Data SheetCisco Catalyst 2960-X Series SwitchesProduct OverviewCisco Catalyst 2960-X Series Switches are fixed-configuration, stackable Gigabit Ethernet switches that provideenterprise-class access for campus and branch applications (Figure 1). Designed for operational simplicity to lowertotal cost of ownership, they enable scalable, secure and energy-efficient business operations with intelligentservices and a range of advanced Cisco IOS Software features.Figure 1.A Cisco Catalyst 2960-X Series Switch FamilyProduct HighlightsCisco Catalyst 2960-X switches feature: 24 or 48 Gigabit Ethernet ports with line-rate forwarding performance Gigabit Small Form-Factor Pluggable (SFP) or 10G SFP uplinks FlexStack Plus for stacking of up to 8 switches with 80 Gbps of stack throughput (optional) Power over Ethernet Plus (PoE ) support with up to 740W of PoE budget 24-port PoE fanless switch for deployment outside the wiring closet Reduced power consumption and advanced energy management features USB and Ethernet management interfaces for simplified operations Application visibility and capacity planning with integrated NetFlow-Lite LAN Base or LAN Lite Cisco IOS software features Enhanced limited lifetime warranty (E-LLW) offering next-business-day hardware replacementCisco Catalyst 2960-XR models also offer: Power resiliency with optional dual field-replaceable power supplies IP Lite Cisco IOS software with dynamic routing and Layer 3 features 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.Page 1 of 26

Switch Models and ConfigurationsCatalyst 2960-X switches include a single fixed power supply and are available with either the Cisco IOS LAN Baseor LAN Lite feature set. Catalyst 2960-XR switch models include a field-replaceable modular power supply and canaccommodate a second power supply. Catalyst 2960-XR is available only with the Cisco IOS IP Lite feature set.Table 1.Cisco Catalyst 2960-X ConfigurationsModel10/100/1000Uplink InterfacesCisco IOSSoftware ImageAvailable PoEPowerEthernet PortsFlexStack-PlusCapabilityCisco Catalyst 2960X-48FPD-L482 SFP LAN Base740WYCisco Catalyst 2960X-48LPD-L482 SFP LAN Base370WYCisco Catalyst 2960X-24PD-L242 SFP LAN Base370WYCisco Catalyst 2960X-48TD-L482 SFP LAN Base-YCisco Catalyst 2960X-24TD-L242 SFP LAN Base-YCisco Catalyst 2960X-48FPS-L484 SFPLAN Base740WYCisco Catalyst 2960X-48LPS-L484 SFPLAN Base370WYCisco Catalyst 2960X-24PS-L244 SFPLAN Base370WYCisco Catalyst 2960X-24PSQ-L24 (8PoE)2 SFP,2 10/100/1000BTLAN Base110W-Cisco Catalyst 2960X-48TS-L484 SFPLAN Base-YCisco Catalyst 2960X-24TS-L244 SFPLAN Base-YCisco Catalyst 2960X-48TS-LL482 SFPLAN Lite--Cisco Catalyst 2960X-24TS-LL242 SFPLAN Lite--Table 2.Cisco Catalyst 2960-XR ConfigurationsModel10/100/1000Ethernet PortsUplink InterfacesCisco IOSSoftware ImageAvailable PoEPowerPower SupplyCisco Catalyst 2960XR-48FPD-I482 SFP IP Lite740W1025WACCisco Catalyst 2960XR-48LPD-I482 SFP IP Lite370W640WACCisco Catalyst 2960XR-24PD-I242 SFP IP Lite370W640WACCisco Catalyst 2960XR-48TD-I482 SFP IP Lite-250WACCisco Catalyst 2960XR-24TD-I242 SFP IP Lite-250WACCisco Catalyst 2960XR-48FPS-I484 SFPIP Lite740W1025WACCisco Catalyst 2960XR-48LPS-I484 SFPIP Lite370W640WACCisco Catalyst 2960XR-24PS-I244 SFPIP Lite370W640WACCisco Catalyst 2960XR-48TS-I484 SFPIP Lite-250WACCisco Catalyst 2960XR-24TS-I244 SFPIP Lite-250WACCatalyst 2960-X series Software FeaturesAll Catalyst 2960-X Series Switches use a single Universal Cisco IOS Software Image for all SKUs. Depending onthe switch model, the Cisco IOS image automatically configures the LAN Lite, LAN Base, or IP Lite feature set.LAN Lite models have reduced functionality and scalability for small deployments with basic requirements. CiscoCatalyst 2960-X Family of Switches are available with the LAN Base and LAN Lite feature sets and Catalyst 2960XR Family of switches are available IP Lite feature sets. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.Page 2 of 26

Note that each switch model is tied to a specific feature level; LAN Lite cannot be upgraded to LAN Base and LANBase cannot be upgraded to IP Lite.For more information about the features included in the LAN Lite, LAN Base and IP Lite feature sets, refer to CiscoFeature Navigator: co Catalyst 2960-XR IP-Lite High-Performance RoutingThe Cisco hardware routing architecture delivers extremely high-performance IP routing in the Cisco Catalyst2960-XR IP-Lite Switches: IP unicast routing protocols (Static, Routing Information Protocol Version 1 [RIPv1], RIPv2, RIPng,and EIGRP-Stub) are supported for network routing applications. Advanced IP unicast routing protocols (OSPF for Routed Access) are supported for load balancing andconstructing scalable LANs. IPv6 routing (OSPFv3) is supported in hardware for maximum performance. EIGRPv3-Stub and PIMv6-Stub are supported as a part of the IPv6 routing suite. Equal-cost routing facilitates Layer 3 load balancing and redundancy across the stack. Policy-based routing (PBR) allows superior control by facilitating flow redirection regardless of the routingprotocol configured (for both IPv4 and IPv6). Hot Standby Routing Protocol (HSRP) and Virtual Router Redundancy Protocol (VRRP) providesdynamic load balancing and failover for routed links. Protocol Independent Multicast (PIM) for IP multicast is supported, including PIM sparse mode (PIM-SM),PIM dense mode (PIM-DM), PIM sparse-dense mode and Source Specific Multicast (SSM).Network SecurityThe Cisco Catalyst 2960-X Series Switches provide a range of security features to limit access to the network andmitigate threats, including: MAC-based VLAN assignment enables different users to authenticate on different VLANs. This featureenables each user to have a different data VLAN on the same interface. Cisco TrustSec uses SXP to simplify security and policy enforcement throughout the network. For moreinformation about Cisco TrustSec security solutions, visit Comprehensive 802.1X Features to control access to the network, including Flexible Authentication,802.1x Monitor Mode, and RADIUS Change of Authorization. IPv6 First-Hop Security enhances Layer-2 and Layer-3 network access from proliferating IPv6 devicesespecially BYOD devices. It protects against rogue router advertisements, address spoofing, fake DHCPreplies and other risks introduced by IPv6 technology. Device Sensor and Device Classifier enable seamless versatile device profiles including BYOD devices.They also enable Cisco Identity Services Engine (ISE) to provision identity based security policies. Thisfeature is available on both the 2960-X and the 2960-XR product families. Cisco Trust Anchor Technology enables easy distribution of a single universal image for all models ofCatalyst 2960-X by verifying the authenticity of IOS images. This technology allows the switch to performIOS integrity checks at boot-up by verifying the signature, verifying the Trusted Asset under Managementand authenticating the license. Cisco Threat Defense features including Port Security, Dynamic ARP Inspection, and IP Source Guard. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.Page 3 of 26

Private VLANs restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turninga broadcast segment into a nonbroadcast multi access like segment. This feature is available in IP-Litefeature set only. Private VLAN Edge provides security and isolation between switch ports, which helps ensure that userscannot snoop on other users’ traffic. Unicast Reverse Path Forwarding (uRPF) feature helps mitigate problems caused by the introduction ofmalformed or forged (spoofed) IP source address into a network by discarding IP packets that lack averifiable IP source address. This feature is available in IP-Lite feature set only. Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port whileplacing them on appropriate voice and data VLAN. Access Control Lists (ACLs) for IPv6 and IPv4 for security and QoS ACEs. VLAN ACLs on all VLANs prevent unauthorized data flows from being bridged within VLANs. Router ACLs define security policies on routed interfaces for control-plane and data-plane traffic. IPv6ACLs can be applied to filter IPv6 traffic. Port-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports. Secure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3(SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions.SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic softwareimage because of U.S. export restrictions. Switched Port Analyzer (SPAN), with bidirectional data support, allows Cisco Intrusion Detection System(IDS) to take action when an intruder is detected. TACACS and RADIUS authentication facilitates centralized control of the switch and restrictsunauthorized users from altering the configuration. MAC Address Notification allows administrators to be notified of users added to or removed from thenetwork. Multilevel security on console access prevents unauthorized users from altering the switch configuration. Bridge protocol data unit (BPDU) Guard shuts down Spanning Tree Port Fast-enabled interfaces whenBPDUs are received to avoid accidental topology loops. Spanning Tree Root Guard (STRG) prevents edge devices not in the network administrator’s control frombecoming Spanning Tree Protocol root nodes. IGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number ofconcurrent multicast streams available per port. Dynamic VLAN assignment is supported through implementation of VLAN Membership Policy Serverclient capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fastassignment of IP addresses.Redundancy and ResiliencyCisco Catalyst 2960-X Series Switches offer a number of redundancy and resiliency features to prevent outagesand help ensure that the network remains available: Cross-stack EtherChannel provides the ability to configure Cisco EtherChannel technology acrossdifferent members of the stack for high resiliency. 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.Page 4 of 26

Flexlink provides link redundancy with convergence time less than 100 milliseconds. IEEE 802.1s/w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP)provide rapid spanning-tree convergence independent of spanning-tree timers and also offer the benefit ofLayer 2 load balancing and distributed processing. Stacked units behave as a single spanning-tree node. Per-VLAN Rapid Spanning Tree (PVRST ) allows rapid spanning-tree reconvergence on a per-VLANspanning-tree basis, without requiring the implementation of spanning-tree instances. Cisco Hot Standby Router Protocol (HSRP) is supported to create redundant, fail safe routing topologiesin 2960-XR IP-Lite SKUs. Switch-port auto-recovery (Error Disable) automatically attempts to reactivate a link that is disabledbecause of a network error. Power redundancy with an optional second power supply on 2960-XR models, or with an external RPS on2960-X models.Enhanced Quality of ServiceThe Cisco Catalyst 2960-X Series Switches offers intelligent traffic management that keeps everything flowingsmoothly. Flexible mechanisms for marking, classification, and scheduling deliver superior performance for data,voice, and video traffic, all at wire speed. Primary QoS features include: Up to eight egress queues per port and strict priority queuing so that the highest priority packets areserviced ahead of all other traffic. Shaped Round Robin (SRR) scheduling and Weighted Tail Drop (WTD) congestion avoidance. Flow-based rate limiting and up to 256 aggregate or individual policers per port. 802.1p class of service (CoS) and Differentiated Services Code Point (DSCP) classification, withmarking and reclassification on a per-packet basis by source and destination IP address, MAC address, orLayer 4 TCP/UDP port number. Cross-stack QoS to allow QoS to be configured across a stack of 2960-X series switches. The Cisco committed information rate (CIR) function provides bandwidth in increments as low as 8 Kbps. Rate limiting is provided based on source and destination IP address, source and destination MACaddress, Layer 4 TCP/UDP information, or any combination of these fields, using QoS ACLs (IP ACLs orMAC ACLs), class maps, and policy maps.Cisco Catalyst 2960-X Series Switching Database ManagerSwitching database manager (SDM) templates for LAN Base and IP Lite licenses allows the administrator toautomatically optimize the ternary content-addressable memory (TCAM) allocation to the desired features basedon deployment-specific requirements. MAC, routing, security, and QoS scalability numbers depend on the type oftemplate used in the switch.Table 3.Cisco Catalyst 2960-X Family LAN Lite and LAN Base Scalability NumbersResourcesLAN Lite (Default)LAN Base (Default)Unicast MAC Addresses16K16KIPv4 Unicast Direct Routes3202kIPv4 Unicast Indirect Routes321KIPv6 Unicast Direct Routes2562K 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.Page 5 of 26

ResourcesLAN Lite (Default)LAN Base (Default)IPv6 Unicast Indirect Routes01KIPv4 Multicast Routes and IGMP Groups1k1KIPv6 Multicast Groups1k1KIPv4 QoS ACEs384500IPv6 QoS ACEs256500IPv4 Security ACEs256625IPv6 Security ACEs256625Table 4.Cisco Catalyst 2960-XR Family IP Lite Scalability NumbersResourcesDefault (IP Lite)VLAN (IP Lite)IPv4 (IP Lite)Unicast MAC Addresses16K32K16KIPv4 Unicast Direct Routes4K25016KIPv4 Unicast Indirect Routes1.25K2508KIPv6 Unicast Direct Routes4K2500IPv6