Figure 1. Cisco Catalyst 2955 Series Switches
Product Overview
Cisco Catalyst® 2955 Series switches are
industrial-grade switching products that provide wire-speed Fast
Ethernet and Gigabit Ethernet connectivity for deployment in harsh
environments. The Cisco Catalyst 2955 Series operates in environments
such as industrial networking solutions (industrial Ethernet
deployments), intelligent transportation systems (ITS), and
transportation network solutions. It integrates into military equipment,
Supervisory Control and Data Acquisition (SCADA) systems, power
generation systems, waste water treatment facilities, building
automation systems, warehouses, and any other facilities or applications
where the environmental conditions or suspended solid concentrations
exceed the specifications of other commercial switching products. The
Cisco Catalyst 2955 Series uses industrial-grade components, a compact
form factor, convection cooling, and relay output signaling to extend
intelligent services such as enhanced security, high availability, and
advanced quality of service (QoS) to areas that cannot be served by
traditional commercial-grade Ethernet switches.
Embedded in all Cisco Catalyst 2955 Series switches is the Cisco Device
Manager software, which allows users to easily configure and monitor the
switch using a standard Web browser, eliminating the need for more
complex terminal emulation programs and knowledge of the command-line
interface (CLI). Customers can easily initialize the switch with
web-based Cisco Express Setup, without using the CLI. In addition, with
Cisco Network Assistant, a standalone network management software,
customers can simultaneously configure and troubleshoot multiple Cisco
Catalyst desktop switches. Cisco Device Manager, Cisco Express Setup,
and Cisco Network Assistant reduce the cost of deployment by enabling
less-skilled personnel to set up switches quickly. Furthermore, Cisco
Catalyst 2955 Series switches provide extensive management tools using
Simple Network Management Protocol (SNMP) network management platforms
such as CiscoWorks.
This product line offers Cisco IOS®
Software functionality for traditional data, video, and voice services,
with enhanced intelligent services features for additional security,
advanced QoS, and high availability. Intelligent services are
critical in supporting the reliability and determinism of proprietary
Layer 2 solutions typical of industrial Ethernet deployments, while
providing the advantages (standardization, open connectivity, bandwidth,
integration, etc.) of an advanced Ethernet switching architecture.
These intelligent services include Layers 2-4 traffic prioritization,
rate limiting, and security filtering, helping to ensure the high
uptime, low latency, deterministic performance, and data integrity
critical for industrial automation control networks.
Cisco Catalyst 2955 Series switches consist of the following devices:
•  Cisco Catalyst 2955T-12—Twelve 10/100 ports and two fixed 10/100/1000BASE-T uplink ports
• Cisco Catalyst 2955C-12—Twelve 10/100 ports and two fixed 100BASE-FX multimode uplink ports
• Cisco Catalyst 2955S-12—Twelve 10/100 ports and two fixed 100BASE-LX single-mode uplink ports
Intelligence in the New Ethernet Networks
Currently,
non-Ethernet Layer 2 networks are evolving from traditional field buses
or proprietary technologies to standards-based Ethernet networks. The
progression to Ethernet is driven by a multitude of factors, including:
• Standardization-There
are hundreds of millions of Ethernet devices around the world; Ethernet
has become the prevalent Layer 2 technology based on widely adopted
standards.
• IP Connectivity-Ethernet
is the most ubiquitous Layer 2 technology for Internet connectivity, in
turn providing unprecedented communications potential to networks that
have been traditionally isolated.
• Bandwidth-Orders
of magnitude above other existing technologies, Ethernet takes
advantage of the increased computational power of the new network hosts
(I/O devices, motion machinery, sensors, intelligent electronic devices,
etc.) being deployed today. This allows for real-time control and data
gathering for a multitude of applications that were not previously
feasible, including preventive maintenance, total quality control
monitoring, remote monitoring, and asset management and optimization.
• Multiple services on a single infrastructure-Intelligent
Ethernet allows a single network to carry multiple vendor
implementations of control (EtherNet/IP, Modbus TCP, Foundation Fieldbus
High Speed Ethernet [HSE] and various Advanced Traffic Management
Systems [ATMSs]), and to use the same investment to also deliver
traditional voice (telephony), data (e-mail, technical support, and
browsing), and video services (video monitoring).
• Multilayer Integration-All
of the elements described above allow for the integration of
higher-level applications such as enterprise resource planning (ERP),
manufacturing execution systems (MES), and advanced traffic management
systems to the floor control layer (programmable logic controllers
[PLCs], PC-based control systems, traffic control equipment, and
human-machine interfaces [HMIs]). This allows for a true flow of data
and automation from the demand side (customer placing and order) to the
factory floor (assembly line) or from the monitoring devices in a
freeway all the way to the emergency response systems, as well as
real-time control in SCADA applications. As organizations increasingly
rely on Ethernet networks, it is important to help ensure high
availability, security, scalability, and control. By adding Cisco IOS
Software functionality to new network applications, users can now deploy
network-wide intelligent services that address these requirements in a
consistent way-from the I/O or monitoring device to the core and through
the WAN.
Table 1. Product Features and Benefits
Feature
|
Benefit
|
Availability
|
Superior redundancy for fault backup
|
•
IEEE 802.1D Spanning-Tree Protocol support for redundant backbone
connections and loop-free networks simplifies network configuration and
improves fault tolerance.
•
Support for Cisco Spanning-Tree Protocol enhancements such as
UplinkFast, BackboneFast, and PortFast technologies helps ensure quick
failover recovery, enhancing overall network stability and availability.
•
IEEE 802.1w Rapid Spanning-Tree Protocol (RSTP) provides rapid
convergence of the spanning tree, independent of spanning tree timers.
•
Per VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning-tree
reconvergence on a per-VLAN spanning-tree basis, without requiring the
implementation of spanning-tree instances.
•
Provides unidirectional link detection (UDLD) and Aggressive UDLD for
detecting and disabling unidirectional links on fiber-optic interfaces
caused by incorrect fiber-optic wiring or port faults.
|
Integrated Cisco IOS Software features for bandwidth optimization
|
• Bandwidth aggregation of up to 4 Gbps (two ports full duplex) through Cisco Gigabit EtherChannel®
technology and up to 1.6 Gbps (eight ports full duplex) through Fast
EtherChannel technology enhances fault tolerance and offers higher-speed
aggregated bandwidth between switches, to routers and individual
servers. Port Aggregation Protocol (PAgP) is available to simplify
configuration.
• VLAN1 minimization allows VLAN1 to be disabled on any individual VLAN trunk link.
•
Per-port broadcast, multicast, and unicast storm control prevents
faulty end stations from degrading overall system performance.
•
Per virtual LAN (VLAN) Spanning Tree Plus (PVST+) allows for Layer 2
load sharing on redundant links, to efficiently use the extra capacity
inherent in a redundant design.
•
IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) allows a
spanning-tree instance per VLAN, enabling Layer 2 load sharing on
redundant links.
•
VLAN Trunking Protocol (VTP) pruning limits bandwidth consumption on
VTP trunks by flooding broadcast traffic only on trunk links required to
reach the destination devices. Dynamic Trunking Protocol (DTP) enables
dynamic trunk configuration across all ports on the switch.
•
Internet Group Management Protocol Version 3 (IGMPv3) snooping provides
for fast client joins and leaves of multicast streams and limits
bandwidth-intensive video traffic to only the requestors. Multicast VLAN
Registration MVR, IGMP filtering, and fast-join and immediate leave are
available as enhancements. The number of IGMP groups can be limited
with IGMP throttling. IGMP Snooping time can be adjusted to optimize the
performance of multicast data flows.
•
MVR continuously sends multicast streams in a multicast VLAN while
isolating the streams from subscriber VLANs for bandwidth and security
reasons.
• Supports additional frame formats: Ethernet II (tagged and untagged), 802.3 (SNAP encapsulated, tagged and untagged frames).
|
Security
|
Network Security Features
|
• Filtering of incoming traffic flows based on Layer 2, Layer 3, or Layer 4 ACPs prevents unauthorized data flows.
•
The following Layer 2 ACPs or a combination can be used for security
classification of incoming packets: source MAC address, destination MAC
address, and 16-bit Ethertype.
•
The following Layer 3 and Layer 4 fields or a combination can be used
for security classification of incoming packets: source IP address,
destination IP address, TCP source or destination port number, UDP
source, or destination port number. ACLs can also be used to filter
based on DSCP values.
• Time-based ACLs allow configuration of differentiated services based on time periods.
•
Private VLAN edge provides security and isolation between ports on a
switch, helping ensure that voice traffic travels directly from its
entry point to the aggregation device through a virtual path and cannot
be directed to a different port.
•
Support for the 802.1x standard allows users to be authenticated,
regardless of which LAN port they are accessing, and provides unique
benefits to customers who have a large base of mobile (wireless) users
accessing the network.
•
IEEE 802.1x with VLAN assignment allows a dynamic VLAN assignment for a
specific user, regardless of where the user is connected.
•
IEEE 802.1x with voice VLAN gives an IP phone access to the voice VLAN,
regardless of the authorized or unauthorized state of the port.
•
IEEE 802.1x with port security authenticates the port and manages
network access for all MAC addresses, including the clients'.
• IEEE 802.1x with guest VLAN allows guests without 802.1x clients to have limited network access on the guest VLAN.
•
SSHv2 and SNMPv3 provide network security by encrypting administrator
traffic during Telnet and SNMP sessions. SSHv2 and the crypto version of
SNMPv3 require a special crypto software image because of U.S. export
restrictions.
•
Port Security and unicast MAC filtering secure the access to a port
based on MAC addresses. The aging feature of port security removes the
MAC address from the switch after a specific time frame to allow another
device to connect to the same port. Unicast MAC filtering allows non-IP
packets to be filtered as well.
•
With unknown unicast/multicast port blocking, the switch will not flood
packets with unknown destination MAC addresses to all Ethernet ports.
Unknown unicast/multicast port blocking disables flooding on a per-port
basis.
• MAC address notification allows administrators to be notified of new users added or removed from the network.
•
Spanning-tree root guard (STRG) prevents edge devices not in the
network administrator's control from becoming Spanning-Tree Protocol
root nodes.
•
The Spanning-Tree Protocol PortFast/bridge protocol data unit (BPDU)
guard feature disables access ports with Spanning-Tree Protocol PortFast
enabled upon reception of a BPDU, and increases network reliability,
manageability, and security.
• Multilevel console access security prevents unauthorized users from altering the switch configuration.
•
TACACS+ and RADIUS authentication enables centralized control of the
switch and restricts unauthorized users from altering the configuration.
• The user-selectable address-learning mode simplifies configuration and enhances security.
•
Trusted Boundary provides the ability to trust the QoS priority
settings if a Cisco IP phone is present and to disable the trust setting
if the IP phone is removed, preventing a rogue user from overriding
prioritization policies in the network.
•
IGMP Filtering provides multicast authentication by filtering out
nonsubscribers and limits the number of concurrent multicast streams
available per port.
•
Support for dynamic VLAN assignment through implementation of VLAN
Membership Policy Server (VMPS) client functionality provides
flexibility in assigning ports to VLANs. Dynamic VLAN enables fast
assignment of IP addresses.
• SPAN support of intrusion detection systems (IDSs) to monitor, repel, and report network security violations.
•
Cisco Network Assistant software security wizards ease the deployment
of security features for restricting user access to a server, a portion
of the network, or the network.
|
QoS
|
Overview
|
•
The switches support the aggregate QoS model by enabling
classification, policing/metering, and marking functions on a per-port
basis at ingress and queuing/scheduling functions at egress.
•
The switches support configuring QoS ACPs on all ports, using ACPs to
help ensure proper policing and marking on a per-packet basis. Up to
four ACPs per switch are supported in configuring either QoS ACPs or
security filters.
•
Automatic QoS (Auto-QoS) greatly simplifies the configuration of QoS in
voice-over-IP (VoIP) networks by issuing interface and global switch
commands that allow the detection of Cisco IP phones, the classification
of traffic, and egress queue configuration.
|
QoS Classification Support at Ingress
|
• The switches support QoS classification of incoming packets for QoS flows based on Layer 2, Layer 3, and Layer 4 fields.
•
The following Layer 2 fields (or a combination) can be used for
classifying incoming packets to define QoS flows: source/destination MAC
address or 16-bit Ethertype.
• The switches support identification of traffic based on Layer 3 type of service (ToS) field DSCP values.
•
The following Layer 3 and Layer 4 fields (or a combination) can be used
to classify incoming packets to define QoS flows: source/destination IP
address, TCP source/destination port number, or UDP source/destination
port number.
|
QoS metering/policing at ingress
|
• Support for metering/policing of incoming packets restricts incoming traffic flows to a certain rate.
• The switches support up to six policers per Fast Ethernet port, and 60 policers on a Gigabit Ethernet port.
• The switches offer granularity of traffic flows at 1 Mbps on Fast Ethernet ports, and 8 Mbps on Gigabit Ethernet ports.
|
QoS marking at ingress
|
• The switches support marking and remarking packets based on the state of policers/meters.
• The switches support marking and remarking based on the following mappings: from DSCP to 802.1p, and from 802.1p to DSCP.
• The switches support 14 well-known and widely used DSCP values.
•
The switches support classifying or reclassifying packets based on the
default DSCP per port, and support classification based on DSCP values
in the ACL.
• The switches support classifying or reclassifying frames based on the default 802.1p value per port.
• The switches support 802.1p override at ingress.
|
QoS scheduling support at egress
|
• Four queues per egress port are supported in hardware.
• The WRR queuing algorithm helps ensure that low-priority queues are not starved.
•
Strict Priority Scheduling helps ensure that time-sensitive
applications such as voice always follow an expedited path through the
switch fabric.
|
Sophisticated traffic management
|
•
The switch offers the ability to limit data flows based on MAC source
or destination address, IP source or destination address, TCP/UDP port
numbers, or any combination of these fields.
•
The switch offers the ability to manage data flows asynchronously
upstream and downstream from the end station or on the uplink.
|
Management
|
Superior manageability
|
•
An embedded Remote Monitoring (RMON) software agent supports four RMON
groups (history, statistics, alarms, and events) for enhanced traffic
management, monitoring, and analysis.
• The switch supports all nine RMON groups through the use of a Cisco SwitchProbe®
Analyzer Switched Port Analyzer (SPAN) port, permitting traffic
monitoring of a single port, a group of ports, or the entire switch from
a single network analyzer or RMON probe.
• A SPAN port monitors traffic of a single port from a single network analyzer or RMON probe.
•
Remote SPAN (RSPAN) allows network administrators to locally monitor
ports in a Layer 2 switch network from any other switch in the same
network.
• DHCP Snooping Option 82 enables more sophisticated IP address assignment by the DHCP server.
• The Domain Name System (DNS) provides IP address resolution with user-defined device names.
•
Trivial File Transfer Protocol (TFTP) reduces the cost of administering
software upgrades by downloading from a centralized location.
• Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all switches within the intranet.
•
Layer 2 traceroute eases troubleshooting by identifying the physical
path that a packet takes from the source device to a destination device.
• Crash Information Support enables the switch to generate a crash file for improved troubleshooting.
• Show Interface Capabilities provides information on the configuration capabilities of any interface.
• RTTMON-MIB allows users to monitor network performance between a Cisco Catalyst switch and a remote device.
|
Cisco Network Assistant software
|
•
Cisco Network Assistant software is free, standalone network management
application software that simplifies the administration of networks of
up to 250 users. It supports a wide range of Cisco Catalyst intelligent
switches from Cisco Catalyst 2940 through Cisco Catalyst 4506. With
Cisco Network Assistant, users can manage Cisco Catalyst switches plus
launch the device managers of Cisco integrated services routers (ISRs)
and Cisco Aironet® WLAN access points by simply clicking their icon in the topology map.
•
Cisco AVVID wizards use just a few user inputs to automatically
configure the switch to optimally handle different types of traffic:
voice, video, multicast, and/or high-priority data.
•
A security wizard is provided to restrict unauthorized access to
servers and networks and to restrict certain applications on the
network.
•
One-click software upgrades can be performed across multiple switches
simultaneously, and configuration cloning enables rapid deployment of
networks.
• Cisco Network Assistant software supports multilayer feature configurations such as ACPs and QoS parameters.
•
Cisco Network Assistant Software Guide Mode assists users in the
configuration of powerful advanced features by providing step-by-step
instructions.
• Cisco Network Assistant software provides enhanced online help for context-sensitive assistance.
• Easy-to-use GUI provides both a topology map and front-panel view of the switches.
•
Multidevice and multiport configuration capabilities allow network
administrators to save time by configuring features across multiple
switches and ports simultaneously.
•
User-personalized interface allows users to modify polling intervals,
table views, and other settings within Cisco Network Assistant software
and to retain these settings the next time they use Cisco Network
Assistant.
• Alarm notification provides automated e-mail notification of network errors and alarm thresholds.
|
Support for CiscoWorks
|
•
Manageable through CiscoWorks network management software on a per-port
and per-switch basis, providing a common management interface for Cisco
routers, switches, and hubs.
•
SNMPv1, v2, and v3 (non-crypto) and Telnet interface support deliver
comprehensive in-band management, and a CLI-based management console
provides detailed out-of-band management.
•
Cisco Discovery Protocol versions 1 and 2 enable a CiscoWorks network
management station to automatically discover the switch in a network
topology.
• CiscoWorks is supported by the CiscoWorks 2000 LAN Management Solution.
|
Specifications
PORTS : 12 x 10/100 ports
2 x 10/100/1000BASE-T ports
MEAN TIME BETWEEN FAILURE (MTBF): 205,115 hours
DIMENSIONS: 50x125x103 mm
* 6.4 Gbps maximum forwarding bandwidth
* 4.8 Mpps wire speed forwarding rate
* 8 MB memory architecture shared by all ports
* Up to 32 MB SDRAM and 16 MB Flash memory
* Configurable up to 8000 MAC addresses
* IEEE 802.1D Spanning-Tree Protocol support for redundant backbone
connections and loop-free networks simplifies network configuration
& improves fault tolerance
* Filtering of incoming traffic flows based on Layer 2, Layer 3, or
Layer 4 ACPs prevents unauthorized data flows
* Support for metering/policing of incoming packets restricts incoming
traffic flows to a certain rate
* An embedded Remote Monitoring (RMON) software agent supports four
RMON groups (history, statistics, alarms, and events) for enhanced
traffic management, monitoring, and analysis
|
No comments:
Post a Comment