Cisco Network Switch C3650 48 Port IP Services Switch WS-C3650-48TS-E

WS-C3650-48TS-E integrates forty-eight Gigabit Ethernet ports and four fixed 1G SFP uplink ports in IP service feature set that enables advanced layer 3 routing performance with superior QoS capabilities.

The Cisco Catalyst 3650 Series Switches offer both a superior CLI for detailed configuration and Cisco Prime™ infrastructure for unified wired plus wireless management. Cisco Prime infrastructure provides day 0 and ongoing provisioning, ongoing monitoring and maintenance, configuration templates, and device and user 360-degree views and serves as the FNF collector for user traffic views using the Cisco Prime Assurance Manager module.

Cisco Catalyst 3650 Series Switches support advanced security features including but not limited to:

• Protection against attackers:
  • Port security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address flooding.
  • DHCP snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses.
  • Dynamic ARP inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of ARP.
  • IP source guard prevents a malicious user from spoofing or taking over another user's IP address.
  • The Unicast Reverse Path Forwarding (RPF) feature helps mitigate problems caused by the introduction of malformed or forged IP source addresses.
  • Bidirectional data support on the SPAN port allows the Cisco intrusion detection system (IDS) to take action when an intruder is detected.
• User authentication:
  • Flexible authentication that supports multiple authentication mechanisms.
  • RADIUS change of authorization and downloadable calls for comprehensive policy management capabilities.
  • Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2.
  • Multidomain authentication allows an IP phone and a PC to authenticate on the same switch port.
  • MAC address notification allows administrators to be notified of users added to or removed from the network.
  • Mobility and security for secure, reliable wireless connectivity and consistent end-user experience.
  • IGMP filtering provides multicast authentication by filtering out nonsubscribers.
• ACLs:
  • Cisco security VLAN ACLs on all VLANs prevent unauthorized data flows from being bridged within VLANs.
  • Cisco standard and extended IP security router ACLs define security policies on routed interfaces.
  • Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.
• Device access:
  • Secure Shell (SSH) Protocol, Kerberos, and SNMPv3 provide network security by encrypting administrator traffic.
  • TACACS+ and RADIUS authentication facilitates centralized control of the switch.
  • Multilevel security on console access prevents unauthorized users from altering the switch configuration.
• Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received.
• Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator's control from becoming Spanning Tree Protocol root nodes.
• Wireless end-to-end security offers CAPWAP-compliant DTLS encryption to make sure of encryption between access points and controllers across remote WAN/LAN links.