Cisco Catalyst WS-C3560X-24P-L Full English Product Description

1. Short Sales Title (For Quotation & Product Catalog)

2. Official Product Overview

Model Suffix Breakdown

• 3560X: Catalyst 3560-X fixed multilayer platform, modular hot-swappable power supplies, modular uplink slot, onboard hardware MACsec encryptionCisco
• 24: 24×10/100/1000BASE-T full Gigabit copper downlink ports
• P: Integrated IEEE 802.3at PoE+ power supply (30W per port max)
• L: LAN Base lightweight IOS feature set (entry-level Layer 2 dominant, restricted Layer 3 capability)

Core Feature Limitation of LAN Base

Power & Uplink Design

3. Port & Hardware Specifications

Interface Layout

1. Downlink Ports: 24 × 10/100/1000BASE-T RJ45 auto-sensing Gigabit copper, auto MDI-X, IEEE 802.3at PoE+ (30W per port maximum)
2. Modular Uplink Slot (Rear): Single expansion slot with two optional modules
   • C3KX-NM-1G: 4×hot-swappable SFP 1000BASE-X slots (SX/LX/LH/ZX/1000BASE-T copper SFP)
   • C3KX-NM-10G: 2×hot-swappable SFP+ 10G slots (10G-SR/LR/T)
3. Management Interfaces: RJ45 serial console, Mini-B USB console, USB Type-A storage port, separate out-of-band Fast Ethernet management port

Power & Thermal

• Default power supply: 715W modular AC hot-swap unit; second redundant power supply optional
• Total PoE budget: 715W, dynamic priority power shedding prioritizes voice endpoints during overload
• Cooling: Variable-speed front-to-back fan, adjustable fan speed to reduce acoustic noise
• Operating temperature: 0°C ~ +45°C, storage -25°C ~ +70°C, relative humidity 10–85% non-condensing

Performance Metrics

• Switching fabric: 160 Gbps full-duplex non-blocking capacity
• Forwarding rate: 65.5 Mpps wire-speed Layer 2 / limited Layer 3 forwarding for 64-byte packets
• MAC address table: Up to 12,000 unicast MAC entries
• VLAN capacity: LAN Base hard limit 255 active IEEE 802.1Q tagged VLANs (VLAN ID 1–4094)
• Jumbo frame support: Up to 9000 bytes for storage, IPTV and MPLS traffic

Memory & Firmware

• DRAM: 256 MB
• Flash memory: 128 MB onboard flash for IOS image and configuration files
• Supported IOS releases: 15.0(2)SE, 15.2(2)E universal images (locked to LAN Base feature set)

Physical & Compliance

• Dimensions: 445 mm (W) × 44.5 mm (H, 1RU) × 460 mm (D)
• Unit weight: 5.6 kg (12.3 lbs)
• Certifications: CE, FCC Class A, UL, VCCI, RoHS compliant, NEBS Level 3 certified
• Mounting: Standard 19-inch 1RU rack-mount brackets included, wall-mount adapter optional

Warranty

4. Layer 2 + LAN Base Restricted Layer 3 IOS Full Feature Set

Core Layer 2 Switching & QoS Functions

• Up to 255 active IEEE 802.1Q tagged VLANs, VTPv2 dynamic VLAN synchronization, MSTP 802.1s multiple spanning tree
• Dual trunk encapsulation: Cisco proprietary ISL trunk + IEEE 802.1Q standard trunk on all uplink ports
• IEEE 802.1p CoS / DSCP multilayer QoS, 4 egress priority queues per port; Auto-QoS template dedicated for VoIP voice traffic prioritization
• Gigabit EtherChannel link aggregation (LACP / static mode), up to 8 bundled ports for uplink redundancy and load balancing
• Rapid STP (802.1w), UplinkFast, BackboneFast, BPDU Guard, Root Guard to eliminate Layer 2 switching loops
• Port security: Static MAC assignment, sticky dynamic MAC learning, port shutdown violation action
• Per-port broadcast/multicast/unicast storm control to mitigate flooding DoS attacks
• Local SPAN port mirroring (remote cross-stack RSPAN disabled due to no stacking hardware)
• CGMP (Cisco Group Management Protocol) to suppress redundant multicast flooding to access ports
• Voice VLAN dedicated VoIP separation, Auto QoS automatic voice traffic marking
• Cisco EnergyWise power management to reduce idle endpoint power consumption
• RMON Groups 1,2,3,9 real-time traffic statistics monitoring
• NTP time synchronization, CDP Cisco Discovery Protocol for device visibility
• Embedded web-based Device Manager, Cisco Network Assistant zero-touch deployment
• Full IPv6 dual-stack Layer 2 switching: IPv6 Snooping, IPv6 ACL, IPv6 QoS marking, IPv6 neighbor discovery

Exclusive LAN Base Limited Layer 3 Routing Restrictions

• Hardware wire-speed IPv4 inter-VLAN routing via SVI switched virtual interfaces
• Static default route, static prefix routing, RIP v1 / RIP v2 only interior gateway protocol
• No OSPF, EIGRP, BGP, PIM multicast routing, HSRP or VRRP gateway redundancy (requires IP Services license upgrade)
• Only basic Layer 3 ingress ACL supported; no policy-based routing (PBR) or WCCP web cache redirection
• Equal-cost multi-path (ECMP) static route load balancing for static uplink paths only

Enterprise Security Feature Suite

• IEEE 802.1X port-based NAC authentication with RADIUS/TACACS+ AAA remote access control
• Hardware MACsec 802.1AE link encryption on all downlink and uplink ports
• SSH v2 encrypted CLI management; SNMPv3 secure monitoring (fallback unencrypted Telnet/SNMPv1/v2c available)
• Combined Layer 2 + Layer 3 ingress access control lists for granular inbound traffic filtering
• Time-based ACL policy scheduling for restricted network access hours
• Private VLAN edge isolation to separate host communication within the same broadcast domain
• Per-port bandwidth rate limiting, traffic policing for switched and routed traffic
• DHCP Snooping + Dynamic ARP Inspection (DAI) + IP Source Guard to block IP/MAC address spoofing attacks
• Encrypted startup-config, password encryption for local credential storage

5. Full Management Interfaces

1. Local Out-of-Band: RJ45 RS232 serial console port + Mini-B USB console port for offline configuration without network connectivity
2. Secure Remote CLI: SSH v2 encrypted command-line access; fallback unencrypted Telnet
3. Embedded Web GUI: Lightweight browser-based graphical manager for port, VLAN, QoS, PoE and uplink configuration
4. SNMP v1/v2c/v3: Compatible with Cisco Prime, DNA Center and third-party network monitoring platforms
5. Local Storage: USB Type-A flash port for IOS image, startup-config and running-config file backup

6. Integrated Security Mitigation Suite

• Multi-level privilege CLI access with encrypted local user password storage
• IEEE 802.1X port authentication to validate endpoints before granting LAN access
• Port MAC address security to restrict unauthorized host connection
• STP BPDU guard and root guard to block rogue unmanaged switches from corrupting spanning-tree topology
• Broadcast/multicast storm control to suppress flooding-based denial-of-service threats
• Private VLAN edge to isolate peer hosts on shared access ports
• DHCP Snooping + DAI ARP Inspection + IP Source Guard to eliminate address spoofing attacks
• SSHv2 and SNMPv3 encryption to secure remote switch management traffic over the LAN
• Manual permanent shutdown of unused ports to reduce unauthorized network attack vectors
• Dedicated management VLAN isolation to segregate switch control plane traffic from end-user data
• PoE overload protection logic to shed low-priority port power when total consumption exceeds 715W budget threshold

7. Typical Deployment Scenarios

1. Medium Enterprise Standalone Converged Gigabit Layer 3 Edge Switch: 24 PoE+ Gigabit ports power desk IP phones and single-band Wi-Fi APs; modular SFP/SFP+ uplinks provide redundant fiber trunk connections to building core multilayer aggregation switches. LAN Base basic Layer 3 static/RIP routing eliminates low-cost small router hardware for simple inter-VLAN office segmentation; dual redundant power eliminates single power failure points for mission-critical voice traffic.
2. K-12 Multi-Building Campus Converged Network: Integrated PoE+ design for student desktops and classroom IP phones; modular uplink slot supports multi-path fiber trunk links to campus backbone for IPTV multimedia teaching traffic. MSTP prevents broadcast loop failures across multi-building VLAN domains, limited RIP static routing meets campus flat multi-subnet demands without expensive full IP Services license investment.
3. Medium Regional Branch Wiring Closet Main Multilayer Switch: Universal PoE+ access ports eliminate separate wall power injectors for all branch voice, wireless and surveillance devices; modular uplink media options support long-distance fiber trunking to corporate headquarters. LAN Base routing feature set enables flat multi-VLAN branch design with basic static ECMP load balancing, meeting entry-level enterprise branch security and routing compliance requirements.
4. Multi-Location Retail Headquarters Secondary Aggregation Switch: 24-port PoE+ capacity powers store IP phones and multi-stream security cameras; four Gigabit SFP uplinks deliver multi-path trunk failover resilience to retail central data center, advanced Layer 3 ACLs isolate payment and surveillance subnets to meet PCI DSS compliance standards.
5. Legacy Enterprise Flat Layer 2 Network Refresh Hardware: Drop-in replacement for aging Fast Ethernet Catalyst 3560 non-Gigabit switches, fully compatible with existing ISL trunking legacy infrastructure, adds integrated PoE+ power and basic hardware CEF Layer 3 inter-VLAN routing capability for gradual migration to modern Catalyst 9300 series hardware without intermediate router upgrades.

8. Standard Package Contents

Short Commercial Version (For Quotation & Product Catalog)