Cisco Catalyst WS-C3560G-24TS-E Full English Product Description

1. Short Sales Title (For Quotation & Product Catalog)

2. Official Product Overview

Model Suffix Breakdown

• 3560G: Catalyst 3560 fixed multilayer platform with native hardware CEF Layer 3 forwarding and full Gigabit copper access ports
• 24: Twenty-four fixed 10/100/1000BASE-T RJ45 copper downlink ports
• TS: T = Gigabit copper access ports; S = dedicated independent SFP Gigabit uplink expansion slots
• No PWR: Zero integrated inline PoE power circuits
• E: IP Services full enterprise multilayer IOS firmware (premium feature set)
  IP Services IOS delivers complete unicast/multicast dynamic routing protocols, HSRP/VRRP first-hop redundancy, policy-based routing (PBR), WCCP web cache redirection and full IPv6 dynamic routing, all locked out of lightweight IP Base software image. The chassis uses a fixed internal single AC power supply with a rear dedicated RPS connector compatible with Cisco RPS 675 external redundant power systems to eliminate single power failure risks for mission-critical multi-subnet high-speed converged networksCisco.

3. Port & Hardware Specifications

• 24 × 10/100/1000BASE-T RJ45 auto-sensing Gigabit access ports, auto MDI-X, IEEE 802.3x full-duplex flow control, no PoE power circuits
• Uplink Interfaces: 4 × hot-swappable independent SFP Gigabit slots (1000BASE-X), compatible with Cisco SFP modules: 1000BASE-SX, LX/LH, ZX, CWDM, 1000BASE-T copper SFP
• Local Out-of-Band Console: 1×RJ45 RS232 serial console port; no Mini-USB console, front USB storage port or dedicated out-of-band management Ethernet
• Stacking: No stacking hardware, StackPower/GigaStack/switch clustering not supported, standalone operation only
• Power architecture: Fixed internal integrated AC power supply, input 100–240 VAC autoranging 50/60Hz; max total power consumption 100W under full load; rear RPS connector compatible with Cisco RPS 675 external redundant power supply
• Front panel LED indicators: Per-port link/activity, speed, duplex; SFP uplink media status, global system fault alarm, local/RPS dual power status indicator
• Mounting options: 19-inch 1RU rack-mount brackets included; wall-mount capable, desktop rubber anti-slip feet supplied
• Thermal design: Variable-speed active fan cooling
• Environmental operating range: 0°C to 45°C (32°F–113°F); storage -25°C to 70°C; relative humidity 10–85% non-condensingCisco
• Safety & EMI certifications: CE, FCC Class A, UL listed, VCCI Class A, RoHS compliant
• Physical dimensions: 445 mm (W) × 44.5 mm (H, 1RU) × 378 mm (D) / 17.5 × 1.73 × 14.9 inches
• Unit weight: 5.44 kg (12 lbs)
• MAC address table capacity: Up to 12,000 unicast MAC entries
• Maximum active VLANs: 1005 active IEEE 802.1Q tagged VLANs, full VLAN ID range 1–4094
• Multicast Groups: Up to 1024 IPv4 CGMP snooping / PIM multicast routing groups
• Layer 3 CEF Routes: Up to 11,000 IPv4 routing entries
• MTBF: 180,000 hours under standard office operating conditions
• Warranty: Original Cisco Limited Lifetime Hardware Warranty (EoS, only third-party refurbished hardware support available)

4. Layer 2 + Full IP Services Multilayer IOS Full Feature Set

Core Layer 2 Switching & QoS Core Functions

• Up to 1005 active IEEE 802.1Q tagged VLANs, VTPv2 dynamic VLAN synchronization, MSTP 802.1s multiple spanning tree
• Dual trunking standards: Cisco proprietary ISL trunking + IEEE 802.1Q open-standard trunking on all four SFP Gigabit uplink ports
• IEEE 802.1p CoS / DSCP multilayer QoS with 4 egress priority queues per port; strict priority scheduling optimized for VoIP voice traffic
• Gigabit EtherChannel link aggregation, up to 8-port bundled trunking for fault tolerance and aggregated backbone bandwidth
• IEEE 802.1D STP + Rapid STP (802.1w), UplinkFast, BackboneFast, BPDU guard, root guard to eliminate Layer 2 switching loops
• Port security: Static MAC binding, sticky dynamic MAC learning, port shutdown violation mode
• Per-port broadcast/multicast/unicast storm control to mitigate Layer 2 flooding DoS attacks
• Local SPAN port mirroring (cross-stack RSPAN remote span disabled due to no stacking hardware)
• Cisco CGMP (Cisco Group Management Protocol) to suppress unnecessary multicast flooding to access ports
• Voice VLAN, Auto QoS for automatic Cisco IP Phone traffic priority marking
• Cisco EnergyWise power management to reduce idle endpoint power draw and cut facility energy cost
• RMON Groups 1,2,3,9 real-time traffic statistics monitoring
• NTP time synchronization for consistent system log timestamps
• CDP Cisco Discovery Protocol for end-to-end network device visibility
• Web-based embedded Device Manager & Cisco Network Assistant for zero-touch initial deployment
• Full IPv6 dual-stack Layer 2 switching: IPv6 Snooping, IPv6 ACLs, IPv6 QoS marking, IPv6 neighbor discovery

Exclusive IP Services Full Multilayer Layer 3 Routing Features (Hardware CEF Accelerated, Not Available in IP Base SMI)

• Hardware accelerated IPv4 / IPv6 inter-VLAN routing via SVI (Switched Virtual Interface)
• Static routing, default route support for campus/branch core uplink forwarding
• Complete interior gateway protocols: RIP v1/v2, OSPF, EIGRP, EIGRPv3 for IPv6
• Exterior gateway protocol: BGPv4 for IPv4 inter-domain routing
• Multicast routing suite: PIM sparse/dense mode, DVMRP tunneling, full IPv6 multicast routing
• First-hop redundancy protocols: HSRP, VRRP for IPv4 and IPv6 gateway redundancy
• Policy-Based Routing (PBR) for flexible traffic steering based on ACL match criteria
• WCCP v2 web cache redirection support for centralized web proxy deployments
• Layer 3 ingress / egress access control lists for routed traffic filtering
• Equal-cost multi-path (ECMP) routing for Layer 3 load balancing across multiple uplinks
• Layer 3 port security and traffic policing for routed edge subnet isolation

Enterprise Advanced Security Features

• IEEE 802.1X port-based NAC authentication with RADIUS/TACACS+ AAA remote access control
• SSHv2 encrypted remote CLI management; SNMPv3 secure encrypted monitoring (unencrypted Telnet/SNMPv1/v2c available as fallback)
• Combined Layer 2 + Layer 3 ingress access control lists (ACLs) for granular inbound traffic filtering
• Time-based ACL traffic policies for scheduled network access restrictions
• Private VLAN edge for isolated host segmentation on shared access ports
• Ingress port bandwidth rate limiting, traffic policing and shaping for both switched and routed traffic
• DHCP Snooping + Dynamic ARP Inspection (DAI) + IP Source Guard to mitigate IP/MAC address spoofing attacks
• Encrypted local user passwords and encrypted startup-config file storage

5. Full Management Interfaces

1. Local Out-of-Band: RJ45 RS232 serial console port for direct CLI access without live network connectivity
2. Secure Remote CLI: SSHv2 encrypted command-line access; fallback password-authenticated Telnet
3. Embedded Web GUI: Lightweight browser-based Device Manager for port, VLAN, QoS and uplink configuration panel
4. SNMP v1/v2c/v3: Encrypted/unencrypted enterprise monitoring compatible with Cisco Prime, DNA Center and third-party NMS platforms
5. Local Storage: 32 MB onboard flash memory to store IOS operating image, startup-config and running-config files (encrypted config storage; no external USB backup port)

6. Integrated Enhanced Security Suite

• Multi-level privilege CLI access with encrypted local user password storage
• IEEE 802.1X port authentication to validate end-user devices before granting LAN access
• Port security to restrict unauthorized end-device MAC addresses per access port
• STP BPDU guard and root guard to block rogue unmanaged switches from corrupting Layer 2 topology
• Broadcast storm control to suppress flooding-based denial-of-service threats
• Private VLAN edge to isolate connected endpoints from each other on shared access ports
• DHCP Snooping + DAI ARP Inspection + IP Source Guard to eliminate address spoofing attacks
• SSHv2 and SNMPv3 encryption to secure remote switch management traffic over the LAN
• Manual permanent shutdown of unused ports to reduce unauthorized network attack vectors
• Dedicated management VLAN isolation to segregate switch control plane traffic from end-user data
• No PoE hardware, so no PoE overload protection logic required

7. Typical Deployment Scenarios

1. Medium Enterprise Standalone Full-Gigabit Layer 3 Edge Switch: 24 Gigabit copper ports connect high-speed employee workstations and externally powered Cisco IP phones; four independent SFP Gigabit uplinks provide redundant fiber trunk connections to building core multilayer aggregation switches. Full IP Services dynamic routing suite (OSPF/EIGRP/BGP/HSRP/PIM) eliminates standalone router hardware for multi-subnet campus segmentation. RPS redundant power eliminates single power failure risks for mission-critical high-speed office traffic.
2. K-12 Multi-Building Campus Converged Network: Non-PoE full-Gigabit design for student desktops and classroom IP phones; quad SFP Gigabit uplinks provide separate redundant trunk links to campus backbone for IPTV multimedia teaching traffic. Full PIM multicast routing optimizes video broadcast delivery across multi-building VLAN domains, MSTP and storm control prevent broadcast loop failures.
3. Medium Regional Branch Wiring Closet Main Multilayer Switch: Universal non-PoE high-speed access ports for branch office workstations and VoIP phones; four-media SFP uplinks support long-distance fiber trunking to corporate headquarters. Complete IP Services routing suite enables multi-subnet branch design with HSRP gateway redundancy, meeting enterprise branch security and routing compliance requirements without extra router investment.
4. Multi-Location Retail Headquarters Secondary Aggregation Switch: All Gigabit copper capacity connects store POS terminals and administrative desktops; four Gigabit SFP uplinks deliver multi-path trunk failover resilience to retail central data center, advanced Layer 3 ACLs isolate payment and surveillance subnet traffic to meet PCI DSS compliance standards.
5. Legacy Enterprise Flat Layer 2 Network Refresh Secondary Edge Hardware: Drop-in replacement for aging Fast Ethernet Catalyst 3560 non-Gigabit switches, fully compatible with existing ISL trunking legacy core infrastructure, equipped with complete dynamic Layer 3 routing to support gradual migration to modern Catalyst 9000 series hardware without intermediate router upgrades.

8. Standard Package Contents

Short Commercial Version (For Quotation & Product Catalog)