Cisco SF300-24PP-K9-EU 24-Port 10/100 PoE Managed Switch With Gigabit Uplinks

Voice VLAN: Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS

Q-in-Q VLAN: VLANs transparently cross a service provider network while isolating traffic among customers

Generic VLAN Registration Protocol/Generic Attribute Registration Protocol: Protocols for automatically propagating and configuring VLANs in a bridged domain

Dynamic Host Configuration Protocol Relay at Layer 2: Relay of DHCP traffic to DHCP server in different VLAN. Works with DHCP Option 82

Internet Group Management Protocol Versions 1, 2 and 3 Snooping: IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 256 multicast groups (source-specific multicasting is also supported)

IGMP Querier: IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router

Head-of-Line (HOL) Blocking: HOL blocking prevention

User Datagram Protocol Relay: Relay of broadcast information across Layer 3 domains for application discovery or relaying of BootP/DHCP packets

IEEE 802.1X (Authenticator Role): RADIUS authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X
Dynamic VLAN assignment

STP Bridge Protocol Data Unit Guard: A security mechanism to protect the network from invalid configurations.
A port enabled for BPDU Guard is shut down if a BPDU message is received on that port

STP Root Guard: This prevents edge devices not in the network administratorâ™s control from becoming Spanning Tree

DHCP Snooping: Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as a DHCP Server

IP Source Guard (IPSG): When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learnedfrom DHCP snooping. This prevents IP Address Spoofing

Dynamic ARP Inspection (DAI): The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination address in the ARP packet. This prevents man-in-the-middle attacks

IP/Mac/Port Binding (IPMB): The features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) above work together to prevent DOS attacks in the network, thereby increasing network availability

Secure Core Technology: Ensures that the switch will receive and process management and protocol traffic no matter how much traffic is received

Secure Sensitive Data (SSD): A mechanism to manage sensitive data (such as passwords, keys, etc.) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data asplaintext or encrypted is provided according to the user configured access level and the accessmethod of the user

Layer 2 Isolation Private VLAN Edge (PVE) with community VLAN: PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks

Port Security: Locks MAC addresses to ports, and limits the number of learned MAC addresses

RADIUS/TACACS+: Supports RADIUS and TACACS authentication. Switch functions as a client

Storm Control: Broadcast, multicast, and unknown unicast

DoS Prevention: DoS attack prevention

Congestion Avoidance: A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization

ACLs: Support for up to 512 rules
Drop or rate limit based on source and destination MAC, VLAN ID or IP address, protocol, port, differentiated services code point/IP precedence, TCP/ UDP source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol packets, IGMP packets, TCP flag

Class of Service: Port based; 802.1p VLAN priority based; IPv4/v6 IP precedence/type of service/DSCP based; Differentiated Services (DiffServ); classification and re-marking ACLs, trusted QoS

Multicast Listener Discovery Snooping: Deliver IPv6 multicast packets only to the required receivers

Remote Monitoring: Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms and events) for enhanced traffic management, monitoring and analysis

IPv4 and IPv6 Dual Stack: Coexistence of both protocol stacks to ease migration

Firmware Upgrade: Web browser upgrade (HTTP/HTTPS) and TFTP
Upgrade can be initiated through console port as well
Dual images for resilient firmware upgrades

Port Mirroring: Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. A single session is supported

VLAN Mirroring: Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. A single session is supported

Dynamic Host Configuration Protocol (Options 66, 67, 82, 129 and 150): DHCP Options facilitate tighter control from a central point (DHCP server) to obtain IP address, auto-configuration (with configuration file download), DHCP relay, and hostname

Secure Copy (SCP): Securely transfer files to and from the switch

Auto-configuration with Secure Copy (SCP) File Download:Enables secure mass deployment with protection of sensitive data

Text-Editable Config Files: Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment

Smartports: Simplified configuration of QoS and security capabilities

Auto Smartports: Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over CDP or LLDP-MED. This facilitates zero touch deployments Textview CLI: Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported

Cloud Services: Support for Cisco Small Business FindIT Network Discovery Utility

Localization: Localization of GUI and documentation into multiple languages

Other Management: Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support)

Time-Based Port Operation: Link up or down based on user-defined schedule (when the port is administratively up)

Login Banner: Configurable multiple banners for web as well as CLI

Cisco Discovery Protocol (CDP): CDP is a proprietary data link layer and network layer protocol which is used to share information about other directly connected Cisco equipment, such as the operating system version and IP address