HAOMA TECHNOLOGY CO., LTD

Key Features

• Twelve (12) 10/100 Fast Ethernet RJ45 ports with Auto-MDIX negotiation
• One (1) Dual-Purpose Gigabit & SFP port for high speed uplinks and for network expansion.
• 1202.3af and Cisco prestandard PoE support comes with automatic discovery to detect a Cisco prestandard or 1202.3af endpoint and provide the necessary power up to 15W per port (124W total) without any user configuration.
• Wide range of security features to protect important information, keep unauthorised people off the network, guard privacy, and maintain uninterrupted operation.
• Automatic QoS (Auto QoS) simplifies QoS configuration in voice-over-IP (VoIP) networks by issuing interface and global switch commands to detect Cisco IP phones, classify traffic, and enable egress queue configuration.
• Cisco EnergyWise for greenhouse gas emissions and operational cost optimization by measuring, reporting, and reducing energy consumption across the entire corporate infrastructure, well beyond the scope of IT.
• Includes Cisco LAN Base iOS, Upgrading the Cisco IOS Software on Cisco Catalyst switches is a simple matter of pointing and clicking, with one-click upgrades.
• The IP Base license offers advanced QoS, rate limiting, ACLs, and basic static and Routing Information Protocol (RIP) routing functions
• Limited lifetime hardware warranty, including next-business-day replacement with 90-day service and support

Power over Ethernet PoE
In addition to standard 12 ports of PoE at 7.2W, the Cisco Catalyst WS-C3560-12PC-S Switch supports full PoE, which provides up to 15W of power on all 12 of the switches ports. This Cisco Catalyst WS-C3560-12PC-S Switch can provide a lower total cost of ownership for deployments that incorporate Cisco IP phones, Cisco Aironet wireless LAN (WLAN) access points, or any IEEE 1202.3af-compliant end device. PoE removes the need for wall power to each PoE-enabled device and eliminates the cost for additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments. The total budget for the switch is 124W.

Management
The new Cisco Express Setup feature simplifies the initial configuration of a switch. Users now have the option to set up the switch through a Web browser, eliminating the need for more complex terminal-emulation programs and knowledge of the command-line interface (CLI). Cisco Express Setup reduces the cost of deployment by helping less-skilled personnel quickly and simply set up switches.

Cisco Network Assistant is a PC-based network-management application optimised for LANs of small and medium-sised businesses with up to 250 users. Cisco Network Assistant offers centralised management of Cisco switches, routers, and WLAN access points. It supports a wide range of Cisco Catalyst intelligent switches from Cisco Catalyst 2950 through Cisco Catalyst 4506. Through a user-friendly GUI, users can configure and manage a wide array of switch functions and start the device manager of Cisco routers and Cisco wireless access points. A few mouse clicks enable the Cisco recommended security, availability, and QoS features without the need to consult a detailed design guide. The Security wisard automatically restricts unauthorised access to servers with sensitive data. Smartports and wisards save hours of time for network administrators, eliminate human errors, and help ensure that the configuration of the switch is optimised for these applications. Available at no cost, Cisco Network Assistant can be downloaded from Cisco.com.

In addition to the Cisco Network Assistant, this Cisco WS-C3560-12PC-S Catalyst switch provide for extensive management using SNMP network-management platforms such as CiscoWorks LAN Management Solution (LMS). LMS is a suite of powerful management tools that simplify the configuration, administration, monitoring, and troubleshooting of Cisco networks. It integrates these capabilities into a world-class solution for improving the accuracy and efficiency of your operations staff, while increasing the overall availability of your network. LMS supports over 400 different device types providing:

• Network discovery, topology views, end-station tracking, and VLAN management
• Real-time network fault analysis with easy-to-deploy device specific best-practice templates
• Hardware and software inventory management, centralised configuration tools, and syslog monitoring
• Network response time and availability monitoring and tracking
• Real-time device, link, and port traffic management, analysis, and reporting

Intelligence in the Network
Networks of today are evolving to address four new developments at the network edge:

• Increase in desktop computing power
• Introduction of bandwidth-intensive applications
• Expansion of highly sensitive data on the network
• Presence of multiple device types, such as IP phones, WLAN access points, and IP video cameras

These new demands are contending for resources with many existing mission-critical applications. As a result, IT professionals must view the edge of the network as critical to effectively manage the delivery of information and applications.
As companies increasingly rely on networks as the strategic business infrastructure, it is more important than ever to help ensure their high availability, security, scalability, and control. By adding Cisco intelligent functions for LAN access, customers can now deploy networkwide intelligent services that consistently address these requirements from the desktop to the core and through the WAN.

With Cisco Catalyst Intelligent Ethernet switches, Cisco Systems helps enable companies to realise the full benefits of adding intelligent services into their networks. Deployment of capabilities that make the network infrastructure highly available to accommodate time-critical needs, scalable to accommodate growth, secure enough to protect confidential information, and capable of differentiating and controlling traffic flows is critical to further optimising network operations.

Cisco EnergyWise Technology
Cisco EnergyWise is an innovative architecture, added to the Cisco Catalyst switches, promoting companywide sustainability by reducing energy consumption across an entire corporate infrastructure and affecting more than 50 percent of global greenhouse gas emissions created by worldwide building infrastructure, a much greater effect than the 2 percent generated by the IT industry. Cisco EnergyWise enables companies to measure the power consumption of network infrastructure and network-attached devices and manage power consumption with specific policies, reducing power consumption to realise increased cost savings, potentially affecting any powered device.

EnergyWise encompasses a highly intelligent network based approach to communicate messages that measure and control energy between network devices and endpoints. The network discovers Cisco EnergyWise manageable devices, monitors their power consumption, and takes action based on business rules to reduce power consumption. EnergyWise uses a unique domain-naming system to query and summarise information from large sets of devices, making it simpler than traditional network management capabilities. Cisco EnergyWise's management interfaces allow facilities and network management applications to communicate with endpoints and each other using the network as a unifying fabric. The management interface uses standard SNMP or SSL to integrate Cisco and third-party management systems.

Cisco EnergyWise extends the network as a platform for power control plane for gathering, managing, and reducing power consumption of all devices, resulting in companywide optimised power delivery and reduced energy costs.

Enhanced Security
With the wide range of security features that the Cisco Catalyst 3560 Series offers, businesses can protect important information, keep unauthorised people off the network, guard privacy, and maintain uninterrupted operation.

Cisco Identity Based Networking Services (IBNS) provides authentication, access control, and security policy administration to secure network connectivity and resources. Cisco IBNS in the Cisco Catalyst 3560 Series prevents unauthorised access and helps ensure that users get only their designated privileges. It provides the ability to dynamically administer granular levels of network access. Using the 1202.1x standard and the Cisco Access Control Server (ACS), users can be assigned a VLAN or an ACL upon authentication, regardless of where they connect to the network. This setup allows IT departments to enable strong security policies without compromising user mobility-and with minimal administrative overhead.
To guard against denial-of-service and other attacks, ACLs can be used to restrict access to sensitive portions of the network by denying packets based on source and destination MAC addresses, IP addresses, or TCP/UDP ports. ACL lookups are done in hardware, so forwarding performance is not compromised when implementing ACL-based security.

Port security can be used to limit access on an Ethernet port based on the MAC address of the device to which it is connected. It also can be used to limit the total number of devices plugged into a switch port, thereby protecting the switch from a MAC flooding attack as well as reducing the risks of rogue wireless access points or hubs.

With Dynamic Host Configuration Protocol (DHCP) snooping, DHCP spoofing can be thwarted by allowing only DHCP requests (but not responses) from untrusted user-facing ports. Additionally, the DHCP Interface Tracker (Option 122) helps enable granular control over IP address assignment by augmenting a host IP address request with the switch port ID. Building further on the DHCP snooping capabilities, IP address spoofing can be thwarted using Dynamic ARP Inspection and IP Source Guard.

The MAC Address Notification feature can be used to monitor the network and track users by sending an alert to a management station so that network administrators know when and where users entered the network. The Private VLAN feature isolates ports on a switch, helping ensure that traffic travels directly from the entry point to the aggregation device through a virtual path and cannot be directed to another port.

Secure Shell (SSH) Protocol Version 2, Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) encrypt administrative and network-management information, protecting the network from tampering or eavesdropping. TACACS+ or RADIUS authentication enables centralised access control of switches and restricts unauthorised users from altering the configurations. Alternatively, a local username and password database can be configured on the switch itself. Fifteen levels of authorisation on the switch console and two levels on the Web-based management interface provide the ability to give different levels of configuration capabilities to different administrators.

Advanced QoS
This Cisco WS-C3560-12PC-S Catalyst switch offers superior multilayer, granular QoS features to help ensure that network traffic is classified and prioritised, and that congestion is avoided in the best possible manner. Configuration of QoS is greatly simplified through automatic QoS (Auto QoS), a feature that detects Cisco IP phones and automatically configures the switch for the appropriate classification and egress queuing. This optimises traffic prioritisation and network availability without the challenge of a complex configuration.

The Cisco WS-C3560-12PC-S Catalyst switch can classify, reclassify, police, mark, queue, and schedule incoming packets, and can queue and schedule packets at egress. Packet classification allows the network elements to discriminate between various traffic flows and enforce policies based on Layer 2 and Layer 3 QoS fields.

To implement QoS, a Cisco Catalyst Switch first identifies traffic flows or packet groups, and classifies or reclassifies these groups using the Differentiated Services Code Point (DSCP) field or the 1202.1p Class of Service (CoS) field. Classification and reclassification can be based on criteria as specific as the source or destination IP address, source or destination MAC address, or the Layer 4 TCP or UDP port. At the ingress, the Cisco Catalyst 3560 also polices to determine whether a packet is in or out of profile, marks to change the classification label, passes through or drops out of profile packets, and queues packets based on classification. Control- and data-plane ACLs are supported on all ports to help ensure proper treatment on a per-packet basis.

The Cisco WS-C3560-12PC-S Catalyst switch supports four egress queues per port, allowing the network administrator to be more discriminating and specific in assigning priorities for the various applications on the LAN. At egress, the switch performs scheduling and congestion control. Scheduling is an algorithm or process that determines the order in which the queues are processed. The Cisco Catalyst 3560 Series Switch supports shaped round robin (SRR) and strict priority queuing. The SRR algorithm helps ensure differential prioritisation.

These QoS features allow network administrators to prioritise mission-critical and bandwidth-intensive traffic, such as enterprise resource planning (ERP) (Oracle, etc.), voice (IP telephony traffic), and computer-aided design (CAD) or computer-aided manufacturing (CAM) over less-time-sensitive applications such as FTP or e-mail. For example, it would be highly undesirable to have a large file download destined to one port on a wiring-closet switch and have quality implications such as increased latency in voice traffic destined to another port on this switch. This condition is avoided by making sure that voice traffic is properly classified and prioritised throughout the network. Other applications, such as Web browsing, can be treated as low priority and handled on a best-effort basis.

This Cisco WS-C3560-12PC-S Catalyst switch can perform rate limiting through its support of the Cisco Committed Information Rate (CIR) function. Through CIR, bandwidth can be guaranteed in increments as low as 12 kbps. Bandwidth can be allocated based on several criteria, including MAC source address, MAC destination address, IP source address, IP destination address, and TCP or UDP port number. Bandwidth allocation is essential when network environments require service-level agreements or when it is necessary for the network manager to control the bandwidth given to certain users.