Cisco brand High-speed 24 Ports gigabit ethernet core network Switch WS-C3850-24S-E

3850 series 24 Port gigabit ethernet IP Services Switch WS-C3850-24S-E

The Cisco Catalyst 3850 Series Switches support five optional network modules for uplink ports. The

default switch configuration does not include the network module. At the time of switch purchase the customer

has the flexibility to choose from the network modules described in Table 2.

Figure 5 shows the following network modules:

● 4 x Gigabit Ethernet with Small Form-Factor Pluggable (SFP) receptacles

● 2 x 10 Gigabit Ethernet with SFP+ or 4 x Gigabit Ethernet with SFP receptacles

● 4 x 10 Gigabit Ethernet with SFP+ receptacles (supported only on the 48-port Gigabit Ethernet models or

on the 12-port or higher 10 Gigabit Ethernet models)

Advanced Security Features

Cisco Catalyst 3850 Series Switches support advanced security features including but not limited to:

● Protection against attackers:

◦ Port security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC

addresses to deny MAC address flooding.

◦ DHCP snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature

is used by other primary security features to prevent a number of other attacks such as ARP poisoning.

◦ Dynamic ARP inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure

nature of ARP.

◦ IP source guard prevents a malicious user from spoofing (that is, taking over) another user’s IP address by creating a

binding table between the client’s IP and MAC address, port, and VLAN, and by using it to selectively block bogus packets.

◦ The Unicast Reverse Path Forwarding (uRPF) feature helps mitigate problems caused by the introduction of malformed or

forged (spoofed) IP source addresses into a network by discarding IP packets that lack a verifiable IP source address.

◦ Bidirectional data support on a SPAN port allows the Cisco Intrusion Detection System (IDS) to take action when an intruder

is detected.