SM-X-16G4M2X

Single Wide

16

4

2

SM-X-40G8M2X

Double Wide

40

8

2

IEEE 802.1x

●  IEEE 802.1x allows dynamic, port-based security, providing user authentication.

●  IEEE 802.1x with voice VLAN permits an IP phone to access the voice VLAN irrespective of the authorized or unauthorized state of the port.

●  IEEE 802.1x and port security are provided to authenticate the port and manage network access for all MAC addresses, including that of the client.

●  IEEE 802.1x with an ACL assignment allows for specific identity-based security policies regardless of where the user is connected.

●  IEEE 802.1x with guest VLAN allows guests without 802.1x clients to have limited network access on the guest VLAN.

MACsec

●  Exceptional security with integrated hardware support for MACsec is defined in IEEE 802.1AE. MACsec provides MAC layer encryption over wired networks using out-of-band methods for encryption keying.

●  The MACsec Key Agreement (MKA) Protocol provides the required session keys and manages the keys required for encryption when configured. MKA and MACsec are implemented following successful authentication using the 802.1x Extensible Authentication Protocol (EAP) framework.

●  In Cisco Enhanced EtherSwitch Service Modules, both the user and down-link ports (links between the switch and endpoint devices such as a PC or IP phone) as well as the network and up-link ports can be secured using MACsec.

●  With MACsec you can encrypt switch-to-switch links such as access to distribution, or encrypt dark fiber links within a building or between buildings.

Multidomain authentication

●  Multidomain authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on the appropriate voice and data VLAN.

MAC Authentication Bypass (MAB)

●  MAB for voice allows third-party IP phones without an 802.1x supplicant to get authenticated using the MAC address.

Switched Port Analyzer (SPAN and RSPAN)

●  Bidirectional data support on the SPAN port allows the any Intrusion Detection System (IDS) to take action when an intruder is detected.

Centralized authentication

●  TACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration.

MAC address authentication

●  MAC address notification allows administrators to be notified of users added to or removed from the network.

Port security

●  Port security secures the access to an access or trunk port based on MAC address.

Scalability with High-Performance LAN Traffic

●  Isolation of LAN traffic and route between ports on the Cisco SM-X EtherSwitch Service Module

●  High Speed LAN connections

●  Layer 2 traffic is switched on-board the module

●  Traffic can be forwarded between service modules over the MGF without affecting the router CPU

●  Maintain Switch to AP Reach at mGig (2.5G) speeds: Support for Access Extensions and Uplinks

●  10G Fiber connections to provide for High Speed Server or LAN backbone connections

Layer 2 Security

●  Protecting the Integrity and Confidentiality of all traffic on the Local Area Network

●  1G Ethernet copper ports support MACSec to LAN end points

●  2.5G (mGig) LAN MACSec to protect traffic to Access Points or High-Speed servers

Total TCO

●  Scaling network infrastructure across multiple sites

●  Increasing costs of operating multiple devices at the branch office

●  Maximizing IT resources

●  An integrated switch solution lowers operating costs, simplifies troubleshooting, and enables businesses to scale.

●  Single Unified IOS software ensures the IT team only has to install and certify one software vs two independent software as in the previous generation

●  The modules offer lower Mean Time To Repair (MTTR). One vendor means one support center to decrease troubleshooting time and eliminate finger pointing among vendors.

●  Cisco SMARTnet ^® support covers both integrated services routers and Cisco EtherSwitch devices.

Investment Protection

●  Ensuring compatibility of your network with future networks to deliver leading technology

●  Cisco SM-X EtherSwitch Service Module and Cisco Catalyst switches both run the same IOS-XE software ensuring that switches are aligned to provide a consistent user experience.

●  Cisco Catalyst and SM-X Etherswitch module both support the latest UADP 2.0 ASIC ensuring cross platform support for latest innovations

High Availability

●  Minimizing downtime that affects business operations

●  A single-box and single IOS solution simplifies remote management and improves services interoperability to help ensure the highest reliability

●  End-to-end testing for standards-based and innovative Cisco proprietary features provides superior services interoperability and excellent value.

●  The modules use optional redundant power supplies in Cisco ISR4000 series routers

●  Fewer components (for example, power supplies and fans) results in fewer failures and less downtime

Green IT

●  Single power supply for Cisco EtherSwitch device and router

●  The modules offer up to two times lower power consumption than previous generation of switch modules

●  Because no additional rack space or power supply is needed, there is less to rack, stack, and cool.

SM-X-16G4M2X

17.25” x 18.5” x 3.5” (43.82 x 46.99 x 8.9 mm)

19.4 lb

0 to 40°C

-20 to 65°C

5 to 85%

5 to 95%

SM-X-40G8M2X

41.2 x 20.7 x 4.0 (104.64 x 52.57 x 42.54 mm)

40lb

0 to 40°C

-20 to 65°C

5 to 85%

5 to 95%