2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-00BN Training-C2K&C3K updateJun XuGC BN Team 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-002AgendaIntroducing C2KS&C3KXNew feature on ALL Platforms of C2K and C3KLow-end Switch Positioning 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-003二层交换机Catalyst 2960-S万兆支持上行端口的选项: 4x1G或者2x10G SFP+FlexStack堆叠技术将堆叠技术引入到2960产品系列中，支持高带宽堆叠链路，40G堆叠带宽堆叠口独立，在设备后部易管理PoE供电在每个端口可支持 全负荷PoE供电802.3at PoE+支持（30W PoE供电）E-LLW(增强的有限终身保修）节能思科在线诊断和在线错误记录硬件方面的革新，该特性可以较早的发展设备的问题主要特性软件选项： LAN Lite 和 LAN BaseLAN Lite 选项提供入门级别的千兆交换机新品新品可定货可定货 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-004三层交换机Catalyst 3750-X & 3560-X电源堆叠技术(C3750X) 业内首创在堆叠系统中，分布式电源供应电源的绿色节能和冗余方式的创新双电源，双风扇交换机可以在线进行电源风扇的更换和升级TrustSec支持在用户端口侧提供高级的认证和数据加密满负荷802.3at PoE+支持基于标准的PoE供电方式，最大支持每端口30W的供电，完全满足下一代高耗能终端的供电需求E-LLW从4x1G到2x10G无缝升级不需要特殊的硬件，仅仅更换光模块即可引领创新:3 个软件选项: LAN Base, IP Base, IP Services更加柔性的软件特性选择，更好的为客户服务新品新品可定货可定货 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-005Cisco IOS Software Feature Set Capabilities Cisco Catalyst 2000 and Catalyst 3000LAN Lite:Enterprise Entry-Level Layer 2 SwitchingLAN Base: Enterprise Access Layer 2 SwitchingIP Base: Enterprise Access Layer 3 SwitchingIP Services: Advanced Layer 3 Switching (IPv4 and IPv6)Cisco Catalyst 2960, Catalyst 2960-S, Catalyst 3560-X, and Catalyst 3750-XLAN BaseEnterprise AccessLayer 2LAN LiteEntry LevelLayer 2Layer 2Cisco Catalyst 2960 and Catalyst 2960-SIP BaseEnterprise AccessLayer 3IP ServicesEnterprise Advanced Layer 3 Layer 3Cisco Catalyst 3000Cisco Catalyst 3000 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-006New FeaturesSmart Operations Feature EnhancementsAuto Smart Ports, Smart InstallRouting FunctionalityStatic Routes in LAN Base feature setOSPF for Routed AccessSecurity improvementsMAC Replace, Multi-Auth with Vlan Assignment, SXPAuto QOS updates for new MediaCampus QOS DesignOther Features of Importance in releaseIOS Release 12.2(55)SE 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-007IOS 12.2(55)SE Release and ProductsUpdate on Enhancements in IOS release 12.2(55)SEOfficial release date: Now.Included Products: Catalyst 2960 family includes 2975Catalyst 3560 familyCatalyst 3750 family 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-008Cisco ConfidentialSmart Install In the NetworkClient SwitchesDirector Switch or routerDirector configures client switch plug and playSwitches are groups common image and configurationOn-demand configuration and image update possibleTFTP, DHCP Server Inside Switch or Outside Clients Group 1Clients Group 2 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-009Changes to Routing FeaturesAdding static routes to LAN Base feature setAllows Inter-Vlan Routing on traditional Layer 2 only devices16 Static Routes MAX per switch, RACLs on the Vlan InterfacesModels: C2960S, C2960G, C2960, C2975No: RIP, OSPF, EIGRP, No: IP addresses on physical interfacesVlan interfaces only!New SDM Template for “lanbase-routing” must be configured.Lead with C3560/3750 for L3 Customer requirementFall back to C2960 for competitive pricing.Static Route support for C3560X & C3750X LAN Base Winter 2011 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0010Changes to Routing Features contRouted Access in IP BaseOSPF for Routed Accessfunctional equivalent to 4K featureExtend the Layer3 routing to the wiring closet.Full OSPF protocol in IP Base feature setLimited to 200 indirect routes!Single instance for OSPFModels:All C3560, and C3750 models 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0011New Security/ Identify FeaturesMAC ReplaceAllows new hosts behind hub or IP Phone to authenticate Combined with MAC Move, complete solution for wired mobilityMulti-Auth with Vlan Assignment RADIUS server assigns vlan to first authenticated hostSubsequent hosts use same vlan.Support for the Security Group Tag (SGT) Exchange Protocol (SXP) Control protocol exchange with upstream device.C3560 and C3750 only.TrustSec Features 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0012Platform Consistency Changes“Class Default” Classifier for Policy-map now supported officiallyPolicer Granularity for C2960 is now 8K bpsConsistency with 3560 and 3750.C2960S: min granularity 16K bpsAllows for consistent Service Policy configurations across 2K and 3K Switches 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0013IOS Feature Packaging ChangesEEM added to IP BaseFormerly in IP Services onlyLLDP_MED added to LanLiteDHCP Snooping (with option 82 support ) in LanLite 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0014Cisco Catalyst 2960 and Catalyst 2960-SKey LAN Lite vs. LAN Base HighlightsFunctionsLAN LiteLAN BaseLayer 2 Entry-level access Layer 2 Basic Layer 2 access features, including 802.1Q trunking, (M)STP, STP extensions, Cisco Discovery Protocol, DTP, UDLD, VTPv2, PAGP/LACP, LLDP, storm control and LLDP-MED Enterprise Access Layer 2Wide range of Layer 2 access features for enterprise deployments, including FlexLinks and VTPv3Layer 3 No routing support Support for Layer 3 management interface Static routing support Support for SVIs with up to 16 IPv4 routesManageability Entry-level manageability Express setup, Cisco Device Manager, SNMPv3 (with cryptography), RMON, SPAN, TDR, Auto Smart Ports, and Smart Install client Basic manageabilitySupport for a wider range of MIBs, IPSLA Responder, and RSPANSecurity Entry-level access securitySSH v2 server, SSL, HTTPS, SCP, TACACS+, RADIUS, port security, 802.1x (with guest VLAN), MAB, private VLAN edge, NAC, and DHCP snooping Enterprise access securityIPSG, DAI, PACLs, Cisco Identity 4.0, 802.1x features, and RACLsQoS Entry-level access QoSPort CoS Trust and Override, Ingress and egress queuing, scheduling, Priority Queuing, and SRR Enterprise access QoSIngress policing, Trust Boundary, AutoQoS, and DSCP mappingNote: LAN Base feature set includes all LAN Lite features.NewNewNewNew(As of IOS Release 12.2(55)SE) 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0015Key LAN Base vs. IP Base and IP Services HighlightsFunctionsLAN BaseIP BaseIP ServicesLayer 2+ Enterprise access Layer 2 Wide range of Layer 2 access features for enterprise deployments Complete Access Layer 2Supports all Cisco Catalyst 2000 and Catalyst 3000 Layer 2 features, including hot standby protocols; supports Cisco StackPower technology (Cisco Catalyst 3750-X)Layer 3 No routing support Support for SVI with no IP routing support Enterprise access Layer 3Static routing, RIP, stub PIM, stub EIGRP, OSPF for Routed Access Complete access Layer 3OSPF, EIGRP, BGP, IS-IS, PIM, VRF-lite, WCCP, PBRManageability Basic manageability Support for a wide range of MIBs, IPSLA Responder, and RSPAN Enterprise access Layer 3Gold-Lite, Smart Install Director and EEM Complete access Layer 3IPSLA InitiatorSecurity Enterprise access securityDHCP Snooping, IPSG, DAI, PACLs, Cisco Identity 4.0, NAC and 802.1x features Complete access securityRouter and VLAN ACLs, private VLANs, complete security, TrustSec SXP, and IEEE 802.1AE (Cisco Catalyst 3560-X and Catalyst 3750-X)QoS Enterprise access QoSIngress policing, Trust Boundary, AutoQoS, and DSCP mapping Complete access QoSSupport for all Cisco Catalyst 2000 and Catalyst 3000 QoS features, including per-VLAN policiesCisco Catalyst 3560 and Catalyst 3750, Including E and X SeriesCisco Catalyst 3560-Xand Catalyst 3750-X Note: IP Services feature set includes all IP Base features. IP Base feature set includes all LAN Base features.NewNew(As of IOS Release 12.2(55)SE) 2008 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialEnterprise_Switching_Enterprise_Routing_MJMMAY08.ppt思科接入交思科接入交换机定位机定位16Catalyst 29603560V23750V2性能性能入门级企业入门级企业中等企业中等企业大型企业大型企业 (高密度接入高密度接入)Catalyst 2918Catalyst 2960S-LiteCatalyst 2960S-LAN BASE3750X-GE versionCatalyst 2960S-10GCatalyst 3560XCatalyst 3750XCatalyst 4500E10GE SWITCH10GE SWITCHGE SWITCHGE SWITCHFE SWITCHFE SWITCHCatalyst 3560XGE versionCatalyst 4500E二层交换机二层交换机三层交换机三层交换机三层交换机三层交换机Catalyst 2928二层交换机二层交换机 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0017More InformationCisco Catalyst 3000 and Catalyst 2000 websites: Cisco Catalyst 3750-X Series Switches: www.cisco.com/go/3750x Cisco Catalyst 3750-E Series Switches: www.cisco.com/go/3750-E Cisco Catalyst 3750 Series Switches: www.cisco.com/go/catalyst3750 Cisco Catalyst 3560-X Series Switches: www.cisco.com/go/3560x Cisco Catalyst 3560-E Series Switches: www.cisco.com/go/3560-E Cisco Catalyst 3560 Series Switches: www.cisco.com/go/catalyst3560 Cisco Catalyst 2960 Series Switches: www.cisco.com/go/catalyst2960 Cisco Catalyst 2960-S Series Switches: www.cisco.com/go/2960s 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0018 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0019Smart Operations Auto Smart Ports Phase 3 EnhancementsPhase 2 was 12.2(52)SE More devices auto DetectedAdditional Deployment options Smart Install Phase 2 EnhancementsDirector DatabaseClient Configuration backupSmart Install MIB now available 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0020Auto Smart PortsPort 1Automatic Configuration Based on Device TypeMacro generates configuration automaticallyCustomer macro capabilityMacro storage on server or switchRadius Authentication based macro supportMAB, 802.1x or Web Auth login can execute macroSupported on 2960/3560/3750Port 1-20(Phones)Port 2Port 21Port 25Configuration Automatically ChangedPort 1Ports 1-26(Phone, AP, Switch)Port 12Port 21Port 25Port 25-26(switches)Port 21-24(APs) 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0021Auto Smart Ports Phase 3Last Resort Macro Applied when no device match foundDevices that dont support CDP or LLDP (eg: Laptops)Anti-Macro Applied when device removedCustomizable configuration to leave the port in a known statePer port and Per Macro ControlDisallow certain Macros from being appliedEnable/disable detection methods (CDP, LLDP, OUI)VlanID Name as parameter Previous release supported VlanID number onlyWill use new Auto QOS parameters for “media”Covered later in presentation 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0022Auto Smart Ports Phase 3 contEnhancements for Access PointsSupport new Auto-QOS CDP TLV- WCS version 6.0.188.0 or greater-Prevent AP buffer overruns with egress rate limitImproved Cisco AP device detectionNew Device types detected:TNP phones (Third Generation IP phones)Roundtable phones (models 99xx) 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0023ASP list of IP Phones in phase 3Cisco Unified IP Phone 7900 series:7906, 7911, 7941, 7942, 7945, 7961, 7962, 7965,7970, 7971, 7975Cisco Unified IP Phone 9900 series9971, 9951 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0024Smart InstallZero Touch Switch Plug and PlayConfigure the director and attach switch to director for auto image and configuration downloadZero Touch Switch Replacement Switch replacement is possible if like model is replaced with new MAC addressSingle Point of ConfigurationManagement of all client switches from the director (telnet access)Group based changes based on model ID or MAC addressSimplified Switch Upgrade Process with the ability to push an image and configuration across groups of switches, synchronizing and storing the latest configuration files on the directorSmart Install Feature Benefits 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0025Cisco ConfidentialSmart Install In the NetworkClient SwitchesDirector Switch or routerDirector configures client switch plug and playSwitches are groups common image and configurationOn-demand configuration and image update possibleTFTP, DHCP Server Inside Switch or Outside Clients Group 1Clients Group 2 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0026Smart Install EnhancementsArchive Client configuration filesEach client can have unique configuration file.Smart Install MIBCISCO-SMART-INSTALL-MIBUpdated CLI “showvstackstatus” outputDeviceStatusACT-ActiveINA-InactivePND-PendingUpdateHLD-On-holdDNY-DeniedNSI-NonSmartInstallImageUpgrade:i-inprogressI-doneX-failedConfigUpgrade:c-inprogressC-donex-failedDirectorDatabase:DevNoMACAddressProduct-IDIP_addrHostnameStatus=0001b.d5a9.4700WS-C3750E-48TD10.30.0.33750e-DireDirector10006.52b9.e100WS-C2950T-2410.30.0.2Rack3_10_nNSI30018.ba61.5180WS-C3750E-48PD10.30.0.523750-vlannINAIC40018.ba61.6e80WS-C3560E-48TD10.30.0.533560e-vlanACTIC50021.1caf.3680WS-C2960-48TT-S10.30.0.51SwitchINAIC60026.527d.5100WS-C2960S-48FPD-L0.0.0.0 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0027Changes to Routing FeaturesAdding static routes to LAN Base feature setAllows Inter-Vlan Routing on traditional Layer 2 only devices16 Static Routes MAX per switch, RACLs on the Vlan InterfacesModels: C2960S, C2960G, C2960, C2975No: RIP, OSPF, EIGRP, No: IP addresses on physical interfacesVlan interfaces only!New SDM Template for “lanbase-routing” must be configured.Lead with C3560/3750 for L3 Customer requirementFall back to C2960 for competitive pricing.Static Route support for C3560X & C3750X LAN Base Winter 2011 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0028Changes to Routing Features contRouted Access in IP BaseOSPF for Routed Accessfunctional equivalent to 4K featureExtend the Layer3 routing to the wiring closet.Full OSPF protocol in IP Base feature setLimited to 200 indirect routes!Single instance for OSPFModels:All C3560, and C3750 models 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0029New Security/ Identify FeaturesMAC ReplaceAllows new hosts behind hub or IP Phone to authenticate Combined with MAC Move, complete solution for wired mobilityMulti-Auth with Vlan Assignment RADIUS server assigns vlan to first authenticated hostSubsequent hosts use same vlan.Support for the Security Group Tag (SGT) Exchange Protocol (SXP) Control protocol exchange with upstream device.C3560 and C3750 only.TrustSec Features 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0030Platform Consistency Changes“Class Default” Classifier for Policy-map now supported officiallyPolicer Granularity for C2960 is now 8K bpsConsistency with 3560 and 3750.C2960S: min granularity 16K bpsAllows for consistent Service Policy configurations across 2K and 3K Switches 2010 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialC97-578778-0031IOS Feature Packaging ChangesEEM added to IP BaseFormerly in IP Services onlyLLDP_MED added to LanLiteDHCP Snooping (with option 82 support ) in LanLite