Cisco Catalyst WS-C2960XR-24PD-I Full English Product Description

1. Short Sales Title (For Quotation & E-commerce Listing)

2. Official Product Overview

Model Suffix Breakdown

• 2960XR: Enhanced modular power stackable Catalyst 2960 platform (XR = eXtended Redundant power, field-replaceable power modules vs fixed power 2960X)
• 24: Twenty-four fixed 10/100/1000 auto-sensing RJ45 all-Gigabit downlink ports, all PoE+ capable
• PD: P = IEEE 802.3at PoE+ support on all 24 access ports; D = Two dual-rate SFP/SFP+ uplink slots (compatible with 1G SFP and 10G SFP+ transceivers); No "F" means limited 370W PoE budget, cannot fully power all ports at 30W concurrently
• I: IP Lite Cisco IOS firmware image, supports basic Layer 3 static inter-VLAN routing, IPv4/IPv6 dual-stack routing capability

3. Port & Hardware Specifications

• 24 × 10/100/1000BASE-T RJ45 auto-sensing all-Gigabit copper access ports, auto MDI-X, IEEE 802.3x full-duplex flow control, IEEE 802.3at PoE+ (max 30W per port)
• Total integrated PoE+ power budget: 370W built-in dedicated PoE supply (supports up to 12×30W PoE+ Class4 devices, or 24×15.4W PoE Class3 devices simultaneously; Perpetual PoE retains power to connected devices during switch reload)Cisco
• 2 × dual-rate hot-swappable uplink slots: Support 1000BASE-X SFP or 10GBASE-X SFP+ transceivers for flexible 1G/10G fiber trunking
• Dual out-of-band console ports: 1×RJ45 RS232 serial console + 1×Mini-USB console port for offline CLI configuration
• Front-panel USB Type-A storage port for external IOS image/config backup
• Dedicated 10/100 Mbps out-of-band Ethernet management port for isolated switch administration
• Rear FlexStack-Plus stacking expansion slot (requires optional FlexStack-Plus module and dedicated stack cables; max 8 switches per stack, 80Gbps stack bandwidth)
• Power architecture: Modular field-replaceable AC power supply, base 640W single supply preinstalled, optional second redundant power module support; input 100–240 VAC 50/60Hz; max total system power consumption 695W with full PoE load
• Rear RPS connector: Compatible with optional Cisco RPS 2300 external redundant power supply for multi-layer power resilience
• Front panel LED indicators: Per-port link/activity, speed, duplex, PoE power delivery priority status; SFP/SFP+ slot operational status, stack link health, dual power supply status, system fault alarm
• Mounting options: 19-inch 1RU rack-mount brackets included; rubber desktop stand feet supplied
• Thermal design: Variable-speed active fan cooling for standard indoor wiring closet ambient environments
• Environmental operating range: 0°C to 45°C (32°F–113°F); storage -25°C to 70°C; relative humidity 10–85% non-condensing
• Safety & EMI certifications: CE, FCC Class A, UL listed, VCCI Class A, RoHS compliant
• Physical dimensions: 444.5mm (W) × 44.5mm (H, 1RU) × 279mm (D)
• Unit weight: 4.3 kg (9.5 lbs)
• MAC address table capacity: Up to 16,384 MAC entries
• Maximum active VLANs: 1023 active IEEE 802.1Q tagged VLANs (limited to only 64 VLANs on entry-level LAN Lite LL firmware)
• MTBF: 540,000 hours under standard office operating conditions
• Warranty: Cisco Enhanced Limited Lifetime Hardware Warranty with full-feature IP Lite IOS software updates

4. Layer 2 Switching, PoE+ & IP Lite IOS Full Feature Set

Core Base Switching, Limited PoE+ & QoS Core Functions

• Up to 1023 active IEEE 802.1Q tagged VLANs, full VLAN ID range 1–4094, VTPv2/VTPv3 dynamic VLAN synchronization, MSTP 802.1s multiple spanning tree
• IEEE 802.1p CoS / DSCP multilayer QoS with 8 egress priority queues; Strict Priority / SRR scheduling for voice/video/data traffic classification
• IEEE 802.3ad Gigabit EtherChannel static link aggregation for multi-port copper/SFP/SFP+ trunk bundling, cross-stack EtherChannel supported via FlexStack-Plus
• IEEE 802.1D STP + Rapid STP (802.1w), BPDU guard / Root guard to eliminate Layer 2 switching loops
• Port security: Static MAC binding, sticky dynamic MAC learning, port shutdown violation mode
• Broadcast/multicast/unicast storm control to mitigate Layer 2 flooding DoS attacks
• Local SPAN port mirroring + cross-stack RSPAN remote span for multi-switch traffic capture and troubleshooting
• IGMP Snooping v1/v2/v3 to reduce redundant multicast bandwidth consumption for video streaming and IPTV
• Voice VLAN, Auto QoS for automatic Cisco IP Phone traffic priority marking
• IEEE 802.3at PoE+ intelligent management: PoE port priority classification, real-time 370W budget monitoring, Perpetual PoE, automatic low-priority port power shutdown under overload protection
• FlexStack-Plus multi-switch stack single-pane unified management, cross-stack configuration synchronization
• Cisco EnergyWise intelligent port power management to reduce idle PoE+ endpoint power draw
• Integrated NetFlow-Lite on all ports for application visibility and capacity planning
• RMON Groups 1,2,3,9 real-time traffic statistics monitoring
• NTP time synchronization for consistent system log timestamps
• CDP Cisco Discovery Protocol, Cisco IP SAA Service Assurance Agent for end-to-end network performance testing
• Web-based embedded Device Manager & Cisco Network Assistant for zero-CLI initial deployment
• Full IPv6 dual-stack Layer 2 switching: IPv6 Snooping, IPv6 ACLs, IPv6 QoS marking, IPv6 neighbor discovery

Exclusive IP Lite Layer 3 Routing Features (Not Available on LAN Base / LAN Lite Images)

• IPv4 & IPv6 static inter-VLAN routing via SVI (Switched Virtual Interface)
• Static default route support for campus/branch core uplink forwarding
• Lightweight routing protocols: RIP v1/v2, OSPF stub, EIGRP stub
• First-hop redundancy: HSRP, VRRP
• Basic Layer 3 access control lists for routed traffic filtering

Enterprise Advanced Security Features

• IEEE 802.1X port-based NAC authentication with RADIUS/TACACS+ AAA remote access control
• SSHv2 encrypted remote CLI management; SNMPv3 secure encrypted monitoring (unencrypted Telnet & SNMPv1/v2c available as fallback)
• Layer 2/Layer 3 ingress access control lists (ACLs) for IPv4 and IPv6 granular inbound traffic filtering
• Time-based ACL traffic policies for scheduled network access restrictions
• Private VLAN edge for isolated host segmentation on shared access ports
• Ingress port bandwidth rate limiting, traffic policing and shaping
• DHCP Snooping + Dynamic ARP Inspection (DAI) + IP Source Guard to mitigate IP/MAC address spoofing attacks
• Advanced multilayer DSCP QoS reclassification for multi-service converged voice/video/data networks
• Encrypted local user passwords and encrypted startup-config file storage

5. Full Management Interfaces

1. Local Out-of-Band: Dual console ports (RJ45 RS232 + Mini-USB) for direct Cisco IOS CLI access without live network connectivity
2. Secure Remote CLI: SSHv2 encrypted command-line access; fallback password-authenticated Telnet
3. Embedded Web GUI: Feature-rich browser-based Cisco Device Manager for port, VLAN, QoS and PoE+ configuration panel
4. Dedicated 10/100 Ethernet out-of-band management port for isolated switch administration
5. SNMP v1/v2c/v3: Encrypted/unencrypted enterprise monitoring compatible with Cisco Prime, DNA Center and third-party NMS platforms
6. RMON & NetFlow-Lite Analytics: Full bandwidth, error and application traffic reporting for comprehensive fault diagnosis and capacity planning
7. Local Storage: 128 MB onboard flash memory to store IOS operating image, startup-config and running-config files (encrypted config storage); external USB storage support for config/image backup

6. Integrated Enhanced Security Suite

• Multi-level privilege CLI access with encrypted local user password storage
• IEEE 802.1X port authentication to validate end-user devices before granting LAN access
• Port security to restrict unauthorized end-device MAC addresses per access port
• STP BPDU guard and root guard to block rogue unmanaged switches from corrupting Layer 2 topology
• Broadcast storm control to suppress flooding-based denial-of-service threats
• Private VLAN edge to isolate connected endpoints from each other on shared access ports
• DHCP Snooping + DAI ARP inspection + IP Source Guard to eliminate address spoofing attacks
• SSHv2 and SNMPv3 encryption to secure remote switch management traffic over the LAN
• Manual permanent shutdown of unused ports to reduce unauthorized network attack vectors
• Dedicated management VLAN isolation to segregate switch control plane traffic from end-user data
• PoE overload protection logic to cut power to low-priority PoE+ ports when total power consumption exceeds 370W budget threshold

7. Typical Deployment Scenarios

• Medium enterprise stackable 10G uplink converged access layer switch: 24 PoE+ ports power mid-scale Wi-Fi 6 APs, premium Cisco IP phones and desktop workstations; dual dual-rate SFP+ uplink slots support flexible 1G fiber or 10G high-speed trunking to building core switches, FlexStack-Plus enables stacking up to 8 units to expand port density without multiple independent management IPs. Modular dual power supply slots deliver equipment uptime resilience for mission-critical office zones, and IP Lite lightweight Layer 3 routing eliminates low-end router costs for basic department VLAN segmentation.
• Education campus multi-floor building high-bandwidth converged network: Limited 370W PoE+ budget simultaneously powers classroom wireless APs, student IP phones and HD 4K security IP cameras; 10G SFP+ uplinks handle large campus video streaming and inter-building multimedia teaching traffic. Redundant power supply slots prevent network outages during single power feed failure.
• Medium regional branch office wiring closet core switch: Universal PoE+ eliminates separate power injectors for all branch voice, wireless and surveillance devices, native dual-rate uplink slots support future 10G core bandwidth upgrades without hardware replacement. Modular replaceable power modules simplify on-site maintenance without full switch replacement.
• Medium retail headquarters back-office mixed aggregation: PoE+ capacity powers retail high-bandwidth wireless APs and multi-stream security cameras; dual SFP+ uplinks provide redundant 10G trunk failover paths to retail central data center, redundant power protects store payment and surveillance systems.
• Medium manufacturing auxiliary workshop edge LAN: PoE+ ports power industrial IP surveillance cameras and wireless monitoring APs; 10G fiber uplinks extend the factory LAN across large production zones with redundant uplink resilience.

8. Standard Package Contents

Short Commercial Version (For Quotation & Product Catalog)