Cisco Cisco IOS Software Release 12.2(35)SE 集約されたデータ

Product Bulletin

Page 1 of 5

New Cisco IOS Software Release 12.2(35)SE2 for Cisco
Catalyst 3750-E and 3560-E Series Switches

PB380237

Cisco

announces Cisco IOS

Software updates for Cisco Catalyst

3750-E and 3560-E

Series Switches. This new release furthers Cisco leadership in providing secure, reliable,

integrated data and voice LAN switching solutions.

This product bulletin contains content and delivery information for Cisco IOS Software Release

12.2(35)SE2.

This release adds support for newly launched Catalyst 3750-E and 3560-E Series Switches and

offers the following new features (introduced with Cisco IOS Software Release 12.2(35)SE for

Catalyst 3750 and 3560 Series Switches):

●

Multi Domain Authentication (MDA)—MDA provides enhanced security for IP phone

deployments. This allows an IP phone (Cisco or third-party) and a single host behind

the IP phone to independently authenticate using 802.1x. Using this method, a switch can

place the host in the data VLAN and IP phone in the voice VLAN, though they appear on

the same switch port. Data VLAN can be downloaded from the authentication,

authorization, and accounting (AAA) server. For non-802.1x devices, MAC Authentication

Bypass (MAB) can be used as the fallback to authenticate using the MAC address of the

device. For non-802.1x deployments, MAB can be used to authenticate both IP phones and

hosts.

●

Local Web Authentication—Allows non-802.1x users to authenticate using a login page.

The switch intercepts an HTTP packet from the host and sends an HTML login page.

The user keys in the credentials (such as username and password) and gets authenticated

by an AAA server.

●

MAC Authentication Bypass (MAB) for Voice VLAN—This feature allows non-802.1x IP

phones (with no 802.1x supplicant) to authenticate to the network, utilizing the MAC

address of the IP phone. The switch will initiate an Extensible Authentication Protocol (EAP)

conversation with an AAA server on behalf of the IP phone to authenticate the MAC

address itself. This process is transparent to the end user and utilizes a prepopulated

database on the AAA server.

●

MAB aging timer—Provides a mechanism to detect inactive hosts after they have

authenticated using MAB. The switch flushes the entries for hosts that remain inactive

for this duration, thus allowing new hosts to get authenticated on the same port.

●

Fast Stack Image Update—Updates the software images for all the stack members in

parallel, improving the speed and performance of image updates.