Compare models, or try Cisco Switch Selector by Cisco Jakarta to find the best switch for your needs.

Catalyst 3650-12X48UR

• 8 x 10 Gigabit Ethernet with SFP+ uplinks
• 48 UPOE ports
• 1100 WAC default AC power supply
• Supports Cisco Catalyst Multitgigabit technology
• Enhanced Limited Lifetime Warranty (E-LLW)

Catalyst 3650-12X48UQ

• 4 x 10 Gigabit Ethernet with SFP+ uplinks
• 48 UPOE ports
• 1100 WAC default AC power supply
• Supports Catalyst Multitgigabit technology
• Enhanced Limited Lifetime Warranty (E-LLW)

Catalyst 3650-12X48UZ

• 2 x 40 Gigabit Ethernet with QSFP+ Uplinks
• 48 UPOE ports
• 1100 WAC default AC power supply
• Supports Catalyst Multitgigabit technology
• Enhanced Limited Lifetime Warranty (E-LLW)

Catalyst 3650-48FQM

• 48 10M/100M/1000M ports
• 12-in. deep mini switch for tight spaces
• Quiet, ideal for office areas
• Fixed fans and fixed power supplies
• Enhanced Limited Lifetime Warranty (E-LLW)

Catalyst 3650-8X24UQ

• 4 x 10 Gigabit Ethernet with SFP+ uplinks
• 24 UPOE ports
• 1100 WAC default AC power supply
• Supports Catalyst Multitgigabit technology
• Enhanced Limited Lifetime Warranty (E-LLW)

Catalyst 3650-24PDM

• 2 x 10 Gigabit Ethernet with SFP+ uplinks
• 24 POE+ ports
• Fixed 640 WAC default AC power supply
• 390W available PoE power
• Enhanced Limited Lifetime Warranty (E-LLW)

Catalyst 3650-48FQ

• 4 x 10 Gigabit Ethernet with SFP+ uplinks
• 48 PoE+ ports
• 1025 WAC default AC power supply
• 775W available PoE power
• Enhanced Limited Lifetime Warranty (E-LLW)

Catalyst 3650-24PD

• 2 x 10 Gigabit Ethernet with SFP+ uplinks
• 24 PoE+ ports
• 640 WAC default AC power supply
• 390W available PoE power
• Enhanced Limited Lifetime Warranty (E-LLW)

• Integrated wireless controller capability with:

1. Wireless capacity up to 40G per switch (48-port model).
2. Supports up to 50 access points and 1000 wireless clients in each switching entity (switch or stack).

• 24 and 48 10/100/1000 data and PoE + models with energy efficient Ethernet ports (EEE).
• 24 and 48 100-Mbps and 1-, 2.5-, 5-, and 10-Gbps (multigigabit) Cisco UPOE and PoE + models with EEE.
• Five fixed-uplink models with four Gigabit Ethernet, two 10 Gigabit Ethernet, four 10 Gigabit Ethernet, eight 10 Gigabit Ethernet, or two 40 Gigabit Ethernet Quad Small Form-Factor Pluggable Plus (QSFP +) ports.
• 24-port and 48-port 10/100/1000 PoE + models with lower noise and 11.62 inches lower depth for shallow depth cabinets in corporate, retail and branch environments.
• Optional Cisco StackWise-160 technology that provides scalability and durability with 160 Gbps stack throughput.
• Dual, modular, redundant and three modular fans provide redundancy.
• Support for external power system RPS 2300 on 3650 mini SKUs for power redundancy.
• Full IEEE 802.3at (PoE +) with 30W power on all ports in 1 form rack unit (RU) form factor.
• Cisco UPOE with 60W power per port in 1 rack unit (RU) form factor.
• IEEE 802.3bz (2.5GBASE-T and 5GBASE-T) exceeds 1 Gbps with existing Category 5e and Category 6.
• IEEE 802.1ba Audio Video Bridging (AVB) is integrated to provide a better AV experience, including improved time synchronization and quality of service (QoS).
• Software support for IPv4 and IPv6 routing, multicast routing, modular QoS, Flexible NetFlow (FNF) Version 9, and enhanced security features.
• Images of Cisco IOS Software universal single at all license levels, providing an easy upgrade path for software features.
• Increased limited lifetime warranty (E-LLW) with hardware replacement in the next working day (NBD) and 90 days access to Cisco Technical Assistance Center (TAC) support.

All Cisco Catalyst 3650 Series Switches have been repaired, the uplink port is built-in and shipped with one power supply. Tables 1 through 5 provide further details. Figure 1 is a picture of the Cisco Catalyst 3650 Series Switches by Cisco Jakarta.

Figure 1.         

Cisco Catalyst 3650 Series Switches

Table 1 shows the Cisco Catalyst 3650 Series configurations.

Table 1.          Cisco Catalyst 3650 Series Configurations

Fixed Uplinks

All Cisco Catalyst 3650 Series Switches have fixed, built-in uplink ports. Customers can choose from five types of uplink ports at the time of the switch purchase:

• Four Gigabit Ethernet with Small Form-Factor Pluggable (SFP)
• Two 10 Gigabit Ethernet with SFP+ and two 10 Gigabit Ethernet with SFP or four Gigabit Ethernet with SFP
• Four 10 Gigabit Ethernet with SFP+ or four Gigabit Ethernet with SFP
• Eight 10 Gigabit Ethernet with SFP+ or eight Gigabit Ethernet with SFP
• Two 40 Gigabit Ethernet with QSFP

The SFP + interface supports 10 Gigabit Ethernet and Gigabit Ethernet ports. See Table 1 for a description of the basic switch model and the appropriate uplink port. See Table 2 for a description of various uplink port interface options.

Table 2.          1 and 10 Gigabit Fixed Uplink Configurations

Dual Redundant Modular Power Supplies and External RPS2300

Cisco Catalyst 3650 Series Switches support dual redundant power supplies (see Figure 2). Switches are shipped with one power supply by default, and a second power supply can be purchased when ordering the switch or at a later time. If only one power supply is installed, the power supply must always be on power supply 1. This switch is also shipped with three fans that can be replaced in the field.

Figure 2.         

Redundant Power Supplies

Table 3 shows the different power supplies available on this switch and the available PoE power.

Table 3.          Switch Models and Corresponding Default Power Supplies

Multigigabit switches support different power supply circuits from non-multigigabit switches. Additionally PWR-C1-350WAC is not supported on multigigabit switches. In addition to the power supplies listed in Table 3, the 640W DC power supply is available at the time of ordering or as a backup on all non-multigigit switch models. DC power supplies also provide PoE capabilities for maximum flexibility (see Table 4 for PoE budgets available with DC power supplies). Customers can mix and match AC and DC power supplies in the two available power supply slots. This power supply can be mounted on one of the switches.

Table 4.          Available PoE with DC Power Supply

Power over Ethernet Plus (PoE+)

Cisco Catalyst 3650 Series Switches support PoE (IEEE 802.3af) and PoE + (IEEE 802.3at standard), which provide power up to 30 W per port. PoE eliminates the wall power requirements for each device that supports PoE and eliminates the costs of installing additional wires and electrical circuits that would otherwise be needed in the use of IP and WLAN telephones. Series 3650 can provide lower TCO for use that combines Cisco IP phones, Cisco Aironet® wireless LAN access points, or end devices compliant with IEEE 802.3at. Table 5 shows the combination of power supplies needed for various PoE needs.

Table 5.          Minimum Power Supply Requirements for Full PoE and PoE+

Cisco Universal Power over Ethernet (Cisco UPOE)

Cisco UPOE is a breakthrough technology, offering the following services and benefits:

• 60W per port to activate various end devices such as Samsung VDI clients, BT IP turret systems on the trading floor, Cisco Catalyst compact switches in retail and hospitality environments, Cisco TelePresence® personal systems, and physical access control devices.
• High availability for power and service guaranteed without interruption, a requirement for critical
  application (e911).
• Lower OpEx by providing lower network durability by combining backup power into a cable cabinet.
• Faster installation of new campus access network infrastructure by eliminating the need for power outlets for each endpoint.

Cisco UPOE capability is only available on certain multigigabit models.

Table 6 shows the power supply requirements for Cisco UPOE.

Table 6.          Power Supply Requirements for Cisco UPOE

Cisco Catalyst Multigigabit Technology

Cisco Multigigabit Ethernet is a unique innovation for the new Cisco Catalyst Ethernet access switch. With the incredible growth of 802.11ac and new wireless applications, wireless devices promote greater demand for network bandwidth. This creates the need for technology that supports speeds higher than 1 Gbps on all cable infrastructure. Cisco’s multigigabit technology allows you to reach bandwidth speeds from 1 Gbps to 10 Gbps through traditional Category 5e (Cat 5e) cabling or more. In addition, multigigabit ports on certain Cisco Catalyst switches support Cisco UPOE, which is increasingly important for the next generation workspace and the Internet of Things (IoT) ecosystem.

Cisco multigigabit technology offers significant benefits for a variety of speeds, cable types, and PoE power. Benefits can be grouped into three different areas:

• Dual speed: Cisco Catalyst Multigigabit technology supports automatic renegotiation of multiple speeds on a switch port. Supported speeds are 100 Mbps, 1 Gbps, 2.5 Gbps, and 5 Gbps on Cat 5e cables and up to 10 Gbps on Cat 6a cables.
• Cable type: This technology supports a variety of cable types, including Cat 5e, Cat 6, and Cat 6a or higher.
• PoE Power: This technology supports PoE, PoE +, and Cisco UPOE for all supported speeds and cable types.

Cisco Catalyst 3650 Mini Switches

The Cisco Catalyst 3650 Series adds a new mini switch to an existing set of 3650 switches. This switch has a depth of less than 12 “and is quieter than the existing 3650 switch, making it perfect to be installed in a tightly wired cabinet, rack, or user room where the depth of the switch is a concern. You can avoid replacing the cabinet or installing the switch at an angle and consequently reducing downtime for the network.

These switches allow uniform wired-wireless policy enforcement, application visibility, flexibility, application optimization, and superior durability such as the existing 3650 switches. They come in 24- and 48-port 10M / 100M / 1000M SKU switches (WS-C3650-24PDM and WS-C3650-48FQM) and support all the same features as existing 3650 switches except they come with fixed fans, fixed power supplies , and support for external RPS2300 for redundancy.

This PoE switch supports PoE (IEEE 802.3af) and PoE + (IEEE 802.3at standard), providing power up to 30W for 12 ports with a total of 390W on 24-port models and power up to 30W for 24 ports for a total of 775W on 48-port models . The 24-port switch has a 2×1 Gigabit Ethernet SFP uplink and 2×10 Gigabit Ethernet SFP +; The 48-port switch has a 4×10 Gigabit Ethernet SFP + uplink to support high-bandwidth applications. This switch supports stacking and can stack each other or 3650 switches using the same Cisco StackWise-160 technology. 3650 mini and 3650 use the same software and thus can be used and managed using the same policies, configurations, and so on like the existing 3650. Some of the use cases for the Mini 3650 are as follows:

Small Offices and Branches

Many small branches and satellite offices where there are some employees do not have larger cable cabinets because of limited space. A typical office like this has a smaller cabinet and will need a switch that can serve several employees, provide PoE support, can manage wired-wireless networks, and implement policies that are consistent with the same branch or larger office. Because the depth is less than 12 “, lower noise, and support for 10G uplinks along with stacking, advanced security, and wired-wireless convergence, the mini 3650 is the perfect switch for this type of space.

Education

The mini 3650 switch expands access to labs, classrooms, and other training rooms from a central / floor distribution room, reduces cabling costs and provides superior service quality with enhanced security, wired-wireless convergence, and enterprise network features. Because of its shallow depth and lower noise, this switch is suitable for classrooms or confined areas.

Retail

Typical retail outlets need to serve customers at several points of sale, each with a POS machine, access point, telephone, printer, video display with network, and several PoE personnel. This retail outlet is connected to an access router that connects it to the outside network and usually requires a switch that fits a shallow depth cabinet. Because the 12 “switch depth along with sophisticated network and security features, they can help retailers efficiently utilize space and save real estate costs.

Converging Wired and Wireless Access

The Cisco Catalyst 3650 Series is a standalone, standalone access switching platform that enables wired plus wireless services on one Cisco IOS XE Software based platform. With this, Cisco has pioneered a number of rich capabilities such as high availability based on stateful switchover (SSO) in stacking, granular QoS, security, and Flexible NetFlow (FNF) across all cables and wirelesss in a seamless manner. In addition, the cable plus wireless feature is bundled into one Cisco IOS Software image, which reduces the number of software images that must meet user requirements / certifications before activating them on their network. A single console port for command line management interface (CLI) reduces the number of touch points managed for wired plus wireless services, thereby reducing network complexity, simplifying network operations, and reducing TCO to manage infrastructure.

Cable plus convergent wireless not only increases wireless bandwidth across the entire network but also the scale of wireless deployment. Each 48-port Cisco Catalyst 3650 provides 40 Gbps wireless throughput (20 Gbps on a 24-port model). This wireless capacity increases with the number of members in the stack. This ensures that the network can scale with current wireless bandwidth requirements, as determined by IEEE 802.11n based access points and with future wireless standards such as IEEE 802.11ac. In addition, the Cisco Catalyst 3650 distributes wireless controller functions to achieve better scalability. Each Cisco Catalyst 3650 switch / stack can operate as a wireless controller in two modes:

• Mobility Agent (MA): This is the default mode used by Cisco Catalyst 3650 to be sent. In this mode the switch is able to stop the CAPWAP tunnel from the access point and provide wireless connectivity to the wireless client. Maintaining a wireless client database and configuring and enforcing security and QoS policies for wireless clients and access points can be enforced in this mode. No additional licenses above IP Base are required to operate in mobility agent mode.
• Mobility controller (MC): In this mode, the Cisco Catalyst 3650 switch can perform all the tasks of a mobility agent other than mobility coordination, radio resource management (RRM), and Cisco CleanAir® coordination within the mobility ubdomain. Mobility control mode can be activated on the CLI switch. An IP Base license level is required when the Cisco Catalyst 3650 switch acts as a mobility controller. The centrally located Cisco 5508 Wireless LAN Controller (WLC 5508), Cisco Wireless Services Module 2 (WiSM2) (when running AireOS Version 7.3), and Wireless LAN Controller 5760 can also perform this role for greater deployment.

With a mobility agent located in a cable cabinet that provides 40 Gbps wireless per switch (nx 40 Gbps for a stack of n switches) and a mobility controller that manages several central wireless functions, convergence-based wireless deployment-based wireless delivers the best in class scalability for wireless and throughput significantly improved wireless.

Figure 3. Mobility Controller (MC) and Mobility Agent (MA)

Distributed Intelligent Services Cisco Jakarta

Fleksibel NetFlow (FNF)

Full visibility into wired plus wireless traffic is achieved because of access point control and provision of wireless access points (CAPWAP) on the switch. This helps identify users and user traffic flow to identify potential attackers and take corrective action at the access layer before the attack penetrates further into the network. This is achieved by using FNF, which monitors every flow entering and leaving the switch stack for wired and wireless users. It also helps identify top wired / wireless speakers and enforce appropriate bandwidth supply policies.

QoS

Switch 3650 has wired QoS capability plus advanced wireless. It uses the Cisco modular QoS command line interface (MQC). The switch manages wireless bandwidth using an unprecedented hierarchical bandwidth management starting from the per-access-point level and tracing further to per-radio, per-service set (SSID) identification, and per-user rates. This helps manage and prioritize the available bandwidth between various radios and various SSIDs (companies, guests, etc.) in each radio based on a percentage.

This switch is also able to automatically allocate the same bandwidth between users connected in a given SSID. This ensures that all users in the given SSID get a fair share of the available bandwidth while being connected to the network. UADP ASIC enables hierarchical bandwidth management and fair bandwidth sharing, thus providing hardware-based QoS for performance optimized at line level traffic.

In addition to this capability, switches can perform class of service (CoS) or differentiated service code points (DSCP) based on queues, policing, establishment, and tagging of wired plus wireless traffic. This allows users to create general policies that can be used for wired plus wireless traffic. The 3650 also supports policy names that can be downloaded from the Cisco Identity Services Engine (ISE) when users successfully authenticate to the network using ISE.

Security

The Cisco Catalyst 3650 provides a rich set of security features for wired plus wireless users. Features such as IEEE 802.1x, Dynamic Host Configuration Protocol (DHCP), IP Source Guard and aircraft protection controls, wireless intrusion prevention systems (WIPS), etc. enable protection against unauthorized users and attackers. With various wired and wireless users connected to the network, the switch supports session-aware networks, where each device connected to the network is identified as one session, and a unique access control list (ACL) and / or QoS policy can be defined and implemented using ISE for each of these sessions, provide better control on devices connected to the network.

Resiliency

Cisco StackWise-160 technology

Cisco Jakarta Cisco Catalyst 3650 supports an optional stacking module based on Cisco StackWise-160 technology. The Cisco StackWise-160 technology is built on industry-leading StackWise technology, which is a premium build architecture. StackWise-160 has a 160 Gbps bandwidth stack. StackWise – 160 uses Cisco IOS Software SSO to provide durability in the stack. The stack behaves as a single switching unit that is managed by an “active” switch chosen by a member switch. The active switch automatically selects the standby switch in the stack. The active switch creates and updates all switch / routing / wireless information and continuously synchronizes that information with the standby switch.

If the active switch fails, the standby switch assumes the role of the active switch and continues to run the stack. The access point stays connected during an active switch to standby. A functional stack can accept new members or delete old ones without service interruption. Stack Wise-160 creates a single unified system that is extremely powerful with up to nine switches, providing simplified management using a single IP address, single Telnet session, single CLI, automatic version checking, automatic upgrade, automatic upgrade, automatic configuration, and more. StackWise-160 also allows local movement of Cisco Catalyst 3650 Series Switches. (See Figure 4.)

Gambar 4.StackWise-160 Kit with Stack Adapter and Cable

The heart of the Cisco Catalyst 3650 is UADP ASIC with programmable capabilities for future features and intelligence with investment protection. The new ASIC provides the foundation for converging APIs across cable and wireless, Cisco Open Network Environment, software-determined network readiness (SDN) and OnePK SDK through software updates over the life of the product.

Software Features and Services on Cisco Catalyst 3650 Series Switches by Cisco Jakarta

Software services supported on Cisco Catalyst 3650 Series Switches can be classified into five broad categories:

• Ease of operation
• Advanced security features
• Excitement
• Application visibility and control
• Audio Video Bridging (AVB)

Ease of Operation

Cisco Catalyst 3650 helps reduce operating costs:

• Cisco Catalyst Smart Operation
• Deployment and control features that are easy to use
• Efficient switch operation
• Network management tool

Cisco Catalyst Smart Operations

Cisco Catalyst Smart Operations is a comprehensive set of capabilities that simplifies LAN usage, configuration, and troubleshooting. In addition to adaptive and always-on technology such as StackWise-160, Cisco Catalyst Smart Operations enables touchless installation and switch replacement, fast enhancements, and ease of problem solving with reduced operating costs. The Cisco Catalyst Smart Operations are a series of features that include Smart Installation, Auto Smartports, Smart Configuration, and Smart Troubleshooting to improve operational excellence:

• Cisco Smart Install is a transparent plug-and-play technology for configuring Cisco IOS Software images and changing configurations without user intervention. Smart Install uses dynamic IP address allocation and the help of other switches to facilitate installation, providing transparent network plug and play.
• Cisco Auto Smartports provides automatic configuration when the device is connected to a switch port, enabling automatic detection and plug and play of devices to the network.
• Cisco Smart Troubleshooting is a broad set of debug diagnostic commands and system health checks on the switch, including Generic Online Diagnostics (GOLD) and Onboard Failure Logging (OBFL).
• Embedded Event Manager (EEM) is a powerful and flexible feature that provides real-time network event detection and onboard automation. Using EEM, customers can adjust the behavior of their network devices to align with their business needs. This feature requires a set of IP Base features.

Easy-to-Use Deployment and Control Features

• User experience:

1. IP service level agreements (SLAs) allow customers to ensure new business critical IP applications, as well as IP services that utilize data, voice and video, in IP networks. This feature requires a set of IP Service features.
2. The automatic configuration of DHCP from several switches through the boot server makes it easy to spread the switch.
3. Automatic QoS (AutoQoS) simplifies QoS configuration in voice over IP (VoIP) networks by issuing interfaces and global switch commands to detect Cisco IP phones, classify traffic, and help activate outgoing queue configuration.
4. Automatic negotiation on all ports automatically selects the half or full duplex transmission mode to optimize bandwidth.
5. Media dependent interface (MDIX) crossover automatically adjusts the sending and receiving pairs if the wrong type of cable (crossover or straight through) is installed.

• Simplified configuration and connectivity:

1. Dynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration on all switch ports.
2. The Port Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel or Gigabit EtherChannel groups groups to link to another switch, router, or server.
3. The Link Aggregation Control Protocol (LACP) allows the creation of Ethernet channels with devices that are compliant with IEEE 802.3ad. This feature is similar to Cisco EtherChannel and PAgP technology.
4. Unidirectional Link Detection Protocol (UDLD) and aggressive UDLD allow unidirectional links caused by faulty fiber optic cables or port errors to be detected and deactivated at the optical fiber interface.
5. Cisco VLAN Trunking Protocol (VTP) Version 3 supports dynamic VLANs and dynamic trunk configurations on all switches.

• Efficient switch operation:

1. Switching database manager (SDM) templates, VLAN templates (specifically to the LAN Base license level), and advanced templates allow administrators to automatically optimize addressable addressable addressable memory (TCAM) memory allocation to desired features based on specific usage requirements.
2. The local Proxy Address Resolution Protocol (ARP) works in conjunction with the edge of a private VLAN to minimize broadcasts and maximize available bandwidth.
3. Stacking master configuration management with Cisco StackWise-160 technology helps ensure that all switches are upgraded automatically when the master switch receives a new software version. Automatic software version checking and updating helps ensure that all stack members have the same software version.
4. Trivial File Transfer Protocol (TFTP) reduces the administrative costs of software upgrades by downloading from a centralized location.
5. Network Timing Protocol (NTP) provides accurate and consistent time stamps for all intranet switches.

• Multicast:

1. Optimized multicast for cable plus wireless: The Cisco Catalyst 3650 offers greater multicast efficiency by only receiving one multicast stream and multiplying it for all connected wireless plus cable devices connected to the switch.
2. Internet Group Management Protocol (IGMP) v1, v2, v3 snooping for IPv4: multicast listener discovery (MLD) v1 and v2 snooping provides fast client connections and multicast streams and limits bandwidth intensive video traffic to applicants.

• Monitoring:

1. Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switch network from other switches on the same network.
2. For enhanced traffic management, monitoring and analysis, the Embedded Remote Monitoring (RMON) software agent supports four RMON groups (history, statistics, alarms and events).
3. Layer 2 Traceroute makes it easy to solve the problem by identifying the physical path the packet takes from source to destination.
4. Wireless RF management provides real-time and historical information about RF interference that affects network performance across controllers using Cisco CleanAir technology integration across systems.

Efficient Switch Operation

The Cisco Catalyst 3650 Series Switches, designed and engineered by Cisco, provide optimal power saving, EEE and low power operations for power management and best-in-class power consumption capabilities. The Cisco Catalyst 3650 port is able to reduce power mode so that unused ports can switch to a lower power utilization status. Other efficient switch operation features are:

• Cisco Discovery Protocol Version 2 enables Cisco Catalyst 3650 Series Switches to negotiate more granular power settings when connecting to Cisco-powered devices such as IP phones or access points than what is provided by the IEEE classification.
• Per-port power consumption commands allow customers to determine the maximum power settings for each port. Per-port PoE power sensing measures the actual power taken, allowing smarter control of powered devices.
• PoE MIB provides proactive visibility into power usage and allows customers to set thresholds for different power levels.

Be environmentally responsible

Organizations can choose to turn off the access point radio to reduce power consumption during peak hours. The integrated wireless LAN controller avoids the spread of enhancements in the network.

Network Management Tools

The Cisco Catalyst 3650 Series Switches offer superior CLI for detailed configuration and the Cisco Prime ™ infrastructure for integrated wireless plus cable management. The Cisco Prime infrastructure provides day-to-day and ongoing provision, ongoing monitoring and maintenance, configuration templates, and 360-degree device and user views and functions as an FNF collector for user traffic display using the Cisco Prime Assurance Manager module.

Advanced Security Features

Cisco Catalyst 3650 Series Switches support advanced security features including but not limited to:

• Protection against attackers:

1. Port security secures access to trunk ports or access based on MAC addresses. This limits the number of MAC addresses learned to reject MAC address flooding.
2. DHCP snooping prevents malicious users from spoofing DHCP servers and sending fake addresses. This feature is used by other major security features to prevent a number of other attacks such as ARP poisoning.
3. Dynamic ARP inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting ARP’s insecure nature.
4. The IP Source Guard prevents malicious users from spoofing or taking over another user’s IP address by creating a binding table between the IP, MAC address, port, and client VLAN.
5. The Unicast Reverse Path Forwarding (RPF) feature helps reduce problems caused by recognizing malicious or fake IP source addresses into the network by removing IP packets that do not have verified IP source addresses.
6. Bidirectional data support on the SPAN port allows the Cisco intrusion detection system (IDS) to take action when an intruder is detected.

• User authentication:

1. Flexible authentication that supports a variety of authentication mechanisms, including 802.1X, MAC authentication bypass, and web authentication using a single, consistent configuration.
2. RADIUS changes authorization and downloadable calls for comprehensive policy management capabilities.
3. Private VLANs restrict traffic between hosts in the same segment by separating traffic at Layer 2, turning broadcast segments into multiaccess segments such as non-broadcast. Personal VLAN edges provide security and isolation between switch ports, which helps ensure that users cannot snoop on other users’ traffic.
4. Multidomain authentication allows IP phones and PCs to authenticate on the same switch port while placing it on the appropriate voice and data VLAN.
5. MAC address notification allows administrators to be notified of users added or removed from the network.
6. Mobility and security for secure and reliable wireless connectivity, as well as a consistent end-user experience. Increased network availability through proactive blocking of known threats.
7. IGMP filtering provides multicast authentication by filtering out unsubscribed customers and limiting the number of concurrent multicast streams available per port.

• ACLs:

1. Cisco VLAN ACL security on all VLANs prevents unauthorized data flow from being bridged in the VLAN.
2. The standard Cisco and ACL extended IP security routers establish security policies on interfaces that are directed for aircraft and data plane traffic. IPv6 ACLs can be applied to filter IPv6 traffic.
3. Port-based ACLs for the Layer 2 interface allow security policies to be applied to each switch port.

• Device access:

1. The Secure Shell (SSH), Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) protocols provide network security by encrypting administrator traffic during Telnet and SNMP sessions. The SSH protocol, Kerberos, and cryptographic versions of SNMPv3 require special cryptographic software images due to U.S. export restrictions
2. TACACS + and RADIUS authentication facilitates centralized control of switches and limits unauthorized users from changing configurations.
3. Multilevel security on console access prevents unauthorized users from changing the configuration of the switch.

• The bridge protocol data unit keeper (BPDU) closes the Spanning Tree PortFast interface which is activated when BPDU is received to avoid accidental topology loops.
• Spanning Tree Root Guard (STRG) prevents edge devices that are not in the network administrator’s control from becoming the Spanning Tree Protocol root node.
• End-to-end wireless security offers DTLS encryption that is compatible with CAPWAP to ensure encryption between access points and controllers across remote WAN / LAN links.

Resiliency

Unlimited networks allow enterprise mobility and business class video services. The industry’s first integrated network (wired plus wireless) location service allows the tracking of cellular assets and users of those assets for both wired plus wireless devices. The unlimited experience is actually activated by the following feature set in the Cisco Catalyst 3650 Series Switches:

• High availability
• High-performance IP routing
• Superior QoS

High Availability

In addition to StackWise-160, the Cisco Catalyst 3650 Series supports high availability features including but not limited to the following:

• EtherChannel Cross-Stack provides the ability to configure Cisco EtherChannel technology on various stack members for high durability.
• Flexlink provides link redundancy with convergence times of less than 100 ms.
• IEEE 802.1s / w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) provide spanning-tree convergence that is independent of the spanning-tree timer and also offers the benefits of Layer 2 load balancing and distributed processing. The stacked units behave as a single spanning-tree node.
• Rapid Spanning Tree Per-VLAN (PVRST +) enables fast spanning tree convergence on a per-VLAN base-spanning tree, without requiring the implementation of spanning-tree instances.
• The auto-recovery (Err-disable) switch-port automatically tries to reactivate a link that was disabled due to a network error.

High Performance IP Routing

The Cisco Express Forwarding routing architecture provides very high-performance IP routing on the Cisco Catalyst 3650 Series Switches:

• Unicast IP routing protocols (static, Routing Information Protocol Version 1 [RIPv1], and RIPv2, RIPng, upgraded Interior Gateway Routing Protocol [EIGRP]) are supported for small network routing applications with IP Base feature sets. Static routing is limited with the LAN Base feature set. Cost equivalent routing facilitates Layer 3 load balancing and redundancy across the stack.
• Advanced IP Unicast routing protocol (Open Shortest Path First [OSPF], EIGRP, Border Gateway Protocol Version 4 [BGPv4], and Intermediate-to-Intermediate System Version 4 [IS-ISv4]) is supported to balance load and build LANs can be scaled. IPv6 routing (OSPFv3, EIGRPv6) is supported in hardware for maximum performance. OSPF for transferred access is included in the IP Base image. The IP Service feature set is required for complete OSPF, EIGRP, BGPv4, and IS-ISv4.
• Policy-based routing (PBR) enables superior control by facilitating flow diversion regardless of the configured routing protocol. Virtual routing and forwarding (VRF) -Lite enables service providers to support two or more VPNs, with overlapping IP addresses. The IP Base feature set is required.
• Protocol-independent multicast (PIM) for IP multicast routing is supported, including rare PIM mode (PIM-SM), PIM-solid mode (PIM-DM), PIM-solid mode, and source-specific mode (SSM). IP Service feature set is required.
  IPv6 addressing is supported on the interface with the appropriate program commands for monitoring and troubleshooting.

Superior QoS

The Cisco Catalyst 3650 Series offers Gigabit Ethernet speeds with smart services that keep traffic flowing smoothly, even at 10 times the normal network speed. Industry-leading mechanisms for cross-stack marking, classification, and scheduling produce superior performance for data, voice and video traffic, all at high speed.

The following are some of the QoS features supported on Cisco Catalyst 3650 Series Switches:

• Granular wireless bandwidth management and fair sharing using Cisco IOS Software and UADP ASIC proven technology from Cisco to provide hierarchical bandwidth management at line rates (per access point, per radio, per SSID, per client-based policy). Fair sharing among users in the SSID ensures that no user is starving because other users are devastated. Equitable sharing is automatically activated for wireless at the user level as well as the SSID level.
• 802.1p classification of CoS and DSCP fields is provided, using marking and reclassification on a per-packet basis based on source and destination IP address, MAC address, or Layer 4 Transmission Control Protocol / User Datagram Protocol (TCP / UDP) protocol number.
• Round robin (SRR) scheduling helps ensure the differential priority of packet flow by intelligently serving the incoming and outgoing queues. Weighted tail drop (WTD) provides avoidance of congestion in the queue in and out before interference occurs. Tight priority queues help ensure that the highest priority packages are served before all other traffic.
• The CIR (Cisco information information rate) function provides bandwidth with increases as low as 8 Kbps.
  Value restrictions are given based on source and destination IP addresses, source and destination MAC addresses, TCP / UDP Layer 4 information, or a combination of these fields, using QoS ACL (IP ACL or MAC ACL), class maps, and policy maps.
• Eight exit queues per port for cable traffic and four exit queues for wireless help enable different management of different types of traffic throughout the stack for cable traffic. Up to 2000 aggregate police are available per switch.

Application Visibility and Control Using Flexible NetFlow (FNF)

The Cisco IOS FNF Software is the next generation in flow visibility technology, which enables the optimization of network infrastructure, reduces operating costs, and increases capacity planning and security incident detection with increased flexibility and scalability. The Cisco Catalyst 3650 provides application visibility that is optimized with FNF on cable plus wireless. This switch is capable of 48,000 flow entries on the 48-port model and 24,000 flow entries on the 24-port model in wired and wireless.

With UADP ASIC, the Cisco Catalyst 3650 delivers next generation flow technology with unprecedented flexibility and comprehensive visibility that extends from the Layer 2 flag (MAC and VLAN) to Layer 4 (TCP / UDP) and beyond across wired and wireless traffic. The Cisco Catalyst 3650 switch is a medianet that can provide visibility and problem-solving capabilities across wireless plus cable video traffic. Certain medianet features will be activated in future software updates.

Flow data collected by FNF can be exported to external collectors for analysis and reporting or tracked by EEM. The Cisco Catalyst 3650 enables strong on-box correlations and on-box policy actions and actions that can be adapted to the EEM, allowing the switch to trigger alarm events or special policy actions when specified conditions are met. Without external tools needed, customers can use the existing infrastructure to monitor traffic, make economic traffic analysis even on large IP networks.

The Cisco Catalyst 3650 supports Wireshark, the world’s leading network protocol analyzer, and is ideal for proactive debugging, troubleshooting and monitoring network performance. Using Wireshark, users can capture wired and wireless data controls and packages, easily display and analyze them on the Wireshark GUI screen or. Using Flexible NetFlow and Embedded Event Manager, capture of Wireshark packets can be initiated in events such as SYN flood attacks or abnormal user bandwidth usage by certain users.

High-performance video over wireless integrates Cisco VideoStream technology to optimize the delivery of video applications on WLAN.

Wireless plus wired IP phones support integrated communication for enhanced collaboration through messaging, attendance, and conferencing and support all Cisco Integrated Wireless IP telephones for cost-effective real-time voice services.

Audio Video Bridging

With the Cisco IOS® XE 16.3 Software Release, select * the Cisco Catalyst 3650 Series model supporting the IEEE 802.1 AVB standard. This standard provides a very reliable and reliable means for delivering low latency AV streaming services over a Layer 2 Ethernet network. This standard also makes it easy to integrate new services and for AV equipment from different vendors to operate. Whether the analog or digital AV endpoint connection is flexible one-to-one, network transport allows transparent plug-and-play connections for multiple AV endpoints.

Benefits:

Improve the quality of experience by reducing jitter and latency for high-quality synchronized AV delivery over time
Provides application scalability across network deployments, including expansive and complex AV infrastructure
Reduce total cost of ownership (TCO) by reducing cable (lowering CapEx) and no license fees (lowering OpEx)

Deployment Options

Campus

In campus type deployments, operating the Cisco Catalyst 3650 in mobility agent mode and centralizing mobility control functionality in WLC 5760, WLC 5508, or WiSM2 helps achieve better scalability and performance. The Cisco Catalyst 3650 provides CAPWAP termination for access points, uniform policy enforcement for wireless clients, better wireless bandwidth, and uniform Cisco IOS Software based configuration and monitoring for wireless plus cable features. The mobility controller provides central mobility, RRM, and CleanAir coordination.

Backward compatibility with traditional centralized wireless deployment modes on WLC 5508, WiSM2, and WLC 5760 helps ensure that customers can migrate gradually to the Cisco Catalyst 3650-based converged access approach, providing advanced controllers for existing access points. This migration also provides investment protection in the existing wireless control infrastructure. The gradual adoption of the new Cisco Catalyst 3650 helps ensure that migration to wireless access mode is seamlessly connected. Figure 5 shows the Cisco Catalyst 3650 in campus deployments.

Branch

3650 is optimized for branch deployment when operating in mobility control mode. In this mode, the switch can not only stop the CAPWAP tunnel from the access point and provide client connectivity, but can also manage mobility within the branch. This eliminates the need for local controllers in each branch next to the access layer switches. Also, complete visibility into wired plus wireless traffic means that WAN routers can prioritize wired plus wireless traffic that is properly in and out of the branch. Figure 6 shows the Cisco Catalyst 3650 in a branch deployment.

Cisco Catalyst 3650 Series Specifications

Switch Performance

Table 7 shows Cisco Catalyst 3650 Series Switches performance specifications.

Table 7.          Cisco Catalyst 3650 Performance Specifications

Dimensions, Weight, Acoustic, Mean Time between Failures, and Environmental Range Specifications for Cisco Catalyst 3650 Series Switches

Table 8 shows dimensions, weight, acoustic, mean time between failure (MTBF), and environmental range. Weight includes the chassis assembly as it is shipped: three fans, two StackWise adapters, and one power supply blank. The weight also includes the default power supply that is shipped with the unit.

Table 8.          Dimensions, Weight, Acoustic, MTBF, and Environmental Range

Connectors for Cisco Catalyst 3650 Series

Table 9 shows connectors.

Table 9.          Connectors

Management and Standards Support for Cisco Catalyst 3650 Series Switches

Table 10 shows management and standards support for the Cisco Catalyst 3650 Series.

Table 10.          Management and Standards Support for the Cisco Catalyst 3650 Series

Power Supply Specifications

Table 11 lists the power specifications for the Cisco Catalyst 3650 Series based on the kind of power supply used.

Table 11.          Power Specifications for Cisco Catalyst 3650 Series

Power Consumption of Standalone Cisco Catalyst 3650 Series Switches

Tabel 12 menunjukkan konsumsi daya Switchal Cisco Catalyst 3650 Series mandiri berdasarkan pengujian Alliance for Telecommunications Industry Solutions (ATIS) menggunakan lalu lintas aliran distribusi IMIX, dengan tegangan input 115VAC @ 60 Hz, diaktifkan Ethernet Hemat Energi (EEE), dan tidak ada pembebanan PoE . Nilai yang diberikan adalah angka konsumsi daya maksimum yang dimungkinkan dalam masing-masing skenario pengujian.

Table 12.       Power Consumptions (in Watts) of Standalone Cisco Catalyst 3650 Series

Safety and Compliance

Table 13 lists the safety and compliance information for the Cisco Catalyst 3650 Series.

Table 13.       Safety and Compliance Information for Cisco Catalyst 3650 Series

Cisco Enhanced Limited Lifetime Hardware Warranty Oleh Mitra Cisco Jakarta

Cisco Catalyst 3650 Series Switches hadir dengan E-LLW yang mencakup pengiriman perangkat pengganti NBD jika tersedia dan 90 hari dukungan 8×5 Cisco TAC.

Pernyataan garansi formal Anda, termasuk garansi yang berlaku untuk perangkat lunak Cisco, muncul dalam paket informasi Cisco yang menyertai produk Cisco Anda. Kami mendorong Anda untuk meninjau kembali dengan hati-hati pernyataan jaminan yang dikirimkan bersama produk spesifik Anda sebelum digunakan.

Cisco berhak untuk mengembalikan harga pembelian sebagai solusi garansi eksklusifnya.

Table 14.          E-LLW Details

Licensing for Cisco Catalyst 3650 Series Switches

The three feature sets available with all Cisco Catalyst 3650 Series Switches are:

• LAN Base: Enterprise access layer 2 switching features
• IP Base: Enterprise access layer 3 switching features
• IP Services: Advanced enterprise layer 3 switching (IPv4 and IPv6) features

The LAN Base feature set offers enhanced smart services that include comprehensive Layer 2 features, up to 255 VLANs. The IP Base feature set provides entry-level enterprise services in addition to all Base LAN features, with 4094 VLANs. IP Base also includes support for wireless controller functions (mobility agents and mobility control roles; additional access point licenses needed for mobility control roles), channel access, smart operations, FNF, and so on. The IP Service feature set provides complete enterprise services that include advanced Layer 3 features such as EIGRP, OSPF, BGP, PIM, and IPv6 routing such as OSPFv3 and EIGRPv6. All software features support advanced security and MQC-based QoS.

Cisco Catalyst 3650 Series Switches with LAN Base feature sets can only be stacked with other Cisco Base Catalyst 3650 Series switches. The same applies to IP Base and IP Services as well. A mix of LAN Base switches with IP Base or IP Service feature sets is not supported.

Customers can transparently enhance software features regulated in the Cisco Catalyst 3650 Series Switches through the Cisco IOS Software CLI using the rights-based software upgrade (RTU) process. Software activation allows the Cisco IOS Software feature set. Based on the type of license, Cisco IOS Software activates the appropriate feature set. License types can be changed, or upgraded, to enable different feature sets.

Access Point License for Cisco Catalyst 3650

An access point license is required for Cisco Catalyst 3650 which operates in mobility control mode. No access point license is required for 3650 operating in mobility agent mode. This function is included in the IP Base feature set. Other devices that can act as a mobility controller are the wireless controller WLC 5760, WLC 5508, and WiSM2. Access point licenses can only be transferred between two 3650 switches or between 3650 and 5760 controllers and vice versa.

Software Policy for Cisco Catalyst 3650 Series Switches

Customers with Cisco Catalyst LAN Base and IP Base software feature sets will be given maintenance updates and bug fixes designed to maintain software compliance with published specifications, release notes, and industry standard compliance as long as the original end user retains or uses the product or up to one year from the end date of sale for this product, whichever occurs earlier. Customers with licenses for our IP Service software images require service support contracts such as the Cisco Smart Net Total Care ™ Service to download updates. This policy supersedes any prior software warranties or statements and is subject to change without notice.

Cisco and Services for Next-Generation Cisco Catalyst Fixed Switches

Enable innovative, secure, and smart advantages in the Unlimited Network Architecture using personalized services from Cisco and our partners. Through a process of discovery that begins with understanding your business goals, we help you integrate the new generation of Cisco Catalyst fixed switches into your architecture and integrate network services into that platform. Sharing superior knowledge and work practices, we support your success at every step as you use, absorb, manage and improve new technologies. Choose from a range of flexible support services designed to meet your business needs and help you maintain high-quality network performance while controlling operational costs. (See Table 15.)

Table 15.          Technical Services Available for Cisco Catalyst 3650 Switches

Notes:

1. Cisco operating system updates include the following: maintenance releases, minor updates, and major updates in the licensed feature set.
2. Advanced hardware replacement is available in various service level combinations. For example, 8x5xNBD indicates that deliveries will be carried out during the standard 8 hours working day, 5 days a week (generally accepted business days in the relevant region), with NBD shipments. Where NBD is not available, ships on the same day are provided. Limitation applies; for details, review the appropriate service description.

Table 16 lists ordering information for the Cisco Catalyst 3650 Series. To place an order, visit the Cisco Ordering homepage at https://www.cisco.com/en/US/ordering/or13/or8/order_customer_help_how_to_order_listing.html.

Table 16.       Cisco Catalyst 3650 Series Ordering Information

Optics Compatibility Information

The Cisco Catalyst 3650 Series supports a variety of optics. Because the list of supported optics is updated regularly, see the table available here for the latest SFP compatibility

Funding to Help You Achieve Your Goals. Cisco Capital® Financing can help you get the technology you need to achieve your goals and stay competitive. We can help you reduce CapEx. Accelerate your growth. Optimize your investment dollars and ROI. Cisco Capital financing gives you flexibility in obtaining complementary third-party hardware, software, services and equipment. And there is only one payment that can be predicted. Cisco Capital is available in more than 100 countries. Study again.