Cisco^® Catalyst^® compact switches (Figure 1) easily extend an intelligent, fully managed Cisco Catalyst wired switching infrastructure, including end-to-end IP and Borderless Network services, with a single Ethernet cable or fiber from the wiring closet. These attractive, small form-factor Gigabit and Fast Ethernet switches are ideal for connecting multiple devices on the retail sales floor and in classrooms, hotels, and factories and for extending wireless LAN networks: wherever space is at a premium and multiple cable runs could be challenging.

Cisco Catalyst 2960-C and 3560-C Series Compact Switches highlights:

●   Extend a highly secure, intelligent, managed Cisco Catalyst infrastructure with a single Ethernet cable or fiber from the wiring closet

●   Support for advanced security and services, including voice, video, and Cisco Borderless Network services, to remote endpoints

●   Power over Ethernet (PoE) pass-through enables the compact switch to draw power from the wiring closet and pass it to end devices (selected models)

●   Attractive, small form factor and fanless operation fit in confined spaces where multiple cable runs could be challenging

●   Easy to deploy, manage and extend the network loop free

●   Enhanced limited lifetime hardware warranty

Switch Configurations

Table 1 compares switch models.

Table 1.       Available Cisco Catalyst Compact Switch models

Cisco Catalyst 2960-C and 3560-C Series Software

Cisco Catalyst 2960-C Series compact switches ship with the LAN Base version of Cisco IOS^® Software, as available on other Cisco Catalyst 2960 Series Switches. Similarly, Cisco Catalyst 3560-C compact switches ship with the IP Base version of Cisco IOS Software, as with other 3560 Series switches. Neither series of compact switches can be upgraded.

Cisco Catalyst 2960-C switches deliver advanced Layer 2 switching with intelligent Layer 2 through 4 services for the network edge, such as voice, video, and wireless LAN services. The IP Base feature set on Cisco Catalyst 3560-C switches adds baseline enterprise services, including support for routed access, Cisco TrustSec^®, media access control security (MACsec), and other Cisco Borderless Network services.

The LAN Base feature set offers enhanced intelligent services that include comprehensive Layer 2 features. The IP Base feature set provides baseline enterprise services in addition to all LAN Base features. IP Base also includes the support for routed access, MACsec, and Open Shortest Path First (OSPF).

Applications

Cisco Borderless Networks and Access Switching

Borderless Networks, a Cisco next-generation architecture, deliver the new workspace experience, connecting anyone, anywhere, using any device, to any resource - securely, reliably, transparently. The Cisco Borderless Networks architecture addresses primary IT and business challenges to help create a truly borderless experience by bringing interactions closer to the employee and customer. Innovations in switching help organizations deliver ease of operation, green efficiency, security, and performance to accelerate the way IT delivers and scales those services on the network.

Cisco Compact Switches for Retail

Major retailers are increasingly moving customer-facing IP-based applications and services to the middle of the sales floor. A typical transaction area on the floor will often include multiple point-of-sale terminals, card readers, IP phones, and printers. Free-standing kiosks, which allow customers to access online catalogs with click-to-chat capabilities and other applications, are being deployed. Cisco Catalyst compact switches extend fully managed IP services, including end-to-end PCI-compliant solutions, to the floor with a single Ethernet cable or fiber. Because of their quiet operation, attractive appearance, and flexible mounting options, they are ideally suited for mounting in confined spaces on the floor.

Cisco Compact Switches for Education

Video and distance learning applications have become a common part of the curriculum for K-12 and higher education. Support for IP phones and secure wired and wireless connectivity in the classroom are also common requirements. Yet schools and universities must often work within limited budgets and aging facilities, making wiring runs from a central point in the building to multiple devices in the classroom cost prohibitive. Cisco Catalyst compact switches extend fully managed IP services to the classroom with a single Ethernet cable or fiber. Quiet operation and flexible mounting options make them ideally suited for classrooms or confined areas nearby.

Cisco Compact Switches Extend Enterprise Networks

Enterprises often look to extend the reach of their networks - to bring wired connectivity to more employees and to support new wireless deployments. Running additional Ethernet cables for individual devices might be impractical, but the same security, services, and management must be supported. Cisco Catalyst 2960-C and 3560-C Series compact switches extend the wired Cisco access infrastructure, 8 or 12 ports at a time, with a single Ethernet cable or fiber, all while delivering the same services as the Cisco Catalyst switches in the wiring closet. PoE, quiet operation, and flexible mounting options allow placement in confined spaces.

Cisco Networked Sustainability: Good for Business, Better for Environment

●   PoE pass-through gives the ability to power PoE end devices through drawing PoE from the wiring closet. The Cisco Catalyst 3560CPD-8PT-S and 2960CPD-8PT-L have eight downlink ports with two PoE input ports that allow it to be powered by another switch. These switches do not need a power supply and receives power over the uplink from an upstream PoE or Cisco Universal Power over Ethernet (Cisco UPOE^™) device, providing deployment flexibility and availability. These switches are ideal for wiring and space-constrained applications.

●   Cisco EnergyWise is an innovative architecture, added to the Cisco Catalyst 3560-C and 2960-C Series compact switches, that enables the measurement of power consumption in the network infrastructure and network-attached devices. EnergyWise encompasses a highly intelligent network-based approach to communicate messages that measure and control energy between network devices and endpoints. The network discovers Cisco EnergyWise-manageable devices, monitors their power consumption, and takes action based on business rules to reduce power consumption.

●   Efficient switch operation: Cisco Catalyst 3560-C and 2960-C Series compact switches use hardware components created by Cisco providing optimum power saving, low-power operations for industry best-in-class power management, and power consumption capabilities. The Cisco Catalyst 3560-C ports are capable of reduced power modes so that ports not in use can move into a lower power utilization state.

●   IEEE 802.3at or PoE+: Available on the Cisco Catalyst 3560-C is the latest in PoE technology, allowing capable devices to be powered with power output up to 30W per port. Table 2 outlines switch models and power capacity for the Cisco Catalyst 3560-C and 2960-C Series compact switches.

Table 2.       Switch PoE and PoE+ Power Capacity

Cisco Operational Excellence: Reducing Operating Costs

Cisco Catalyst 3560-C and 2960-C Series compact switches make deployment easy: reduce switch installation, configuration, troubleshooting time, and operational costs.

●   Cisco Catalyst Smart Operations is a set of features to enhance operational excellence:

◦     Cisco Smart Install is a transparent plug-and-play technology to configure the Cisco IOS Software image and switch configuration without user intervention. Smart Install utilizes dynamic IP address allocation and the assistance of other switches to facilitate installation, providing transparent network plug and play.

◦     Cisco Smart Configuration provides a single point of management for a group of switches and in addition adds the ability to archive and back up configuration files to a file server or switch. A group of switches can be upgraded or configured from a single point in the network.

◦     Cisco Auto SmartPorts provides automatic configuration as devices connect to the switch port, allowing autodetection and plug and play of the device onto the network. It configures the port with predefined configurations encapsulating years of Cisco networking expertise, including security, IP telephony, availability, QoS, and manageability features with minimal effort and expertise.

◦     USB file storage and console for file backup, distribution, and simplified operations allow the user to back up and boot from a USB device and allow for Mini USB console access along with traditional RS‑232 console connectivity.

◦     Cisco Smart Troubleshooting is an extensive array of debug diagnostic commands and system health checks within the switch, including Generic Online Diagnostics (GOLD).

●   Easy-to-Use Deployment and Control Features

◦     Automatic QoS (AutoQoS) simplifies QoS configuration in voice over IP (VoIP) networks by issuing interface and global switch commands to detect Cisco IP phones, classify traffic, and help enable egress queue configuration.

◦     Dynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot server eases switch deployment.

◦     Auto-Negotiation on all ports automatically selects half- or full-duplex transmission mode to optimize bandwidth.

◦     Dynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration across all switch ports.

◦     Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel groups or Gigabit EtherChannel groups to link to another switch, router, or server.

◦     Link Aggregation Control Protocol (LACP) allows the creation of Ethernet channeling with devices that conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP.

◦     Automatic Media-Dependent Interface Crossover (MDIX) automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight-through) is installed.

◦     Unidirectional Link Detection Protocol (UDLD) and Aggressive UDLD allow unidirectional links caused by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces.

◦     Switching Database Manager (SDM) templates for access, routing, and VLAN deployment allow the administrator to easily maximize memory allocation to the desired features based on deployment-specific requirements.

◦     Local Proxy Address Resolution Protocol (ARP) works in conjunction with Private VLAN Edge to minimize broadcasts and maximize available bandwidth.

◦     Internet Group Management Protocol (IGMP) Snooping for IPv4 and IPv6 MLD v1 and v2 Snooping provide fast client joins and leaves of multicast streams and limit bandwidth-intensive video traffic to only the requestors.

◦     Multicast VLAN Registration (MVR) continuously sends multicast streams in a multicast VLAN while isolating the streams from subscriber VLANs for bandwidth and security reasons.

◦     Per-port Broadcast, Multicast, and Unicast Storm Control prevents faulty end stations from degrading overall systems performance.

◦     Voice VLAN simplifies telephony installations by keeping voice traffic on a separate VLAN for easier administration and troubleshooting.

◦     Cisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration across all switches.

◦     Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from any other switch in the same network.

◦     For enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events).

◦     Layer 2 Traceroute eases troubleshooting by identifying the physical path that a packet takes from source to destination.

◦     Trivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by downloading from a centralized location.

◦     Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all intranet switches.

Network Management           

The Cisco Catalyst 3560-C and 2960-C Series Switches offer a superior CLI for detailed configuration and administration. These switches are also supported in the full range of Cisco network management solutions.

Cisco Prime Infrastructure

Cisco Prime^™ network management solutions provide comprehensive network lifecycle management. Cisco Prime Infrastructure provides an extensive library of easy-to-use features to automate the initial and day-to-day management of your Cisco network. Cisco Prime integrates hardware and software platform expertise and operational experience into a powerful set of workflow-driven configuration, monitoring, troubleshooting, reporting, and administrative tools, including:

●   Support for new technologies and services from initial deployment to day-to-day administration and management, such as EnergyWise, identity, Cisco Auto Smartports, Cisco Smart Install, and much more

●   Configuration management tools built from Cisco experience and Cisco Validated Design recommendations

●   Monitoring and troubleshooting capabilities that incorporate Cisco hardware best practices and diagnostics features

●   Automation in managing hardware inventories, security vulnerabilities (PSIRTS), and platform end-of-life and support cycles

For detailed information about Cisco Prime, visit http://www.cisco.com/go/prime.

Cisco Network Assistant

A PC-based network management application designed for small and medium-sized business (SMB) networks with up to 250 users, Cisco Network Assistant offers centralized network management and configuration capabilities. This application also features an intuitive GUI where users can easily apply common services across Cisco switches, routers, and access points.

For detailed information about Cisco Network Assistant, visit http://www.cisco.com/go/cna.

Enhanced Work Space Experience for End Users

Borderless Security

The Cisco Catalyst compact switches provide superior Layer 2 threat defense capabilities for mitigating man-in-the-middle attacks (such as MAC, IP, and ARP spoofing). TrustSec, a primary element of Borderless Security Architecture, helps enterprise customers secure their networks, data and resources with policy-based access control, identity and role-aware networking, pervasive integrity, and confidentiality.

The borderless security is enabled by the following feature sets in the Cisco Catalyst 3560-C and 2960-C Series compact switches:

●   Threat defense

●   Cisco TrustSec

●   Other advanced security features

Threat Defense

Cisco Integrated Security Features are an industry-leading solution available on Cisco Catalyst switches that proactively protects your critical network infrastructure. Delivering powerful, easy-to-use tools to effectively prevent the most common and potentially damaging Layer 2 security threats, Cisco Integrated Security Features provide robust security throughout the network. Cisco Integrated Security Features include Port Security, DHCP Snooping, Dynamic ARP Inspection, and IP Source guard.

●   Port Security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address flooding.

●   DHCP Snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning.

●   Dynamic ARP Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of the ARP protocol.

●   IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between the client's IP and MAC address, port, and VLAN.

Cisco TrustSec

TrustSec secures access to the network, enforces security policies, and delivers standard-based security solutions such as 802.1X enabling secure collaboration and policy compliance. TrustSec capabilities reflect Cisco thought leadership, innovations, and commitment to customer success. These new capabilities include:

●   IEEE 802.1AE MACsec with prestandard 802.1X-REV Key management: industry's first fixed switches with prestandard 802.1X-Rev key management. Available on Cisco Catalyst 3560-C Series Switches, MACsec provides Layer 2, line rate Ethernet data confidentiality and integrity on host facing ports, protecting against man-in-the-middle attacks (snooping, tampering, and replay).

●   Flexible authentication that supports multiple authentication mechanisms including 802.1X, MAC Authentication Bypass, and web authentication using a single, consistent configuration.

●   Open mode that creates a user friendly environment for 802.1X operations.

●   Integration of device profiling technology and guest access handling with Cisco switching to significantly improve security while reducing deployment and operational challenges.

●   RADIUS Change of Authorization and Downloadable ACLs for comprehensive policy management capabilities.

●   802.1X Supplicant with Network Edge Access Transport (NEAT) enables extended secure access where compact switches in the conference rooms have the same level of security as switches inside the locked wiring closet.

Other Advanced Security Features

Other Advanced Security features include but are not limited to:

●   Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users' traffic.

●   Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on appropriate voice and data VLAN.

●   Port-Based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.

●   Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions.

●   Bidirectional data support on the Switched Port Analyzer (SPAN) port allows Cisco Intrusion Detection System (IDS) to take action when an intruder is detected.

●   TACACS+ and RADIUS Authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration.

●   MAC Address Notification allows administrators to be notified of users added to or removed from the network.

●   Multilevel Security on Console Access prevents unauthorized users from altering the switch configuration.

●   Bridge Protocol Data Unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops.

●   Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator's control from becoming Spanning Tree Protocol root nodes.

●   IGMP Filtering provides multicast authentication by filtering out nonsubscribers and limits the number of concurrent multicast streams available per port.

●   Dynamic VLAN Assignment is supported through implementation of VLAN Membership Policy Server client capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of IP addresses.