WS-C3750X-48P-S Catalyst Switch

The Cisco^® Catalyst^® 3750-X and 3560-X Series Switches are an enterprise-class lines of stackable and standalone switches, respectively. These switches provide high availability, scalability, security, energy efficiency, and ease of operation with innovative features such as Cisco StackPower (available only on the Catalyst 3750‑X), IEEE 802.3at Power over Ethernet Plus (PoE+) configurations, optional network modules, redundant power supplies, and Media Access Control Security (MACsec) features. The Cisco Catalyst 3750-X Series with StackWise^® Plus technology provides scalability, ease of management and investment protection for the evolving business needs. The Cisco Catalyst 3750-X and 3560-X enhance productivity by enabling applications such as IP telephony, wireless, and video for borderless network experience.

Cisco Catalyst 3750-X and 3560-X Series primary features:

●   24 and 48 10/100/1000 PoE+, non-PoE models, and 12 and 24 GE SFP port models

●   24 and 48 10/100/1000 UPOE-capable models with Energy Efficient Ethernet (EEE) support

●     Four optional uplink network modules with GE or 10GE ports

●     Industry first PoE+ with 30W power on all ports in 1 rack unit (RU) form factor

●     Dual redundant, modular power supplies and fans

●     Media Access Control Security (MACsec) hardware-based encryption

●     Flexible NetFlow and switch-to-switch hardware encryption with the Service Module uplink

●     Open Shortest Path First (OSPF) for routed access in IP Base image

●     IPv4 and IPv6 routing, Multicast routing, advanced quality of service (QoS), and security features in hardware

●     Enhanced limited lifetime warranty (LLW) with next business day (NBD) advance hardware replacement and 90 day access to Cisco Technical Assistance Center (TAC) support

●     Enhanced Cisco EnergyWise for operational cost optimization by measuring actual power consumption of the PoE devices, reporting, and reducing energy consumption across the network

●     USB Type-A and Type-B ports for storage and console respectively and an out-of-band Ethernet management port

In addition to the above features, the Cisco Catalyst 3750-X switches also offer:

●     Cisco StackPower^™ technology: An innovative feature and industry first for sharing power among stack members

●     Cisco StackWise Plus technology for ease of use and resiliency with 64 Gbps of throughput

●     Investment protection with backward compatibility with all other models of Cisco Catalyst 3750 Series Switches

Switch Models and Configurations

All switch models can be configured with four optional network modules. The UPOE, PoE+, and non-PoE switch models are available with either the LAN Base or IP Base feature set. IP Services feature set is available as an upgrade option at the time of ordering or through a license at a later time. The GE SFP switch models are available with either IP Base or IP Services feature set.

Stackable Switches

Figure 1 shows the Cisco Catalyst 3750-X Series Switches (front and back).

Cisco Catalyst 3750-X Series Switches (Front and Back)

Table 1 shows the Cisco Catalyst 3750-X Series configurations.

Table 1.           Cisco Catalyst 3750-X Series Configurations

Standalone Switches

Figure 2 shows Cisco Catalyst 3560-X Series Switches.

Cisco Catalyst 3560-X Series Switches

Table 2 shows the Cisco Catalyst 3560-X Series configurations.

Table 2.           Cisco Catalyst 3560-X Series Configurations

Cisco Catalyst 3750-X and 3560-X Series Software

In addition to IP Base and IP Services feature sets, the Cisco Catalyst 3750-X and 3560-X Series come with a new LAN Base feature set. The three feature sets available with all Cisco Catalyst 3750-X and 3560-X Series Switches are:

●     LAN Base: enterprise access Layer 2 switching features

●     IP Base: baseline enterprise access Layer 3 switching features

●     IP Services: advanced Layer 3 switching (IPv4 and IPv6) features

The LAN Base feature set includes comprehensive Layer 2 features, with up-to 255 VLANs. The IP Base feature set provides baseline enterprise services in addition to all LAN Base features, with 1K VLANs. IP Base also includes the support for routed access, StackPower (available only on the Catalyst 3750-X), MACsec, and the new Cisco Service Module. The IP Services feature set provides full enterprise services that includes advanced Layer 3 features such as Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), Border Gateway Protocol (BGP), Protocol Independent Multicast (PIM), and IPv6 routing such as OSPFv3 and EIGRPv6. All software feature sets support advanced security, QoS, and management features.

The Cisco Catalyst 3750-X Series Switches with LAN Base feature set can only stack with other Cisco Catalyst 3750‑X Series LAN Base switches. A mixed stack of LAN Base switch with IP Base or IP Services features set is not supported.

Customers can transparently upgrade the software feature set in the Cisco Catalyst 3750-X and 3560-X Series Switches through Cisco IOS^® Software activation. Software activation authorizes and enables the Cisco IOS Software feature sets. A special file contained in the switch, called a license file, is examined by Cisco IOS Software when the switch is powered on. Based on the license’s type, Cisco IOS Software activates the appropriate feature set. License types can be changed, or upgraded, to activate a different feature set. For detailed information about Software Activation, visit https://www.cisco.com/go/sa.

Cisco StackWise Plus Technology

Cisco StackWise Plus technology is built on the highly successful industry leading StackWise technology, which is a premium stacking architecture optimized for GbE. StackWise technology was designed to respond to additions, deletions, and redeployment while maintaining constant performance. The stack behaves as a single switching unit that is managed by a primary switch elected from one of the member switches. The primary switch automatically creates and updates all the switching and optional routing tables. A working stack can accept new members or delete old ones without service interruption. StackWise creates a highly resilient single unified system of up to nine switches, providing simplified management using a single IP address, single telnet session, single command-line interface (CLI), auto-version checking, autoconfiguration, and more. StackWise Plus supports all the features of StackWise and provides backward compatibility with the existing Cisco Catalyst 3750 Series Switches while enhancing the throughput of the system up to 64 Gbps. StackWise Plus also enables local switching in Cisco Catalyst 3750-X Series Switches. Local switching packets coming into a port in the Cisco Catalyst 3750-X Series or 3750-E Series Switch destined for another port in the same switch do not have to traverse through the stack ring, thus increasing the forwarding capacity of the switch. The Cisco Catalyst 3750-X Series stacks up to nine switches as a single logical unit for a total of 432 Ethernet 10/100/1000 ports with 18 10GbE ports. Individual 10/100/1000 units can be joined in any combination to evolve with network needs.

Cisco StackPower Technology

The Cisco Catalyst 3750-X Series introduces Cisco StackPower technology, innovative power interconnect system that allows the power supplies in a stack to be shared as a common resource among all the switches. Cisco StackPower unifies the individual power supplies installed in the switches and creates a pool of power, directing that power where it is needed. This feature is available in all Cisco Catalyst 3750-X Series Switches feature sets^*. Up to four switches can be configured in a StackPower stack with the special connector at the back of the switch using the StackPower cable^**, which is different than the StackWise cables. (See Figure 3.)

StackPower Connector

StackPower can be deployed in either power sharing mode or redundancy mode. In power sharing mode, the power of all the power supplies in the stack is aggregated and distributed among the switches in the stack. In redundant mode, when the total power budget of the stack is calculated, the wattage of the largest power supply is not included. That power is held in reserve and used to maintain power to switches and attached devices when one power supply fails, enabling the network to operate without interruption. Following the failure of one power supply, the StackPower mode becomes power sharing.

StackPower allows customers to simply add one extra power supply in any switch of the stack and provide either power redundancy for any of the stack members or simply add more power to the shared pool. StackPower eliminates the need for an external redundant power system or installation of dual power supplies in all the stack members.

Network Module

Figure 4 shows various Network Modules with Four GbE, Two 10GbE SFP+ Interfaces, Two 10GB-T and Service Module with Two 10GbE SFP+ Interfaces.

Network Modules with Four GbE, Two 10GbE SFP+ Interfaces, Two 10GB-T and Service Module with Two 10GbE SFP+ Interfaces

The Cisco Catalyst 3750-X Series and 3560-X Series Switches support four optional network modules for uplink ports. The default switch configuration doesn’t include the uplink module; at the time of switch purchase the customer has the flexibility to choose from the network modules described in Table 3.

Table 3.           Network Module Numbers and Descriptions

The SFP+ interface supports both 10GbE and GbE port, allowing customers to use their investment in GbE SFP and upgrade to 10GbE when business demands change, without having to do a comprehensive upgrade of the access switch. The four uplink modules are hot swappable. The four network modules can be used in any of the combinations shown in Table 4.

Table 4.           10GbE Network Module Configuration

Service Module

The new Cisco Service Module offers enhanced security and Flexible Netflow (FNF) features on the uplink ports of the Catalyst 3750-X and 3560-X. The service module is supported with IP Base or IP Services feature set. It can be used with SFP or SFP+ at 1G or 10G speeds. The new Cisco Service Module has custom dedicated hardware for FNF monitoring, separate from the dedicated hardware for MACSec. Therefore there is no impact on packet forwarding performance & latency. It offers flexibility with the user being able to define flows. The new Cisco Service Module enables the following services:

●     Line rate (40G) Flexible NetFlow for Network Monitoring and Security Anomaly Detection

◦     Supported version 9

◦     32,000 simultaneous flows

◦     128 of simultaneous active monitors

●     Line rate (40G) MACsec encryption (please refer to MACsec section below)

FNF is a networking monitoring technology. A NetFlow table can be used to collect flow statistics. The flow information can be used by customers for a variety of use cases like understanding:

1.   Applications running on the network, and identify undesired applications, P2P etc

2.   Granular Local and aggregated Campus view (Top N applications, drill down etc).

3.   Top talkers (ports, users, applications) for application usage, productivity and asset utilization etc.

4.   Security Anomaly Detection by examining flows that do not traverse trust boundaries for inside the perimeter attacks

5.   Impacts of network and application changes

6.   Compliance conformation

7.   Traffic patterns for capacity planning

Enabling FNF at the access switch ensures you get all flows. The access switch is the most logical place in the network for collecting statistics and monitoring all flows. With Netflow, you can obtain MAC-address and access port information associated with the flow, to get directly to the source of the flow. Most collectors are able to leverage the location based on MAC-address and interface port number provided by the access switch to the collector. Thus by enabling FNF at the access switch you are able to get the location information of the flow. The access switch has a variety of identity mechanism for user authentication and adding user awareness is the natural progression that can be developed. Access switches are an order of magnitude greater than distribution and core which makes them scale well for FNF and ensure there are no performance impacts of oversubscription at aggregation and core.

10GB-T Module

The new Cisco 10G Base-T module is hot-swapable and can operate at either 10GE or GE speed (with manual configuration).

Table 5 shows the cable types and supported lengths of the new Cisco 10G Base-T module.

Table 5.           10GB-T Cable Types and Supported Lengths

MACsec

The Cisco Catalyst 3750-X and 3560-X Series Switches offer exceptional security with integrated hardware support for MACsec defined in IEEE 802.1AE. MACsec provides MAC layer encryption over wired networks using out-of-band methods for encryption keying. The MACsec Key Agreement (MKA) protocol provides the required session keys and manages the keys required for encryption when configured. MKA and MACsec are implemented following successful authentication using 802.1x Extensible Authentication Protocol (EAP) framework. In Cisco Catalyst 3750-X and 3560-X Series Switches both the user/down-link ports (links between the switch and endpoint devices such as a PC or IP phone) and, using the service module, the network/up-link ports can be secured using MACsec. With the service module you can encrypt switch to switch links such as access to distribution, or encrypt dark fiber links within a building or between buildings.

Dual Redundant Modular Power Supplies

The Cisco Catalyst 3750-X Series and 3560-X Series Switches support dual redundant power supplies. The switch ships with one power supply by default, and the second power supply can be purchased at the time of ordering the switch or at a later time. If only one power supply is installed, it should always be in the power supply bay 1. (See Figure 5).

Dual Redundant Power Supplies

Table 6 shows the different power supplies available in these switches and available PoE power.

Table 6.           Power Supply Models

In addition to the above power supplies a 440W DC power supply is available as a spare (should be ordered separately) on all switch models. The DC power supply also delivers PoE capabilities for maximum flexibility, (please refer to table 7 for available PoE for different configurations) and customers can mix and match the AC and DC power supplies in the two available power supply slots. Any of these power supplies can be installed in any of the switches.

Table 7.           Available PoE with DC power supply

Power over Ethernet Plus (PoE+)/Universal Power Over Ethernet (UPOE)

In addition to PoE 802.3af, the Cisco Catalyst 3750-X and 3560-X Series Switches support PoE+ (IEEE 802.3at standard), which provides up to 30W of power per port and UPOE, which provides 60W of power per port (only on UPOE-capable models). The Cisco Catalyst 3750-X and 3560-X Series Switches can provide a lower total cost of ownership for deployments that incorporate Cisco IP phones, Cisco Aironet^® wireless LAN (WLAN) access points, or any IEEE 802.3af-compliant end device. PoE removes the need for wall power to each PoE-enabled device and eliminates the cost for additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments. Table 8 shows the power supply combinations required for different PoE needs. Cisco UPOE switches extend the IEEE 802.3 PoE+ standard to double the power per port to 60 watts. UPOE-enabled ports can be used to deliver power for all current PoE/PoE+ solutions in addition to UPOE devices, including VDI clients, IP turrets for financial trading, personal Cisco TelePresence^® systems, and more. The maximum UPOE budget available on the Cisco Catalyst 3750-X/3560-X switch is 1800W per switch. This requires the 1100W AC power supply in both the power supply slots. 1800W in POE budget makes sure that the 24-port models support full UPOE on all ports (24 x 60W/port = 1440W) and the 48-port models support up to 30 UPOE connections (30 x 60W/port = 1800W) per switch.

Table 8.        Power Supply Requirements for PoE/PoE+ and UPOE models

EXpandable Power System (XPS) 2200

The XPS 2200 is the next-generation redundant power system (RPS). It not only provides the functionalities offered by the RPS but also provides enhanced services with the support for Cisco StackPower technology. When used with the Cisco Catalyst 3560-X, it provides RPS functionality, but when used with the Cisco Catalyst 3750-X, it provides StackPower functionality to all the stack members, including power supply redundancy.

The XPS supports dual redundant power supplies and fans. Up to nine switches can be connected to the XPS 2200, and it can provide power backup to two of the failed switches concurrently (when appropriately sized power supplies are used). The power supplies used by the XPS 2200 are the same as the ones supported in the Cisco Catalyst 3750-X and 3560-X Series Switches. The XPS 2200 is fully configurable for setting switch priorities in case of multiple failures.

Please refer to the XPS 2200 Performance Specifications section at the end of this document.

The XPS 2200

Features

Borderless Networks, a Cisco architecture, deliver the new workspace experience, connecting anyone, anywhere, using any device, to any resource securely, reliably, and transparently. Cisco’s Borderless Networks architecture addresses primary IT and business challenges to help create a truly borderless experience by bringing interactions closer to the employee and customer.

Borderless experience is only possible with intelligent network elements designed and architected to meet the needs of a global workspace. Cisco Network Access is a primary component of this architecture, enabling various borderless network services such as mobility, security, MediaNet, EnergyWise, and ease of operations for increased productivity and operational efficiency. When network access is intelligent, it knows the identity of the user, as well as where the user is on the network. It knows what is connecting to the network, to automatically provision the network for QoS and delivery. It becomes services-aware to optimize user experience. Only with intelligent access network, your enterprise can go borderless securely and transparently. Your business can save energy, simplify operations with better business efficiency, and have an optimized total cost of ownership.

Cisco Network Access for Borderless solution focuses on the following primary areas:

●     Sustainability

●     Ease of operations

●     Borderless security

●     Borderless experience

Sustainability

Cisco Catalyst switching solutions enable greener practices through measurable power efficiency, integrated services, and continuous innovations such as Cisco EnergyWise, an enterprisewide solution that monitors and conserves energy with customized policies. Together, Cisco EnergyWise technology and Cisco Catalyst switches reduce greenhouse gas (GhG) emissions and increase energy cost savings and sustainable business behavior. Sustainability features in the Cisco Catalyst 3750-X and 3560-X Series Switches include the following features sets:

●     Cisco EnergyWise technology

●     Efficient switch operation

●     Intelligent power management

●     Energy Efficient Ethernet

Cisco EnergyWise Technology

Cisco EnergyWise is an innovative architecture, added to fixed configuration switches, promoting companywide sustainability by reducing energy consumption across an entire corporate infrastructure and affecting more than 50 percent of global greenhouse gas emissions created by worldwide building infrastructure, a much greater effect than the 2 percent generated by the IT industry. Cisco EnergyWise enables companies to measure the power consumption of network infrastructure and network-attached devices and manage power consumption with specific policies, reducing power consumption to realize increased cost savings, potentially affecting any powered device.

EnergyWise encompasses a highly intelligent network-based approach to communicate messages that measure and control energy between network devices and endpoints. The network discovers Cisco EnergyWise manageable devices, monitors their power consumption, and takes action based on business rules to reduce power consumption. EnergyWise uses a unique domain-naming system to query and summarize information from large sets of devices, making it simpler than traditional network management capabilities. Cisco EnergyWise’s management interfaces allow facilities and network management applications to communicate with endpoints and each other using the network as a unifying fabric. The management interface uses standard SNMP or TCP to integrate Cisco and third-party management systems.

Efficient Switch Operation

Cisco Catalyst 3750-X and 3560-X Series Switches, designed and engineered by Cisco, provide optimum power saving, low power operations for industry best-in-class power management, and power consumption capabilities. The Cisco Catalyst 3750-X and 3560-X ports are capable of reduced power modes so that ports not in use can move into a lower power utilization state.

StackPower lets customers to simply add one extra power supply in any switch of the stack and provide either power redundancy for any of the stack members or simply add more power to the shared pool.

Intelligent Power over Ethernet Management

The Cisco Catalyst 3750-X and 3560-X Series PoE models support Cisco IP phones and Cisco Aironet WLAN access points providing up to 30W of power per port, as well as any IEEE 802.3af-compliant end device.

●   Cisco Discovery Protocol Version 2 allows the Cisco Catalyst 3750-X and 3560-X Series Switches to negotiate a more granular power setting when connecting to a Cisco powered device such as IP phones or access points than what is provided by IEEE classification.

●   Per port power consumption command allows customers to specify maximum power setting on an individual port.

●   Per port PoE power sensing measures actual power being drawn, enabling more intelligent control of powered devices.

●   The PoE MIB provides proactive visibility into power usage and allows customers to set different power-level thresholds.

Energy Efficient Ethernet (EEE)

EEE (IEEE 802.3az) provides a mechanism and a standard for reducing the energy usage of an Ethernet port without affecting the vital function of forwarding traffic. During peak work hours, most wired client devices use their network connections with infrequent bursts. The normal EEE operation is well suited to this behavior. During off-peak times the client devices may use sleep or hibernate modes. At this time the network interface can be completely inactive and able to be woken on demand by remote request.

Prior to the EEE standard, it was a common practice for client devices such as personal computers and servers to save power during sleep states by renegotiating the Ethernet link to a lower speed. With EEE capability, PCs and other “sleep oriented” devices can achieve power savings similar to the speed downshift while allowing a much faster transition back to the active state. Faster link wake time improves the user’s experience by allowing a faster transition for the client device from the sleep to active and connected state.

Cisco Catalyst 3750-X/3560-X series switches support EEE on the UPOE models.

Ease of Operations

The Cisco Catalyst 3750-X and 3560-X help reduce the operating costs through:

●     Cisco Catalyst Smart Operations

●     Easy to use deployment and control features

●     Advanced, intelligent network management tools

Cisco Catalyst Smart Operations

Cisco Catalyst Smart Operations is a comprehensive set of capabilities that simplify LAN deployment, configuration, and troubleshooting. In addition to adaptive, always on technologies such as StackWise and StackPower, Cisco Catalyst Smart Operations enable zero touch installation and replacement of switches, fast upgrade, as well as ease of troubleshooting with reduced operational cost. Cisco Catalyst Smart Operations is a set of features that includes Smart Install, auto Smartports, Smart Configuration. and Smart Troubleshooting to enhance operational excellence:

●   Cisco Smart Install is a transparent plug and play technology to configure the Cisco IOS Software image and switch configuration without user intervention. Smart Install utilizes dynamic IP address allocation and the assistance of other switches to facilitate installation providing transparent network plug and play.

●   Cisco Auto Smartports provide automatic configuration as devices connect to the switch port, allowing auto detection and plug and play of the device onto the network.

●   Cisco Smart Configuration provides a single point of management for a group of switches and in addition adds the ability to archive and backup configuration files to a file server or switch allowing seamless zero touch switch replacement.

●   Cisco Smart Troubleshooting is an extensive array of debug diagnostic commands and system health checks within the switch, including Generic Online Diagnostics (GOLD) and Onboard Failure Logging (OBFL).

Easy to Use Deployment and Control Features

●   Embedded Event Manager (EEM) is a powerful and flexible feature that provides real-time network event detection and onboard automation. Using EEM, customers can adapt the behavior of their network devices to align with their business needs. This feature requires IP Base feature set.

●   IP service-level agreements (SLAs) enable customers to assure new business-critical IP applications, as well as IP services that utilize data, voice, and video, in an IP network. This feature requires IP Services feature set.

●   Dynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot server eases switch deployment.

●   Automatic QoS (AutoQoS) simplifies QoS configuration in voice over IP (VoIP) networks by issuing interface and global switch commands to detect Cisco IP phones, classify traffic, and help enable egress queue configuration.

●   Stacking primary configuration management and Cisco StackWise technology helps ensure that all switches are automatically upgraded when the primary switch receives a new software version. Automatic software version checking and updating help ensure that all stack members have the same software version.

●   Autonegotiation on all ports automatically selects half- or full-duplex transmission mode to optimize bandwidth.

●   Dynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration across all switch ports.

●   Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel^® groups or Gigabit EtherChannel groups to link to another switch, router, or server.

●   Link Aggregation Control Protocol (LACP) allows the creation of Ethernet channeling with devices that conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP.

●   Automatic media-dependent interface crossover (MDIX) automatically adjusts transmit and receive pairs if an incorrect cable type (crossover or straight-through) is installed.

●   Unidirectional Link Detection Protocol (UDLD) and Aggressive UDLD allow unidirectional links caused by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces.

●   Switching Database Manager (SDM) templates for access, routing, and VLAN deployment allow the administrator to easily maximize memory allocation to the desired features based on deployment-specific requirements.

●   Local Proxy Address Resolution Protocol (ARP) works in conjunction with Private VLAN Edge to minimize broadcasts and maximize available bandwidth.

●   VLAN1 minimization allows VLAN1 to be disabled on any individual VLAN trunk.

●   Smart Multicast, with Cisco StackWise Plus technology, allows the Cisco Catalyst 3750-X Series to offer greater efficiency and support for more multicast data streams such as video by putting each data packet onto the backplane only once.

●   Internet Group Management Protocol (IGMP) Snooping for IPv4 and IPv6 MLD v1 and v2 Snooping provide fast client joins and leaves of multicast streams and limit bandwidth-intensive video traffic to only the requestors.

●   Multicast VLAN Registration (MVR) continuously sends multicast streams in a multicast VLAN while isolating the streams from subscriber VLANs for bandwidth and security reasons.

●   Per-port broadcast, multicast, and unicast storm control prevents faulty end stations from degrading overall systems performance.

●   Voice VLAN simplifies telephony installations by keeping voice traffic on a separate VLAN for easier administration and troubleshooting.

●   Cisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration across all switches.

●   Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from any other switch in the same network.

●   For enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms, and events).

●   Layer 2 traceroute eases troubleshooting by identifying the physical path that a packet takes from source to destination.

●   Trivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by downloading from a centralized location.

●   Network Timing Protocol (NTP) provides an accurate and consistent timestamp to all intranet switches.

Advanced, Intelligent Network Management Tools

The Cisco Catalyst 3750-X and 3560-X Series Switches offer both a superior CLI for detailed configuration, a PC-based tool for quick configuration based on preset templates. In addition, CiscoWorks LAN Management Solution (LMS) supports the Cisco Catalyst 3750-X and 3560-X Series Switches for networkwide management.

CiscoWorks LAN Management Solution

CiscoWorks LAN Management Solution (LMS) is a comprehensive network lifecycle management solution. It provides an extensive library of easy-to-use features to automate the initial and day-to-day management of your Cisco network infrastructure. CiscoWorks LMS uniquely uses Cisco hardware and software platform knowledge and operational experience into a powerful set of work-flow driven configuration, monitoring, troubleshooting, reporting, and administrative tools. Including:

●   Support for new Cisco hardware platforms the day they ship

●   Support for new technologies and services from initial deployment to day-to-day administration and management, such as EnergyWise, Identity, Cisco Auto Smartports, Cisco Smart Install, and much more

●   Configuration management tools built from Cisco experience and Cisco Validated Design recommendations

●   Monitoring and troubleshooting capabilities that incorporates Cisco hardware best practices and diagnostics features

●   Automation in managing hardware inventories, security vulnerabilities (PSIRTS) and platform end-of-life and support cycles

For detailed information about CiscoWorks LMS, go to https://www.cisco.com/en/US/products/sw/cscowork/ps2425/index.html.

Borderless Security

The Cisco Catalyst 3750-X and 3560-X Series Switches provide superior Layer 2 threat defense capabilities for mitigating man-in-the-middle attacks (such as MAC, IP, and ARP spoofing). TrustSec, a primary element of Borderless Security Architecture, helps enterprise customers secure their networks, data and resources with policy-based access control, identity and role-aware networking, pervasive integrity, and confidentiality. The borderless security is enabled by the following feature sets in the Cisco Catalyst 3750-X and 3560-X Series Switches:

●   Threat defense

●   Cisco TrustSec

●   Other advanced security features

Threat Defense

Cisco Integrated Security Features is an industry-leading solution available on Cisco Catalyst Switches that proactively protects your critical network infrastructure. Delivering powerful, easy-to-use tools to effectively prevent the most common and potentially damaging Layer 2 security threats, Cisco Integrated Security Features provides robust security throughout the network. Cisco Integrated Security Features include Port Security, DHCP Snooping, Dynamic ARP Inspection, and IP Source guard.

●   Port Security secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address-flooding.

●   DHCP Snooping prevents malicious users from spoofing a DHCP server and sending out bogus addresses. This feature is used by other primary security features to prevent a number of other attacks such as ARP poisoning.

●   Dynamic ARP Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting the insecure nature of the ARP protocol.

●   IP source guard prevents a malicious user from spoofing or taking over another user’s IP address by creating a binding table between the client’s IP and MAC address, port, and VLAN.

Cisco TrustSec

TrustSec secures access to the network, enforces security policies, and delivers standard based security solutions such as 802.1X enabling secure collaboration and policy compliance. TrustSec capabilities reflect Cisco thought leadership, innovations, and commitment to customer success. These new capabilities include:

●   IEEE 802.1AE MACsec with prestandard 802.1X-REV Key management: industry’s first fixed switches with prestandard 802.1X-Rev key management. Available on Cisco Catalyst 3750-X and 3560-X Series Switches, MACsec provides Layer 2, line rate Ethernet data confidentiality and integrity on host facing ports, protecting against man-in-the-middle attacks (snooping, tampering, and replay).

●   FIPS 140-2 validated for devices used in government and sensitive environments for extremely high levels of data security.

●   Flexible authentication that supports multiple authentication mechanisms including 802.1X, MAC Authentication Bypass and web authentication using a single, consistent configuration.

●   Open mode that creates a user friendly environment for 802.1X operations.

●   Integration of device profiling technology and guest access handling with Cisco switching to significantly improve security while reducing deployment and operational challenges.

●   RADIUS Change of Authorization and downloadable Calls for Comprehensive policy management capabilities.

●   802.1X Supplicant with Network Edge Access Transport (NEAT) enables extended secure access where compact switches in the conference rooms have the same level of security as switches inside the locked wiring closet.

Other Advanced Security Features

Other Advanced Security features include but are not limited to:

●   Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turning a broadcast segment into a nonbroadcast multiaccesslike segment.

●   Private VLAN Edge provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic.

●   Unicast Reverse Path Forwarding (RPF) feature helps mitigate problems caused by the introduction of malformed or forged (spoofed) IP source addresses into a network by discarding IP packets that lack a verifiable IP source address.

●   Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while placing them on appropriate voice and data VLAN.

●   Cisco security VLAN ACLs on all VLANs prevent unauthorized data flows from being bridged within VLANs.

●   Cisco standard and extended IP security router ACLs define security policies on routed interfaces for control-plane and data-plane traffic. IPv6 ACLs can be applied to filter IPv6 traffic.

●   Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.

●   Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions. SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic software image because of U.S. export restrictions.

●   Bidirectional data support on the Switched Port Analyzer (SPAN) port allows Cisco Intrusion Detection System (IDS) to take action when an intruder is detected.

●   TACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts unauthorized users from altering the configuration.

●   MAC Address Notification allows administrators to be notified of users added to or removed from the network.

●   Multilevel security on console access prevents unauthorized users from altering the switch configuration.

●   Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when BPDUs are received to avoid accidental topology loops.

●   Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes.

●   IGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number of concurrent multicast streams available per port.

●   Dynamic VLAN assignment is supported through implementation of VLAN Membership Policy Server client capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast assignment of IP addresses.

Borderless Experience

Borderless network enables enterprise mobility and business-grade video services. Industry’s first unified network (wired and wireless) location services enable tracking of mobile assets and the users of those assets for both wired and wireless devices. The true borderless experience is enabled by the following feature sets in the Cisco Catalyst 3750-X and 3560-X Series Switches:

●   High availability

●   High-performance IP routing

●   Superior QoS

●   Location awareness and mobility

High Availability

The Cisco Catalyst 3750-X Series increases availability for stackable switches. Each switch can operate both as primary controller and as forwarding processor. Each switch in the stack can serve as a primary, creating a 1:N availability scheme for network control. In the unlikely event of a single unit failure, all other units continue to forward traffic and maintain operation.

Other high-availability features include but are not limited to:

●   Cross-Stack EtherChannel provides the ability to configure Cisco EtherChannel technology across different members of the stack for high resiliency.

●   Flexlink provides link redundancy with convergence time less than 100 ms.

●   IEEE 802.1s/w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) provide rapid spanning-tree convergence independent of spanning-tree timers and also offers the benefit of Layer 2 load balancing and distributed processing. Stacked units behave as a single spanning-tree node.

●   Per-VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning-tree reconvergence on a per-VLAN spanning-tree basis, without requiring the implementation of spanning-tree instances.

●   Cisco Hot Standby Router Protocol (HSRP) is supported to create redundant, failsafe routing topologies.

●   Switch-port autorecovery (Errdisable) automatically attempts to reactivate a link that is disabled because of a network error.

High-Performance IP Routing

Cisco Express Forwarding hardware routing architecture delivers extremely high-performance IP routing in the Cisco Catalyst 3750-X and 3560-X Series Switches.

●   Static routing (16 routes) with LAN Base feature set.

●   IP unicast routing protocols (Static, Routing Information Protocol Version 1 [RIPv1], and RIPv2, RIPng, EIGRP stub) are supported for small-network routing applications with IP Base feature set.

●   Advanced IP unicast routing protocols (OSPF, EIGRP, BGPv4, and IS-ISv4) are supported for load balancing and constructing scalable LANs. IPv6 routing (OSPFv3, EIGRPv6) is supported in hardware for maximum performance. OSPF for routed access is included in the IP Base image. The IP Services feature set is required for full OSPF, EIGRP, BGPv4, and IS-ISv4.

●   Equal-cost routing facilitates Layer 3 load balancing and redundancy across the stack.

●   Policy-based routing (PBR) allows superior control by facilitating flow redirection regardless of the routing protocol configured. The IP Services feature set is required.

●   Hot Standby Routing Protocol (HSRP) provides dynamic load balancing and failover for routed links, up to 32 HSRP links supported per unit or stack.

●   Protocol Independent Multicast (PIM) for IP multicast routing is supported, including PIM sparse mode (PIM-SM), PIM dense mode (PIM-DM), PIM sparse-dense mode and Source Specific Multicast (SSM). The IP Services feature set is required.

●   Virtual routing and forwarding (VRF)-Lite enables a service provider to support two or more VPNs, with overlapping IP addresses. IP Services feature set is required.

Superior Quality of Service

The Cisco Catalyst 3750-X and 3560-X Series offers GbE speed with intelligent services that keep everything flowing smoothly, even at 10 times the normal network speed. Industry-leading mechanisms for marking, classification, and scheduling deliver superior performance for data, voice, and video traffic, all at wire speed.

Following are some of the QoS features supported in the Cisco Catalyst 3750-X and 3560-X Series Switches:

●   Cross-stack QoS allows QoS to be configured across the entire stack (available only on the Catalyst 3750‑X).

●   802.1p class of service (CoS) and differentiated services code point (DSCP) field classification are provided, using marking and reclassification on a per-packet basis by source and destination IP address, MAC address, or Layer 4 TCP/UDP port number.

●   Cisco control-plane and data-plane QoS ACLs on all ports help ensure proper marking on a per-packet basis.

●   Eight egress queues per port help enable differentiated management of different traffic types across the stack. Four queues are user configurable and four are reserved for system use.

●   Shaped Round Robin (SRR) scheduling helps ensure differential prioritization of packet flows by intelligently servicing the ingress queues and egress queues.

●   Weighted Tail Drop (WTD) provides congestion avoidance at the ingress and egress queues before a disruption occurs.

●   Strict priority queuing helps ensure that the highest-priority packets are serviced ahead of all other traffic.

●   The Cisco committed information rate (CIR) function provides bandwidth in increments as low as 8 Kbps.

●   Rate limiting is provided based on source and destination IP address, source and destination MAC address, Layer 4 TCP/UDP information, or any combination of these fields, using QoS ACLs (IP ACLs or MAC ACLs), class maps, and policy maps.

●   Up to 64 aggregate or individual policers are available per Fast Ethernet or GbE port.

Location Awareness and Mobility

In order to provide delivery of a best-in-class network experience to end users, it’s critical for network access to be location aware. A wide variety of devices can appear on the network, both wired (switches, routers, IP phones, PCs, access points, controllers, video digital media players, and so on) and wireless (mobile devices, wireless tags, rogues, and so on). In many industries, locating assets is primarily a manual process and is time consuming and error prone. The inability to locate assets in real time and to help ensure their availability when and where they are needed limits reaction time and efficiency.

Location services answer business-critical questions about both mobile assets and the users of those assets regardless of whether those assets are connecting using wired or wireless, and hence directly improve their organization’s profitability. Network Location Services also improve security and accelerate client troubleshooting by locating an asset, user, or device on the network.

●   Network visibility and control provide centralized visibility into wired and wireless devices on the network and their location.

●   Location-assisted client troubleshooting enables tracking of wired or wireless clients for quick problem resolution.

●   Asset tracking and improved security provide centralized inventory of wired and wireless devices and asset management for improved business processes.

●   Cisco Mobility Service Engine (MSE) Open API provides an open API (based on Simple Object Access Protocol [SOAP] and XML protocol) for any business application that needs the location data.

●   Location based policy allows greater control and visibility. With EnergyWise, power policies can be set up (to reduce the power or shut down the power from a port) based on the location.

●   Cisco Emergency Responder (CER) enhances emergency calling from Cisco Unified CallManager. It helps assure that Cisco Unified CallManager sends emergency calls to the appropriate Public Safety Answering Point (PSAP) for the caller’s location.

Specifications

Switch Performance

Table 9 shows Cisco Catalyst 3750-X and 3560-X Series Switches performance specifications.

Table 9.           Cisco Catalyst 3750-X and 3560-X Performance Specifications

Scalability Numbers

MAC, routing, security, and QoS scalability numbers depend on the type template used in the switch. Routing template is not supported in the LAN Base feature set. Table 10 shows Cisco Catalyst 3750-X and 3560-X Series Switch scalability numbers.

Table 10.       Cisco Catalyst 3750-X and 3560-X Series Switch Scalability Numbers

Dimensions, Weight, Acoustic, MTBF, and Environmental Range Specifications for Cisco Catalyst 3750-X and 3560-X Series Switches

Table 11 shows dimensions, weight, acoustic, MTBF, and environmental range.

Table 11.       Dimensions, Weight, Acoustic, MTBF, and Environmental Range

Note:    GLC-GE-100FX and GLC-T SFPs are not supported for NEBS short-term operation.