Cisco 2960 Volantino

Product Bulletin

Page 1 of 5

New Cisco IOS Software Release 12.2(35)SE for Cisco
Catalyst 3750, 3560, 3550, 2960, 2970 Series Switches;
and CBS30x0 Series Blade Switches

PB380237

Cisco

announces Cisco IOS

Software updates for Cisco Catalyst

3750, 3560, 3550,

2960, 2970 Series Switches and CBS30x0 Series Blade Switches. This new release

furthers Cisco leadership in providing secure, reliable, integrated data and voice LAN

switching solutions.

This product bulletin contains content and delivery information for Cisco IOS Software

Release 12.2(35)SE.

The following new features are available with Cisco IOS Software Release 12.2(35)SE for

enterprise Ethernet switches:

●

Multi Domain Authentication (MDA)—MDA provides enhanced security for IP phone

deployments. This allows an IP phone (Cisco or third-party) and a single host behind the IP

phone to independently authenticate using 802.1x. Using this method, a switch can place

the host in the data VLAN and IP phone in the voice VLAN, though they appear on the

same switch port. Data VLAN can be downloaded from the authentication, authorization,

and accounting (AAA) server. For non-802.1x devices, MAC Authentication Bypass (MAB)

can be used as the fallback to authenticate using the MAC address of the device. For

non-802.1x deployments, MAB can be used to authenticate both IP phones and hosts.

●

Local Web Authentication—Allows non-802.1x users to authenticate using a login page.

The switch intercepts an HTTP packet from the host and sends an HTML login page. The

user keys in the credentials (such as username and password) and gets authenticated by

an AAA server.

●

MAC Authentication Bypass (MAB) for Voice VLAN—This feature allows non-802.1x IP

phones (with no 802.1x supplicant) to authenticate to the network, utilizing the MAC

address of the IP phone. The switch will initiate an Extensible Authentication Protocol (EAP)

conversation with an AAA server on behalf of the IP phone to authenticate the MAC

address itself. This process is transparent to the end user and utilizes a prepopulated

database on the AAA server.

●

MAB aging timer—Provides a mechanism to detect inactive hosts after they have

authenticated using MAB. The switch flushes the entries for hosts that remain inactive

for this duration, thus allowing new hosts to get authenticated on the same port.

●

Fast Stack Image Update—Updates the software images for all the stack members

in parallel, improving the speed and performance of image updates.