Enterasys SecureStack C2G124-24 C2G124-24 User Manual
Product codes
C2G124-24
Multiple Spanning Trees (IEEE 802.1s) and Rapid Reconvergence
(IEEE 802.1w), are fully supported. All switches support up to 16,000
addresses and have eight hardware queues per port. Ethernet Flow
Control (IEEE 802.3x) as well as standards-based Link Aggregation
(IEEE 802.3ad) are fully supported in every switch model. In addition, all
switches support Jumbo Frames (frames up to 9,216 bytes) and IGMP
Snooping v1 and v2.
(IEEE 802.1w), are fully supported. All switches support up to 16,000
addresses and have eight hardware queues per port. Ethernet Flow
Control (IEEE 802.3x) as well as standards-based Link Aggregation
(IEEE 802.3ad) are fully supported in every switch model. In addition, all
switches support Jumbo Frames (frames up to 9,216 bytes) and IGMP
Snooping v1 and v2.
Extensive Traffic Classification
SecureStack C2 switches comprise the ideal family of switches for
delivering any converged network solution. A major component for
supporting converged networks is traffic classification. All SecureStack
C2 switches deliver extensive Layer 2/3/4 packet classification and
marking at the edge based on any of the following attributes:
delivering any converged network solution. A major component for
supporting converged networks is traffic classification. All SecureStack
C2 switches deliver extensive Layer 2/3/4 packet classification and
marking at the edge based on any of the following attributes:
• MAC address
• Physical port
• IP address
• IP Protocol
• IP ToS/DSCP marking
• TCP/UDP port
• IP subnet
The classification can then be used to deny or permit access, or prioritize
the traffic.
the traffic.
Advanced Quality of Service
Broad support for Quality of Service makes SecureStack C2 switches an
ideal choice for all types of networks, including Voice over IP, real-time
and non-real-time video, and data-intensive applications. Extensive
classification capabilities combined with network-wide policies and eight
priority queues per port allow the SecureStack C2 to granularly rate limit
traffic flows. Both weighted round robin, which keeps low priority traffic
from being completely starved of bandwidth, and strict priority queuing
are supported. Support for the IP Differentiated Services Code Point
(DSCP) enables the switches to enforce requested service levels.
ideal choice for all types of networks, including Voice over IP, real-time
and non-real-time video, and data-intensive applications. Extensive
classification capabilities combined with network-wide policies and eight
priority queues per port allow the SecureStack C2 to granularly rate limit
traffic flows. Both weighted round robin, which keeps low priority traffic
from being completely starved of bandwidth, and strict priority queuing
are supported. Support for the IP Differentiated Services Code Point
(DSCP) enables the switches to enforce requested service levels.
VLAN Support
All SecureStack C2 switches have extensive VLAN support, with 4,096
VLAN IDs supported and up to 1,024 VLANs active simultaneously in a
single stack. Receive port identification may be used to assign a user to
a specific VLAN. All switches support IEEE 802.1Q VLANs, port-based
VLANs, protocol-based VLANs and tagged-based VLANs with full support
for the GARP and GVRP protocols.
VLAN IDs supported and up to 1,024 VLANs active simultaneously in a
single stack. Receive port identification may be used to assign a user to
a specific VLAN. All switches support IEEE 802.1Q VLANs, port-based
VLANs, protocol-based VLANs and tagged-based VLANs with full support
for the GARP and GVRP protocols.
Full Layer 3 Routing
All members of the SecureStack C2 switch family support static routing
in the base software, along with support for the following protocols:
in the base software, along with support for the following protocols:
• Routing Information Protocol (RIP v1/v2)
• Internet Control Message Protocol (ICMP)
• Address Resolution Protocol (ARP) & ARP Redirect
• Dynamic Host Configuration Protocol (DHCP) Relay
• Bootstrap Protocol (BOOTP) Relay
With the optional Enhanced Routing License (one license per stack of
SecureStack C2s), any SecureStack C2 switch can support the following
additional protocols:
SecureStack C2s), any SecureStack C2 switch can support the following
additional protocols:
• Open Shortest Path First (OSPF)
• Virtual Router Redundancy Protocol (VRRP)
• Distance Vector Multicast Routing Protocol (DVMRP)
• Protocol Independent Multicast—Sparse Mode (PIM-SM) (future)
A total of 512 IPv4 routes can be supported in each switch. Recognizing
that interoperability with IPv6 networks is mandatory for any new
enterprise switch, all SecureStack C2 switches have the ability to
identify, prioritize, classify, and redirect IPv6 traffic to an IPv6 router.
that interoperability with IPv6 networks is mandatory for any new
enterprise switch, all SecureStack C2 switches have the ability to
identify, prioritize, classify, and redirect IPv6 traffic to an IPv6 router.
Extensive Security
Security is vital to all networks today and with SecureStack C2 switches
the network is protected at the first point of entry (user access).
Authentication and security of end user ports can be managed at the
individual port or individual user granularity level. All SecureStack C2
switches support User Access Authentication via IEEE 802.1x, access
control lists, VLANs, RADIUS, MAC and Web-based (PWA) authentication
in the basic firmware. The SecureStack C2 also supports per-port multi-
user authentication with its implementation of PC + Phone (user and IP
phone). With PC + Phone, the C2 can support MAC authentication on an
IP phone along with simultaneous user authentication via 802.1x, MAC
or Web-based (PWA), per port.
the network is protected at the first point of entry (user access).
Authentication and security of end user ports can be managed at the
individual port or individual user granularity level. All SecureStack C2
switches support User Access Authentication via IEEE 802.1x, access
control lists, VLANs, RADIUS, MAC and Web-based (PWA) authentication
in the basic firmware. The SecureStack C2 also supports per-port multi-
user authentication with its implementation of PC + Phone (user and IP
phone). With PC + Phone, the C2 can support MAC authentication on an
IP phone along with simultaneous user authentication via 802.1x, MAC
or Web-based (PWA), per port.
Secure Networks Support
Traditional perimeter security is not sufficient and scalable enough
to defend against today’s sophisticated threats. Secure Networks is
Enterasys’ unique approach to enterprise networking that integrates
advanced security and management features to centralize and automate
granular control of the entire network infrastructure. All SecureStack C2
switches can be full members of a Secure Networks solution. The basic
software has full support for static or port-based policies, and dynamic
policies specific to a user. Per-port authentication is based on IEEE
802.1x, MAC address, or Web-based (PWA). The C2 also supports a
mechanism that allows multiple users to be authenticated over a single
port. These features enable network managers to set Acceptable Use
Policies, Secure Application Provisioning, Secure Guest Access, Dynamic
Intrusion Response, and Trusted End System.
to defend against today’s sophisticated threats. Secure Networks is
Enterasys’ unique approach to enterprise networking that integrates
advanced security and management features to centralize and automate
granular control of the entire network infrastructure. All SecureStack C2
switches can be full members of a Secure Networks solution. The basic
software has full support for static or port-based policies, and dynamic
policies specific to a user. Per-port authentication is based on IEEE
802.1x, MAC address, or Web-based (PWA). The C2 also supports a
mechanism that allows multiple users to be authenticated over a single
port. These features enable network managers to set Acceptable Use
Policies, Secure Application Provisioning, Secure Guest Access, Dynamic
Intrusion Response, and Trusted End System.
Robust Switch and Stack Management
All SecureStack C2 switches are fully manageable using an industry-
standard command line interface, embedded web interface, Telnet
with SSH, and SNMP management applications such as NetSight.
standard command line interface, embedded web interface, Telnet
with SSH, and SNMP management applications such as NetSight.