Cisco switch cbs350-8xt-eu (6x10gbe, 2x10gbe/sfp+)

Cisco switch CBS350-8XT-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-8XT-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 119,05 Switching Capacity in Gigabits per Second (Gbps) 160 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets StackingHardware stacking Up to 4 units in a stack. Up to 200 ports managed as a single system with hardware failover High availability Fast stack failover delivers minimal traffic loss. Support link aggregation across multiple units in a stack Plug-and-play stacking configuration/management Active/standby for resilient stack control Autonumbering Hot swap of units in stack Ring and chain stacking options, auto stacking port speed, flexible stacking port options High-speed stack interconnects Cost-effective high-speed 10G fiber interfaces. Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=50.3W 220V=50.3W Heat dissipation (BTU/hr) 171.6 PortsTotal system ports 6 x 10G copper + 2 x 10G copper/SFP+ combo + 1 x GE OOB management RJ-45 ports 6 x 10G copper Combo ports (RJ-45 + SFP) 2 x 10G copper/SFP+ combo Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 6 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e SFP-H10GB-CU1M Copper coax SFP-H10GB-CU3M Copper coax SFP-H10GB-CU5M Copper coax SFP-10G-SR Multimode fiber SFP-10G-LR Single-mode fiber SFP-10G-SR-S Multimode fiber SFP-10G-LR-S Single-mode fiber EnvironmentalUnit dimensions (W x D x H) 440 x 203 x 44 mm (17.3 x 8.0 x 1.73 in) Unit weight 2.98 kg (6.57 lb) Power 100-240V 50-60 Hz, external Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 32° to 122°F (0° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 2 Acoustic noise 25°C: 40.8 dB MTBF @ 25°C (hours) 1418411 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power Adapter Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Switch 8 portový, 10 Gbit, 2× SFP, L3, rack Přepínač známý jako switch je aktivní síťová jednotka propojující koncová zařízení popřípadě další síťové prvky. Slouží k vedení síťového provozu. CISCO CBS350 Managed 8-port 10GE, 2x10G SFP+ Shared je vhodný k instalaci do rozvaděče. Switch je opatřen 8 ks RJ-45 portů, které jsou poskytnuty k propojení se síťovými prvky. Celkem 2 konektory typu SFP zužitkujete při přenosu dat skrz optická vlákna. Disponuje Dual Personality porty, které jsou speciální díky tomu, že poskytují konektor RJ-45 i SFP, v určitém okamžiku lze však použít jen jeden z nich. Rozměry přepínače jsou 440 × 203 × 44 mm. Integrované LAN porty podporují přenosovou rychlost až do 10 Gbit. Hmotnost switche je 2980 g. CISCO CBS350 Managed 8-port 10GE, 2x10G SFP+ Shared má podíl i na síťové vrstvě ISO/OSI modelu, to znamená, že dokáže fungovat jako router. Díky tomu už nebudete potřebovat další síťový prvek. Rozhodující vlastnosti switche CISCO CBS350... (alza.cz)

Cisco switch CBS350-24XT-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-24XT-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 240 Switching Capacity in Gigabits per Second (Gbps) 480 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets StackingHardware stacking Up to 4 units in a stack. Up to 200 ports managed as a single system with hardware failover High availability Fast stack failover delivers minimal traffic loss. Support link aggregation across multiple units in a stack Plug-and-play stacking configuration/management Active/standby for resilient stack control Autonumbering Hot swap of units in stack Ring and chain stacking options, auto stacking port speed, flexible stacking port options High-speed stack interconnects Cost-effective high-speed 10G fiber interfaces. Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=124.1W 220V=124.5 Heat dissipation (BTU/hr) 424.8 PortsTotal system ports 20 x 10G copper + 4 x 10G copper/SFP+ combo + 1 x GE OOB management RJ-45 ports 20 x 10G copper Combo ports (RJ-45 + SFP) 4 x 10G copper/SFP+ combo Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e SFP-H10GB-CU1M Copper coax SFP-H10GB-CU3M Copper coax SFP-H10GB-CU5M Copper coax SFP-10G-SR Multimode fiber SFP-10G-LR Single-mode fiber SFP-10G-SR-S Multimode fiber SFP-10G-LR-S Single-mode fiber EnvironmentalUnit dimensions (W x D x H) 440 x 350 x 44 mm (17.3 x 13.78 x 1.73 in) Unit weight 5.1 kg (11.2 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 32° to 122°F (0° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 4 Acoustic noise 25°C: 41.2 dB MTBF @ 25°C (hours) 556642 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-8FP-2G Optimalizujte svůj podnik s tímto nezbytným prvkem vaší sítě. Intuitivní a bezpečné řešení Cisco Business 350 Managed Switches poskytují spolehlivou síť pro malé firmy. Nabízejí jednoduché ovládání, pokročilé funkce a zabezpečení. Výhody Cisco Business 350 Series Intuitivní ovládání pro automatizaci nasazení, monitorování a správu životnosti vašich switchů. Rozsáhlé zabezpečení chránící vaši síť a soukromí vašich zákazníků. Gigabitový Ethernet a 10GE uplink pro rychlý přenos dat. Možnost spojení až čtyř samostatných switchů do jednoho zařízení s jednotnou správou a kontrolou. Technické specifikace Počet portů: 10 Provedení: Rack-mount Porty: 8x GbE, 2 x GbE RJ-45/SFP combo, PoE+ Výkon: Switching capacity: 20.0 Gbps, Forwarding performance (64-byte packet size): 14.88 Mpps Power over Ethernet (PoE): PoE+ (8 ports, 120W) VLAN: Ano Protokol pro vzdálenou správu: SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy: IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae, IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), interní Rozměry (Š x V x H): 268 x 323 x 44 mm Hmotnost: 3.5 kg Provozní teplota: -5 až 50°C Provozní vlhost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-8S-E-2G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 5. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-8S-E-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 14,88 Switching Capacity in Gigabits per Second (Gbps) 20 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=11.1W 220V=11.9 Heat dissipation (BTU/hr) 40.6 PortsTotal system ports 10 x Gigabit Ethernet RJ-45 ports 8 x Gigabit SFP Slots Combo ports (RJ-45 + SFP) 2 x Gigabit Ethernet combo Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1.5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 280 x 170 x 44 mm (11.0 x 6.69 x 1.73 in) Unit weight 1.0 kg (2.20 lb) Power 100-240 V, 50-60 Hz, External Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 32° to 122°F (0° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 2242229 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power adapter Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-8T-E-2G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-8T-E-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 14,88 Switching Capacity in Gigabits per Second (Gbps) 20 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=12.55W 220V=12.56 Heat dissipation (BTU/hr) 42.86 PortsTotal system ports 10 x Gigabit Ethernet RJ-45 ports 8 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 2 x Gigabit Ethernet combo Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1.5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 268 x 185 x 44 mm (10.56 x 7.28 x 1.73 in) Unit weight 1.39 kg (3.06 lb) Power 100-240 V, 50-60 Hz, External Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 2171669 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power adapter Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco CBS350-8P-2G: Přepínač pro malé podniky Produktové číslo: CBS350-8P-2G EAN: 889728497923 Switch Cisco CBS350-8P-2G je optimalizován pro malé firmy. Nabízí pokročilé funkce, zabezpečení a intuitivní ovládání. Přehled funkcí Intuitivní ovládání pro snadné nasazení a správu Pokročilé zabezpečení chránící vaši síť Gigabitový Ethernet a 10GE uplink pro rychlý přenos dat Možnost spojení až čtyř switchů do jednoho zařízení Technické specifikace Počet portů: 10 Provedení: Rack-mount Porty: 8x GbE, 2x GbE RJ-45/SFP combo, PoE+ Výkon: Switching capacity: 20.0 Gbps, Forwarding performance: 14.88 Mpps Power over Ethernet (PoE): 8 ports, 67W VLAN: Ano Protokoly pro vzdálenou správu SNMP RMON HTTP HTTPS TFTP Telnet SSH Podporované standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae, IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), interní Rozměry a hmotnost Rozměry (Š x V x H): 268 x 323 x 44 mm Hmotnost: 3.5 kg Provozní podmínky Provozní teplota: -5 až 50°C Provozní vlhost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-8FP-2G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-8FP-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 14,88 Switching Capacity in Gigabits per Second (Gbps) 20 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 120 W Number of Ports That Support PoE 8 Hardware Power Consumption (worst case)System power consumption 110V=17.29W 220V=17.88 Power consumption (with PoE) 110V=148.12W 220V=146.36W Heat dissipation (BTU/hr) 505.41 PortsTotal system ports 10 x Gigabit Ethernet RJ-45 ports 8 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 2 x Gigabit Ethernet combo Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1.5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 268 x 272 x 44 mm (10.56 x 10.71 x 1.73 in) Unit weight 2.59 kg (5.71 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 1786412 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-8P-E-2G-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-8P-E-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 14,88 Switching Capacity in Gigabits per Second (Gbps) 20 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 60 W Number of Ports That Support PoE 8 Hardware Power Consumption (worst case)System power consumption 110V=13.84W 220V=14.31 Power consumption (with PoE) 110V=80.79W 220V=80.86W Heat dissipation (BTU/hr) 275.91 PortsTotal system ports 10 x Gigabit Ethernet RJ-45 ports 8 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 2 x Gigabit Ethernet combo Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1.5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 268 x 185 x 44 mm (10.56 x 7.28 x 1.73 in) Unit weight 1.53 kg (3.37 lb) Power 100-240 V, 50-60 Hz, External Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 1706649 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power adapter Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-8P-E-2G - klíčový prvek pro malé podniky Produktové číslo: CBS350-8P-E-2G EAN: 889728497954 Switch Cisco CBS350-8P-E-2G je součástí programu REFRESH. Nabízí stejné funkce, podporu a záruku jako nové zařízení. Proč zvolit Cisco switch CBS350-8P-E-2G? Tento switch je základním stavebním kamenem pro sítě malých firem. Nabízí pokročilé funkce a zabezpečení pro urychlení vaší digitální transformace. Výhody Cisco switch CBS350-8P-E-2G Intuitivní ovládání pro automatizaci nasazení Gigabitový Ethernet a 10GE uplink pro rychlý přenos dat Možnost spojení až čtyř switchů do jedné jednotky Rozsáhlé zabezpečení pro ochranu vaší sítě a soukromí vašich zákazníků Technické specifikace Porty a výkon Počet portů: 10 Provedení: Rack-mount Porty: 8x GbE, 2 x GbE RJ-45/SFP combo, PoE+ Switching capacity: 20.0 Gbps Forwarding performance (64-byte packet size): 14.88 Mpps Power over Ethernet (PoE) PoE+ (8 ports, 67W) Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Fyzické specifikace Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), externí Rozměry (Š x V x H): 268 x 185 x 44 mm Hmotnost: 3.5 kg Provozní podmínky Provozní teplota: -5 až 50°C Provozní vlhost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-8FP-E-2G: Průvodce vaší digitální transformací Společnost Cisco představuje switch CBS350-8FP-E-2G. Tento produkt je součástí programu REFRESH, který nabízí opravená zařízení s plnou podporou a zárukou. Základ pro malé podniky Podnikové switche jsou základní součástí každé sítě. Tento switch je navržen pro malé firmy a je připraven podpořit všechny fáze jejich podnikání. Urychlení digitální transformace Cisco Business 350 Managed Switches jsou navrženy tak, aby urychlily digitální transformaci vašeho podniku. Nabízí intuitivní ovládání, pokročilé funkce a zabezpečení. Výhody Cisco Business 350 Series Intuitivní ovládání pro automatizaci nasazení a správy switchů. Rozsáhlé zabezpečení chránící vaši síť a soukromí vašich zákazníků. Gigabitový Ethernet a 10GE uplink pro rychlý přenos dat. Možnost spojení až čtyř samostatných switchů do jednoho zařízení. Technické specifikace: Počet portů: 10 Provedení: Rack-mount Porty: 8x GbE, 2 x GbE RJ-45/SFP combo, PoE+ Výkon: Switching capacity: 20.0 Gbps, Forwarding performance (64-byte packet size): 14.88 Mpps Power over Ethernet (PoE): PoE+ (8 ports, 120W) VLAN: Ano Protokol pro vzdálenou správu: SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy: IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae, IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), externí Rozměry (Š x V x H): 268 x 185 x 44 mm Hmotnost: 3.5 kg Provozní teplota: -5 až 50°C Provozní vlhost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-16XTS-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-16XTS-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 238.08 Switching Capacity in Gigabits per Second (Gbps) 320 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets StackingHardware stacking Up to 4 units in a stack. Up to 200 ports managed as a single system with hardware failover High availability Fast stack failover delivers minimal traffic loss. Support link aggregation across multiple units in a stack Plug-and-play stacking configuration/management Active/standby for resilient stack control Autonumbering Hot swap of units in stack Ring and chain stacking options, auto stacking port speed, flexible stacking port options High-speed stack interconnects Cost-effective high-speed 10G fiber interfaces. Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=57W 220V=57.7 Heat dissipation (BTU/hr) 196.88 PortsTotal system ports 8 x 10G copper + 8 x 10G SFP+ + 1 x GE OOB management RJ-45 ports 8 x 10G copper Combo ports (RJ-45 + SFP) 8 x 10G SFP+ Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e SFP-H10GB-CU1M Copper coax SFP-H10GB-CU3M Copper coax SFP-H10GB-CU5M Copper coax SFP-10G-SR Multimode fiber SFP-10G-LR Single-mode fiber SFP-10G-SR-S Multimode fiber SFP-10G-LR-S Single-mode fiber EnvironmentalUnit dimensions (W x D x H) 440 x 257 x 44 mm (17.3 x 10.12 x 1.73 in) Unit weight 3.79 kg (8.36lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 32° to 122°F (0° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 3 Acoustic noise 25°C: 39.1 dB MTBF @ 25°C (hours) 798504 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-48T-4G-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-48T-4G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 77,38 Switching Capacity in Gigabits per Second (Gbps) 104 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=48.27W 220V=48.64 Heat dissipation (BTU/hr) 165,96 PortsTotal system ports 52 x Gigabit Ethernet RJ-45 ports 48 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 445 x 288 x 44 mm (17.5 x 11.33 x 1.73 in) Unit weight 3.95 kg (8.71 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C: 29.7 dBA MTBF @ 25°C (hours) 1452667 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-48T-4X-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-48T-4X-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 130,94 Switching Capacity in Gigabits per Second (Gbps) 176 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets StackingHardware stacking Up to 4 units in a stack. Up to 200 ports managed as a single system with hardware failover High availability Fast stack failover delivers minimal traffic loss. Support link aggregation across multiple units in a stack Plug-and-play stacking configuration/management Active/standby for resilient stack control Autonumbering Hot swap of units in stack Ring and chain stacking options, auto stacking port speed, flexible stacking port options High-speed stack interconnects Cost-effective high-speed 10G fiber interfaces. Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=51.01W 220V=50.58 Heat dissipation (BTU/hr) 174,06 PortsTotal system ports 48 Gigabit Ethernet + 4 x 10G RJ-45 ports 48 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP+ Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e SFP-H10GB-CU1M Copper coax SFP-H10GB-CU3M Copper coax SFP-H10GB-CU5M Copper coax SFP-10G-SR Multimode fiber SFP-10G-LR Single-mode fiber SFP-10G-SR-S Multimode fiber SFP-10G-LR-S Single-mode fiber EnvironmentalUnit dimensions (W x D x H) 445 x 288 x 44 mm (17.5 x 11.33 x 1.73 in) Unit weight 3.95 kg (8.71 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C: 29.7 dBA MTBF @ 25°C (hours) 1452667 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco CBS350-24FP-4X Business 350 Series Switch Součást všech malých podniků Podnikové switche jsou základní součástí každé sítě. Společnost Cisco nabízí rozsáhlé portfolio síťových přepínačů pro malé firmy, využitelné v každé fázi Vašeho podnikání. Cisco Business 350 Managed Switches jsou neodmyslitelnou součástí pro spolehlivou síť malých firem. Díky intuitivnímu ovládání, pokročilým funkcím a zabezpečení jsou přepínače řady Cisco Business 350 navrženy tak, aby urychlili Vaši digitální transformaci. Výhody Cisco Business 350 Series Intuitivní ovládání k automatizaci nasazení, monitorování a správě životnosti Vašich switchů Rozsáhlé zabezpečení chránící Vaši síť a soukromí Vašich zákazníků Gigabitový Ethernet a 10GE uplink, rychlá přenosová rychlost Možnost spojení až čtyř samostatných switchů, fungující jako jedno zařízení s jednotnou správou a kontrolou Stránky produktu: CBS350-24FP-4X Administration guide: Administration guide Administration guide (pdf): Administration guide (pdf) Technické specifikace: Počet portů 24 Provedení Rack-mount Porty 24 x GbE RJ45, 4 x 10GbE SFP+, PoE+ Výkon Switching capacity: 128.0 Gbps Forwarding performance (64-byte packet size): 95.23 Mpps VLAN Ano Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky 16 000 RAM 512 MB Flash 256 MB Napájení 100-240 V (50-60 Hz), interní Rozměry (Š x V x H) 445 x 345 x 44 mm Hmotnost 4.6 kg Provozní teplota -5 až 50°C Provozní vlhost 10 - 90% Skladovací teplota -25 až 70 °C (tonerpartner.cz)

Cisco CBS350-16T-2G Business 350 Series Switch Spolehlivý základ pro podnikovou síť Switch CBS350-16T-2G od společnosti Cisco je klíčovým prvkem pro malé podniky hledající robustní a spolehlivou síťovou infrastrukturu. Intuitivní ovládání a pokročilé funkce Switch nabízí intuitivní ovládání pro snadné nasazení, monitorování a správu. Jeho pokročilé funkce a zabezpečení jsou navrženy tak, aby urychlily digitální transformaci vašeho podniku. Výhody Cisco Business 350 Series Intuitivní ovládání pro snadnou správu switchů Rozsáhlé zabezpečení pro ochranu vaší sítě a soukromí zákazníků Gigabitový Ethernet a 10GE uplink pro rychlý přenos dat Možnost spojení až čtyř samostatných switchů do jednoho zařízení s jednotnou správou Technické specifikace Počet portů: 18 (16x GbE, 2x SFP) Provedení: Rack-mount Switching capacity: 36.0 Gbps Forwarding performance (64-byte packet size): 26.78 Mpps VLAN: Ano Protokol pro vzdálenou správu: SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), interní Rozměry (Š x V x H): 268 x 272 x 44 mm Hmotnost: 1.78 kg Provozní teplota: -5 až 50°C Provozní vlhkost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-24T-4X-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-24T-4X-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 95,23 Switching Capacity in Gigabits per Second (Gbps) 128 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets StackingHardware stacking Up to 4 units in a stack. Up to 200 ports managed as a single system with hardware failover High availability Fast stack failover delivers minimal traffic loss. Support link aggregation across multiple units in a stack Plug-and-play stacking configuration/management Active/standby for resilient stack control Autonumbering Hot swap of units in stack Ring and chain stacking options, auto stacking port speed, flexible stacking port options High-speed stack interconnects Cost-effective high-speed 10G fiber interfaces. Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=27.54W 220V=27.25 Heat dissipation (BTU/hr) 93,32 PortsTotal system ports 24 Gigabit Ethernet + 4 x 10G RJ-45 ports 24 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP+ Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1,5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e SFP-H10GB-CU1M Copper coax SFP-H10GB-CU3M Copper coax SFP-H10GB-CU5M Copper coax SFP-10G-SR Multimode fiber SFP-10G-LR Single-mode fiber SFP-10G-SR-S Multimode fiber SFP-10G-LR-S Single-mode fiber EnvironmentalUnit dimensions (W x D x H) 445 x 240 x 44 mm (17.5 x 9.45 x 1.73 in) Unit weight 2.78 kg (6.13 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 2026793 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-48T-4G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-48T-4G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 77,38 Switching Capacity in Gigabits per Second (Gbps) 104 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=48.27W 220V=48.64 Heat dissipation (BTU/hr) 165,96 PortsTotal system ports 52 x Gigabit Ethernet RJ-45 ports 48 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 445 x 288 x 44 mm (17.5 x 11.33 x 1.73 in) Unit weight 3.95 kg (8.71 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C: 29.7 dBA MTBF @ 25°C (hours) 1452667 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-24T-4G-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-24T-4G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 41,66 Switching Capacity in Gigabits per Second (Gbps) 56 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=25.91W 220V=25.63 Heat dissipation (BTU/hr) 89.13 PortsTotal system ports 28 x Gigabit Ethernet RJ-45 ports 24 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1,5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 445 x 240 x 44 mm (17.5 x 9.45 x 1.73 in) Unit weight 2.63 kg (5.80 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) fanless Acoustic noise N/A MTBF @ 25°C (hours) 2026793 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco CBS350-8P-2G Business 350 Series Switch Součást všech malých podniků Podnikové switche jsou základní součástí každé sítě. Společnost Cisco nabízí rozsáhlé portfolio síťových přepínačů pro malé firmy, využitelné v každé fázi Vašeho podnikání. Cisco Business 350 Managed Switches jsou neodmyslitelnou součástí pro spolehlivou síť malých firem. Díky intuitivnímu ovládání, pokročilým funkcím a zabezpečení jsou přepínače řady Cisco Business 350 navrženy tak, aby urychlili Vaši digitální transformaci. Výhody Cisco Business 350 Series Intuitivní ovládání k automatizaci nasazení, monitorování a správě životnosti Vašich switchů Rozsáhlé zabezpečení chránící Vaši síť a soukromí Vašich zákazníků Gigabitový Ethernet a 10GE uplink, rychlá přenosová rychlost Možnost spojení až čtyř samostatných switchů, fungující jako jedno zařízení s jednotnou správou a kontrolou Stránky produktu: CBS350-8P-2G Administration guide: Administration guide Administration guide (pdf): Administration guide (pdf) Technické specifikace: Počet portů 10 Provedení Rack-mount Porty 8x GbE, 2 x GbE RJ-45/SFP combo, PoE+ Výkon Switching capacity: 20.0 Gbps Forwarding performance (64-byte packet size): 14.88 Mpps Power over Ethernet (PoE) PoE (8 ports, 67W) VLAN Ano Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky 16 000 RAM 512 MB Flash 256 MB Napájení 100-240 V (50-60 Hz), interní Rozměry (Š x V x H) 268 x 323 x 44 mm Hmotnost 3.5 kg Provozní teplota -5 až 50°C Provozní vlhost 10 - 90% Skladovací teplota -25 až 70 °C (patro.cz)

Cisco switch CBS350-24T-4X: Váš spolehlivý partner pro malé podniky EAN: 889728497503 Tento switch je součástí programu REFRESH. Poskytuje plnou funkcionalitu, podporu a záruku. Spolehlivý výkon a pokročilé funkce Cisco Business 350 Managed Switches jsou navrženy pro malé firmy. Urychlují digitální transformaci vašeho podniku. Výhody Cisco Business 350 Series Intuitivní ovládání pro automatizaci nasazení a správy switchů Rozsáhlé zabezpečení chránící vaši síť a soukromí zákazníků Gigabitový Ethernet a 10GE uplink pro rychlý přenos dat Možnost spojení až čtyř samostatných switchů do jednoho zařízení Technické specifikace Počet portů: 24 Provedení: Rack-mount Porty: 24 x Gigabit Ethernet + 4 x 10G SFP+ Výkon: Switching capacity: 128.0 Gbps, Forwarding performance: 95.23 Mpps VLAN: Ano Protokol pro vzdálenou správu: SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy: IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae, IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), interní Rozměry: 445 x 240 x 44 mm Hmotnost: 2.78 kg Provozní teplota: -5 až 50°C Provozní vlhost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-24T-4G EAN: 889728499323 Představení produktu Cisco CBS350-24T-4G je switch navržený pro malé podniky. Je součástí řady Cisco Business 350 Managed Switches. Tento switch přináší pokročilé funkce a zabezpečení pro urychlení digitální transformace vašeho podniku. Výhody Intuitivní ovládání: Umožňuje automatizaci nasazení a správu switchů. Rozsáhlé zabezpečení: Chrání vaši síť a soukromí zákazníků. Gigabitový Ethernet a 10GE uplink: Zaručuje rychlý přenos dat. Možnost spojení až čtyř switchů: Umožňuje vytvoření jednoho zařízení s jednotnou správou. Technické specifikace Počet portů: 28 Provedení: Rack-mount Porty: 24x GbE, 4x SFP Výkon: Switching capacity: 56.0 Gbps, Forwarding performance (64-byte packet size): 41.66 Mpps VLAN: Ano Protokol pro vzdálenou správu: SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy: IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae, IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), interní Rozměry (Š x V x H): 445 x 240 x 44 mm Hmotnost: 2.63 kg Provozní teplota: -5 až 50°C Provozní vlhkost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-48P-4G EAN produktu: 889728295246 Nezbytný prvek pro malé podniky Cisco CBS350-48P-4G je zásadním prvkem sítě. Je součástí široké nabídky společnosti Cisco a je optimalizován pro malé firmy. Podpora digitální transformace Switch nabízí intuitivní ovládání a pokročilé funkce, které zabezpečují vaši síť a urychlují digitální transformaci. Výhody Cisco Business 350 Series Automatizace nasazení a správa switchů. Chrání soukromí vašich zákazníků. Gigabitový Ethernet a 10GE uplink. Možnost spojení až 4 switchů do jednoho zařízení. Technické specifikace Počet portů: 52 Provedení: Rack-mount Porty: 48x GbE, 4x SFP, PoE+ Výkon: Switching capacity: 104.0 Gbps, Forwarding performance (64-byte packet size): 77.38 Mpps VLAN: Ano Protokol pro vzdálenou správu: SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy: IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae, IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), interní Rozměry (Š x V x H): 445 x 350 x 44 mm Hmotnost: 5.43 kg Provozní teplota: -5 až 50°C Provozní vlhost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-48P-4X-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-48P-4X-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 130,94 Switching Capacity in Gigabits per Second (Gbps) 176 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets StackingHardware stacking Up to 4 units in a stack. Up to 200 ports managed as a single system with hardware failover High availability Fast stack failover delivers minimal traffic loss. Support link aggregation across multiple units in a stack Plug-and-play stacking configuration/management Active/standby for resilient stack control Autonumbering Hot swap of units in stack Ring and chain stacking options, auto stacking port speed, flexible stacking port options High-speed stack interconnects Cost-effective high-speed 10G fiber interfaces. Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 370 W Number of Ports That Support PoE 48 Hardware Power Consumption (worst case)System power consumption 110V=61.53W 220V=60.73 Power consumption (with PoE) 110V=471.90W 220V=463.32W Heat dissipation (BTU/hr) 1610.19 PortsTotal system ports 48 Gigabit Ethernet + 4 x 10G RJ-45 ports 48 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP+ Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e SFP-H10GB-CU1M Copper coax SFP-H10GB-CU3M Copper coax SFP-H10GB-CU5M Copper coax SFP-10G-SR Multimode fiber SFP-10G-LR Single-mode fiber SFP-10G-SR-S Multimode fiber SFP-10G-LR-S Single-mode fiber EnvironmentalUnit dimensions (W x D x H) 445 x 350 x 44 mm (17.5 x 13.78 x 1.73 in) Unit weight 5.43 kg (11.97 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C:37.3 dBA MTBF @ 25°C (hours) 856329 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-16T-E-2G Podnikový switch pro malé firmy Cisco CBS350-16T-E-2G je základním stavebním kamenem vaší firemní sítě. Intuitivní ovládání a pokročilé funkce Tento switch je navržen pro rychlou a snadnou digitalizaci vašeho podniku. Výhody Cisco Business 350 Series Automatizace nasazení, monitorování a správy switchů Rozsáhlé zabezpečení pro ochranu sítě a soukromí zákazníků Gigabitový Ethernet a 10GE uplink pro rychlý přenos dat Možnost spojení až čtyř switchů do jednoho zařízení Technické specifikace Počet portů: 18 Provedení: Rack-mount Porty: 18 x GbE (16x GbE, 2x SFP) Výkon: Switching capacity: 36.0 Gbps, Forwarding performance (64-byte packet size): 26.78 Mpps VLAN: Ano Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240V 50-60 Hz, externí Provozní podmínky Rozměry (Š x V x H): 268 x 210 x 44 mm Hmotnost: 1.42 kg Provozní teplota: -5 až 50°C Provozní vlhkost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-16T-2G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-16T-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 26,78 Switching Capacity in Gigabits per Second (Gbps) 36 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=18.63W 220V=18.37 Heat dissipation (BTU/hr) 89.13 PortsTotal system ports 18 x Gigabit Ethernet RJ-45 ports 16 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 2 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1,5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 268 x 272 x 44 mm (10.56 x 10.69 x 1.73 in) Unit weight 1.78 kg (3.92 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) fanless Acoustic noise N/A MTBF @ 25°C (hours) 2165105 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-24FP-4G-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-24FP-4G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 41,66 Switching Capacity in Gigabits per Second (Gbps) 56 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 370 W Number of Ports That Support PoE 24 Hardware Power Consumption (worst case)System power consumption 110V=46.60W 220V=46.35 Power consumption (with PoE) 110V=449.7W 220V=438.3W Heat dissipation (BTU/hr) 1537.17 PortsTotal system ports 28 x Gigabit Ethernet RJ-45 ports 24 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1,5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 445 x 345 x 44 mm (17.5 x 13.59 x 1.73 in) Unit weight 4.6 kg (10.14 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C:34.8 dBA MTBF @ 25°C (hours) 698220 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-48FP-4G-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Stránky produktu: CBS350-48FP-4G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 77,38 Switching Capacity in Gigabits per Second (Gbps) 104 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 740 W Number of Ports That Support PoE 48 Hardware Power Consumption (worst case)System power consumption 110V=60.77W 220V=59.73 Power consumption (with PoE) 110V=451.95W 220V=445.85W Heat dissipation (BTU/hr) 1542.12 PortsTotal system ports 52 x Gigabit Ethernet RJ-45 ports 48 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 445 x 350 x 44 mm (17.5 x 13.78 x 1.73 in) Unit weight 5.43 kg (11.97 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C:37.3 dBA MTBF @ 25°C (hours) 856329 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-48FP-4X-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-48FP-4X-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 130,94 Switching Capacity in Gigabits per Second (Gbps) 176 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets StackingHardware stacking Up to 4 units in a stack. Up to 200 ports managed as a single system with hardware failover High availability Fast stack failover delivers minimal traffic loss. Support link aggregation across multiple units in a stack Plug-and-play stacking configuration/management Active/standby for resilient stack control Autonumbering Hot swap of units in stack Ring and chain stacking options, auto stacking port speed, flexible stacking port options High-speed stack interconnects Cost-effective high-speed 10G fiber interfaces. Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 740 W Number of Ports That Support PoE 48 Hardware Power Consumption (worst case)System power consumption 110V=76.18W 220V=76.22 Power consumption (with PoE) 110V=889.35W 220V=865.02W Heat dissipation (BTU/hr) 3034.59 PortsTotal system ports 48 Gigabit Ethernet + 4 x 10G RJ-45 ports 48 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP+ Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e SFP-H10GB-CU1M Copper coax SFP-H10GB-CU3M Copper coax SFP-H10GB-CU5M Copper coax SFP-10G-SR Multimode fiber SFP-10G-LR Single-mode fiber SFP-10G-SR-S Multimode fiber SFP-10G-LR-S Single-mode fiber EnvironmentalUnit dimensions (W x D x H) 445 x 350 x 44 mm (17.5 x 13.78 x 1.73 in) Unit weight 5.82 kg (12.83 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C:48.7 dBA MTBF @ 25°C (hours) 856301 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-8T-E-2G-UK - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu UK = produkt určený pro trh v Anglii identický produkt k EU modelům s rozdílem napájecího kabelu pro UK, náhradní kabel CAB-TA-EU je součástí objednávky Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-8T-E-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 14,88 Switching Capacity in Gigabits per Second (Gbps) 20 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=12.55W 220V=12.56 Heat dissipation (BTU/hr) 42.86 PortsTotal system ports 10 x Gigabit Ethernet RJ-45 ports 8 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 2 x Gigabit Ethernet combo Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1.5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 268 x 185 x 44 mm (10.56 x 7.28 x 1.73 in) Unit weight 1.39 kg (3.06 lb) Power 100-240 V, 50-60 Hz, External Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 2171669 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power adapter Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-16P-2G-EU Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Stránky produktu: CBS350-16P-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 26,78 Switching Capacity in Gigabits per Second (Gbps) 36 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 120 W Number of Ports That Support PoE 16 Hardware Power Consumption (worst case)System power consumption 110V=24.51W 220V=25.01 Power consumption (with PoE) 110V=156.4W 220V=154.5W Heat dissipation (BTU/hr) 536.39 PortsTotal system ports 18 x Gigabit Ethernet RJ-45 ports 16 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 2 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1,5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 268 x 297 x 44 mm (10.56 x 11.69 x 1.73 in) Unit weight 2.38 kg (5.25 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 706983 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-48FP-4G Produktový kód: CBS350-48FP-4G EAN: 889728497534 Popis produktu Switch Cisco CBS350-48FP-4G je součástí programu REFRESH. To znamená, že je to opravené zařízení nebo zařízení z kvartálových rotací. Ale nebojte, disponuje stejnými funkcemi, podporou a zárukou, jako zařízení zcela nová. Výhody Cisco Business 350 Series Intuitivní ovládání pro automatizaci nasazení, monitorování a správu životnosti switchů. Rozsáhlé zabezpečení chránící Vaši síť a soukromí Vašich zákazníků. Gigabitový Ethernet a 10GE uplink pro rychlou přenosovou rychlost. Flexibilita díky možnosti spojení až čtyř samostatných switchů, fungující jako jedno zařízení s jednotnou správou a kontrolou. Technické specifikace Počet portů: 52 Provedení: Rack-mount Porty: 48x GbE, 4x SFP, PoE+ Výkon: Switching capacity: 104.0 Gbps, Forwarding performance (64-byte packet size): 77.38 Mpps VLAN: Ano Protokol pro vzdálenou správu: SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy: IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae, IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), interní Rozměry (Š x V x H): 445 x 350 x 44 mm Hmotnost: 5.82 kg Provozní teplota: -5 až 50°C Provozní vlhost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Cisco switch CBS350-16T-E-2G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-16T-E-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 26,78 Switching Capacity in Gigabits per Second (Gbps) 36 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Hardware Power Consumption (worst case)System power consumption 110V=19.63W 220V=19.32 Heat dissipation (BTU/hr) 89.13 PortsTotal system ports 18 x Gigabit Ethernet RJ-45 ports 16 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 2 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1,5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 268 x 210 x 44 mm (10.56 x 8.26 x 1.73 in) Unit weight 1.42 kg (3.13 lb) Power 100-240V 50-60 Hz, external Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) fanless Acoustic noise N/A MTBF @ 25°C (hours) 2165105 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power adapter Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-48FP-4X-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-48FP-4X-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 130,94 Switching Capacity in Gigabits per Second (Gbps) 176 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets StackingHardware stacking Up to 4 units in a stack. Up to 200 ports managed as a single system with hardware failover High availability Fast stack failover delivers minimal traffic loss. Support link aggregation across multiple units in a stack Plug-and-play stacking configuration/management Active/standby for resilient stack control Autonumbering Hot swap of units in stack Ring and chain stacking options, auto stacking port speed, flexible stacking port options High-speed stack interconnects Cost-effective high-speed 10G fiber interfaces. Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 740 W Number of Ports That Support PoE 48 Hardware Power Consumption (worst case)System power consumption 110V=76.18W 220V=76.22 Power consumption (with PoE) 110V=889.35W 220V=865.02W Heat dissipation (BTU/hr) 3034.59 PortsTotal system ports 48 Gigabit Ethernet + 4 x 10G RJ-45 ports 48 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP+ Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e SFP-H10GB-CU1M Copper coax SFP-H10GB-CU3M Copper coax SFP-H10GB-CU5M Copper coax SFP-10G-SR Multimode fiber SFP-10G-LR Single-mode fiber SFP-10G-SR-S Multimode fiber SFP-10G-LR-S Single-mode fiber EnvironmentalUnit dimensions (W x D x H) 445 x 350 x 44 mm (17.5 x 13.78 x 1.73 in) Unit weight 5.82 kg (12.83 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C:48.7 dBA MTBF @ 25°C (hours) 856301 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-48P-4X-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-48P-4X-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 130,94 Switching Capacity in Gigabits per Second (Gbps) 176 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets StackingHardware stacking Up to 4 units in a stack. Up to 200 ports managed as a single system with hardware failover High availability Fast stack failover delivers minimal traffic loss. Support link aggregation across multiple units in a stack Plug-and-play stacking configuration/management Active/standby for resilient stack control Autonumbering Hot swap of units in stack Ring and chain stacking options, auto stacking port speed, flexible stacking port options High-speed stack interconnects Cost-effective high-speed 10G fiber interfaces. Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 370 W Number of Ports That Support PoE 48 Hardware Power Consumption (worst case)System power consumption 110V=61.53W 220V=60.73 Power consumption (with PoE) 110V=471.90W 220V=463.32W Heat dissipation (BTU/hr) 1610.19 PortsTotal system ports 48 Gigabit Ethernet + 4 x 10G RJ-45 ports 48 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP+ Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e SFP-H10GB-CU1M Copper coax SFP-H10GB-CU3M Copper coax SFP-H10GB-CU5M Copper coax SFP-10G-SR Multimode fiber SFP-10G-LR Single-mode fiber SFP-10G-SR-S Multimode fiber SFP-10G-LR-S Single-mode fiber EnvironmentalUnit dimensions (W x D x H) 445 x 350 x 44 mm (17.5 x 13.78 x 1.73 in) Unit weight 5.43 kg (11.97 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C:37.3 dBA MTBF @ 25°C (hours) 856329 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-24FP-4G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-24FP-4G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 41,66 Switching Capacity in Gigabits per Second (Gbps) 56 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 370 W Number of Ports That Support PoE 24 Hardware Power Consumption (worst case)System power consumption 110V=46.60W 220V=46.35 Power consumption (with PoE) 110V=449.7W 220V=438.3W Heat dissipation (BTU/hr) 1537.17 PortsTotal system ports 28 x Gigabit Ethernet RJ-45 ports 24 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1,5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 445 x 345 x 44 mm (17.5 x 13.59 x 1.73 in) Unit weight 4.6 kg (10.14 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C:34.8 dBA MTBF @ 25°C (hours) 698220 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-48P-4G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-48P-4G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 77,38 Switching Capacity in Gigabits per Second (Gbps) 104 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 370 W Number of Ports That Support PoE 48 Hardware Power Consumption (worst case)System power consumption 110V=60.77W 220V=59.73 Power consumption (with PoE) 110V=451.95W 220V=445.85W Heat dissipation (BTU/hr) 1542.12 PortsTotal system ports 52 x Gigabit Ethernet RJ-45 ports 48 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 3 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 445 x 350 x 44 mm (17.5 x 13.78 x 1.73 in) Unit weight 5.43 kg (11.97 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) 1 Acoustic noise 25°C:37.3 dBA MTBF @ 25°C (hours) 856329 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco Business 350 Series Managed Switches představují portfolio cenově dostupných spravovaných přepínačů, které jsou klíčovým stavebním kamenem pro každou malou kancelářskou síť. Intuitivní řídicí panel zjednodušuje nastavení sítě a pokročilé funkce urychlují digitální transformaci, zatímco všudypřítomné zabezpečení chrání důležité obchodní transakce. Přepínače řady Cisco Business 350 poskytují ideální kombinaci cenové dostupnosti a funkcí pro malé kanceláře. Přepínače řady Cisco Business 350 poskytují sadu pokročilých funkcí, které vyžadují rostoucí podniky a které vyžadují aplikace a technologie s velkou šířkou pásma. Tyto přepínače mohou zlepšit dostupnost vašich kritických aplikací, chránit vaše obchodní informace a optimalizovat šířku pásma sítě, aby efektivněji poskytovaly informace a podporovaly aplikace. Technické parametry *Kapacita v milionech paketů za sekundu: 130,94 mpps *Přepínací kapacita v gigabitech za sekundu: 176 Gb/s *Tabulka MAC: 16K *Jumbo frame: Frame sizes up to 9K bytes. The default MTU is 2K bytes *Funkce: Layer 3 switching, VLAN support, Spanning Tree Protocol (STP), advanced threat protection, IPv6 first-hop security, quality of service (QoS), sFlow, IPv4/IPv6 static routing *RJ-45 porty: 48 x Gigabit Ethernet *Combo porty (RJ-45 + SFP): 4 x SFP+ *Napájení vyhrazeno pro PoE: 370 W *Počet portů, které podporují PoE: 48 *Port konzoly: Cisco Standard mini USB Type-B / RJ45 *USB: Slot USB typu A na předním panelu přepínače *Typ kabeláže: Nestíněný kroucený pár (UTP) kategorie 5e nebo vyšší pro 1000BASE-T *Flash: 256 MB *CPU: 800 MHz ARM *CPU memory: 512 MB *Paketová vyrovnávací paměť: 3 MB *Ventilátor: 1 *Rozměry (Š x H x V): 445 x 350 x 44 mm *Hmotnost: 5,43 kg *Provozní teplota: -5 - 50°C *Certifikace: UL (UL 60950), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A (patro.cz)

Cisco CBS350-24T-4G Business 350 Series Switch Součást všech malých podniků Podnikové switche jsou základní součástí každé sítě. Společnost Cisco nabízí rozsáhlé portfolio síťových přepínačů pro malé firmy, využitelné v každé fázi Vašeho podnikání. Cisco Business 350 Managed Switches jsou neodmyslitelnou součástí pro spolehlivou síť malých firem. Díky intuitivnímu ovládání, pokročilým funkcím a zabezpečení jsou přepínače řady Cisco Business 350 navrženy tak, aby urychlili Vaši digitální transformaci. Výhody Cisco Business 350 Series Intuitivní ovládání k automatizaci nasazení, monitorování a správě životnosti Vašich switchů Rozsáhlé zabezpečení chránící Vaši síť a soukromí Vašich zákazníků Gigabitový Ethernet a 10GE uplink, rychlá přenosová rychlost Možnost spojení až čtyř samostatných switchů, fungující jako jedno zařízení s jednotnou správou a kontrolou Stránky produktu: CBS350-24T-4G Administration guide: Administration guide Administration guide (pdf): Administration guide (pdf) Technické specifikace: Počet portů 28 Provedení Rack-mount Porty 24x GbE, 4x SFP Výkon Switching capacity: 56.0 Gbps Forwarding performance (64-byte packet size): 41.66 Mpps VLAN Ano Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky 16 000 RAM 512 MB Flash 256 MB Napájení 100-240 V (50-60 Hz), interní Rozměry (Š x V x H) 445 x 240 x 44 mm Hmotnost 2.63 kg Provozní teplota -5 až 50°C Provozní vlhost 10 - 90% Skladovací teplota -25 až 70 °C (patro.cz)

Cisco CBS350-16T-2G Business 350 Series Switch Součást všech malých podniků Podnikové switche jsou základní součástí každé sítě. Společnost Cisco nabízí rozsáhlé portfolio síťových přepínačů pro malé firmy, využitelné v každé fázi Vašeho podnikání. Cisco Business 350 Managed Switches jsou neodmyslitelnou součástí pro spolehlivou síť malých firem. Díky intuitivnímu ovládání, pokročilým funkcím a zabezpečení jsou přepínače řady Cisco Business 350 navrženy tak, aby urychlili Vaši digitální transformaci. Výhody Cisco Business 350 Series Intuitivní ovládání k automatizaci nasazení, monitorování a správě životnosti Vašich switchů Rozsáhlé zabezpečení chránící Vaši síť a soukromí Vašich zákazníků Gigabitový Ethernet a 10GE uplink, rychlá přenosová rychlost Možnost spojení až čtyř samostatných switchů, fungující jako jedno zařízení s jednotnou správou a kontrolou Stránky produktu: CBS350-16T-2G Administration guide: Administration guide Administration guide (pdf): Administration guide (pdf) Technické specifikace: Počet portů 18 Provedení Rack-mount Porty 18 x GbE (16x GbE, 2x SFP) Výkon Switching capacity: 36.0 Gbps Forwarding performance (64-byte packet size): 26.78 Mpps VLAN Ano Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky 16 000 RAM 512 MB Flash 256 MB Napájení 100-240 V (50-60 Hz), interní Rozměry (Š x V x H) 268 x 272 x 44 mm Hmotnost 1.78 kg Provozní teplota -5 až 50°C Provozní vlhost 10 - 90% Skladovací teplota -25 až 70 °C (patro.cz)

Cisco CBS350-48T-4G Business 350 Series Switch Součást všech malých podniků Podnikové switche jsou základní součástí každé sítě. Společnost Cisco nabízí rozsáhlé portfolio síťových přepínačů pro malé firmy, využitelné v každé fázi Vašeho podnikání. Cisco Business 350 Managed Switches jsou neodmyslitelnou součástí pro spolehlivou síť malých firem. Díky intuitivnímu ovládání, pokročilým funkcím a zabezpečení jsou přepínače řady Cisco Business 350 navrženy tak, aby urychlili Vaši digitální transformaci. Výhody Cisco Business 350 Series Intuitivní ovládání k automatizaci nasazení, monitorování a správě životnosti Vašich switchů Rozsáhlé zabezpečení chránící Vaši síť a soukromí Vašich zákazníků Gigabitový Ethernet a 10GE uplink, rychlá přenosová rychlost Možnost spojení až čtyř samostatných switchů, fungující jako jedno zařízení s jednotnou správou a kontrolou Stránky produktu: CBS350-48T-4G Administration guide: Administration guide Administration guide (pdf): Administration guide (pdf) Technické specifikace: Počet portů 52 Provedení Rack-mount Porty 48x GbE, 4x SFP Výkon Switching capacity: 104.0 Gbps Forwarding performance (64-byte packet size): 77.38 Mpps VLAN Ano Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky 16 000 RAM 512 MB Flash 256 MB Napájení 100-240 V (50-60 Hz), interní Rozměry (Š x V x H) 445 x 288 x 44 mm Hmotnost 3.95 kg Provozní teplota -5 až 50°C Provozní vlhost 10 - 90% Skladovací teplota -25 až 70 °C (patro.cz)

Cisco CBS350-48P-4G Business 350 Series Switch Součást všech malých podniků Podnikové switche jsou základní součástí každé sítě. Společnost Cisco nabízí rozsáhlé portfolio síťových přepínačů pro malé firmy, využitelné v každé fázi Vašeho podnikání. Cisco Business 350 Managed Switches jsou neodmyslitelnou součástí pro spolehlivou síť malých firem. Díky intuitivnímu ovládání, pokročilým funkcím a zabezpečení jsou přepínače řady Cisco Business 350 navrženy tak, aby urychlili Vaši digitální transformaci. Výhody Cisco Business 350 Series Intuitivní ovládání k automatizaci nasazení, monitorování a správě životnosti Vašich switchů Rozsáhlé zabezpečení chránící Vaši síť a soukromí Vašich zákazníků Gigabitový Ethernet a 10GE uplink, rychlá přenosová rychlost Možnost spojení až čtyř samostatných switchů, fungující jako jedno zařízení s jednotnou správou a kontrolou Stránky produktu: CBS350-48P-4G Administration guide: Administration guide Administration guide (pdf): Administration guide (pdf) Technické specifikace: Počet portů 52 Provedení Rack-mount Porty 48x GbE, 4x SFP, PoE+ Výkon Switching capacity: 104.0 Gbps Forwarding performance (64-byte packet size): 77.38 Mpps VLAN Ano Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky 16 000 RAM 512 MB Flash 256 MB Napájení 100-240 V (50-60 Hz), interní Rozměry (Š x V x H) 445 x 350 x 44 mm Hmotnost 5.43 kg Provozní teplota -5 až 50°C Provozní vlhost 10 - 90% Skladovací teplota -25 až 70 °C (patro.cz)

Cisco Business 350 Series Managed Switches představují portfolio cenově dostupných spravovaných přepínačů, které jsou klíčovým stavebním kamenem pro každou malou kancelářskou síť. Intuitivní řídicí panel zjednodušuje nastavení sítě a pokročilé funkce urychlují digitální transformaci, zatímco všudypřítomné zabezpečení chrání důležité obchodní transakce. Přepínače řady Cisco Business 350 poskytují ideální kombinaci cenové dostupnosti a funkcí pro malé kanceláře. Přepínače řady Cisco Business 350 poskytují sadu pokročilých funkcí, které vyžadují rostoucí podniky a které vyžadují aplikace a technologie s velkou šířkou pásma. Tyto přepínače mohou zlepšit dostupnost vašich kritických aplikací, chránit vaše obchodní informace a optimalizovat šířku pásma sítě, aby efektivněji poskytovaly informace a podporovaly aplikace. Technické parametry *Kapacita v milionech paketů za sekundu: 26,78 mpps *Přepínací kapacita v gigabitech za sekundu: 36 Gb/s *Tabulka MAC: 16K *Jumbo frame: Frame sizes up to 9K bytes. The default MTU is 2K bytes *Funkce: Layer 3 switching, VLAN support, Spanning Tree Protocol (STP), advanced threat protection, IPv6 first-hop security, quality of service (QoS), sFlow, IPv4/IPv6 static routing *RJ-45 porty: 16 x Gigabit Ethernet *Combo porty (RJ-45 + SFP): 2 x SFP *Napájení vyhrazeno pro PoE: 120 W *Počet portů, které podporují PoE: 16 *Port konzoly: Cisco Standard mini USB Type-B / RJ45 *USB: Slot USB typu A na předním panelu přepínače *Typ kabeláže: Nestíněný kroucený pár (UTP) kategorie 5e nebo vyšší pro 1000BASE-T *Flash: 256 MB *CPU: 800 MHz ARM *CPU memory: 512 MB *Paketová vyrovnávací paměť: 1,5 MB *Ventilátor: Ne *Rozměry (Š x H x V): 268 x 297 x 44 mm *Hmotnost: 2,38 kg *Provozní teplota: -5 - 50°C *Certifikace: UL (UL 60950), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A (patro.cz)

Cisco CBS350-8T-E-2G Business 350 Series Switch Součást všech malých podniků Podnikové switche jsou základní součástí každé sítě. Společnost Cisco nabízí rozsáhlé portfolio síťových přepínačů pro malé firmy, využitelné v každé fázi Vašeho podnikání. Cisco Business 350 Managed Switches jsou neodmyslitelnou součástí pro spolehlivou síť malých firem. Díky intuitivnímu ovládání, pokročilým funkcím a zabezpečení jsou přepínače řady Cisco Business 350 navrženy tak, aby urychlili Vaši digitální transformaci. Výhody Cisco Business 350 Series Intuitivní ovládání k automatizaci nasazení, monitorování a správě životnosti Vašich switchů Rozsáhlé zabezpečení chránící Vaši síť a soukromí Vašich zákazníků Gigabitový Ethernet a 10GE uplink, rychlá přenosová rychlost Možnost spojení až čtyř samostatných switchů, fungující jako jedno zařízení s jednotnou správou a kontrolou Stránky produktu: CBS350-8T-E-2G Administration guide: Administration guide Administration guide (pdf): Administration guide (pdf) Technické specifikace: Počet portů 10 Provedení Rack-mount Porty 8x GbE, 2 x GbE RJ-45/SFP combo Výkon Switching capacity: 20.0 Gbps Forwarding performance (64-byte packet size): 14.88 Mpps Power over Ethernet (PoE) N/A VLAN Ano Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky 16 000 RAM 512 MB Flash 256 MB Napájení 100-240 V (50-60 Hz), externí Rozměry (Š x V x H) 268 x 185 x 44 mm Hmotnost 1.7 kg Provozní teplota -5 až 50°C Provozní vlhost 10 - 90% Skladovací teplota -25 až 70 °C (patro.cz)

Cisco switch CBS350-8FP-2G-UK - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu UK = produkt určený pro trh v Anglii identický produkt k EU modelům s rozdílem napájecího kabelu pro UK, náhradní kabel CAB-TA-EU je součástí objednávky Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-8FP-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 14,88 Switching Capacity in Gigabits per Second (Gbps) 20 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 120 W Number of Ports That Support PoE 8 Hardware Power Consumption (worst case)System power consumption 110V=17.29W 220V=17.88 Power consumption (with PoE) 110V=148.12W 220V=146.36W Heat dissipation (BTU/hr) 505.41 PortsTotal system ports 10 x Gigabit Ethernet RJ-45 ports 8 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 2 x Gigabit Ethernet combo Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1.5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 268 x 272 x 44 mm (10.56 x 10.71 x 1.73 in) Unit weight 2.59 kg (5.71 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 1786412 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-24P-4G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-24P-4G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 41,66 Switching Capacity in Gigabits per Second (Gbps) 56 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 195 W Number of Ports That Support PoE 24 Hardware Power Consumption (worst case)System power consumption 110V=34.42W 220V=33.09 Power consumption (with PoE) 110V=239.7W 220V=236.4W Heat dissipation (BTU/hr) 820.62 PortsTotal system ports 28 x Gigabit Ethernet RJ-45 ports 24 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 4 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1,5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 445 x 299 x 44 mm (17.5 x 11.77 x 1.73 in) Unit weight 3.53 kg (7.78 lb) Power 100-240V 50-60 Hz, internal, universal Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 698220 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power cord Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco switch CBS350-8FP-E-2G-UK EAN: 889728497916 Obecný popis Tento switch je součástí programu REFRESH od společnosti Cisco. Znamená to, že se jedná o opravené zařízení s plnou funkcionalitou, podporou a zárukou jako nové. Základní informace Provedení: Rack-mount Počet portů: 10 Typy portů: 8x GbE, 2 x GbE RJ-45/SFP combo, PoE+ Výkon: Switching capacity: 20.0 Gbps, Forwarding performance (64-byte packet size): 14.88 Mpps Technické specifikace Power over Ethernet (PoE): PoE+ (8 ports, 120W) VLAN: Ano Protokol pro vzdálenou správu: SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy: IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae, IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Hardware Velikost MAC tabulky: 16 000 RAM: 512 MB Flash: 256 MB Napájení: 100-240 V (50-60 Hz), externí Rozměry a hmotnost Rozměry (Š x V x H): 268 x 185 x 44 mm Hmotnost: 3.5 kg Provozní podmínky Provozní teplota: -5 až 50°C Provozní vlhkost: 10 - 90% Skladovací teplota: -25 až 70 °C (tonerpartner.cz)

Switch , 28× SFP, QoS, L3, rack Přepínač známý jako switch je aktivní síťový prvek, který propojuje jednotlivá zařízení případně jiné prvky sítě. Slouží ke koordinaci síťového provozu. CISCO CBS350 Managed 24-port SFP+, 4x10GE Shared je určen k instalaci do rozvaděče. Celkem 28 ks konektorů typu SFP zužitkujete při přenosu dat skrz optická vlákna. Rozměry switche byly stanoveny na 440 × 350 × 44 mm. Díky technologii QoS alias Quality of Service je eliminováno vytížení switche, navíc můžete seřídit přednost koncových zařízení. Hmotnost switche je 4400 g. CISCO CBS350 Managed 24-port SFP+, 4x10GE Shared se podílí také na síťové vrstvě ISO/OSI modelu, to znamená, že dokáže nahradit funkci routeru. Díky tomu nemusíte pořizovat další síťový prvek. Rozhodující vlastnosti switche CISCO CBS350 Managed 24-port SFP+, 4x10GE Shared Switch k zapojení koncových zařízení a dalších uzlů Přepínací kapacita 480 Gb/s SFP konektory k propojení optickými vlákny Switch CISCO... (alza.cz)

Cisco switch CBS350-16P-E-2G-EU - REFRESH CISCO REFRESH jsou repasované produkty, které společnost CISCO dodává s certifikací kvality, zárukou a servisní podporou odpovídající ekvivalentnímu novému produktu Řízené switche řady Cisco Business 350 jsou spolehlivými stavebními prvky pro sítě malých firem. Díky intuitivnímu ovládacímu panelu, pokročilým funkcím a všudypřítomnému zabezpečení urychlují spravované switche řady Cisco Business 350 vaši digitální transformaci. Záruka platná do End of Support 31. 10. 2029. Oznámení End of Life pro CISCO CBS350 Stránky produktu: CBS350-16P-E-2G-EU Quick start guide: Quick start guide Switching capacity and forwarding rate (All switches are wire speed and nonblocking)Capacity in Millions of Packets per Second (mpps) (64-byte packets) 26,78 Switching Capacity in Gigabits per Second (Gbps) 36 Layer 2 switchingSpanning Tree Protocol (STP) Standard 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default Multiple Spanning Tree instances using 802.1s (MSTP); 8 instances are supported Per-VLAN Spanning Tree Plus (PVST+) and Rapid PVST+ (RPVST+); 126 instances are supported Port grouping/link aggregation Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 8 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad link aggregation VLAN Support for up to 4,094 VLANs simultaneously Port-based and 802.1Q tag-based VLANs; MAC-based VLAN; protocol-based VLAN; IP subnet-based VLAN Management VLAN Private VLAN with promiscuous, isolated, and community port Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN, unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication CPE VLAN Voice VLAN Voice traffic is automatically assigned to a voice-specific VLAN and treated with appropriate levels of QoS. Voice Services Discovery Protocol (VSDP) delivers network wide zero-touch deployment of voice endpoints and call control devices Multicast TV VLAN Multicast TV VLAN allows the single multicast VLAN to be shared in the network while subscribers remain in separate VLANs. This feature is also known as Multicast VLAN Registration (MVR) VLAN Translation Support for VLAN One-to-One Mapping. In VLAN One-to-One Mapping, on an edge interface customer VLANs (C-VLANs) are mapped to service provider VLANs (S-VLANs) and the original C-VLAN tags are replaced by the specified S-VLAN Q-in-Q VLANs transparently cross a service provider network while isolating traffic among customers Selective Q-in-Q Selective Q-in-Q is an enhancement to the basic Q-in-Q feature and provides, per edge interface, multiple mappings of different C-VLANs to separate S-VLANs Selective Q-in-Q also allows configuring of Ethertype (Tag Protocol Identifier [TPID]) of the S-VLAN tag Layer 2 protocol tunneling over Q-in-Q is also supported Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) enable automatic propagation and configuration of VLANs in a bridged domain Unidirectional Link Detection (UDLD) UDLD monitors physical connection to detect unidirectional links caused by incorrect wiring or cable/port faults to prevent forwarding loops and black holing of traffic in switched networks Dynamic Host Configuration Protocol (DHCP) Relay at Layer 2 Relay of DHCP traffic to DHCP server in different VLAN; works with DHCP Option 82 Internet Group Management Protocol (IGMP) versions 1, 2, and 3 snooping IGMP limits bandwidth-intensive multicast traffic to only the requesters; supports 2K multicast groups (source-specific multicasting is also supported) IGMP Querier IGMP querier is used to support a Layer 2 multicast domain of snooping switches in the absence of a multicast router IGMP proxy The IGMP proxy provides a mechanism for multicast forwarding based on IGMP membership information without the need for more complicated multicast routing protocols. Head-of-Line (HOL) blocking HOL blocking prevention Loopback Detection Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP Layer 3IPv4 routing Wirespeed routing of IPv4 packets Up to 990 static routes and up to 128 IP interfaces IPv6 routing Wirespeed routing of IPv6 packets Layer 3 Interface Configuration of Layer 3 interface on physical port, Link Aggregation (LAG), VLAN interface, or loopback interface Classless Interdomain Routing (CIDR) Support for classless interdomain routing RIP v2 Support for Routing Information Protocol version 2 for dynamic routing Policy-Based Routing (PBR) Flexible routing control to direct packets to different next hop based on IPv4 or IPv6 Access Control List (ACL) DHCP Server Switch functions as an IPv4 DHCP server serving IP addresses for multiple DHCP pools/scopes Support for DHCP options DHCP relay at Layer 3 Relay of DHCP traffic across IP domains User Datagram Protocol (UDP) relay Relay of broadcast information across Layer 3 domains for application discovery or relaying of Bootstrap Protocol (BOOTP)/DHCP packets Securityecure Shell (SSH) Protocol SSH is a secure replacement for Telnet traffic. Secure Copy Protocol (SCP) also uses SSH. SSH v1 and v2 are supported Secure Sockets Layer (SSL) SSL support: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based management GUI in the switch IEEE 802.1X (Authenticator role) 802.1X: Remote Authentication Dial-In User Service (RADIUS) authentication and accounting, MD5 hash; guest VLAN; unauthenticated VLAN, single/multiple host mode and single/multiple sessions Supports time-based 802.1X; dynamic VLAN assignment; MAC authentication IEEE 802.1X supplicant A switch can be configured to act as a supplicant to another switch. This enables extended secure access in areas outside the wiring closet (such as conference rooms) Web-based authentication Web-based authentication provides network admission control through web browser to any host devices and operating systems STP Bridge Protocol Data Unit (BPDU) Guard A security mechanism to protect the network from invalid configurations. A port enabled for BPDU Guard is shut down if a BPDU message is received on that port. This avoids accidental topology loops STP Root Guard This prevents edge devices not in the network administrator’s control from becoming Spanning Tree Protocol root nodes STP loopback guard Provides additional protection against Layer 2 forwarding loops (STP loops) DHCP snooping Filters out DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents rogue devices from behaving as DHCP Servers. IP Source Guard (IPSG) When IP Source Guard is enabled at a port, the switch filters out IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. Dynamic ARP Inspection (DAI) The switch discards ARP packets from a port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. IP/MAC/Port Binding (IPMB) The preceding features (DHCP Snooping, IP Source Guard, and Dynamic ARP Inspection) work together to prevent DOS attacks in the network, thereby increasing network availability Secure Core Technology (SCT) Makes sure that the switch will receive and process management and protocol traffic no matter how much traffic is received Secure Sensitive Data (SSD) A mechanism to manage sensitive data (such as passwords, keys, and so on) securely on the switch, populating this data to other devices, and secure autoconfig. Access to view the sensitive data as plaintext or encrypted is provided according to the user-configured access level and the access method of the user. Trustworthy systems Trustworthy systems provide a highly secure foundation for Cisco products Run-time defenses (Executable Space Protection [X-Space], Address Space Layout Randomization [ASLR], Built-In Object Size Checking [BOSC]) Private VLAN Private VLAN provides security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic; supports multiple uplinks Layer 2 isolation Private VLAN Edge (PVE) PVE (also known as protected ports) provides Layer 2 isolation between devices in the same VLAN, supports multiple uplinks Port security Ability to lock source MAC addresses to ports and limits the number of learned MAC addresses RADIUS/TACACS+ Supports RADIUS and TACACS authentication. Switch functions as a client RADIUS accounting The RADIUS accounting functions allow data to be sent at the start and end of services, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session Storm control Broadcast, multicast, and unknown unicast DoS prevention Denial-of-Service (DOS) attack prevention Multiple user privilege levels in CLI Level 1, 7, and 15 privilege levels ACLs Support for up to 1,024 rules Drop or rate limit based on source and destination MAC, VLAN ID, IPv4 or IPv6 address, IPv6 flow label, protocol, port, Differentiated Services Code Point (DSCP)/IP precedence, Transmission Control Protocol/User Datagram Protocol (TCP/UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag; ACL can be applied on both ingress and egress sides Time-based ACLs supported Quality of ServicePriority levels 8 hardware queues Scheduling Strict priority and Weighted Round-Robin (WRR) Class of service Port based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on DSCP and class of service (802.1p/CoS) Rate limiting Ingress policer; egress shaping and rate control; per VLAN, per port, and flow based; 2R3C policing Congestion avoidance A TCP congestion avoidance algorithm is required to minimize and prevent global TCP loss synchronization iSCSI traffic optimization A mechanism for giving priority to iSCSI traffic over other types of traffic Standards IEEE 802.3 10BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE-T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3ae 10 Gbit/s Ethernet over fiber for LAN, IEEE 802.3an 10GBase-T 10 Gbit/s Ethernet over copper twisted pair cable, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af, IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Energy Efficient Ethernet, RFC 768, RFC 783, RFC 791, RFC 792, RFC 793, RFC 813, RFC 826, RFC 879, RFC 896, RFC 854, RFC 855, RFC 856, RFC 858, RFC 894, RFC 919, RFC 920, RFC 922, RFC 950, RFC 951, RFC 1042, RFC 1071, RFC 1123, RFC 1141, RFC 1155, RFC 1157, RFC 1213, RFC 1215, RFC 1286, RFC 1350, RFC 1442, RFC 1451, RFC 1493, RFC 1533, RFC 1541, RFC 1542, RFC 1573, RFC 1624, RFC 1643, RFC 1700, RFC 1757, RFC 1867, RFC 1907, RFC 2011, RFC 2012, RFC 2013, RFC 2030, RFC 2131, RFC 2132, RFC 2233, RFC 2576, RFC 2616, RFC 2618, RFC 2665, RFC 2666, RFC 2674, RFC 2737, RFC 2819, RFC 2863, RFC 3164, RFC 3176, RFC 3411, RFC 3412, RFC 3413, RFC 3414, RFC 3415, RFC 3416, RFC 4330 IPv6IPv6 IPv6 host mode; IPv6 over Ethernet; Dual IPv6/IPv4 stack IPv6 neighbor and router discovery (ND); IPv6 stateless address autoconfiguration; Path Maximum Transmission Unit (MTU) discovery Duplicate Address Detection (DAD); ICMP version 6 DHCPv6 stateful client IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) tunnel support USGv6 and IPv6 Gold Logo certified IPv6 QoS Prioritize IPv6 packets in hardware IPv6 ACL Drop or rate limit IPv6 packets in hardware IPv6 First Hop Security RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check Multicast Listener Discovery (MLD v1/2) snooping Deliver IPv6 multicast packets only to the required receivers MLD proxy The MLD proxy provides a mechanism for multicast forwarding based on MLD membership information without the need for more complicated multicast routing protocols. IPv6 applications Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, Domain Name System (DNS) client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, Terminal Access Controller Access Control System Plus (TACACS+) IPv6 RFCs supported RFC 4443 (which obsoletes RFC2463): ICMP version 6 RFC 4291 (which obsoletes RFC 3513): IPv6 address architecture RFC 4291: IPv6 addressing architecture RFC 2460: IPv6 specification RFC 4861 (which obsoletes RFC 2461): neighbor discovery for IPv6 RFC 4862 (which obsoletes RFC 2462): IPv6 stateless address autoconfiguration RFC 1981: path MTU discovery RFC 4007: IPv6 scoped address architecture RFC 3484: default address selection mechanism RFC 5214 (which obsoletes RFC 4214): ISATAP tunneling RFC 4293: MIB IPv6: textual conventions and general group RFC 3595: textual conventions for IPv6 flow label ManagementCisco Business Dashboard Support for embedded probe for Cisco Business Dashboard running on the switch. Eliminates the need to set up a separate hardware or virtual machine for the Cisco Business Dashboard Probe on site. Cisco Business mobile app Mobile app for Cisco Business Switch and Wireless products. Helps to set up a local network in minutes and provide easy management at your fingertips. Cisco Network Plug and Play (PnP) agent The Cisco Network Plug and Play solution provides a simple, secure, unified, and integrated offering to ease new branch or campus device rollouts or for provisioning updates to an existing network. The solution provides a unified approach to provision Cisco routers, switches, and wireless devices with a near-zero-touch deployment experience Supports Cisco PnP Connect Web user interface Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, customizable dashboard, system maintenance, monitoring, online help, and universal search SNMP SNMP versions 1, 2c, and 3 with support for traps, and SNMP version 3 User-based Security Model (USM) Remote Monitoring (RMON) Embedded RMON software agent supports 4 RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis IPv4 and IPv6 dual stack Coexistence of both protocol stacks to ease migration Firmware upgrade Web browser upgrade (HTTP/HTTPS) and TFTP and upgrade over SCP running over SSH Dual images for resilient firmware upgrades Port mirroring Traffic on a port can be mirrored to another port for analysis with a network analyzer or RMON probe. Up to 8 source ports can be mirrored to one destination port. VLAN mirroring Traffic from a VLAN can be mirrored to a port for analysis with a network analyzer or RMON probe. Up to 8 source VLANs can be mirrored to one destination port. Flow-based redirection and mirroring Redirect or mirror traffic to a destination port or mirroring session based on flow Remote Switch Port Analyzer (RSPAN) Traffic can be mirrored across Layer 2 domain to a remote port on a different switch for easier troubleshooting sFlow agent Switch can export sFlow sample to external collectors. sFlow provides visibility into network traffic down to flow level DHCP (options 12, 59, 60, 66, 67, 82, 125, 129, and 150) DHCP options facilitate tighter control from a central point (DHCP server) to obtain IP address, autoconfiguration (with configuration and image file download), DHCP relay, and hostname Secure Copy (SCP) Securely transfer files to and from the switch Autoconfiguration with Secure Copy (SCP) file download Enables secure mass deployment with protection of sensitive data Text-editable config files Config files can be edited with a text editor and downloaded to another switch, facilitating easier mass deployment Smartports Simplified configuration of QoS and security capabilities Auto Smartports Applies the intelligence delivered through the Smartport roles and applies it automatically to the port based on the devices discovered over Cisco Discovery Protocol or LLDP-MED. This facilitates zero-touch deployments Textview CLI Scriptable command-line interface. A full CLI as well as a menu-based CLI is supported. User privilege levels 1, 7, and 15 are supported for the CLI Localization Localization of GUI and documentation into multiple languages Login banner Configurable multiple banners for web as well as CLI Other management Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP upgrade; DHCP client; BOOTP; SNTP; Xmodem upgrade; cable diagnostics; ping; syslog; Telnet client (SSH secure support); automatic time settings from Management Station Green (power efficiency)Energy Detect Automatically turns power off on RJ-45 port when detecting link down. Active mode is resumed without loss of any packets when the switch detects the link up Cable length detection Adjusts the signal strength based on the cable length. Reduces the power consumption for shorter cables. EEE Compliant (802.3az) Supports IEEE 802.3az on all copper Gigabit Ethernet ports Disable port LEDs LEDs can be manually turned off to save on energy Time-based port operation Link up or down based on user-defined schedule (when the port is administratively up) Time-based PoE PoE power can be on or off based on user-defined schedule to save energy GeneralJumbo frames Frame sizes up to 9K bytes. The default MTU is 2K bytes MAC table 16K addresses DiscoveryBonjour The switch advertises itself using the Bonjour protocol Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions LLDP allows the switch to advertise its identification, configuration, and capabilities to neighboring devices that store the data in a MIB. LLDP-MED is an enhancement to LLDP that adds the extensions needed for IP phones Cisco Discovery Protocol The switch advertises itself using the Cisco Discovery Protocol. It also learns the connected device and its characteristics via Cisco Discovery Protocol Power over Ethernet802.3af PoE, 802.3at PoE+ or 60W PoE delivered over the RJ-45 ports within the listed power budgets The following switches support 802.3at PoE+, 802.3af, and Cisco prestandard (legacy) PoE. 60W PoE is also supported on select RJ-45 network ports on select models. The total power available for PoE per switch is as follows: Power dedicated to PoE 120 W Number of Ports That Support PoE 16 Hardware Power Consumption (worst case)System power consumption 110V=23.65W 220V=23.68 Power consumption (with PoE) 110V=150.1W 220V=148.8W Heat dissipation (BTU/hr) 512.16 PortsTotal system ports 18 x Gigabit Ethernet RJ-45 ports 16 x Gigabit Ethernet Combo ports (RJ-45 + SFP) 2 x SFP Console port Cisco standard RJ45 console port USB slot USB Type-A slot on the front panel of the switch for easy file and image management Buttons Reset button Cabling type Unshielded Twisted Pair (UTP) Category 5e or better for 1000BASE-T LEDs System, Link/Act, PoE, Speed Flash 256 MB CPU 800 MHz ARM DRAM 512 MB Packet BufferPacket buffer (All numbers are aggregate across all ports as the buffers are dynamically shared:) 1,5 MB Supported SFP modulesSKU Media MGBSX1 Multimode fiber MGBLX1 Single-mode fiber MGBLH1 Single-mode fiber MGBT1 UTP cat 5e GLC-SX-MMD Multimode fiber GLC-LH-SMD Single-mode fiber GLC-BX-U Single-mode fiber GLC-BX-D Single-mode fiber GLC-TE UTP cat 5e EnvironmentalUnit dimensions (W x D x H) 268 x 210 x 44 mm (10.56 x 8.26x 1.73 in) Unit weight 1.42 kg (3.13 lb) Power 100-240V 50-60 Hz, external Certifications UL (UL 62368), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A Operating temperature 23° to 122°F (-5° to 50°C) Storage temperature -13° to 158°F (-25° to 70°C) Operating humidity 10% to 90%, relative, noncondensing Storage humidity 10% to 90%, relative, noncondensing Acoustic Noise and Mean Time Between Failure (MTBF)Fan (number) Fanless Acoustic noise N/A MTBF @ 25°C (hours) 706983 Warranty Limited lifetime with next business day advance replacement Package contents Cisco Business 350 Series Managed Switch Power adapter Mounting Kit Quick Start Guide Minimum Requirements Web browser: Chrome, Firefox, Edge, Safari Category 5e Ethernet network cable TCP/IP, network adapter, and network operating system (such as Microsoft Windows, Linux, or Mac OS X) installed (tonerpartner.cz)

Cisco CBS350-24T-4X Business 350 Series Switch Součást všech malých podniků Podnikové switche jsou základní součástí každé sítě. Společnost Cisco nabízí rozsáhlé portfolio síťových přepínačů pro malé firmy, využitelné v každé fázi Vašeho podnikání. Cisco Business 350 Managed Switches jsou neodmyslitelnou součástí pro spolehlivou síť malých firem. Díky intuitivnímu ovládání, pokročilým funkcím a zabezpečení jsou přepínače řady Cisco Business 350 navrženy tak, aby urychlili Vaši digitální transformaci. Výhody Cisco Business 350 Series Intuitivní ovládání k automatizaci nasazení, monitorování a správě životnosti Vašich switchů Rozsáhlé zabezpečení chránící Vaši síť a soukromí Vašich zákazníků Gigabitový Ethernet a 10GE uplink, rychlá přenosová rychlost Možnost spojení až čtyř samostatných switchů, fungující jako jedno zařízení s jednotnou správou a kontrolou Stránky produktu: CBS350-24T-4X Administration guide: Administration guide Administration guide (pdf): Administration guide (pdf) Technické specifikace: Počet portů 24 Provedení Rack-mount Porty 24 x Gigabit Ethernet + 4 x 10G SFP+ Výkon Switching capacity: 128.0 Gbps Forwarding performance (64-byte packet size): 95.23 Mpps VLAN Ano Protokol pro vzdálenou správu SNMP, RMON, HTTP, HTTPS, TFTP, Telnet, SSH Standardy IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3z, IEEE 802.3ae IEEE 802.3an, IEEE 802.3x Flow Control, IEEE 802.1D (STP, GARP, and GVRP), IEEE 802.1Q/p VLAN IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication, IEEE 802.3af IEEE 802.3at, IEEE 802.1AB Link Layer Discovery Protocol, IEEE 802.3az Velikost MAC tabulky 16 000 RAM 512 MB Flash 256 MB Napájení 100-240 V (50-60 Hz), interní Rozměry (Š x V x H) 445 x 240 x 44 mm Hmotnost 2.78 kg Provozní teplota -5 až 50°C Provozní vlhost 10 - 90% Skladovací teplota -25 až 70 °C (patro.cz)