Cisco Catalyst 2960-S and 2960 Series Switches with LAN Base Software data sheets

The Cisco^® Catalyst^® 2960-S and 2960 Series Switches are the leading Layer 2 edge, providing improved ease of use, highly secure business operations, improved sustainability, and a borderless network experience. The Catalyst 2960-S Series Switches include new FlexStack switch stacking capability with 1 and 10 Gigabit connectivity, and Power over Ethernet Plus (PoE+) with the Cisco Catalyst 2960 Series Switches offering Fast Ethernet access connectivity and PoE capabilities. The Cisco Catalyst 2960-S and 2960 Series are fixed-configuration access switches designed for enterprise, midmarket, and branch office networks to provide lower total cost of ownership. The Cisco Catalyst 2960-S is shown in Figure 1, and the Cisco Catalyst 2960 Series Switches are shown in Figure 2.

• 10 and 1 Gigabit Ethernet uplink flexibility with Small Form-Factor Pluggable Plus (SFP+), providing business continuity and fast transition to 10 Gigabit Ethernet

• 24 or 48 ports of Gigabit Ethernet desktop connectivity

• Cisco FlexStack stacking module with 20 Gbps of throughput, allowing ease of operation with single configuration and simplified switch upgrade

• PoE+ with up to 30W per port that allows you to support the latest PoE+ capable devices

• Power supply options, with 740W or 370W fixed power supplies for PoE+ switches are available

• USB storage for file backup, distribution, and simplified operations

• A wide range of software features to provide ease of operation, highly secure business operations, sustainability, and a borderless network experience

• Limited lifetime hardware warranty, including next-business-day replacement with 90-day service and support

• Dual-purpose uplinks for Gigabit Ethernet uplink flexibility, allowing use of either a copper or fiber uplink; each dual-purpose uplink port has one 10/100/1000 Ethernet port and one SFP-based Gigabit Ethernet port, with one port active at a time

• 24 or 48 ports of Fast Ethernet desktop connectivity

• PoE configurations with up to 15.4W per port

• A wide range of software features to provide ease of operation, highly secure business operations, sustainability, and a borderless networking experience

• Limited lifetime hardware warranty

Figure 1. Cisco Catalyst 2960-S Series Switches

Figure 2. Cisco Catalyst 2960 Series Switches

Switch Configurations

Table 1. Configurationsof Cisco Catalyst 2960-S Series Switches with LAN Base Software

Table 2. Configurations of Cisco Catalyst 2960 Series Switches with LAN Base Software

Cisco FlexStack Stacking

Figure 3. Cisco FlexStack Module and Switches

Power over Ethernet Plus PoE+

Table 3. Switch PoE and PoE+ Power Capacity

Cisco Catalyst 2960-S and 2960 Series Switches Enable Cisco Borderless Network

• Sustainability

• EnergyWise

• Ease of operations

• Borderless security

• Borderless experience

Sustainability

• Cisco EnergyWise technology

• Efficient switch operation

• Intelligent power management

Cisco EnergyWise Technology

Efficient Switch Operation

Intelligent Power over Ethernet Management

• Per port power consumption command allows customers to specify maximum power setting on an individual port

• Per port PoE power sensing measures actual power being drawn, enabling more intelligent control of powered devices

• Cisco Discovery Protocol Version 2 allows switches to negotiate a more granular power setting when connecting to a Cisco powered device such as IP phones or access points than what is provided by IEEE classification

• The PoE MIB provides proactive visibility into power usage and allows customers to set different power-level thresholds

Ease of Operations

• Cisco Catalyst Smart Operations

• Easy to use deployment and control features

• Advanced, intelligent network management tools

Cisco Catalyst Smart Operations

• Cisco Smart Install is a transparent plug-and-play technology to configure the Cisco IOS Software image and switch configuration without user intervention. Smart Install utilizes dynamic IP address allocation and the assistance of other switches to facilitate installation providing transparent network plug and play.

• Cisco Auto Smartports provide automatic configuration as devices connect to the switch port, allowing auto detection and plug and play of the device onto the network.

• Cisco Smart Configuration provides a single point of management for a group of switches and in addition adds the ability archive and backup configuration files to a file server or switch allowing seamless zero touch switch replacement.

• Cisco Smart Troubleshooting is an extensive array of debug diagnostic commands and system health checks within the switch, including Generic Online Diagnostics (GOLD) and Onboard Failure Logging (OBFL).

Easy to Use Deployment and Control Features

• Automatic QoS (AutoQoS) simplifies QoS configuration in voice over IP (VoIP) networks by issuing interface and global switch commands to detect Cisco IP phones, classify traffic, and help enable egress queue configuration.

• Stacking Master configuration management and Cisco FlexStack stacking helps ensure that all switches are automatically upgraded when the master switch receives a new software version. Automatic software version checking and updating help ensure that all stack members have the same software version.

• Dynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot server eases switch deployment.

• Auto-negotiation on all ports automatically selects half- or full-duplex transmission mode to optimize bandwidth.

• Dynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration across all switch ports.

• Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel^® groups or Gigabit EtherChannel groups to link to another switch, router, or server.

• Link Aggregation Control Protocol (LACP) allows the creation of Ethernet channeling with devices that conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP.

• Automatic media-dependent interface crossover (MDIX) automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight-through) is installed.

• Unidirectional Link Detection Protocol (UDLD) and Aggressive UDLD allow unidirectional links caused by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces.

• Switching Database Manager (SDM) templates for access, routing, and VLAN deployment allow the administrator to easily maximize memory allocation to the desired features based on deployment-specific requirements.

• Local Proxy Address Resolution Protocol (ARP) works in conjunction with Private VLAN Edge to minimize broadcasts and maximize available bandwidth.

• Internet Group Management Protocol (IGMP) Snooping for IPv4 and IPv6 MLD v1 and v2 Snooping provide fast client joins and leaves of multicast streams and limit bandwidth-intensive video traffic to only the requestors.

• Multicast VLAN Registration (MVR) continuously sends multicast streams in a multicast VLAN while isolating the streams from subscriber VLANs for bandwidth and security reasons.

• Per-port broadcast, multicast, and unicast storm control prevents faulty end stations from degrading overall systems performance.

• Voice VLAN simplifies telephony installations by keeping voice traffic on a separate VLAN for easier administration and troubleshooting.

• Cisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration across all switches.

• Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from any other switch in the same network.

• For enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events).

• Layer 2 traceroute eases troubleshooting by identifying the physical path that a packet takes from source to destination.

• Trivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by downloading from a centralized location.

• Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all intranet switches.

Advanced, Intelligent Network Management Tools

Cisco Network Assistant

• Configuration management

• Troubleshooting advice

• Inventory reports

• Event notification

• Network security settings

• Password synchronization

• Drag-and-drop Cisco IOS Software upgrades

• Secure wireless

Cisco Works LAN Management Solution

• Support for new Cisco hardware platforms the day they ship

• Support for new technologies and services from initial deployment to day-to-day administration and management, such as EnergyWise, Identity, Cisco Auto Smartports, Cisco Smart Install, and much more

• Configuration management tools built from Cisco experience and Cisco Validated Design recommendations

• Monitoring and troubleshooting capabilities that incorporates Cisco hardware best practices and diagnostics features

• Automation in managing hardware inventories, security vulnerabilities (PSIRTS) and platform end-of-life and support cycles

Borderless Security

• Threat defense

• Cisco TrustSec

• Other advanced security features

Threat Defense

• Port Security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address flooding.

• DHCP Snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning.

• Dynamic ARP Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of the ARP protocol.

• IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between the client's IP and MAC address, port, and VLAN.

Cisco TrustSec

• Flexible authentication that supports multiple authentication mechanisms including 802.1X, MAC Authentication Bypass and web authentication using a single, consistent configuration.

• Open mode that creates a user friendly environment for 802.1X operations.

• Integration of device profiling technology and guest access handling with Cisco switching to significantly improve security while reducing deployment and operational challenges.

• RADIUS Change of Authorization and downloadable calls for comprehensive policy management capabilities.

• 802.1X Supplicant with Network Edge Access Transport (NEAT) enables extended secure access where compact switches in the conference rooms have the same level of security as switches inside the locked wiring closet.

Other Advanced Security Features

• Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turning a broadcast segment into a nonbroadcast multiaccesslike segment.

• Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users' traffic.

• Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on appropriate voice and data VLAN.

• Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.

• Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions.

• Bidirectional data support on the Switched Port Analyzer (SPAN) port allows Cisco Intrusion Detection System (IDS) to take action when an intruder is detected.

• TACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration.

• MAC Address Notification allows administrators to be notified of users added to or removed from the network.

• Multilevel security on console access prevents unauthorized users from altering the switch configuration.

• Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops.

• Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator's control from becoming Spanning Tree Protocol root nodes.

• IGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number of concurrent multicast streams available per port.

• Dynamic VLAN assignment is supported through implementation of VLAN Membership Policy Server client capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of IP addresses.

Borderless Experience

• High availability and layer 2 networking

• QoS

• Location awareness and mobility

High Availability and Layer 2 Networking

• Cross-Stack EtherChannel provides the ability to configure Cisco EtherChannel technology across different members of the Cisco FlexStack for high resiliency.

• Flexlink provides link redundancy with convergence time less than 100 ms.

• IEEE 802.1s/w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) provide rapid spanning-tree convergence independent of spanning-tree timers and also offer the benefit of Layer 2 load balancing and distributed processing. Stacked units behave as a single spanning-tree node.

• Per-VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning-tree reconvergence on a per-VLAN spanning-tree basis, without requiring the implementation of spanning-tree instances.

• Switch-port autorecovery (Errdisable) automatically attempts to reactivate a link that is disabled because of a network error.

Enhanced Quality of Service

• Cross-stack QoS allows QoS to be configured across the entire Cisco 2960-S Flexstack.

• 802.1p class of service (CoS) and differentiated services code point (DSCP) field classification are provided, using marking and reclassification on a per-packet basis by source and destination IP address, MAC address, or Layer 4 TCP/UDP port number.

• Cisco control-plane and data-plane QoS ACLs on all ports help ensure proper marking on a per-packet basis.

• Four egress queues per port help enable differentiated management of different traffic types across the stack.

• Shaped Round Robin (SRR) scheduling helps ensure differential prioritization of packet flows by intelligently servicing the ingress queues and egress queues.

• Weighted Tail Drop (WTD) provides congestion avoidance at the ingress and egress queues before a disruption occurs.

• Strict priority queuing helps ensure that the highest-priority packets are serviced ahead of all other traffic.

• Trusted Boundary provides the ability to trust the QoS priority settings if an IP phone is present and to disable the trust setting if the IP phone is removed, thereby preventing a malicious user.

• Rate limiting is provided based on source and destination IP address, source and destination MAC address, Layer 4 TCP/UDP information, or any combination of these fields, using QoS ACLs (IP ACLs or MAC ACLs), class maps, and policy maps.

• Up to 64 aggregate or individual policers are available per Fast Ethernet or GbE port.

Location Awareness and Mobility

• Network visibility and control provide centralized visibility into wired and wireless devices on the network and their location.

• Location-assisted client troubleshooting enables tracking of wired or wireless clients for quick problem resolution.

• Asset tracking and improved security provide centralized inventory of wired and wireless devices and asset management for improved business processes.

• Location based policy allows greater control and visibility. With EnergyWise, power policies can be set up (to reduce the power or shut down the power from a port) based on the location.

• Cisco Emergency Responder (CER) enhances emergency calling from Cisco Unified CallManager. It helps assure that Cisco Unified CallManager sends emergency calls to the appropriate Public Safety Answering Point (PSAP) for the caller's location.

Table 4. Cisco Catalyst 2960-S and 2960 Series Switches with LAN Base Software switch performance and scalability information

Table 5. Dimensions, weight, acoustic, MTBF and environmental range

Note: For Catalyst 2960G-8TC-L, reduce the high range temperature by 5°C.

Table 6. Connectors, LED indicators and Dimensions

Table 7. Management and Standards Support for Cisco Catalyst 2960-S and 2960 Series Switches with LAN Base Software

Table 8. Voltage and power information

Table 9. Power Specifications for Cisco Catalyst 2960-S and 2960 Series Switches with LAN Base Software