Spanning Tree Protocol
Port grouping/link aggregation
- Up to 8 groups
- Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation​VLAN
- Support for up to 4,094 VLANs simultaneously
- Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN
- Management VLAN
- Private VLAN with promiscuous, isolated, and community port
- Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks
- Guest VLAN, unauthenticated VLAN
- Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication
- CPE VLAN
Voice VLAN
Multicast TV VLAN
VLAN Translation
Q-in-Q
Selective Q-in-Q
Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP)
Unidirectional Link Detection (UDLD)
Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2
Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping
IGMP Querier
Head-of-Line (HOL) blocking
Loopback DetectioN

IPv4 routing
- Wirespeed routing of IPv4 packets
- Up to 990 static routes and up to 128 IP interfaces
IPv6 routing
Layer 3 Interface
- Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface
Classless Interdomain Routing (CIDR)
Policy-Based Routing (PBR)
DHCP Server
DHCP relay at Layer 3
User Datagram Protocol (UDP) relay

Secure Shell (SSH) Protocol
Secure Sockets Layer (SSL)
IEEE 802.1X (Authenticator role)
Web-based authentication
STP Bridge Protocol Data Unit (BPDU) Guard
STP Root Guard
STP loopback guard
DHCP snooping
IP Source Guard (IPSG)
Dynamic ARP Inspection (DAI)
IP/MAC/Port Binding (IPMB)
Secure Core Technology (SCT)
Secure Sensitive Data (SSD)
Trustworthy systems
Private VLAN
Layer 2 isolation Private VLAN Edge (PVE) with community VLAN
Port security
RADIUS/TACACS+
RADIUS accounting
Storm control
DoS prevention
Multiple user privilege levels in CLI
ACLs Support for up to 1,024 rules

Web user interface
SNMP
Remote Monitoring (RMON)
IPv4 and IPv6 dual stack
Firmware upgrade
Port mirroring
VLAN mirroring
DHCP (options 12, 66, 67, 82, 129, and 150)
Secure Copy (SCP)
Autoconfiguration with Secure Copy (SCP) file download
Text-editable config files
Smartports
Auto Smartports
Textview CLI
Cloud services
Embedded Probe for Cisco Business Dashboard
Cisco Network Plug and Play (PnP) agent
Localization
Login banner
Other management