Authentication, Authorization, and Accounting (AAA)
Broadcast/Multicast/Unknown unicast storm recovery
Independent VLAN Learning (IVL) support
Jumbo Ethernet frame support
ACL mapping and marking of ToS/DSCP (COS)
ACL mapping to priority queue
Honoring DSCP and 802.1p(CoS)
Priority queue management using Weighted Round Robin (WRR), Strict Priority (SP) and a combination of WRR and SP
nt ACL-based inbound rate limiting policies
Broadcast, multicast and unknown unicast rate limiting
Inbound rate limiting per port
Outbound rate limiting per port/queue
Permit/deny actions for inbound IP and Layer-2 traffic classification based on:
Time-Based ACL
Source/Destination IP address
TCP/UDP Source/Destination port
Type of Service (ToS) or differentiated services (DSCP) field
Source/Destination MAC address
IEEE 802.1p user priority (outer and/or inner VLAN tag)
VLAN ID (outer and/or inner VLAN tag)
RFC 1858—Security Considerations for IP Fragment Filtering