The Cisco Catalyst® Blade Switch 3120 represents the next-generation networking solution for blade server environments. Built on the market-leading Cisco® hardware and Cisco IOS® Software, the Cisco Catalyst Blade Switch 3120 (Figure 1) is engineered with unique technologies specifically designed to meet the rigors of blade server-based application infrastructure. Specifically, the switch is designed to deliver scaleable, high-performance, highly resilient connectivity while supporting ongoing IT initiatives to reduce server infrastructure complexity and total cost of ownership (TCO).
Figure 1. Cisco Catalyst Blade Switch 3120 for HP

Configurations
Configuration 1: Cisco Catalyst Blade Switch 3120G for HP
• Supports up to 8 Gigabit Ethernet uplink ports: 4 10/100/1000BASE-T ports and 4 Small Form-Factor Pluggable (SFP) Gigabit Ethernet ports (using Cisco TwinGig Converter Modules in the X2 slots)
Configuration 2: Cisco Catalyst Blade Switch 3120X for HP
• Supports up to 4 10/100/1000BASE-T ports and 2 X2-based 10 Gigabit Ethernet ports
Virtual Blade Switch (VBS) Technology
• By significantly simplifying data center design and operations, the VBS reduces infrastructure complexity, improves network resiliency, and increases the operational manageability of the blade-switching environment.
• By providing up to160 Gbps upstream, the VBS provides exceptional performance. In addition, the VBS can double the bandwidth available to a server.
• Because the VBS appears as a single node, both the Layer 2 and Layer 3 topologies are greatly simplified, increasing fabric stability and reducing convergence times after a topology change. The VBS offers several layers of link virtualization, which increases redundancy and available bandwidth.
• The VBS uses the same Cisco IOS Software interface, MIBs, and management tools as the rest of the Cisco Catalyst family, which simplifies operations and management, helping ensure consistent implementation and operation of end-to-end features such as quality of service (QoS).
• A number of VBS features reduce TCO. Link virtualization increases utilization and reduces potential port count. Similarly, the capability to mix-and-match 10 Gigabit Ethernet switches provides customers with a cost-effective migration path. In addition, the advanced operations and troubleshooting tools reduce operating expenses.
Figure 2. Switches interconnected in a rack are treated as a single logical switch

Cisco Catalyst Blade Switch 3120 Software
Features and Benefits
Table 1. Features and Benefits
Category |
Features and Benefits |
Ease of use and ease of deployment |
The VBS is self-managing and self-configuring. When switches are added or removed, the master switch automatically loads the Cisco IOS Software version running on the VBS to the new switch, loads the global configuration parameters, and updates all the routing tables to reflect changes. Upgrades are applied universally and simultaneously to all members of the VBS. Ease-of-use features include the following: • Dynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot server eases switch deployment.
• Master configuration management helps ensure that all switches are automatically upgraded when the master switch receives a new software version. Automatic software version checking and updating help ensure that all switch members in the VBS have the same software version.
• Autonegotiation on all ports automatically selects half- or full-duplex transmission mode to optimize bandwidth.
• Dynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration across all
switch ports. • Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel® groups or Gigabit EtherChannel groups to link to another switch, router, or server.
• Link Aggregation Control Protocol (LACP) allows the creation of Ethernet channeling with devices that conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP. The Cisco Catalyst Blade Switch 3120 now supports LACP channels to blade servers, thus doubling server bandwidth to the network.
• Automatic media-dependent interface crossover (MDIX) automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight-through) is installed.
|
Availability and Scalability |
|
Superior resiliency for higher server and application availability |
• The VBS is highly resilient. Each switch can operate both as master controller and as forwarding processor. Each switch in the VBS can serve as a master, creating a 1:N availability scheme for network control. In the unlikely event of a single-unit failure, all other units continue to forward traffic and maintain operation.
High-availability features include the following: • Cross-switch EtherChannel provides the capability to configure Cisco EtherChannel technology across different members of the VBS for high resiliency.
• IEEE 802.1D Spanning Tree Protocol support for redundant backbone connections and loop-free networks simplifies network configuration and improves fault tolerance.
• Cisco UplinkFast and BackboneFast technologies help ensure quick failover recovery, enhancing overall network stability and reliability.
• IEEE 802.1s/w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) provide rapid spanning-tree convergence independent of spanning-tree timers and also offer the benefit of Layer 2 load balancing and distributed processing. The VBS units behave as a single spanning-tree node.
• Per-VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning-tree reconvergence
on a per-VLAN spanning-tree basis, without requiring the implementation of spanning-tree instances. • VLAN Trunking Protocol (VTP) pruning limits bandwidth consumption on VTP trunks by flooding broadcast traffic only on trunk links required to reach the destination devices.
• The trunk failover feature allows rapid failover to the redundant switch in the blade enclosure if all uplinks from the primary switch fail. When the uplinks fail, the switch shuts down the ports connected to the blade servers and lets network interface card (NIC) teaming software direct traffic to the redundant switch. This feature is also known as link-state tracking.
• Switch port autorecovery (Errdisable) automatically attempts to re-enable a link that is disabled because of a network error.
• Power and cooling resiliency are provided through redundant power and cooling capabilities from the blade enclosure.
• Flexlink provides link redundancy with convergence time of less than 100 milliseconds (ms).
• Cisco Hot Standby Router Protocol (HSRP) is supported to create redundant, fail-safe routing topologies.
• Unidirectional Link Detection Protocol (UDLD) and Aggressive UDLD allow unidirectional links caused by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces.
• Switch-port autorecovery (Errdisable) automatically attempts to reactivate a link that is disabled because of a network error.
• Per-port broadcast, multicast, and unicast storm control prevents faulty servers from degrading overall system performance.
• Internet Group Management Protocol (IGMP) snooping provides fast client joins and leaves of multicast streams and limits bandwidth-intensive video traffic to only the requestors.
• Multicast VLAN registration (MVR) continuously sends multicast streams in a multicast VLAN while isolating the streams from subscriber VLANs for bandwidth and security reasons.
|
QoS |
|
Advanced QoS |
The VBS offers industry-leading mechanisms for marking, classification, and scheduling to deliver superior performance for data, voice, and video traffic, all at wire speed. Following are some of the QoS features supported: • Wire-rate performance supports highly granular QoS functions (for example, granular rate limiting).
• Cross-switch QoS allows QoS to be configured across the entire VBS.
• IEEE 802.1p class of service (CoS) and differentiated services code point (DSCP) field classification is provided, using marking and reclassification on a per-packet basis by source and destination IP address, MAC address, or Layer 4 TCP or User Datagram Protocol (UDP) port number.
• Cisco control plane and data plane QoS access control lists (ACLs) on all ports help ensure proper marking on a per-packet basis.
• Four egress queues per port help enable differentiated management of up to four traffic types.
• Shaped Round Robin (SRR) scheduling helps ensure differential prioritization of packet flows by intelligently servicing the ingress queues and egress queues.
• Weighted Tail Drop (WTD) provides congestion avoidance at the ingress and egress queues before a disruption occurs.
• Strict priority queuing helps ensure that the highest-priority packets are serviced ahead of all other traffic.
• The committed information rate (CIR) function provides bandwidth in increments as low as 8 Kbps.
• Rate limiting is provided based on source and destination IP address, source and destination MAC address, Layer 4 TCP and UDP information, or any combination of these fields, using QoS ACLs (IP ACLs or MAC ACLs), class maps, and policy maps.
• Up to 64 aggregate or individual policers are available.
|
Security |
|
Networkwide security features |
The VBS supports a comprehensive set of security features for connectivity and access control, including ACLs, authentication, port-level security, and identity-based network services with IEEE 802.1x and extensions. This set of comprehensive features not only helps prevent external attacks, but defends the network against "man-in-the-middle" attacks, a primary concern in today's business environment. The switch also supports the Network Admission Control (NAC) security framework. Security features include the following: • Dynamic Address Resolution Protocol (ARP) Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of the ARP protocol.
• DHCP snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning.
• IP source guard prevents a malicious user from spoofing or taking over another user's
IP address by creating a binding table between the client's IP and MAC address, port, and VLAN. • Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turning a broadcast segment into a nonbroadcast multi-access-like segment.
• Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users' traffic.
• The nicast Reverse Path Forwarding (RPF) feature helps mitigate problems caused by the introduction of malformed or forged (spoofed) IP source addresses into a network by discarding IP packets that lack a verifiable IP source address.
• IEEE 802.1x enables dynamic, port-based security, providing user authentication.
• IEEE 802.1x with VLAN assignment allows a dynamic VLAN assignment for a specific user regardless of where the user is connected.
• IEEE 802.1x and port security are provided to authenticate the port and manage network access for all MAC addresses, including that of the client.
• IEEE 802.1x with an ACL assignment enables the user of specific identity-based security policies regardless of where the user is connected.
• IEEE 802.1x with guest VLAN allows guests without IEEE 802.1x clients to have limited network access on the guest VLAN.
• Web authentication for non-IEEE 802.1x clients allows non-IEEE 802.1x clients to use a Secure Sockets Layer (SSL) based browser for authentication.
• Cisco security VLAN ACLs on all VLANs prevent unauthorized data flows from being bridged within VLANs.
• Cisco standard and extended IP security router ACLs define security policies on routed interfaces for control plane and data plane traffic. IPv6 ACLs can be applied to filter
IPv6 traffic. • Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.
• Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions.
• Bidirectional data support on the Switched Port Analyzer (SPAN) port allows the Cisco Intrusion Detection System (IDS) to take action when an intruder is detected.
• TACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration.
• MAC address notification allows administrators to be notified of users added to or removed from the network.
• Port security secures the access to an access or trunk port based on the MAC address.
• Multilevel security on console access prevents unauthorized users from altering the switch configuration.
• Bridge protocol data unit (BPDU) guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops.
• Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator's control from becoming Spanning Tree Protocol root nodes.
• IGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number of concurrent multicast streams available per port.
• Dynamic VLAN assignment is supported through implementation of VLAN membership policy server client capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of IP addresses.
|
High-Performance IP Routing |
|
IP Routing Features |
The VBS delivers extremely high-performance IP routing. IP routing features include: • Basic IP unicast routing protocols (Static and RIPv1 and v2) are supported for small-network routing applications.
• Advanced IP unicast routing protocols (OSPF, EIGRP, and BGPv4) are supported for load balancing and construction of scalable LANs. The IP Services feature set is required.
• IPv6 routing (RIP next generation [RIPng] and OSPFv3) is supported in hardware for maximum performance. The Advanced IP Services feature set is required for IPv6 routing.
• Equal-cost routing facilitates Layer 3 load balancing and redundancy across the stack.
• Policy-based routing (PBR) allows superior control by facilitating flow redirection regardless of the routing protocol configured. The IP Services feature set is required.
• HSRP provides dynamic load balancing and failover for routed links. Up to 32 HSRP links are supported per unit or VBS.
• PIM for IP multicast routing is supported, including PIM sparse mode (PIM-SM), PIM dense mode (PIM-DM), and PIM sparse-dense mode. The IP Services feature set is required.
• Distance Vector Multicast Routing Protocol (DVMRP) tunneling interconnects two multicast-enabled networks across nonmulticast networks. The IP Services feature set is required.
• Fallback bridging forwards non-IP traffic between two or more VLANs. The IP Services feature set is required.
|
Manageability |
|
Management features |
The VBS is managed as a single object and has a single IP address. The primary management and control features include the following: • Cisco IOS Software CLI support provides a common user interface and command set with all Cisco routers and Cisco Catalyst desktop switches.
• Switching database manager templates for access, routing, and VLAN deployment allow the administrator to easily maximize memory allocation to the desired features based on deployment-specific requirements.
• Cisco GOLD checks the health of hardware components and verifies proper operation of the system data and control plane at run time and boot time.
• Cisco IOS EEM allows customers to set up trigger points based on certain events to automatically take actions, thus automating network management.
• VPN routing and forwarding (VRF) lite enables a service provider to support two or more VPNs with overlapping IP addresses.
• Local Proxy ARP works in conjunction with Private VLAN Edge to minimize broadcasts and maximize available bandwidth.
• VLAN1 minimization allows VLAN1 to be disabled on any individual VLAN trunk.
• Smart Multicast, with Cisco VBS technology, allows the Cisco Catalyst Blade Switch 3120 to offer greater efficiency and support for more multicast data streams such as video by putting each data packet onto the backplane only once.
• IGMP snooping for IPv4 and IPv6 Multicast Listener Discovery (MLD) Versions 1 and 2 snooping provide fast client joins and leaves of multicast streams and limit bandwidth-intensive video traffic to only the requestors.
• Multicast VLAN registration (MVR) continuously sends multicast streams in a multicast VLAN while isolating the streams from subscriber VLANs for bandwidth and security reasons.
• Per-port broadcast, multicast, and unicast storm control prevents faulty end stations from degrading overall systems performance.
• Cisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration across all switches.
• Remote SPAN (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from any other switch in the same network.
• For enhanced traffic management, monitoring, and analysis, the embedded remote monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events).
• Layer 2 traceroute eases troubleshooting by identifying the physical path that a packet takes from source to destination.
• Trivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by enabling downloading from a centralized location.
• Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all intranet switches.
• Multifunction LEDs per port show port status.
• Jumbo frames (9216 bytes) are available for advanced data and video applications requiring very large frames.
• SNMP v1, v2c, and v3 and Telnet interface support deliver comprehensive in-band management, and a CLI-based management console provides detailed out-of-band management.
• Cisco Discovery Protocol Versions 1 and 2 enable a network-management station for automatic switch discovery.
|
Cisco Device Manager |
• Cisco Device Manager simplifies initial configuration of a switch through a Web browser.
• The Web interface enables less-skilled personnel to quickly and simply set up switches, thereby reducing the cost of deployment.
|
Cisco Network Assistant |
A PC-based network management application designed for server administrators in small to medium-sized data centers, Cisco Network Assistant offers centralized network management and configuration capabilities. This application also features an intuitive GUI where users can easily apply common services across Cisco switches and routers, such as the following: • Configuration management
• Troubleshooting advice
• Inventory reports
• Event notification
• Network security settings
• Password synchronization
• Drag-and-drop Cisco IOS Software upgrades
• Secure wireless
For detailed information about Cisco Network Assistant, visit: http://www.cisco.com/go/cna. |
CiscoWorks LAN Management Solution (LMS) |
CiscoWorks LMS is a suite of powerful management tools that simplify the configuration, administration, monitoring, and troubleshooting of Cisco networks. It integrates these capabilities into a world-class solution for improving the accuracy and efficiency of operations staff, while increasing the overall availability of the network. CiscoWorks LMS supports more than 400 device types, including the Catalyst Blade Switch 3120, and it provides the following benefits: • Network discovery, topology views, end-station tracking, and VLAN management
• Real-time network fault analysis with easy-to-deploy device-specific best-practice templates
• Hardware and software inventory management, centralized configuration tools, and
syslog monitoring • Network response time and availability monitoring and tracking
• Real-time device, link, and port traffic management, analysis, and reporting
For detailed information about CiscoWorks LMS, visit: http://www.cisco.com/en/US/products/sw/cscowork/ps2425/index.html. |
Product Specifications
Table 2. Hardware Specifications
Table 3. Management and Standards Support
Table 4. Safety and Compliance
Service and Support
Table 5. Service and Support
Ordering Information
Table 6. Ordering Information
Note: There are two additional switch part numbers. They are WS-CBS3125G-S and WS-CBS3125X-S. WS-CBS3125G-S is the same product as WS-CBS3120G-S and WS-CBS3125X-S is the same product as WS-CBS3120X-S. These switches will also have corresponding upgrade licenses and SMARTnet Options.
For More Information
• United States and Canada: (toll free) 800 553-6387
• Europe: 32 2 778 4242
• Australia: 612 9935 4107
• Other: 408 526-7209