Cisco Catalyst WS-C2960-24PST-L Full English Product Description

1. Short Sales Title (For Quotation & E-commerce Listing)

2. Official Product Overview

Model Suffix Breakdown

• 2960: Classic Catalyst 2960 standalone fixed non-stackable managed switch platform
• 24: Twenty-four fixed 10/100BASE-TX Fast Ethernet downlink ports
• PST: P = Full IEEE 802.3af PoE support on all 24 access ports; S = two dual-purpose combo Gigabit uplink slots; T = Fast Ethernet copper access ports
• L: LAN Base full-feature IOS image with advanced NAC security, multilayer QoS, anti-spoofing tools and Cisco EnergyWise power optimization

3. Port & Hardware Specifications

• 24 × 10/100BASE-TX RJ45 auto-sensing copper access ports, auto MDI-X, IEEE 802.3x full-duplex flow control, IEEE 802.3af PoE (max 15.4W per port)
• Total integrated PoE power budget: 370W built-in dedicated PoE power supply
• 2 × independent dual-purpose combo Gigabit uplink ports (mutually exclusive per port):
  1. 1×10/100/1000BASE-T RJ45 copper interface per combo port
  2. 1×hot-swappable 1000BASE-X SFP slot per combo port
• 1 × RJ45 RS232 serial console port for out-of-band offline CLI configuration
• No FlexStack stacking capability; supports Cisco CMS cluster management via copper or SFP fiber inter-switch trunk links
• Power supply: Internal fixed autoranging AC input (100–240 VAC 50/60Hz), max total system power consumption 400W including full PoE load
• Rear RPS connector: Compatible with optional Cisco RPS 2300 external redundant power supply for power failure resilience
• Front panel LED indicators: Per-port link/activity, speed, duplex, PoE power delivery status; combo uplink media status, system health, PoE overload fault alarm
• Mounting options: 19-inch 1RU rack-mount brackets included; rubber desktop stand feet
• Thermal design: Active fan cooling for standard indoor wiring closet ambient environments
• Environmental operating range: 0°C to 45°C (32°F–113°F); storage -25°C to 70°C; relative humidity 10–85% non-condensing
• Safety & EMI certifications: CE, FCC Class A, UL listed, VCCI Class A, RoHS compliant
• Physical dimensions: 444.5mm (W) × 43.9mm (H, 1RU) × 236.2mm (D)
• Unit weight: 4.2 kg (9.2 lbs)
• MAC address table capacity: Up to 8,192 MAC entries
• MTBF: 510,000 hours under standard office operating conditions
• Warranty: Cisco Limited Lifetime Hardware Warranty with free IOS software updates

4. Layer 2 Switching, PoE, QoS & LAN Base IOS Full Feature Set

Core Base Switching, Full PoE & QoS Core Functions

• Up to 250 active IEEE 802.1Q tagged VLANs, full VLAN ID range 1–4094, VTPv2 dynamic VLAN synchronization
• IEEE 802.1p CoS / DSCP multilayer QoS with 4 egress priority queues; Strict Priority / WRR scheduling for voice/video/data classification
• IEEE 802.3ad Gigabit EtherChannel static link aggregation for multi-port copper/SFP trunk bundling
• IEEE 802.1D STP + Rapid STP (802.1w), BPDU guard / Root guard to eliminate Layer 2 switching loops
• Port security: Static MAC binding, sticky dynamic MAC learning, port shutdown violation mode
• Broadcast/multicast/unicast storm control to mitigate Layer 2 flooding DoS attacks
• SPAN local port mirroring + RSPAN remote span for cross-switch traffic capture and troubleshooting
• IGMP Snooping v1/v2/v3 to reduce redundant multicast bandwidth consumption for video surveillance and IPTV
• Voice VLAN, Auto QoS for automatic Cisco IP Phone traffic priority marking
• IEEE 802.3af PoE intelligent management: PoE port priority classification, real-time 370W budget monitoring, automatic low-priority port power shutdown under overload protection
• Cisco EnergyWise intelligent port power management to reduce idle PoE and non-PoE device power draw
• Cisco Cluster Management Suite (CMS) single-pane unified management for clustered switch groups
• RMON Groups 1,2,3,9 real-time traffic statistics monitoring
• NTP time synchronization for consistent system log timestamps
• CDP Cisco Discovery Protocol, Cisco IP SAA Service Assurance Agent for end-to-end network performance testing
• Web-based embedded Device Manager for zero-CLI initial deployment

Exclusive Advanced LAN Base Security & Management Features (Not Supported on LAN Lite -S)

• IEEE 802.1X port-based NAC authentication with RADIUS/TACACS+ AAA remote access control
• SSHv2 encrypted remote CLI management; SNMPv3 secure encrypted monitoring
• Layer 2/Layer 3/Layer 4 ingress access control lists (ACLs) for granular inbound traffic filtering
• Private VLAN edge for isolated host segmentation on shared access ports
• Ingress port bandwidth rate limiting and traffic policing
• Time-based ACLs for scheduled differentiated network access policies
• DHCP Snooping + Dynamic ARP Inspection (DAI) + IP Source Guard to mitigate IP/MAC spoofing attacks
• Encrypted local user passwords and encrypted startup-config file storage

5. Full Management Interfaces

1. Local Out-of-Band: RJ45 RS232 serial console port for direct Cisco IOS CLI access without live network connectivity
2. Secure Remote CLI: SSHv2 encrypted command-line access; fallback password-authenticated Telnet
3. Embedded Web GUI: Browser-based Cisco Device Manager visual port, VLAN, QoS and PoE configuration panel
4. SNMP v1/v2c/v3: Standard enterprise monitoring compatible with CiscoWorks and third-party NMS platforms
5. RMON Traffic Analytics: Built-in bandwidth, error and utilization reporting for fault diagnosis and capacity planning
6. Local Storage: 32 MB onboard flash memory to store IOS operating image, startup-config and running-config files

6. Integrated Enhanced Security Suite

• Multi-level privilege CLI access with encrypted local user password storage
• IEEE 802.1X port authentication to validate end-user devices before granting network access
• Port security to restrict unauthorized end-device MAC addresses per access port
• STP BPDU guard and root guard to block rogue unmanaged switches from corrupting Layer 2 topology
• Broadcast storm control to suppress flooding-based denial-of-service threats
• Private VLAN edge to isolate connected endpoints from each other on shared switch ports
• DHCP Snooping + DAI ARP inspection + IP Source Guard to eliminate address spoofing attacks
• SSHv2 and SNMPv3 encryption to secure remote switch management traffic over the LAN
• Manual permanent shutdown of unused ports to reduce unauthorized network attack vectors
• Dedicated management VLAN isolation to segregate switch control plane traffic from end-user data
• PoE overload protection logic to cut power to low-priority PoE ports when total power consumption exceeds 370W budget threshold

7. Typical Deployment Scenarios

• Medium enterprise voice-first access layer switch: 24 full PoE ports power employee Cisco IP phones, wireless APs and desktop PCs; dual combo uplinks support flexible SX/LH fiber or copper Gigabit trunking to building core switches
• Education campus multi-floor building converged network: Full PoE supplies power to student IP phones, classroom wireless access points and campus security IP cameras; fiber SFP uplinks interconnect separate campus buildings over multimode/single-mode fiber
• Medium regional branch office wiring closet core switch: Integrated full PoE eliminates separate power injectors for branch IP phones and surveillance cameras, flexible SFP uplinks provide long-distance fiber backhaul to corporate headquarters
• Retail regional back-office dense user aggregation: PoE ports power POS terminals, wireless APs and security cameras; dual combo uplinks deliver redundant copper/fiber trunk paths to regional retail data center
• Small manufacturing auxiliary workshop LAN: PoE ports power industrial IP surveillance cameras and wireless monitoring APs; SFP fiber uplinks extend the LAN across large production zones

8. Standard Package Contents

Short Commercial Version (For Quotation & Product Catalog)