are available IP Lite feature sets.

Note that each switch model is tied to a specific feature level; LAN Lite cannot be upgraded to LAN Base and LAN Base cannot be upgraded to IP Lite.
For more information about the features included in the LAN Lite, LAN Base and IP Lite feature sets, refer to Cisco Feature Navigator: http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp.

Cisco ONE Software
Cisco ONE Software for Access Switching is available for the Cisco Catalyst 2960-X and Cisco Catalyst 2960-XR Series Switches.
Cisco ONE Software is a new way for customers to purchase and use our infrastructure software. It offers a simplified consumption model, centered on common customer scenarios in the data center, WANs, and LANs.

Cisco ONE Software and services provide customers with four primary benefits:
●   Software suites that address typical customer use scenarios at an attractive price
●   Investment protection of their software purchase through software services-enabled license portability
●   Access to ongoing innovation and new technology with Cisco Software Support Service (SWSS)
●   Flexible licensing models to smoothly distribute customer's software spend over time
For ordering information for Cisco ONE Software for the Cisco Catalyst 2960-X and Cisco Catalyst 2960-XR Series Switches, go to http://www.cisco.com/c/en/us/products/software/one-access/switching-part-numbers.html.

Download: Cisco Catalyst 2960-X Series Switches Data Sheet

Read the Benefits of Migrating to Cisco Catalyst 2960 and 2960XR Switches. Compare and see what you’ve been missing.


Read more: Compare the Catalyst 2960-X/XR to the Previous 2960 Access Switches
                  Comparison of Cisco Catalyst 2960 Switches

More Related…
Cisco Catalyst 2960-X Switches: Enterprise Ready
Cisco 2960S and 2960-X Series’ Problems from Users
Cisco Catalyst 2960-X/XR vs. Catalyst 3650 vs. Cisco 3850 Series
How to Install or Replace an AC Power Supply in a Cisco 2960-X Switch?
How to Configure the Voice VLAN Feature on the Catalyst 2960 and 2960-S Switches?
Viewing all 107 articles
Browse latest View live