Table of Contents
Introduction
Cisco Data Center Switching Solutions
Modular Switches
Model/Series
Integrated Security
Access Control Lists
H/W-based Access Control Entry
Dedicated Hardware Resources for Security
ACLs
(ACE) Counters
Router ACL
VLAN ACL
Port ACL
Port ACL (for IPv6)
Role Based ACL
Reflexive ACL
Time-based ACL
VACL with Redirect/Capture/Logging of
Denied Traffic
Context-based Access Control
Order-dependent ACL Merge
ACL Scalability (ACE Entries)
IPv6 RA Guard
IPv6 URPF
Attack Mitigation
Control Plane Policing (Multiple CPU Rate
Limiters)
IP Source Guard
DHCP Snooping/Option 82
Dynamic ARP Inspection
MAC Address Notification
Port Security
H/W-based uRFP Check
H/W-based MAC Learning
H/W-assisted MAC Aging
Routing Protocol Pass Through
ARP Policing
H/W-based Directed Broadcast
ACL Dry Run and Atomic Commit
62
(
continued)
Nexus 7000 Series
Catalyst 6500 Series
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
128,000
32,000
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Fixed-Configuration Switches
Nexus 5000 Series
Nexus 3000 Series
•
•
•
•
•
•
4000
•
•
•
•
•
•
•
•
•
•
Catalyst 4948E/4900M
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
2000
128,000
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
63
Hide quick links:
Table of Contents
