KEy FEATURES ANd BENEFITS
Robust VoIP and Power over Ethernet
Standards-based IEEE 802.3af poE supporting a wide variety of endpoints
Choice of 1250W (70 Class 3) or 2500W (140 Class 3) per poE power supply
Independent system and poE power subsystems allow the addition of poE without
affecting the system power
High-availability power design—N+1 poE power redundancy for the 8-slot FastIron Superx
and FSx 800 chassis and N+3 poE power redundancy for the 16-slot FSx 1600 chassis
Intelligent poE power management
PoE auto-detection enables support for PoE and non-PoE devices without configuration
changes
Software accessible system and per port power consumption
Configurable per port PoE priority for power allocation
proven interoperability with popular voice over Ip equipment, including legacy Cisco Ip
phones
Advanced QoS and cell-based fabric enable high-quality VoIp service
Auto-configuration for VoIP endpoints
Voice VlAN feature automatically places Ip phones in their own VlAN
Auto-detects legacy and standard 802.3af powered devices
llDp/llDp-mED standards greatly simplify and enhance network management, asset
management, and network troubleshooting
IronShield Advanced Security
multilevel access security for console access
IronShield 360—sFlow-powered automated closed-loop threat detection and mitigation
solution
Secure Web-based management interface prevents unauthorized users from accessing or
changing the switch configuration
Terminal Access Controller Access Control Systems (TACACS/) and RADIuS
operator authentication
Secure Shell, Secure Copy, and SNmpv3 restrict and encrypt communications to the
management interface and system
IEEE 802.1x authentication including multiple device authentication and dynamic policy
configuration for authenticated clients—VLAN, ACL
private VlANs provide security and isolation between switch ports to help ensure that
users cannot snoop on other users’ traffic
Denial of Service protection—monitoring, throttling, and locking out of ICmp and TCp SyN
traffic both to the management address of the switch and for transit traffic
Ip Source Guard, DHCp Snooping, and ARp Inspection protect against snooping and man-
in-the-middle attacks
Byte-based and packet-based Broadcast, multicast, and unknown unicast rate limiting
ACl log reports provide source detail for denied packets
ACl-based port mirroring enables Ip monitoring for CAlEA and related law enforcement
traffic monitoring
Enhanced MAC filtering to include Denial of Service protection
mAC address authentication including multiple device authentication and dynamic policy
configuration
Enhanced port security for controlling access of authorized users
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
