Cisco Catalyst WS-C3560CX-8PC-S Full English Product Description

1. Short Sales Title (For Quotation & Product Catalog)

2. Official Product Overview

Model Suffix Breakdown

• 3560CX: Compact small-form-factor Catalyst 3560 multilayer platform with full Gigabit copper ports, fanless passive cooling, hardware CEF Layer 3
• 8: Eight 10/100/1000BASE-T PoE+ downlink ports
• PC: P = Integrated PoE+ power supply; C = Combo dual-media uplink group (2 copper GE + 2 SFP GE)
• S: IP Base standard multilayer IOS firmware (entry-level Layer 3 feature set)
  IP Base IOS delivers only static routing and RIP v1/v2 dynamic routing, basic Layer 3 ACL, no OSPF/EIGRP/BGP/PIM multicast or HSRP/VRRP gateway redundancy; full IP Services dynamic routing suite requires a separate license upgradeCisco. The chassis uses internal fixed AC power supply, no external RPS redundant power connector.

Hardware Design

3. Port & Hardware Specifications

• Downlink Ports: 8 × 10/100/1000BASE-T auto-sensing Gigabit RJ45, auto MDI-X, IEEE 802.3af PoE+ (30W max per port)
• PoE Budget: 240W total integrated PoE supply; dynamic priority power shedding prioritizes voice endpoints during overload
• Uplink Interfaces:
  1. 2 × fixed 10/100/1000BASE-T Gigabit copper uplinks
  2. 2 × hot-swappable independent SFP 1000BASE-X slots (SX/LX/LH/ZX/CWDM/1000BASE-T SFP compatible)
• Local Console: 1×RJ45 serial out-of-band console; no Mini-USB, USB storage port
• Stacking: No stacking, StackPower, GigaStack or cluster support
• Power Supply: Internal autoranging AC 100–240V 50/60Hz; max total power draw 260W at full PoE load
• LED Indicators: Per-port link/activity/speed/PoE status; global system fault LED
• Mounting Options: Wall-mount bracket, half-1RU rack adapter, desktop rubber feet
• Thermal: Fanless passive heat sink cooling, operating temperature 0°C ~ +45°C
• Certifications: CE, FCC Class A, UL, VCCI, RoHS compliant
• Physical Dimensions: 269mm (W) × 44.4mm (H) × 213mm (D)
• Unit Weight: 2.27 kg (5.0 lbs)
• Memory: 512 MB DRAM, 128 MB onboard flash memory
• Switching Fabric: 32 Gbps full-duplex non-blocking capacity
• Forwarding Rate: 17.9 Mpps wire-speed Layer 2 / Layer 3 forwarding for 64-byte packets
• MAC Address Table: Up to 12,000 unicast MAC entries
• VLAN Support: 1005 active IEEE 802.1Q tagged VLANs, VLAN ID range 1–4094
• Multicast Groups: 256 CGMP snooping groups (no PIM routing in IP Base)
• Jumbo Frame: Up to 9198 bytes for storage, IPTV and MPLS traffic
• MTBF: 180,000 hours under standard operating conditions
• Warranty: Cisco Extended Limited Lifetime Warranty (E-LLW)

4. Layer 2 + IP Base Limited Layer 3 IOS Full Feature Set

Core Layer 2 Switching & QoS Functions

• Up to 1005 IEEE 802.1Q tagged VLANs, VTPv2 dynamic VLAN synchronization, MSTP 802.1s multiple spanning tree
• Dual trunk encapsulation: Cisco ISL proprietary trunk + IEEE 802.1Q standard trunk on all uplink ports
• IEEE 802.1p CoS / DSCP multilayer QoS, 4 egress priority queues per port; Auto-QoS template for VoIP voice traffic prioritization
• Gigabit EtherChannel link aggregation (LACP / static mode), up to 8 bundled ports for uplink redundancy
• Rapid STP (802.1w), UplinkFast, BackboneFast, BPDU Guard, Root Guard to eliminate Layer 2 switching loops
• Port security: Static MAC assignment, sticky dynamic MAC learning, port shutdown violation action
• Per-port broadcast/multicast/unicast storm control to mitigate flooding DoS attacks
• Local SPAN port mirroring (remote cross-stack RSPAN disabled due to no stacking hardware)
• CGMP (Cisco Group Management Protocol) to suppress redundant multicast flooding to access ports
• Voice VLAN dedicated VoIP separation, Auto QoS automatic voice traffic marking
• Cisco EnergyWise power management to reduce idle endpoint power consumption
• RMON Groups 1,2,3,9 real-time traffic statistics monitoring
• NTP time synchronization, CDP Cisco Discovery Protocol for device visibility
• Embedded web-based Device Manager, Cisco Network Assistant zero-touch deployment
• Full IPv6 dual-stack Layer 2 switching: IPv6 Snooping, IPv6 ACL, IPv6 QoS marking, IPv6 neighbor discovery

Exclusive IP Base Limited Layer 3 Routing Features (Hardware CEF Accelerated)

• Hardware wire-speed IPv4 inter-VLAN routing via SVI switched virtual interfaces
• Static default route, static prefix routing
• Single interior gateway protocol: RIP v1 / RIP v2 only
• Basic Layer 3 ingress ACL for routed subnet traffic filtering
• Equal-cost multi-path (ECMP) static route load balancing across multiple uplinks
• No OSPF, EIGRP, BGP, PIM multicast routing, HSRP or VRRP gateway redundancy support (requires IP Services license upgrade)

Enterprise Security Feature Suite

• IEEE 802.1X port-based NAC authentication with RADIUS/TACACS+ AAA remote access control
• SSH v2 encrypted CLI management; SNMPv3 secure monitoring (fallback Telnet/SNMPv1/v2c available)
• Combined Layer 2 + Layer 3 ingress access control lists for granular inbound traffic filtering
• Time-based ACL policy scheduling for restricted network access hours
• Private VLAN edge isolation to separate host communication within the same broadcast domain
• Per-port bandwidth policing, traffic rate limiting for switched and routed subnets
• DHCP Snooping, Dynamic ARP Inspection (DAI), IP Source Guard to block IP/MAC spoofing attacks
• Encrypted startup-config, password encryption for local credential storage

5. Full Management Interfaces

1. Local Out-of-Band: RJ45 serial console port for offline configuration without network connectivity
2. Secure Remote CLI: SSH v2 encrypted command-line access; fallback unencrypted Telnet
3. Embedded Web GUI: Lightweight browser-based graphical manager for port, VLAN, QoS, PoE and uplink configuration
4. SNMP v1/v2c/v3: Compatible with Cisco Prime, DNA Center and third-party network monitoring platforms
5. Local Storage: 128 MB flash memory for IOS image, startup-config and running-config files; no external USB storage port

6. Integrated Security Mitigation Suite

• Multi-level privilege CLI access with encrypted local user password storage
• IEEE 802.1X port authentication to validate endpoints before granting LAN access
• Port MAC address security to restrict unauthorized host connection
• STP BPDU guard and root guard to block rogue switches from altering spanning-tree topology
• Broadcast/multicast storm control to suppress flooding-based denial-of-service threats
• Private VLAN edge to isolate peer hosts on same access VLAN
• DHCP Snooping + DAI ARP Inspection + IP Source Guard to eliminate address spoofing attacks
• SSHv2 and SNMPv3 encryption to secure remote switch management traffic over the LAN
• Manual permanent shutdown of unused ports to reduce unauthorized network attack vectors
• Dedicated management VLAN isolation to segregate switch control plane traffic from end-user data
• PoE overload protection logic to shed low-priority port power when total consumption exceeds 240W budget threshold

7. Typical Deployment Scenarios

1. Small Office Standalone Compact Converged Voice/Data Edge Switch: 8 PoE Gigabit ports power desk IP phones and single-band Wi-Fi APs; dual copper + dual SFP Gigabit uplinks provide redundant fiber trunk connections to building core multilayer aggregation switches. IP Base basic Layer 3 routing eliminates low-cost small router hardware for simple inter-VLAN office segmentation; fanless silent design fits open office pods without noise interference.
2. Hotel Guest Room Distributed Edge Switch: Wall-mounted compact deployment inside guest room wiring closets; integrated PoE supplies power to room IP phones and wall-mounted Wi-Fi access points. Isolated per-room VLAN segmentation enhances guest network security, dual SFP fiber uplinks connect back to central hotel core switch.
3. K-12 Small Classroom Converged Network: Fanless silent operation suitable for teaching spaces; PoE ports power classroom VoIP phones, student wireless APs and security cameras. Multiple uplink media options allow fiber trunking to campus backbone, MSTP prevents broadcast loop failures across multi-building VLAN domains.
4. Small Retail Kiosk Wiring Closet Main Multilayer Switch: Mini form factor fits under retail counter; PoE capacity powers store IP phones and POS security cameras, copper uplink connects to retail headquarters central data center. IP Base flat multi-subnet routing meets small branch network requirements without expensive full IP Services license investment.
5. Legacy Distributed Flat Layer 2 Network Refresh Hardware: Drop-in compact replacement for aging Fast Ethernet Catalyst 3560C fanless switches, fully compatible with existing fiber uplink infrastructure, upgrades to full Gigabit wire-speed and integrated PoE while adding hardware CEF Layer 3 inter-VLAN routing capability for gradual migration to modern Catalyst 9000 series switches.

8. Standard Package Contents

Short Commercial Version (For Quotation & Product Catalog)