Cisco Catalyst Blade Switch 3032
Flexibility, bandwidth and investment protection

• 20 (16 internal, 4 external) 10/100/1000BASE-T auto-sensing Gigabit Ethernet switching ports
• 4 Small Form-Factor Pluggable (SFP) Gigabit Ethernet ports (using included Cisco TwinGig Converter Modules in the X2 slots)
• One external console port

Performance

• Switch Fabric Capacity 48 Gb/s
• Forwarding rate based on 64-byte packets; up to 36 million packets per second (mpps)
• Up to 8,192 MAC Addresses
• MTUs up to 9018 bytes (Jumbo Frames)
• 256 MB DDR SDRAM
• 64 MB flash memory

Routing

• IP Base: 
  • Static Routes
  • Routing Information Protocol Version 1 (RIPv1) and RIPv2
  • EIGRP Stub
• IP Services and Advanced IP Services Upgrade: 
  • The Cisco 3032 offers only the IP Base image.

VLAN

• VLAN trunks can be created from any port, using either standards-based IEEE 802.1Q tagging or the Cisco Inter-Switch Link (ISL) VLAN architecture.
• Up to 1005 VLANs per switch and up to 128 spanning-tree instances per switch are supported.
• 4096 VLAN IDs are supported.
• Cisco VTP supports dynamic VLANs and dynamic trunk configuration across all switches.

Quality of Service

• Wire-rate performance enables highly granular QoS functions (for example, granular rate limiting).
• Asynchronous data flows upstream and downstream from the end station or on an uplink are easily managed using ingress policing and egress shaping.
• IEE 802.1p CoS and DSCP field classification are provided, using marking and reclassification on a per-packet basis by source and destination IP address, source and destination MAC address, or Layer 4 TCP or UDP port number.
• Rate limiting is provided based on source and destination IP address, source and destination MAC address, Layer 4 TCP or UDP information, or any combination of these fields, using QoS ACLs (IP ACLs or MAC ACLs), class maps, and policy maps.
• Up to 64 aggregate or individual policers per port are allowed.
• Cisco control plane and data plane QoS ACLs on all ports help ensure proper marking on a per-packet basis.
• 4 egress queues per port enable differentiated management of up to 4 traffic flows.
• SRR scheduling helps ensure differential prioritization of packet flows by intelligently servicing the egress queues.
• Weighted Tail Drop (WTD) provides congestion avoidance at the ingress and egress queues before a disruption occurs. 
• Strict priority queuing guarantees that the highest-priority packets are serviced ahead of all other traffic. 
• The Cisco Committed Information Rate (CIR) function guarantees bandwidth in increments as low as 8 Kbps.

Security

• IEEE 802.1x allows dynamic, port-based security, providing server authentication.
• IEEE 802.1x with VLAN assignment allows a dynamic VLAN assignment for a specific server, regardless of where the server is connected.
• IEEE 802.1x and port security are provided to authenticate the port and manage network access for all MAC addresses, including those of the server.
• IEEE 802.1x with an ACL assignment allows specific identity-based security policies, regardless of where the server is connected.
• IEEE 802.1x with guest VLAN allows servers without IEEE 802.1x clients to have limited network access on the guest VLAN.
• Cisco security VLAN ACLs (VACLs) on all VLANs prevent unauthorized data flows from being bridged within VLANs.
• Port-based ACLs (PACLs) allow security policies to be applied on individual switch ports.
• SSHv2, Kerberos, and SNMPv3 provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions.
• Secure Sockets Layer (SSL) provides a secure means to use Web-based tools such as HTML-based device managers.
• Private VLAN Edge provides security and isolation between switch ports, helping ensure that users cannot snoop on other users’ traffic.
• Bidirectional data support on the Switched Port Analyzer (SPAN) port allows the Cisco Secure Intrusion Detection System (IDS) [[PLS PROVIDE FULL PRODUCT NAME; NOT ON MDS]] to take action when an intruder is detected.
• TACACS+ and RADIUS authentication enables centralized control of the switch and restricts unauthorized users from altering the configuration.
• MAC address notification allows administrators to be notified of servers added to or removed from the network.
• Port security secures access to an access or trunk port based on the MAC address.
• After a specific time period, the Aging feature removes the MAC address from the switch to allow another server to connect to the same port.
• Multilevel security on console access prevents unauthorized users from altering the switch configuration.
• The user-selectable address-learning mode simplifies configuration and enhances security.
• BPDU Guard shuts down Spanning Tree Protocol PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops.
• Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes.
• IGMP filtering provides multicast authentication by filtering out non-subscribers and limits the number of concurrent multicast streams available per port.
• Dynamic VLAN assignment is supported through implementation of the VLAN Membership Policy Server (VMPS) client function to provide flexibility in assigning ports to VLANs. Dynamic VLAN enables the fast assignment of IP addresses.
• 1000 security access control entries are supported.
• Dynamic Address Resolution Protocol (ARP) Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of ARP.
• DHCP Snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning.
• IP Source Guard prevents a malicious user from spoofing or taking over another user’s IP address by creating a binding table between the client’s IP and MAC address, port, and VLAN.
• Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer

Chassis

• Dimensions (L x W x H) - 9.8 x 9.1 x 1.1 inches (24.8 x 23.1 x 2.9 cm) 
• Weight - Approximately 4.0 lb (1.8 kg)

MIB Support

• BRIDGE-MIB (RFC1493) 
• CISCO-CDP-MIB 
• CISCO-CLUSTER-MIB 
• CISCO-CONFIG-MAN-MIB 
• CISCO-ENTITY-FRU-CONTROL-MIB 
• CISCO-ENVMON-MIB 
• CISCO-FLASH-MIB 
• CISCO-FTP-CLIENT-MIB 
• CISCO-IGMP-FILTER-MIB 
• CISCO-IMAGE-MIB 
• CISCO IP-STAT-MIB 
• CISCO-MAC-NOTIFICATION-MIB 
• CISCO-MEMORY-POOL-MIB 
• CISCO-PAGP-MIB 
• CISCO-PING-MIB 
• CISCO-PROCESS-MIB 
• CISCO-RTTMON-MIB 
• CISCO-STP-EXTENSIONS-MIB 
• CISCO-SYSLOG-MIB 
• CISCO-TCP-MIB 
• CISCO-VLAN-IFTABLE-RELATIONSHIP-MIB 
• CISCO-VLAN-MEMBERSHIP-MIB 
• CISCO-VTP-MIB ENTITY-MIB ETHERLIKE-MIB IF-MIB (in and out counters for VLANs are not supported) 
• IGMP-MIB 
• OLD-CISCO-CHASSIS-MIB 
• OLD-CISCO-FLASH-MIB 
• OLD-CISCO-INTERFACES-MIB 
• OLD-CISCO-IP-MIB 
• OLD-CISCO-SYS-MIB 
• OLD-CISCO-TCP-MIB 
• OLD-CISCO-TS-MIB 
• RFC1213-MIB (by agent; capabilities specified in CISCO-RFC1213-CAPABILITY.my)
• RFC1253-MIB
• RMON-MIB.
• RMON2-MIB
• SNMP-FRAMEWORK-MIB
• SNMP-MPD-MIB
• SNMP-NOTIFICATION-MIB
• SNMP-TARGET-MIB
• SNMPv2-MIB
• TCP-MIB
• UDP-MIB

Standards Supported

• IEEE 802.1s
• IEEE 802.1w
• IEEE 802.1x
• IEEE 802.3ad
• IEEE 802.3x full duplex on 10BASE-T, 100BASE-TX, and 1000BASE-T ports
• IEEE 802.1D Spanning Tree Protocol
• IEEE 802.1p CoS prioritization
• IEEE 802.1Q VLAN
• IEEE 802.3 10BASE-T specification
• IEEE 802.3u 100BASE-TX specification
• IEEE 802.3ab 1000BASE-T specification
• IEEE 802.3z 1000BASE-X specification
• 1000BASE-SX
• 1000BASE-LX/LH
• RMON I and II standards
• SNMPv1, SNMPv2c, and SNMPv3

Environmental Operating Conditions

• Operating temperature: 0° to 40°C 
• Storage temperature: -25° to 70°C 
• Operating relative humidity: 10 to 85% non-condensing 
• Storage relative humidity: 5 to 95% non-condensing