User Manual
Page 7
Data sheet
• Port security
Allows access only to specified MAC addresses, which can be learned or specified by
the administrator
• Port isolation
Secures and adds privacy, and prevents malicious attackers from obtaining user information
• STP BPDU port protection
Blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing
forged BPDU attacks
• STP root guard
Protects the root bridge from malicious attacks or configuration mistakes
• DHCP protection
Blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
• RADIUS/HWTACACS
Eases switch management security administration by using a password authentication server
• Endpoint Admission Defense (EAD)
Provides security policies to users accessing a network
• IPv6 source guard
Helps prevent IPv6 spoofing attacks using ND Snooping as well as DHCPv6 Snooping
Convergence
• IEEE 8021AB Link Layer Discovery Protocol (LLDP)
Facilitates easy mapping using network management applications with LLDP automated
device discovery protocol
• LLDP-MED (Media Endpoint Discovery)
Defines a standard extension of LLDP that stores values for parameters such as QoS and
VLAN to automatically configure network devices such as IP phones
• LLDP-CDP compatibility
Receives and recognizes CDP packets from Cisco’s IP phones for seamless interoperation
• IEEE 8023at Power over Ethernet (PoE+)
Provides up to 30 W per port that allows support of the latest PoE+-capable devices such as
IP phones, wireless access points, and security cameras, as well as any IEEE 8023af-compliant
end device; eliminates the cost of additional electrical cabling and circuits that would otherwise
be necessary in IP phone and WLAN deployments