● Layer 2 switch ports and VLAN trunks
● IEEE 802.1Q VLAN encapsulation
● Support for up to 4096 VLANs
● Rapid Per-VLAN Spanning Tree Plus (PVRST+) (IEEE 802.1w compatible)
● Multiple Spanning Tree Protocol (MSTP) (IEEE 802.1s): 64 instances
● Spanning Tree PortFast
● Spanning Tree Root Guard
● Spanning Tree Bridge Assurance
● Cisco EtherChannel technology (up to 32 ports per EtherChannel)
● Link Aggregation Control Protocol (LACP): IEEE 802.3ad
● vPC
● Jumbo frames on all ports (up to 9216 bytes)
● Storm control (unicast, multicast, and broadcast)
● Private VLANs

● Layer 3 interfaces: Routed ports on interfaces, switch virtual interfaces (SVIs), PortChannels, and subinterfaces (total: 1024)
● 64-way ECMP
● 2000 ingress and 1000 egress ACL entries
● IPv6 routing: Static, OSPFv3, and BGPv6
● Routing protocols: Static, RIPv2, EIGRP, OSPF, and BGP
● Bidirectional Flow Detection (BFD) for BGP, OSPF and ipv4 Static routes
● HSRP and VRRP
● ACL: Routed ACL with Layer 3 and 4 options to match ingress and egress ACLs
● VRF: VRF-lite (IP VPN), VRF-aware unicast (BGP, OSPF, and RIP), and VRF-aware multicast
● Unicast Reverse-Path Forwarding (uRPF) with ACL; strict and loose modes
● Jumbo frame support (up to 9216 bytes)
● Generic Routing Encapsulation (GRE) tunneling

● Multicast: PIMv2, PIM-SM, and SSM
● Bootstrap router (BSR), Auto-RP, and Static RP
● Multicast Source Discovery Protocol (MSDP) and Anycast RP
● Internet Group Management Protocol (IGMP) Versions 2 and 3

● Layer 2 IEEE 802.1p (class of service [CoS])
● 8 hardware queues per port
● Per-port QoS configuration
● CoS trust
● Port-based CoS assignment
● Modular QoS CLI (MQC) compliance
● ACL-based QoS classification (Layers 2, 3, and 4)
● MQC CoS marking
● Differentiated services code point (DSCP) marking
● Weighted Random Early Detection (WRED)
● CoS-based egress queuing
● Egress strict-priority queuing
● Egress port-based scheduling: Weighted Round-Robin (WRR)
● Explicit Congestion Notification (ECN)
● Configurable ECN (Marking) per port

● Ingress ACLs (standard and extended) on Ethernet
● Standard and extended Layer 3 to 4 ACLs include IPv4, Internet Control Message Protocol (ICMP), TCP, and User Datagram Protocol (UDP)
● VLAN-based ACLs (VACLs)
● Port-based ACLs (PACLs)
● Named ACLs
● ACLs on virtual terminals (vtys)
● DHCP snooping with Option 82
● Port number in DHCP Option 82
● DHCP relay
● Dynamic Address Resolution Protocol (ARP) inspection
● Configurable CoPP

● POAP
● Python scripting
● Cisco EEM
● Switch management using 10/100/1000-Mbps management or console ports
● CLI-based console to provide detailed out-of-band management
● In-band switch management
● Locator and beacon LEDs
● Configuration rollback
● SSHv2
● Secure Copy (SCP) server
● Telnet
● AAA
● AAA with RBAC
● RADIUS
● TACACS+
● Syslog
● Syslog generation on system resources (for example, FIB tables)
● Embedded packet analyzer
● SNMP v1, v2, and v3
● Enhanced SNMP MIB support
● XML (NETCONF) support
● Remote monitoring (RMON)
● Advanced Encryption Standard (AES) for management traffic
● Unified username and passwords across CLI and SNMP
● Digital certificates for management between switch and RADIUS server
● Cisco Discovery Protocol Versions 1 and 2
● RBAC
● Switched Port Analyzer (SPAN) on physical layer, PortChannel, and VLAN
● Tunable Buffer Allocation for SPAN
● Encapsulated Remote SPAN (ERSPAN)
● Ingress and egress packet counters per interface
● PTP (IEEE 1588) boundary clock
● Network Time Protocol (NTP)
● Cisco OHMS
● Comprehensive bootup diagnostic tests
● Cisco Call Home
● Cisco DCNM
● Advanced buffer utilization monitoring
​● sFlow