Cisco Catalyst WS-C3560X-24PF-L Full English Product Description

1. Short Sales Title (For Quotation & Product Catalog)

2. Official Product Overview

Model Suffix Breakdown

• 3560X: Catalyst 3560-X fixed multilayer platform, modular hot-swappable power supplies, rear modular uplink expansion slot, onboard hardware MACsec 802.1AE link encryption
• 24: Twenty-four 10/100/1000BASE-T full Gigabit copper downlink ports
• PF: P = Integrated high-capacity IEEE 802.3at PoE+ power supply; F = Full high-power 1100W PoE budget variant
• No stacking hardware (StackWise/StackPower) supported for standalone 3560X models
• L: LAN Base lightweight IOS feature set (strict Layer 2 dominant, highly restricted Layer 3 capability)

Core LAN Base Feature Limitations

Power & Uplink Architecture

1. C3KX-NM-1G: 4×SFP Gigabit fiber/copper uplink ports
2. C3KX-NM-10G: 2×SFP+ 10-Gigabit fiber/copper uplink ports
   Modular dual redundant AC power supply slots eliminate single power failure risks for mission-critical converged voice/video networks with heavy PoE load.

Hardware Thermal & Mechanical Design

3. Port & Hardware Specifications

• Downlink Ports: 24 × 10/100/1000BASE-T RJ45 auto-sensing Gigabit copper, auto MDI-X, IEEE 802.3at PoE+ (30W max per port)
• Total PoE Budget: 1100W built-in PoE power subsystem, supports full 24×30W PoE+ concurrent load
• Modular Uplink Slot (Rear): Single expansion slot with two optional hot-swappable network modules
  • C3KX-NM-1G: 4 × SFP 1000BASE-X slots (SX/LX/LH/ZX/CWDM/1000BASE-T SFP compatible)
  • C3KX-NM-10G: 2 × SFP+ 10-Gigabit slots (10G-SR/LR/T)
• Local Out-of-Band Console: RJ45 RS232 serial console + Mini-B USB offline configuration port
• Auxiliary Interfaces: USB Type-A flash storage port, dedicated out-of-band FE management port
• Stacking: No stacking, StackPower, GigaStack or cluster support
• Power Supply: Fixed modular 1100W AC hot-swap unit; secondary redundant power supply optional; input 100–240V AC 50/60Hz; max total power draw 1100W under full PoE load
• Front Panel LED Indicators: Per-port link/activity, speed, duplex, PoE power delivery status; global system fault LED, dual power status indicator
• Mounting Options: Standard 19-inch 1RU rack-mount brackets included; wall-mount adapter optional, desktop rubber anti-slip feet supplied
• Thermal Design: Variable-speed front-to-back fan cooling; operating temperature 0°C ~ +45°C, storage -25°C ~ +70°C, relative humidity 10–85% non-condensing
• Safety & EMI Certifications: CE, FCC Class A, UL listed, VCCI Class A, RoHS compliant, NEBS Level 3 certified
• Physical Dimensions: 445 mm (W) × 44.5 mm (H, 1RU) × 460 mm (D) / 17.5 × 1.73 × 18.0 inches
• Unit Weight: 5.6 kg (12.3 lbs)
• Memory: 256 MB DRAM, 128 MB onboard flash memory
• Switching Fabric: 160 Gbps full-duplex non-blocking capacity
• Forwarding Rate: 65.5 Mpps wire-speed Layer 2 / limited Layer 3 forwarding for 64-byte packets
• MAC Address Table: Up to 12,000 unicast MAC entries
• Maximum Active VLANs: LAN Base hard limit 255 IEEE 802.1Q tagged VLANs (VLAN ID range 1–4094)
• Multicast Groups: 256 IPv4 CGMP snooping groups (no PIM multicast routing support)
• Jumbo Frame Support: Up to 9000 bytes for storage, IPTV and MPLS traffic transmission
• MTBF: 180,000 hours under standard office operating conditions
• Warranty: Cisco Extended Limited Lifetime Hardware Warranty (E-LLW): Next-business-day advance hardware replacement, 90-day complimentary 8×5 TAC technical support

4. Layer 2 + LAN Base Restricted Layer 3 IOS Full Feature Set

Core Layer 2 Switching & QoS Core Functions

• Up to 255 active IEEE 802.1Q tagged VLANs, VTPv2 dynamic VLAN synchronization, MSTP 802.1s multiple spanning tree
• Dual trunk encapsulation: Cisco proprietary ISL trunk + IEEE 802.1Q standard trunk on all uplink ports
• IEEE 802.1p CoS / DSCP multilayer QoS with 4 egress priority queues per port; strict priority scheduling optimized for VoIP voice traffic
• Gigabit EtherChannel link aggregation (LACP / static mode), up to 8-port bundled trunking for uplink redundancy and load balancing
• Rapid STP (802.1w), UplinkFast, BackboneFast, BPDU Guard, Root Guard to eliminate Layer 2 switching loops
• Port security: Static MAC assignment, sticky dynamic MAC learning, port shutdown violation action
• Per-port broadcast/multicast/unicast storm control to mitigate flooding DoS attacks
• Local SPAN port mirroring (remote cross-stack RSPAN disabled due to no stacking hardware)
• CGMP (Cisco Group Management Protocol) to suppress redundant multicast flooding to access ports
• Voice VLAN dedicated VoIP separation, Auto QoS automatic voice traffic marking
• Cisco EnergyWise power management to reduce idle endpoint power consumption
• RMON Groups 1,2,3,9 real-time traffic statistics monitoring
• NTP time synchronization, CDP Cisco Discovery Protocol for device visibility
• Embedded web-based Device Manager, Cisco Network Assistant zero-touch deployment
• Full IPv6 dual-stack Layer 2 switching: IPv6 Snooping, IPv6 ACL, IPv6 QoS marking, IPv6 neighbor discovery

Exclusive LAN Base Limited Layer 3 Routing Hard Restrictions

• Hardware wire-speed IPv4 inter-VLAN routing via SVI switched virtual interfaces
• Static default route, static prefix routing, RIP v1 / RIP v2 only interior gateway protocol
• No OSPF, EIGRP, BGP, PIM multicast routing, HSRP or VRRP gateway redundancy (requires IP Services license upgrade)
• Only basic Layer 3 ingress ACL supported; no policy-based routing (PBR) or WCCP web cache redirection
• Equal-cost multi-path (ECMP) static route load balancing only for static uplink paths
• No full IPv6 Layer 3 dynamic routing (only IPv6 Layer 2 snooping/ACL)

Enterprise Security Feature Suite

• IEEE 802.1X port-based NAC authentication with RADIUS/TACACS+ AAA remote access control
• Hardware MACsec 802.1AE link encryption on all downlink and uplink ports
• SSH v2 encrypted CLI management; SNMPv3 secure monitoring (fallback unencrypted Telnet/SNMPv1/v2c available)
• Combined Layer 2 + Layer 3 ingress access control lists for granular inbound traffic filtering
• Time-based ACL policy scheduling for restricted network access hours
• Private VLAN edge isolation to separate host communication within the same broadcast domain
• Per-port bandwidth policing, traffic rate limiting for switched and routed subnets
• DHCP Snooping, Dynamic ARP Inspection (DAI), IP Source Guard to block IP/MAC spoofing attacks
• Encrypted startup-config, password encryption for local credential storage

5. Full Management Interfaces

1. Local Out-of-Band: RJ45 RS232 serial console + Mini-B USB offline configuration port
2. Secure Remote CLI: SSH v2 encrypted command-line access; fallback unencrypted Telnet
3. Embedded Web GUI: Lightweight browser-based graphical manager for port, VLAN, QoS, PoE and uplink configuration
4. SNMP v1/v2c/v3: Compatible with Cisco Prime, DNA Center and third-party network monitoring platforms
5. Local Storage: 128 MB flash memory for IOS image, startup-config and running-config files; USB Type-A flash port for offline backup

6. Integrated Security Mitigation Suite

• Multi-level privilege CLI access with encrypted local user password storage
• IEEE 802.1X port authentication to validate endpoints before granting LAN access
• Port MAC address security to restrict unauthorized host connection
• STP BPDU guard and root guard to block rogue switches from altering spanning-tree topology
• Broadcast/multicast storm control to suppress flooding-based denial-of-service threats
• Private VLAN edge to isolate peer hosts on same access VLAN
• DHCP Snooping + DAI ARP Inspection + IP Source Guard to eliminate address spoofing attacks
• SSHv2 and SNMPv3 encryption to secure remote switch management traffic over the LAN
• Manual permanent shutdown of unused ports to reduce unauthorized network attack vectors
• Dedicated management VLAN isolation to segregate switch control plane traffic from end-user data
• PoE overload protection logic to shed low-priority port power when total consumption exceeds 1100W budget threshold

7. Typical Deployment Scenarios

1. Medium/Large Enterprise Standalone Full-Power Converged Voice/Data Edge Switch: 24 high-power PoE Gigabit ports power desk IP phones, multi-band enterprise Wi-Fi APs and high-definition PTZ IP cameras; dual-media modular uplink slot provides redundant fiber trunk connections to building core multilayer aggregation switches. LAN Base limited static/RIP inter-VLAN routing eliminates low-cost small router hardware for simple multi-VLAN office segmentation, dual redundant power eliminates single power failure points for mission-critical high-load voice/video converged networks.
2. Multi-Building K-12 Campus Converged Network: Full 1100W PoE budget supports dense multi-classroom deployments with student workstations, classroom VoIP phones and campus-wide wireless access points; quad SFP Gigabit uplinks connect to campus backbone for high-bandwidth IPTV teaching traffic. MSTP prevents broadcast loop failures across departmental VLANs, flat Layer 2 dominant architecture with basic static inter-VLAN routing meets entry-level campus network requirements without expensive full IP Services license investment.
3. Medium Regional Branch Wiring Closet Main Multilayer Switch: Universal high-power PoE ports eliminate separate wall power injectors for all branch voice, wireless and surveillance endpoints; long-distance single-mode fiber uplink via SFP module connects to corporate headquarters data center. LAN Base flat multi-subnet static routing satisfies basic branch network segmentation needs without external dedicated router hardware.
4. Multi-Location Retail Headquarters Secondary Aggregation Switch: Mass full-Gigabit copper capacity powers store IP phones and multi-stream security cameras; multi-path fiber uplinks deliver redundant trunk failover resilience to retail central data center, hardware MACsec link encryption secures payment and surveillance subnet traffic to meet baseline PCI DSS compliance standards.
5. Legacy Distributed Flat Layer 2 Network Refresh Hardware: Drop-in high-PoE replacement for lower-power Catalyst 3560X PoE switches, fully compatible with existing fiber uplink legacy infrastructure, upgrades to full 1100W PoE+ power budget while retaining limited static inter-VLAN Layer 3 routing capability for gradual migration to modern Catalyst 9300 unified access platforms without intermediate router upgrades.

8. Standard Package Contents

Short Commercial Version (For Quotation & Product Catalog)