Cisco CATALYST 2940 8 PORT 10/100 1 PORT 10/100/1000 Техническое Руководство

Page 4 of 12

LOW TOTAL COST OF OWNERSHIP

The Cisco Catalyst 2940 Series delivers a low total cost of ownership (TCO) within its product class by excelling in three key areas:

security, manageability, and investment protection.

Security

Cisco Catalyst 2940 Series switches offer enhanced data security through a wide range of security features. These features allow customers

to provide network security based on users or MAC addresses.

Secure Shell version 2 (SSHv2) protects information from being eavesdropped or being tampered with by encrypting information being

passed on the network, thereby guarding administrative information. Private VLAN Edge isolates ports on a switch, ensuring that traffic

travels directly from the entry point to the aggregation device through a virtual path and cannot be directed to another port. In addition, for

authentication of users with a TACACS+ or a RADIUS server, 802.1x provides port-level security. Simple Network Management Protocol

Version 3 (SNMPv3) (non-cryptographic) monitors and controls network devices as well as manages configurations, performance,

collection of statistics, and security.

For authentication of users with a Terminal Access Controller Access Control System (TACACS+) or RADIUS server, 802.1x provides

port-level security. 802.1x, in conjunction with a RADIUS server, allows for dynamic port-based user authentication. 802.1x-based user

authentication can be extended to dynamically assign a VLAN based on a specific user, regardless of where they connect on the network.

With 802.1x with Guest VLAN, guests are allowed access to the Internet via the Guest VLAN but cannot access the customer's internal

network. This intelligent adaptability allows IT departments to offer greater flexibility and mobility to their stratified user populations. By

combining access control and user profiles with secure network connectivity, services, and applications, enterprises can more effectively

manage user mobility and drastically reduce the overhead associated with granting and managing access to network resources.

With the Cisco Catalyst 2940 switches, network managers can make ports and consoles highly secure. MAC-address-based port-level

security prevents unauthorized stations from accessing the switch. Multilevel access security on the switch console and the Web

management interface prevents unauthorized users from accessing or altering switch configurations and can be implemented using an

internal user database on each switch or a centrally administered TACACS+ or RADIUS server.

Manageability

Manageability is critical for customers who are concerned with user productivity, as it allows them to proactively troubleshoot connectivity

or performance issues. Typically, unmanaged switches require network administrators to physically inspect the switch when problems

arise and do not provide troubleshooting tools or network statistics. In stark contrast, the Cisco Catalyst 2940 Series has robust SNMP

Management Information Base (MIB) support and is fully manageable by the CiscoWorks suite of network management tools. Most

importantly, the Cisco Catalyst 2940 runs the same Cisco IOS Software with which so many network administrators are already familiar,

thus reducing training and operating costs.

The Catalyst 2940 series comes with an embedded GUI device manager that simplifies initial configuration of a switch. Users now have the

option to set up the switch through a Web browser, eliminating the need for more complex terminal emulation programs and knowledge of

the command-line interface (CLI). Cisco Smartports have preset Cisco recommended network configurations including quality of service,

security, and multicast settings to allow for transparent integration of data, video, IP communications, and wireless LAN applications.

Users can also manage the Catalyst 2940 series with Cisco Network Assistant, an advanced PC-based network management application.

Cisco Network Assistant offers centralized management and configuration of Cisco switches and other Cisco devices such as routers and

wireless access points. With Cisco Network Assistant, in addition to configuring multiple switches at a time, you can configure Cisco

wireless access points, and invoke the device manager on Cisco routers and access points. Software upgrades on Cisco switches, routers,

and wireless access points are as easy as a drag-and-drop process. You can download Cisco Network Assistant (available at no cost) from

the Cisco website

http://cisco.com/go/cna