Network Security The Cisco Catalyst 2960-X Series Switches provide a range of security features to limit access to the network and mitigate threats, including ‘+ MAC-based VLAN assignment enables different users to authenticate on different VLAN. This feature enables each user to have a different data VLAN on the same interface. + Cisco TrustSee® uses SXP to simplify security and policy enforcement throughout the network. For more information about Cisco TrustSec securiy solutions, vist cisco.comigo/TrustSec, ‘+ Comprehensive 802.1X Features to control access to the network, including Flexible Authentication 802.1x Monitor Mode, and RADIUS Change of Authorization. + IPV6 First-Hop Security onhances Layer-2 and Layer-3 network access from proliferating IPv6 devices especially BYOD devices. It protects against rogue router advertisements, address spooting, fake DHCP replies and other risks introduced by IPv6 technology. + Device Sensor and Device Classifier enable seamless versatile device profiles including BYOD devices. They also enable Cisco Identity Services Engine (ISE) to provision identity based security polices. This feature is available on both the 2960-X and the 2980-XR product families. ‘+ Cisco Trust Anchor Technology enables easy distribution of a single universal image forall models of Catalyst 2960-X by verifying the authenticity of lOS images, This technology allows the switch to perform 108 integrity checks at bootup by verifying the signature, verifying the Trusted Asset under Management and authenticating the license. ‘+ Cisco Threat Defense features including Port Security, Dynamic ARP Inspection, and IP Source Guard. ‘+ Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turing a broadcast segment into a nonbroadeast multi access like segment. This feature is available in IP-Lite feature set only. * Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ trafic. “+ Unicast Reverse Path Forwarding (uRPF) feature helps mitigate problems caused by the introduction of malformed or forged (spoofed) IP source address into a network by discarding IP packets that lack a verifiable IP source address. This feature is available in IP-Lite feature set only. ‘+ Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on appropriate voice and data VLAN. is (ACLs) for IPv8 and IPv4 for security and QoS ACES. * VLAN ACLS on all VLANs prevent unauthorized data flows from being bridged within VLANs. + Access Control * Router ACLs define security policies on routed interfaces for control-plane and data-plane traffic, IPvS ACLs can be applied to fit IPv6 traffic. © Port-based ACLS for Layer 2 interfaces allow security policies to be applied on individual switch ports ‘+ Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3 (SNMPV3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions, ‘SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software Image because of U.S, export restrictions. (©2017 cisco anor ts alates Alrighsresoves. Ths document iso Pui oman Page 4ot27‘+ Switched Port Analyzer (SPAN), with bidirectional data support, allows Cisco Intrusion Detection System (DS) to take action when an intruder is detected. + TACAGS+ and RADIUS authentication facilitates centralized control ofthe switch and restricts Unauthorized users from altering the configuration + MAG Address Notification allows administrators to be notified of users added to or removed from the network, ‘+ Multilevel security on console access prevents unauthorized users from altering the switch configuration. ‘+ Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree Port Fast-enabled interfaces when BPDUs are received to avoid accidental topology loops. “+ Spanning Tree Root Guard (STRG) prevents edge devices notin the network administrator's control from becoming Spanning Tree Protocol root nodes. ‘+ IGMP filtering provides muticast authentication by fitering out nonsubscribers and limits the number of concurrent multicast streams avallable per port. ‘+ Dynamle VLAN assignment is supported through implementation of VLAN Membership Policy Server client capabilty to provide flexibilty in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of IP addresses, Redundancy and Resiliency Cisco Catalyst 2960-X Series Switches offer @ number of redundancy and resiliency features to prevent outages and help ensure that the network remains available: ‘+ Cross-stack EtherChannel provides the ability to configure Cisco EtherChannel technology across. different members ofthe stack for high resileney. ‘+ Flexlink provides link redundancy with convergence time less than 100 millseconds. ‘+ IEEE 802.1s/w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) provide rapid spanning-troe convergence independent of spanning-tree timers and algo offer the benefit of Layer 2 load balancing and distrbuted processing. Stacked units behave as a single spanning-tree node. “+ Per-VLAN Rapid Spanning Tree (PVRST#) allows rapid spanning-tree reconvergence on a per-VLAN spanning-tree basis, without requiring the implementation of spanning-ree instances. + Cisco Hot Standby Router Protocol (HSRP) is supported to create redundant, failsafe routing topologies in 2960-XR IP-Lite SKUs. ‘+ Switch-port auto-recovery (Error Disable) automaticaly attempts to reactivate a link that is disabled because of a network error. + Power redundancy with an optional second power supply on 2960-XR models, or with an external RPS on 2960-X madels. Enhanced Quality of Service The Cisco Catalyst 2960-X Series Switches offers inteligent trafic management that keeps everything lowing ‘smoothly. Flexible mechanisms for marking, classification, and scheduling deliver superior performance for data, voice, and video trafic, all at wire speed. Primary QoS features include: + Upto eight egress queues per port and strct priority queuing so that the highest priory packets are serviced ahead of al other traffic. (©2017 cisco anor ts alates Alrighsresoves. Ths document iso Pui oman Page Sot27+ Shaped Round Robin (SRR) scheduling and Weighted Tail Drop (WTO) congestion avoidance + Flow-based rate limiting and upto 256 aggregate or individual polices per port + 802.1p class of service (CoS) and Differentiated Services Code Point (OSCP) classification, with marking and reclassification on a perpacket basis by source and destination IP address, MAC address, or Layer 4 TCPIUDP port number + Cross-stack QoS to alow Qos to be configured across a stack of 2960-X series switches. + The Cisco committed information rate (CIR) function provides bandwidth in increments as low as 8 Kbps. + Rate limiting is provided based on source and destination IP address, source and destination MAC address, Layer 4 TCPIUDP information, or any combination ofthese folds, using QoS ACLs (IP ACLs or MAC ACLs), class maps, and policy maps. Cisco Catalyst 2960-X Series Switching Database Manager ‘Switching database manager (SOM) templates for LAN Base and IP Lite licenses allows the administrator to automaticaly optimize the tomary content-addressable memory (TCAM) allocation to the desired features based on deployment-specific requirements. MAC, routing, security, and QoS scalability numbers depend on the type of template used inthe switch Please refer to the SDM template reference link for more information: hitouiwmw.cisco,com/e/enlusitd/docs/switchestan/catalyst2960usofware/15- 0.2 EXisystem managelconfiquration quide/b sm 152ex 2960-x calb sm 152ex 2960- xc chapter 0100.ntm Table3. Cisco Catalyst 2860-X Family LAN Lite and LAN Base Scalability Numbers oT PT Unicast MAC Addresses 18K 10 IPv4 Unicast Direct Routes 320 2« IP Unicast indirect Routes 2 1K IP¥6 Unicast Direct Routes 28 2« IP¥6 Unicast iniact Routes ° 1K [Pv Muticast Routes and IGMP Groups 1K: 1K IPv6 Muticast Groups * * IPv4 aos ACES oa 00 IPv6 Ges ACES 256 00 IPv4 Security ACES 258 25 IPv6 Securty ACES 255 ws Table 4. Cisco Catalyst 2860-XR Family IP Lite Scalability Numoers Pree ow Tria crus oe Unicast MAG Addresses 18 18K IPv4 Unicast Dect Routes aK 250 1K [Pv Unieastindact Rotes 125K 20 « IPy6 Unicast indirect Rovtes 125K 20 [Pv Mueast Routes and GMP 1K 1« 1k ‘Groups (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. Page Sof27Figure 2. Cisco FlexStack-Plus Switen Stack Power Supply The Catalyst 2960-X switches comes with one fixed power-supply and options for an external redundant power supply source (RPS2300) The Catalyst 2960-XR switches support dual redundant power supplies. The Catalyst 2960-XR ships with one power supply by default. The second power supply can be purchased at the time of ordering the switch or as a spare. These power supplies have in-built fans to provide cooling, Seas ‘The following table shows the different power supplies available in these switches and the available PoE power. Figure 3. 2960-XR Family Power Supply Table 7. 2960-XR Default Power Supply Configurations wena: wee: cme a a ieee essen) vecounccaros rnc nnne ve wpe! (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. Page 8of27Operational Simplicity Features (©2017 cisco anor ts alates Alrighsresoves. Ths document iso Pui oman Pas Cisco AutoSecure provides a single-ine CLI to enable base line security features (Port Security, DHCP. snooping, DAI). This feature simplifies security configurations with a single touch, Dynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot server eases switch deployment. Stacking master configuration management and Cisco FlexStack Plus technology helps ensure that all switches are automaticaly upgraded when the master switch receives a new software version. Automatic software version checking and updating help ensure that all stack members have the same software ‘Autonegotiation on al ports automatically selects hall-or ful-duplex transmission mode to optimize bandwidth Dynamic Trunking Protocol (DTP) faciliates dynamic trunk configuration across all switch ports. Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel® groups or Gigabit EtherChannel groups to link to another switch, router, or server Link Aggregation Control Protocol (LACP) allows the creation of Ethemet channeling with devices that conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP. ‘Automatic media lependent interface crossover (MDIX) automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight-through) is installed Unidirectional Link Detection Protocol (UDLD) and Aggressive UDLD allow unicirectional links caused by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces. Switching Database Manager (SDM) templates for access, routing, and VLAN deployment allow the administrator to easily maximize memory allocation to the desired features based on deployment-specific requirements. Local Proxy Address Resolution Protocol (ARP) works in conjunction with Private VLAN Eidge to minimize broadcasts and maximize available bandwidth. jon allows VLAN1 to be disabled on any individual VLAN trunk. ‘Smart Mutticast, with Cisco FlexStack-Plus technology, allows the Cisco Catalyst 2960-X Series to offer, greater efficiency and support for more multicast data streams such as video by putting each data packet into the backplane only once. Internet Group Management Protocol (IGMP) Snooping for IPv4 and IPv6 MLD v1 and v2 Snooping provide fast client joins and leaves of multicast streams and limit bandwidth-intensive video trafic to only the requestors, VLAN1 minimizs Multicast VLAN Registration (MVR) continuously sends multicast streams in a multicast VLAN wile isolating the streams from subscriber VLANs for bandwidth and security reasons. Per-port broadcast, multicast, and unicast storm control prevents faulty end stations from degrading overall systems performance. Voice VLAN simples telephony installations by keeping voice traffic on a separate VLAN for easier ‘administration and troubleshooting Cisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration across all switches. wtetzr‘+ Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from any other switch in the same network ‘+ For enhanced trafic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events) + Layor 2 trace route eases troubleshooting by identifying the physical path that a packet takes from source to destination + Trivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by downloading {rom a centralized location, + Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all inanet switches. Power Management The 2960-X switches offer a range industry leading features for effective energy efficiency and energy ‘management. 2960-X Series are the greenest switches in the industry. ‘Switch Hibernation Mode (SHM) is an industry frst and available on all 2960-X series switches. This feature puts the switeh in ultra low power mode during periods of non-operation such as nights or weekends. Switch Hibernation Mode on the 2960-X switches can be scheduled using Cisco EnergyWise compliant management sofware, IEEE 802.3az EEE (Enorgy Efficiont Ethernet) enables ports to dynamically sense idle periods between trafic bursts and quickly switch the interfaces into a low power idle mode, reducing power consumption, Cisco EnergyWise policies can be used to control the power consumed by PoE-powered endpoints, desktop and data-center IT equipment, and a wide range of building infrastructure. Cisco EnergyWise technology is included on all Cisco Catalyst 2960-X Series Switches. For more information about Cisco EnergyWise, visit cisco.com/aoleneraywise, Network Management The Cisco Catalyst 2960-XSeries Switches offer a superior CL for detailed configuration and administration. 2980-X Series Switches are also supported inthe full range of Cisco network management solutions. Cisco Prime Infrastructure Cisco Prime” network management solutions provide comprehensive network fecycle management. Cisco Prime Infrastructure provides an extensive library of easy-o-use features to automate the inal and day-to-day ‘management of your Cisco network. Cisco Prime integrates hardware and software platform expertise and ‘operational experience into a powerful set of workflow-driven configuration, monitoring, troubleshooting, reporting, and administrative tools For detailed information about Cisco Prime, vist cisco. com/goiorime, Cisco Network Assistant ‘A Cisco network management application designed for small and medium-sized business (SMB) networks with up to 250 users that runs on PCs, tablets and even smart phones, Cisco Network Assistant offers centralized network ‘management and configuration capabilites. This application also features an intulve GUI where users can easily apply common services across Cisco switches, routers, and access points. For detailed information about Cisco Network Assistant, visit cisco.comigo/ena, (©2017 cisco anor ts alates Alrighsresoves. Ths document iso Pui oman Page W20t27Defense Defense establishments often look to an access switch that is portable in mobile units. These units require multiple network access devices, some of them residing in inconvenient locations in the mobile unit that requires being powered by the switoh, reducing number of cables to that location and reducing possible failure sources. Tho switch is expected to be very quiet and have longer MTBF rates, which is served by the 2960X coo! switch. Technical Specifications Table 10, Cisco Catalyst 2950-X Series Hardware Flash memory 128 MB or LAN Bas0& IP Lite SKUs, 64 MB forLAN Lit SKU. DRAM 512 MB for LAN Base and 256 for LAN Ute cpu APNG GOON dl core ‘Console Ports Use (Type), Ethernet (Rs) ‘Storagetntertace SB (Type) for emal as storage Network Management Interoce {0/100 Mops Etemot 5) Table 11, Cisco Catalyst 2960-X Seris Performance Perfomance and Sealabity Forwarding bandwith 50 Gbps 108 Gbps 108 Gbps Suttching banda 100 Gbpe 216 Gbps 218 Gboe Maximum active VLANS oo saz 1023 VLAN IDs avaiable 4098 4008 4098 Maximum transmission unit NTU}L3 packet 9188 bytes 9198 bytes 9198 bytes Jumbo frame - Ethernet frame 8216 6s 2216 oes 9216 bes * switching bandwidth is ful-duplex capac Table 12. Cisco Catalyst 2960-X Series Forwarding Performance Forwarding Rate; 64-Byte L3 Packots ‘Caco Catalyst 2960%48F 0-4. 1909 Mops ‘aco Catalyst 2960X481.PD-. 190. Moos ‘sco Catayst 060X240 95.2.Mons ‘Caco Catalyst 2960%-487D, 1908 Mops ‘aco Catalyst 2960X247D 95.2.Moos Caco Catalyst 2960%48F 75: 107.4 Mop ‘eco Catalyst 2960%48175-L 107.1 Mops taco Catayst 206024054, 714 Mops Chaco Catalyst 960X245 714 Mos aco Catalyst 2060X-487S1. 107.1 Mops cinco Catayt 060% 2675 Ta Mops taco Catalyst 2960X48TSAL, 104.2 Mops aco Catayst 2060X267SAL 05.5 Mos (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. Page of 27Table 14 See) Cisco Catalyst 2960-XR Series Mechanical Specifications Ws-c296oxR-4aFPD4 17541604975 445x408 445 Ws-c296oxR48LPO4 175% 160%175 445 xA0.0 445 Ws-cassoxR4sro4 srsx160%:78 Aasxaoexess Ws.c2960xR-24P0- 17541604175 445x408 445 Ws-c296oxR-24r04 srex 160x178 Aas x00 M45 WS-c296oxR48LS+1 S75x 1600175 445 x40.0445 Ws-cassoxReTs. 1754160%175 Aas xtoex eas Ws.c2960xR-24PS4 17541604975 445x400 445 Ws-c29soxR24rS41 178x160%175 Aas xaoeea4s oo ‘Operating temperature up to 5000 (1800 m) ‘Operating temperatur up to 10,000 (3000 m) ‘Shortterm exception a ea level" ‘Shortterm exception upto $000 fet (1500 my ‘Shortterm exception upto 16 ‘Shorter exception upto 13,000 fet (4000 mj ‘Storage temperature upto 15000 fet (4573 m) ‘Storage relative huey Ws-c2960xR48FPD ae 86 Ws-cassoxR-4sLPo- uo 64 Ws.c296oxR4sTD4 sa3 et Ws-c2960xR-24PD+ 138 62 Ws-cz96oxR-26T04 130 sa WS-C2960xR-48FPS- ur 67 W-c296oxR4aLPS+ ue eu Ws-c296oxR-4sTs. 132 60 Ws-c296oxR-24P64 cur 62 Table 15. Cisco Catalyst 2960-X Series Environmental Speccations 295 19 50 19450 20 100 sc 40 20 22 SC 50 axe 19 sew 4se ot 3000 my 2310 108 SC 1940°C 290706 Operating altitude po 10,000, po 3000 ‘Storage attude Upto 3.000, Upto 4000 Operating relative humaty 10% t9 95% roncordensing 10% to 95% noncondensing Measured par 180 7779 and ected per ISO 9296, PoE opi of 185W orles where appleab stander poatons operating mode at 25°C ambit (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. Page 16 of27‘Cinco Catelyt 2060%48F 704. ‘isco Catalyst 260X481PD-4 isco Catalyst 2960240. ‘isco Catalyst 2060% 48704. ‘taco Catalyst 2960%-267D4, ‘aco Catayt 2060%48F°S-L ‘eco Catalyst 2960X 48175: Cinco Catayt 960% 24054, ‘isco Catalyst 060% 24PS0L. isco Cateyt 2060%-487S-. ‘isco Catalyst 2960X247S-4 ‘aco Catayt 2960%487S4L, ‘aco Catalyst 060X267 AL. ‘Caco Catlyt 2960XR-<8FPO4 ‘sco Catalyst 2960XR-48LPDA ‘aco Catalyst 060XR-24PD4 ‘taco Catalyst 960XR-467D ‘sco Catalyst 2060XR-247D-1 Caco Catalyst 2960XR-40FPS1 ‘sco Catalyst 260XR-48LPS1 ‘sco Catayst 060XR-24P5:1 ‘taco Catalyst 960XR-A5TS ‘taco Catalyst 2960XR-26784 Predicted Reliability Model ‘Caco Catalyst 2960%48F 70-4 ‘eco Catalyst 2960%481.PD-. ‘aco Catayt 2060% 2400 aco Catalyst 2900X487D, ‘eco Catalyst 260% 24704. aco Catayt 2960%48F75- ‘isco Catalyst 960% 481°5-L ‘isco Catayt 2060x2405, ‘Caco Catalyst 960X245 ‘Caco Catalyst 2060%487S-4 Cinco Catayt 960% 2675. ‘laco Catalyst 060% 487SAL, ‘sco Catayst 2060x2675 AL ‘taco Catalyst 2900X-STACK, ‘sco Catalyst 2060XR-48FPDA ‘aco Catalyst 2060XR-48LPO4 ‘aco Catalyst 2960XR-2¢PD.1 ‘sco Catalyst 2060XR-481D1 ‘Sound Pressure [Lp Typeal 08 a8 NA a 008, 00 228, 22 08 008 2208, 22 {TF In nours™ 217980 445,400 589.520 216870 224,200 452600 442690 476500 622,350 17,125090 231590 22,140 40920 (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. {LpAD (Maximum) 1608 308 NA 1608 eo 98 258 ea 008 3 2598 2s ‘Sound Power \LwA(Typleal)—_LwAD (Maximum) 498 NA 518 528 628 338 238 528 628 338 a8 558 NA ss8 558 898 368 68 558 558 308 268 Page 17 of 27‘taco Catalyst 2060XR-247D'1 ‘aco Catalyst 290XR-48F PS ‘sco Catalyst 2060XR-48LPS1 ‘taco Catalyst 2000XR-2¢PS.1 ‘taco Catalyst 2960XR-487S4 ‘aco Catayt 2060XR 2678-41 ‘aco PWRC2.250WAC ‘aco PWR-C2-640WAC ‘Caco PWR-C2-1025WAC “Not more than the following in a 1-year period: 96 consecutive hours, or 360 hours total, or 16 occurrences. Currently estimates; Later wil be Based on Telcordia SR-332 Issue 2 methodology. Table 16, Connectors and interfaces 1+ 1OBASE-T ports: RI connectors, 2a Category 3,4 oF 9 uns wistad-pak (UTP cablng 1 T00BASE-Tx ports R45 connector, 2pm Calgary 5 UTP cablng + T0005ASE-1 pos: R45 connscas &-pa¥Calegay UTP eabng 1 {0008ASE-T SFP-bas0s pars RLM connectors, 4p Catogory 5 UTP eating For inormaton about supped SFPISFPs modules ler tote Transceiver Compatiy mat ables at ‘ea coment SirogslaanodasiesaSspadua devew supper lables aL 1 Porpor stats: Lnkrieary. abo ctvty, spe, and ul utes + Sym statue: System, RPS, Sack nk sits, nk use PoE, and nk spe ‘isco Catalyst 2980-¥FlxStacePus sacking cdl: + CAB-STIC£-0.54 FlxStack Pls saceng cable wl 8 0.5 month + CAB-STI--1N FlexSiaccPlus stacking cla wih 1.01 eng # CAB-STE-AM FlxStacsPlis stacking aslo wih a 3.0 long Cisco Cats 2960-X console cates: ‘+ CAB-CONSOLE.RIAS Console cable 6. wth RIS ‘# CAB-CONSOLELUSB Console cable 6. with USB Type A and mini-8 connectors ‘+ Thointomel power evel is an ato-anging unt and suspris input veliages between 100 and 240V AC + Use the suplod AC power cord ta conec the AC power conraciorto an AC power cult *= The isco RPS connect ters conection fran aponal Caco RPS 2300 hal es AC input and suples DC augue swish + Oniy a Cisco RPS 2300 (mocel PR-RPSZ300) shoul be stached otha edundan-powersyter rooeptSk ‘Table 17. Management and Standards Support Management + eRIDCEAA = c1sco-ToMa, + C1SC0-CABLE-OING-8 + cieso-TeRMa + c1sco-coPsMa + c1sco-u0LoP-ma + c1sco-cLusTER- Ma + CISCO-MANIFTABLE + C1SC0-CoNFIG-coPY.8 {+ RELATIONSHP-W18 + CISCO-CONFIG- MANE + CISCO-VLAN-MEMBERSHIP-MS (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. Page 18ot27REC complance * CISCO-DHCP-SNOOPING-MI8 + CISCO-ENTITY-VENDORTYPE.OID-MI8 + CISCO-ERROIGABLEMIE + CISCO-FLASHLMI + CISCO-IGMP-FILIER-MIB + CISCOIMAGEMID * c1sco-LACMIS + CISCO-VAC-NOTIFICATIONIB + c1Sco-PAGP-MIE + c1Sco-PING-MIB + c1sco-PoRT-a0s-M8 + C1SCO-PORT-SECURITY.MIB + c1sco-PRODUCTS. Me + c1sco-PROCESS-MIB + clsco-s¥tss + C1SCO-STP-EXTENSIONS-M18 + CISCO-VTPMIE ENTINMIs IEEEBOO-PAE-MIB IEEEO2.LNG-MIB + INET-AODRESS-IB + o1D-cIsco-cHASSIS-MIB + OLD-CISCO-NTERFACES- MIB + o1p-cisco-P-MiB + oLp-clsco-TCP-MiB + 010-c18C0-T5.48 = RWONAE = RNONZ.MIB + SNMP-MPO-MEE + SNMP-NOTIFICATION-AIB + sxupvouis = TeP.Mt6 = ePM MIB {+ CISCO-FLEXSTACK PLUS. (2960) For an updated Ist of supported MBs, refer fo the MIB Locator liso amare + 12EE 60210 Sparing Troe Protect * IEEE 802 1p C08 Prionizaton + EEE 80210 UN + TEE 80218 + EEE 80210 + EEE 021% + EEE 02.120 (LDP) + IEEE 02.308 + IEEE 802.5" and ECE 6023 IEEE 802.30 (1008ASEX slnghimutinads ter ai) ‘IEEE 602.3 fl sox on 10BASE-T 1008ASE- ‘and 1000BASE-T pos + RFC 768-UOP + REC 769-TFTP + REC 792-1eMP REC 700-ToP + REC BSA Tanat ‘REC 951 -Booisrap Protocol BOOT) + RFC 1112-1P Mules and eM + REC 1157 SNMP Vt + REC 1156-P Adare * REC 1255 -Iternt Convl Message Pratocl (lowe) Router covery RFC 1905-NTP 1 RFC 1482-TACACSY (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. + EEE 9023 108AS=-7 + IEEE 802.30 1ODBASE-TX + EEE 602595 10000ASE-T + IEEE 802.82 ‘0006ASEX {+ RNON Ind I standaras 1 SNMP 5,26, and v3 ee 1 IEEE 80236 10Gigabit Ethomet 1 REC 190241907 - SNMP 2 “REC 1981 - Maximum Transmission Unt (MTU) Paty DBieovory Pe = REC 2181-OHCP + REC 2199 -RADIUS 1 REC 2879 -IPve Aggragatable Adis 1 REC 2460-IP6 1 REC 246: IP Neghbar Discovery 1 REC 2482- IP Autocontguraton + REC 2469-ICMP ve + REC 2474 Dillerontatd Senco (OHSen) Precedence 1 REC 2507 - Assured Forwaring 1 REC 2588 -Expodiod Forwarding 1 REC 2575 -SNMP Management Page 190t27a = REC 102 + REC 142. = REC 7857 + RFC 101 ‘rege IB BOOTP estrone bern erace MIS RMON SAME VIC Table 18, Voltage and Power Ratings ‘Voltage (Auto ranging) Current Frequency Model ‘sco Catalyst 2960X 48D. ‘sco Catalyst 2060X481PD4. ‘Caco Catalyst 2960240. ‘isco Catalyst 060% 487D4. ‘sco Catalyst 2060%267D4, ‘clsco Catalyst 2060%48FS-L ‘sco Catalyst 060% 4817S: ‘isco Catalyst 2060x2454, ‘sco Catayst 2060x24PSaL. ‘aco Catalyt 2060X-48TS1. ‘sco Catayst 20602675. ‘sco Catayst 2960x4875, ‘sco Catayst 060% 267841 ‘Caco Catalyt 2900XR-48FPOA ‘Caco Catalyst 2060XR-48LPO4 ‘Cinco Catalyst 2060XR-24PD4 ‘taco Catalyst 2960XR-487D-! ‘sco Catayst 2060XR-261D1 ‘isco Catalyst 260XR-48FPS1 ‘sco Catalyst 260XR-48LPS1 ‘Cinco Catalyt 060XR-24P5:1 ‘aco Catalyst 2980XR-487S-4 ‘sco Catalyst 2060XR 26784 10010 240 VAC 100 19240 VAC ‘Power Rating (Switch maximum consumption values) ‘sco Catalyst 2960X48FPD-L ‘aco Catetyt 2060X48170-4 taco Catalyst 960% 2400. ‘isco Catayst 2060%-487D4, aco Catalyst 2960% 26704, ‘aco Catalyst 060% 48FS-L ‘Caco Cateyt 2060%48175-. isco Catalyst 2960x2454, ‘isco Catayst 2060x24PSaL. taco Catalyst 2900%X-48TS. ‘sco Catalyst 296026784 OAD KA arava 040 Kwa ono KVA ea Kva o4oKva O16 KA 0.39 kvA (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. ‘+ REC 2865 - RADIUS ‘REC 3045 DHCP Relay Agent Information Option + REC 3680-002.1X RADIUS on 90 60K 5a28 5a24 16-058 satoosa 048, 5-28, 5A-20, Daan, nose 1A-088, 1-088, 1A-088, swalo5A 5010 0K tatoaA eAwaA tA 058 sawosa Walesa tatoaa tA 058 tawosa age 20 of 27ee ‘isco Catayt 2960%26704, isco Catalyst 2960X48F PS, ‘isco Catalyst 2060%481°5:L lace Catalyst 000x245, ‘isco Catalyst 060% 24PS0 aco Catayt 060% 4875. ‘aco Catalyst 2960X267S-L ‘sco Catayst 2060X487S AL, ‘ince Catalyst 960% 267S4L, ‘sco Catalyst 2060XR-48FPDA ‘Cisco Catlyt 2060XR-48LPO4 ‘isco Catalyst 2060XR-24PD. ‘sco Catalyst 2060XR-487D-1 ‘Caco Catayt 960XR-267D ‘sco Catalyst 2960XR-48FPS1 ‘isco Catatyt 2060XR-48LPS1 ‘aco Catalyst 2060XR-2¢PS41 ‘sco Catalyst 2060XR-487S4 ‘aco Catalyt 960XR-247S4 519 008 038 467 one eu au 490 492 298 228 ae 48 408 197 20 388 a4 a4 43 48 467 on 225 107 sta 589 284 28 437 27 ar 456 a8 585 588 385 432 a4 200 a8 450 Table 20. Safely anc Compliance a ‘Safety EMC Emissions EMC - Immunity Environment US Government Certcations ‘UL 60050-1 Second Eaton CCANICSA.C2.2 No, 60950-1 Second Eston EN 609501 Second Eston EC 609501 Sacond Eaton |ASINZS 60850-1 ATOFR Pat 15 (CFRAT) Cass A |ASINZS CISPRZ2 Class A CISPRZ2 Cis A 1CESO09 Class & vot cies A eNs10002:3 KN22 Clas A ENsso24 cisPRes ena0086 Kae Reducton of Hazardous Sustances (RoHS) including Dectve 207165 omen Language Equipment ene (OLED code UsGi6 and Pv Ready Lope (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. Page 22.027Table 24. Cisco Catalyst 2960-XR Configurations Ordering Information WS-CZO6OxRABFPDA 42 26+ 7400 ffonal Ws-cascoxRaLPD4 43 asi. aroW pions Ws-c2960xR24P01 26 DFP aro ptona ws-caosoxRasTo4 48 266+ Options ws.crssoxcerod 26 2srP+ pliers! WS-C296oxRABFPS 42 4seP 400 02s fiona Ws-caasoxRaLrs 48 4sep aro iow ptona! Ws-cr9coxR24Ps1 26 45rP row esow pions Ws-ca9soxRsTs1 42 4sep sow ptona ws.cr9soxRcers4 26 4srP 250" pfona! Table 25. Cisco Catalyst 2960.X Accessores ‘CZBGOXSTACK —_FlexSuck-Pushotawappable slacking magus CAB-STK-EAEM ——FoxStack us tacking cabo wih 20.5 mlongth CAB STREAM xStack sacking cable wih 2.0 meng camsri-eaM FexStaekPus sacking cable with 23.0 mlengh CAB-CONSOLE-RIAS — Console cabl fot wn RAS ‘CAB-CONSOLELUSE Console abl 6 lel w USB Type A and min: comctos| Pwr-ciP Power cable esranng cp RCKMNT-ARUIKA= Spare rack-mount or Cisco Catalyst 2960-X ana 29650-¥R Sara fr 18snch racks RCKMNT-REC-2KX= 1 RU racastedrack-nount i for Cico Catalyst 2960. and 2980-XR Serie Table 26, Cisco Catalyst 2960.x Redundant Power Supply Optons a PWR-RPS2I00—CacoRedal Power Sytem 2300 ana Bowes no poner po BLNIGRPEZI00% Spare bay sero co Renan Powe Sysom 2300 Cio Catt 260 and ico Ctat 200 shes [CAB-RPS2300E= Spar RPS2O cable fr Cleo Cla 260% nes BLWR.RPS2300" Spare CFI swe or ROS 200 {SKPWRTSBWAC® RPS 2200708 AC poner spy sae fr Coo Cala 2360 For mare information about the RPS-2300, vsit cisco com/enlUS/products/ps7130/index html Table 27, Cisco Catalyst 2360-XR Powor Supply Options PWR-C2250WAC* Second FRU pows supply and fe oral ar-POE 2950-XR swices, proves 2500 AC of power PWR-C2.640WAC* Second FRU power supply and fan forall TOW PoE+ 7880-XR itches, provides GHW AC of power PWR-c2-1025WAC' Second FRU power supply and fe forall 740W PoE+ 2860-XR eithes, provides 10251 AC of power PWR.C2.250WAC= Spare FRU power supply an an fo alnon- PoE 2960-XRsiehes, provides 250W AC of power “The frst FRU power supply and fan module's confgured automatcaly when the switch fs ordered. The second redundant FRU. ower supply and fan mosh i an opton while cntguring the order. (©2017 cisco anor ates. Alright resoves. Ths docuant Is Cisco Public vomaton. Page 25 of27