WS-C3560CG-8PC-S | Cisco Catalyst 3560C Series Gigabit Switch - 8-Port 10/100/1000

The Cisco  Catalyst  3560-C and 2960-C Series compact switches (Figure 1) are small form-factor Gigabit Ethernet and Fast Ethernet switches designed for deployments outside the wiring closet. Enterprise and commercial customers can deliver advanced security services, unified communications, wireless, IP video cameras, and other applications for the office workspace, branch office, classroom, cruise ship, and other wiring-constrained environments.

PoE pass-through: An innovative feature and industry first for passing power from the compact switch to end devices

Media Access Control Security (MACsec) hardware-based encryption

Power over Ethernet Plus (PoE+) for up to 30W per port

USB and console port for file backup and simplified operations

Fanless for silent operation

Enhanced limited lifetime hardware warranty (E-LLW) with next business day (NBD) advance hardware replacement and 90 day access to Cisco Technical Assistance Center (TAC) support

Figure 1. Cisco Catalyst 3560-C and 2960-C Series Compact Switches

Cisco Borderless Networks and Access Switching

Figure 2. Cisco Borderless Network Benefits

Operational excellence: Cisco Catalyst Smart Operations

Sustainability: PoE pass-through to provide PoE to downlink ports using PoE switches in the wiring closet; Cisco EnergyWise to measure, report, and reduce energy usage across the entire organization

Secure business: Intelligent features at the network edge for sophisticated access control lists (ACLs) and identity services with a wide range of authentication methods, data encryption, and Network Admission Control (NAC)-based technology

Workspace experience: Network control and bandwidth optimization for granular rate limiting, ACLs, and multicast video services

Switch Configurations

Table 1. Configurations of Cisco Catalyst 3560-C Compact Switches

Table 2. Configurations of the Cisco Catalyst 2960-C Compact Switches

Cisco Catalyst 3560-C and 2960-C Compact Series Software

Cisco Networked Sustainability: Good for Business, Better for Environment

PoE pass-through gives the ability to power PoE end devices through drawing PoE from the wiring closet. The Cisco Catalyst 3560CPD-8PT-S and 2960CPD-8PT-L have eight downlink ports with two PoE input ports that allow it to be powered by another switch. These switches do not need a power supply and receives power over the uplink from an upstream PoE device, providing deployment flexibility and availability. It is ideal for wiring and space-constraint applications.

Cisco EnergyWise is an innovative architecture, added to the Cisco Catalyst 3560-C and 2960-C Series compact switches, that enables the measurement of power consumption in the network infrastructure and network-attached devices. EnergyWise encompasses a highly intelligent network-based approach to communicate messages that measure and control energy between network devices and endpoints. The network discovers Cisco EnergyWise-manageable devices, monitors their power consumption, and takes action based on business rules to reduce power consumption.

Efficient switch operation: Cisco Catalyst 3560-C and 2960-C Series compact switches use hardware components created by Cisco providing optimum power saving, low-power operations for industry best-in-class power management, and power consumption capabilities. The Cisco Catalyst 3560-C ports are capable of reduced power modes so that ports not in use can move into a lower power utilization state.

IEEE 802.3at or PoE+: Available on the Cisco Catalyst 3560-C is the latest in PoE technology, allowing capable devices to be powered with power output up to 30W per port. Table 3 outlines switch models and power capacity for the Cisco Catalyst 3560-C and 2960-C Series compact switches.

Table 3. Switch PoE and PoE+ Power Capacity

Cisco Operational Excellence: Reducing Operating Costs

Cisco Catalyst Smart Operations is a set of features to enhance operational excellence:

Cisco Smart Install is a transparent plug-and-play technology to configure the Cisco IOS  Software image and switch configuration without user intervention. Smart Install utilizes dynamic IP address allocation and the assistance of other switches to facilitate installation, providing transparent network plug and play.

Cisco Auto SmartPorts provides automatic configuration as devices connect to the switch port, allowing autodetection and plug and play of the device onto the network. It configures the port with predefined configurations encapsulating years of Cisco networking expertise, including security, IP telephony, availability, QoS, and manageability features with minimal effort and expertise.

Cisco Smart Configuration provides a single point of management for a group of switches and in addition adds the ability to archive and back up configuration files to a file server or switch. A group of switches can be upgraded or configured from a single point in the network.

USB file storage and console for file backup, distribution, and simplified operations allow the user to back up and boot from a USB device and allow for Mini USB console access along with traditional RS-232 console connectivity.

Cisco Smart Troubleshooting is an extensive array of debug diagnostic commands and system health checks within the switch, including Generic Online Diagnostics (GOLD).

Easy-to-Use Deployment and Control Features

Automatic QoS (AutoQoS) simplifies QoS configuration in voice over IP (VoIP) networks by issuing interface and global switch commands to detect Cisco IP phones, classify traffic, and help enable egress queue configuration.

Dynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot server eases switch deployment.

Auto-Negotiation on all ports automatically selects half- or full-duplex transmission mode to optimize bandwidth.

Dynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration across all switch ports.

Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel groups or Gigabit EtherChannel groups to link to another switch, router, or server.

Link Aggregation Control Protocol (LACP) allows the creation of Ethernet channeling with devices that conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP.

Automatic Media-Dependent Interface Crossover (MDIX) automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight-through) is installed.

Unidirectional Link Detection Protocol (UDLD) and Aggressive UDLD allow unidirectional links caused by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces.

Switching Database Manager (SDM) templates for access, routing, and VLAN deployment allow the administrator to easily maximize memory allocation to the desired features based on deployment-specific requirements.

Local Proxy Address Resolution Protocol (ARP) works in conjunction with Private VLAN Edge to minimize broadcasts and maximize available bandwidth.

Internet Group Management Protocol (IGMP) Snooping for IPv4 and IPv6 MLD v1 and v2 Snooping provide fast client joins and leaves of multicast streams and limit bandwidth-intensive video traffic to only the requestors.

Multicast VLAN Registration (MVR) continuously sends multicast streams in a multicast VLAN while isolating the streams from subscriber VLANs for bandwidth and security reasons.

Per-port Broadcast, Multicast, and Unicast Storm Control prevents faulty end stations from degrading overall systems performance.

Voice VLAN simplifies telephony installations by keeping voice traffic on a separate VLAN for easier administration and troubleshooting.

Cisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration across all switches.

Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from any other switch in the same network.

For enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events).

Layer 2 Traceroute eases troubleshooting by identifying the physical path that a packet takes from source to destination.

Trivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by downloading from a centralized location.

Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all intranet switches.

Advanced, Intelligent Network Management Tools

CiscoWorks LAN Management Solution

Support for new technologies and services from initial deployment to day-to-day administration and management, such as EnergyWise, Identity, Cisco Auto Smartports, Cisco Smart Install, and much more

Configuration management tools built from Cisco experience and Cisco Validated Design recommendations

Monitoring and troubleshooting capabilities that incorporate Cisco hardware best practices and diagnostics features

Automation in managing hardware inventories, security vulnerabilities (PSIRTS), and platform end-of-life and support cycles

Enhanced Work Space Experience for End Users

Borderless Security

Threat defense

Cisco TrustSec

Other advanced security features

Threat Defense

Port Security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address flooding.

DHCP Snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning.

Dynamic ARP Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of the ARP protocol.

IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between the client's IP and MAC address, port, and VLAN.

Cisco TrustSec

IEEE 802.1AE MACsec with prestandard 802.1X-REV Key management: industry's first fixed switches with prestandard 802.1X-Rev key management. Available on Cisco Catalyst 3560-C Series Switches, MACsec provides Layer 2, line rate Ethernet data confidentiality and integrity on host facing ports, protecting against man-in-the-middle attacks (snooping, tampering, and replay).

Flexible authentication that supports multiple authentication mechanisms including 802.1X, MAC Authentication Bypass, and web authentication using a single, consistent configuration.

Open mode that creates a user friendly environment for 802.1X operations.

Integration of device profiling technology and guest access handling with Cisco switching to significantly improve security while reducing deployment and operational challenges.

RADIUS Change of Authorization and Downloadable Calls for comprehensive policy management capabilities.

802.1X Supplicant with Network Edge Access Transport (NEAT) enables extended secure access where compact switches in the conference rooms have the same level of security as switches inside the locked wiring closet.

Other Advanced Security Features

Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users' traffic.

Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on appropriate voice and data VLAN.

Port-Based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.

Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions.

Bidirectional data support on the Switched Port Analyzer (SPAN) port allows Cisco Intrusion Detection System (IDS) to take action when an intruder is detected.

TACACS+ and RADIUS Authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration.

MAC Address Notification allows administrators to be notified of users added to or removed from the network.

Multilevel Security on Console Access prevents unauthorized users from altering the switch configuration.

Bridge Protocol Data Unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops.

Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator's control from becoming Spanning Tree Protocol root nodes.

IGMP Filtering provides multicast authentication by filtering out nonsubscribers and limits the number of concurrent multicast streams available per port.

Dynamic VLAN Assignment is supported through implementation of VLAN Membership Policy Server client capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of IP addresses.

Table 4. Cisco Catalyst 3560-C and 2960-C Series Compact Switch Hardware

Table 5. Power Specifications for Cisco Catalyst 3560-C and 2960-C Series Compact Switch

Table 6. Management and Standards Support for Cisco Catalyst 3560-C and 2960-C Series Compact Switch

Table 7. Safety and Compliance

Safety Compliance and Product Approval Status

Cisco Enhanced Limited Lifetime Hardware Warranty

Table 8. Enhanced Limited Lifetime Hardware Warranty

Software Policy for Cisco Catalyst 3560-C and 2960-C Series Compact Switches

Cisco and Partner Services for Next-Generation Cisco Catalyst Compact Switches

Table 9. Technical Services Available for Cisco Catalyst 3560-C and 2960-C Series Compact Switches