Q: Can you control permission of user (Read-only , Read-Write) via local user or tacacs+ ?
A: Starting in the next maintenance release, we will have support for read-only, read-write, and a limited write option. This is only for the CLI – Web UI is read-write only. Authentication can be via Radius, Tacacs, or local user.
Q: Console log with show when use line console via monitor ?
A: If you’re asking if we can log to console, the answer is yes.
Q: Can show history log console via command ?
A: History is supported.
Q: Have plan for network management of SBTG product such as CNA or CCA ?
A: CCA supports the 300 series switches.
Q: Do 300 series supports some sort of cascading or single IP management within a stack of switches?
A: HP 4210 supports nothing more than Clustering which allows you to find the switches and launch into their configuration pages from a central point. When configuring the switches, each switch are configured individually, however. For example, if you want to configure QoS or Security, all of these settings need to be configured on intervening switches. The 300 Series when used with the FindIT application works exactly the same way. Devices are automatically discovered and showed as tabs in the browser. You can then launch directly into the config of the switch you need to configure. FindIT can be found here: https://supportforums.cisco.com/community/netpro/small-business/findit
Q: List of supported sfp or mini-gbic?
A: See slide below and attached file SB_Switches_and_SB_SFP_Modules_Compatibility.xls.
Q: Is these switches configurable via a CLI or just GUI? If CLI is supported, is SSHv2 supported?
A: Yes, CLI and SSHv2 are supported.
Q: Are these switches manageable via Prime LMS?
A: On roadmap, today they can only be manageable via SNMP (as a 3rd party device).
Q: What is the difference between the SG300-10P and SG300-10MP? They look identical in the data sheet.
A: The MP means Maximum Power, with the MP SKU you can have 15 W simultaneously on all 8 Ports, while the P SKU is Half PoE, 4 ports with 15 W or 8 ports with 7.5 Watts.
Q: Do we support IEEE 802.1ab (LLDP) for SFE 2000 and SF 300
A: Yes for SF300
Q: Do 300 series support device and per port BPDU filtering?
A: Yes
Q: Do 300 series support Telnet server?
A: Yes
Q: Do 300 Series support 802.1ak MVRP?
A: No.
Q: Do 300 Series support IGMP V1, V2 & V3 snooping
A: Yes
Q: Do 300 Series support SSH V2
A: Yes
Q: Does 300 Series support multiple flash images and configuration files for storing, backup firmware and configuration for high reliability
A: Yes
Q: Does 300 Series support support SD card/ USB memory slot for storing, backup firmware and configuration for high reliability
A: No
Q: Does 300 Series support Virtual cable tester?
A: Yes.
A: Does SF300 support extended ACL?
A: Yes
Q: Do 300 series support RFC 2869 RADIUS extension standard or ( RFC 3579, 5080) IP-MAC-port binding(IMPB)?
A: RFC2869 is supported today. IPMB will be supported in the 1.2.5 firmware release due out in May 2012 through the support of Source-guard, ARP inspection & DHCP Snooping.
Q: Does SFE/SGE switch have external power supply connector?
A: The SFE2000 has a external power supply connector which worked with a product we used to sell – (RPS1000) – but that product was EOL’d due to lack of demand. So we really do not have a product with redundant power supply options in the SBTG portfolio currently. The SFE2000 has a stack link clocked at 1 Gbps. Note the market describes it as 4 Gbps stacking bandwidth – 1 Gig full duplex in a ring configuration gives you 4 G.
We’ll be launching 500 series stackable switches in April 2012 which has 10 Gig stack interfaces – 40 Gig stack bandwidth by the sae standard. It does not come with redundant power option.
Q: What are benefits for new 500 series switches over D-Link 1500 Series?
A: Here’s some of the advantages of 500 series:
- Our patent-pending network-wide auto voice capability
- EEE across all our switches, not just 300 series
- USGv6 and IPv6 Gold logo certification for all our 200/300/500 switches
- GUI consistency across 200/300/500
- Our support for CDP and Auto Smartports
- Our products are fully localized in 7 different languages – GUI, docs, support
- Our Cloud management integration with OnPlus
- Product security is superior with Cisco’s Security Baselines
- Rich Management support beyond theirs
- CLI + MENU CLI
- Bonjour/CDP/LLDP discovery
- Full SNMP Management Instrumentation
- CCA – System Mgmt
- FindIT and OnPlus
Q: What are the upgrade options for the 300 Series?
A: DHCP Autoconfiguration is for config files only. To upgrade image files, we have a few mechanisms. Customers can write a script of CLI commands which executes on a schedule to upgrade firmware. Another mechanism is to use SNMP in order to initiate an image download. Lastly, we have an XML API which is used by Onplus as a mechanism to upgrade firmware.
Q: Are 300 series plannned to support PoE PD?
A: When Legacy POE (pre-standard POE) support was provided on the switches as of release 1.1 a year ago, a side effect was that the switches could themselves be powered up through POE (PD functionality). Legacy POE has a wider sensing range and uses a different approach than 802.3af and 802.3at which made this possible. There is no separate PD chip in the switch – this is a function of the existing POE silicon in the switches. We do not advertise this PD functionality as a feature since there are limitations when a switch is PD –powered – most notable not being able to function as a PSE since its input power is too low. For direct switch to switch connections, it is recommended to disable POE on those ports.
Q: Can 300 Series support RADIUS failover? In Catalyst 2960 switches, there’s this command
“radius-server host <ip address> auth-port 1812 acct-port 1813 test username <any-name>” which can be sent from the switch to test the availability of the RADIUS server. This will enable the switch to switchover the the secondary RADIUS immediately. This is different then the RADIUS dead timer as dead timer only marks the RADIUS as UP or DOWN.
A: Manually triggered radius server failover is not supported with 300 series switch – only dynamic failover is supported.
Q: Do we support MAB?
A: MAC-based authentication and 802.1x with Guest VLAN is supported on 300 and 500 Series switches, but not MAB as supported on Catalyst.
Q: Can 300 Series switches be managed by Cisco Prime LMS?
A: Prime LMS support for 300 series started in 4.1. Here’s the capabilities related to 300 series:
- Device Discovery – 300 series automatically discovered in LMS
- Inventory report – switches come up in the inventory report (description, location, contact, number of devices connected to it, Serial number)
- Also Inventory change report
- Proactive Monitoring of Standard and Vendor-Specific MIBs (e.g., device availability, interface availability, interface utilization, interface errors, etc), including Utilization graph
- Troubleshooting (Reachability, traceroute)
- Thresholds overage reporting
- Configuration management (Backup/Restore configs)
Q: Does SG300, SF 500, SG500X, support UDLD, L2 trace route, RIPng
A: No. UDLD is on the roadmap but the others are not.
Q: Do 300 and 500 Series switches support multiple configuration files and Multiple IOS Image files?
A: Yes
Q:Do 500 Series switches support SPAN/Port mirroring across stack
A: Yes
Q: Do 300 and 500 Series support AAA for IPv6
A: The switches support .1x authentication and accounting to a Radius and TACACS server over IPv6
Q: Support Network Admission Control (NAC) to prevent users with out-dated Anti Virus signature files from accessing the network?
A: Not Supported. As of now this is left exclusively for the domain of Catalyst
Q: Supporst local and remote port mirroring (SPAN and RSPAN) for advanced troubleshooting? SPAN ports should support bidirectional data flows
A: SPAN, yes. RSPAN, no.
Q: Unidirectional Link Detection Protocol (UDLD) on uplink ports to allow unidirectional links to be detected and disabled to avoid problems such as spanning-tree loops?
A: UDLD is on the roadmap. Plan is to deliver this in 1.3.5 during Q3CY13.
Q: Supports IEEE 802.1x with Access Control List assignment to allow for specific identity-based security policies regardless of where the user is connected?
A: No. Currently for the domain of Catalyst in its integration with ISE
Q: Supports IGMPv3 snooping/ IGMP proxy and IGMP Filtering
A: Yes
Q: Supports a minimum of 11,000 unicast routes?
A: We support 2K static routes
Q: Supports AutoQoS commands to simplify QoS deployment?
A: Supported
Q: Supports Committed Information Rate (CIR) to guarantee bandwidth in increments as low as 8 kbps?
A: Yes, CIR can be configured in the following rage (bps) - Range: 100–10000000
