License
| Software type |
Box |
| License quantity |
1 user(s) |
Cisco IOS Software for the Cisco Catalyst 4900 Series (IP Base image with Triple Data Encryption Standard [3DES])
<b>NEW SOFTWARE FEATURES</b>
<b>NAC L2 IP</b>
NAC L2 IP is an integral part of Cisco Network Admission Control. It offers the first line of defense for infected hosts (PCs and other devices attached to a LAN port) attempting to connect to the corporate network. NAC L2 IP on the Cisco Catalyst 4500 Series performs posture validation at the Layer 2 edge of the network for non-802.1x-enabled host devices. Host device posture validation includes anti-virus state and OS patch levels. Depending on the corporate access policy and host device posture, a host may be unconditionally admitted, admitted with restricted access, or quarantined to prevent the spread of viruses across the network.
<b>NAC L2 802.1x</b>
The Cisco Catalyst 4500 Series extends NAC support to 802.1x-enabled devices. Like NAC L2 IP, the NAC L2 802.1x feature determines the level of network access based on endpoint information.
<b>Time Domain Reflectometry</b>
Time Domain Reflectometry (TDR) is a technology used for diagnosing copper cable state. TDR detects impedance changes along an attached cable (for example, Category V) to determine opens, shorts, and terminated states. The fault distance from the switch is also supported. The Cisco Catalyst 4948 and Catalyst 4948-10GE switches support TDR .
<b>802.1x Authentication Failure</b>
The 802.1x Authentication Failure feature offers certain limited network access to guests with 802.1x supplicants enabled. This differs from the 802.1x guest VLAN feature for those guests without 802.1x supplicants. 802.1x Authentication Failure VLAN is a user-configurable VLAN, aside from the guest VLAN. Guests (contractors, visitors) with 802.1x supplicants enabled will fail 802.1x authentication. These guest users will be put into this special failure VLAN, typically with Internet access only. The 802.1x Authentication Failure VLAN can be configured to provide any type of limited access to network resources, including Internet access.
<b>OSPF Fast Convergence</b>
OSPF Fast Convergence minimizes system down time when an unexpected event, such as link failure, occurs. OSPF Fast Convergence consists of the following components:
-Fast Hellos-Support for user-configurable, subsecond, Open Shortest Path First (OSPF) hello intervals results in faster convergence in an OSPF network, especially in LAN segments.
-Incremental Shortest Path First (iSPF)-Enhances routing to intelligently determine the change in the Shortest Path Tree (SPT) and re-compute only the effected nodes upon SPT update. This increases efficiency and allows faster OSPF convergence on new routing topologies in reaction to network events.
-LSA Throttling-OSPF Link-State Advertisement (LSA) throttling provides a dynamic mechanism to slow down LSA updates in OSPF during times of network instability. LSA rate limiting in milliseconds allows faster OSPF convergence.
<b>HTTPS</b>
HTTPS is the secure version of HTTP. It uses Secure Sockets Layer (SSL) to provide device authentication and data encryption. HTTPS is required for secure communications with Cisco Network Assistant.
<b>IS-IS MIB</b>
Intermediate System-to-Intermediate System (IS-IS) is a link-state routing protocol designed for use within a single autonomous system and widely deployed as the Interior Gateway Protocol (IGP) of choice by many service providers. The IS-IS MIB enhances monitoring capabilities of network events for the overall state of the network.
