Cisco SG350-28 | Switch | 24x 1000Mb/s, 2x Combo(RJ45/SFP) + 2x SFP, Managed
![](https://www.batna24.com/img2/1000/327547_1.webp?20989284238)
EN
SG350-28 switch is equipped with 24 RJ45 ports with a throughput of 1000 Mb/s, 2 Gigabit Combo (RJ45/SFP) ports and additional 2 SFP (1 Gb/s) ports. The device is managed and configured using, among others, Graphical Web interface and CLI. text console.
The switch has a throughput of 41.66 million packets per second (64-byte packets) and a switching capacity of 56.0 Gb/s. According to the manufacturer's data, the device should work faultlessly for more than 40 years. The Cisco switch comes with a limited, lifetime warranty.
The Cisco 350 series is part of the network solutions included in Cisco Small Business. It is a line of attractively priced managed switches, which are the base for business networks. They provide information in a more efficient way, provide features that improve the availability of business applications, protect confidential data and optimize network capacity. Easy to set up and use, the affordable Cisco 350 series enhances capabilities and helps you create more efficient computer networks, especially for small businesses for which it is dedicated.
Cisco 350 Series is a wide range of manageable Ethernet switches. The models in this series are equipped with from 8 to 48 Fast Ethernet ports and from 10 to 52 Gigabit Ethernet ports, which provides companies with the optimum flexibility needed to build a solid network foundation. The Cisco 350 series of Cisco Switches support advanced security management and network functions for sensitive business data. They are easy to deploy and configure, so there are no difficulties in using the network services needed in any business.
Whether you are building a basic high-performance network to connect employees' computers, or you need a solution to deliver data, voice and video services, the Cisco 350 series of switches will meet all of these needs, and the features of possible deployment scenarios are:
Features / filters | |
LAN standard | Gigabit Ethernet 10/100/1000 Mb/s |
Number of LAN ports | 24x [10/100/1000M (RJ45)] , 2x SFP (1,25G), 2x [1G Combo (RJ45/SFP)] , |
10G support | No |
AC input frequency | 50 - 60 |
AC input voltage | 110 - 220 |
Access Control List (ACL) | Yes |
Access Control List (ACL) rules | 512 |
ARP inspection | Yes |
Authentication | Guest VLAN |
Basic switching RJ-45 Ethernet ports quantity | 28 |
Basic switching RJ-45 Ethernet ports type | Gigabit Ethernet (10/100/1000) |
BPDU filtering/protection | Yes |
Broadcast storm control | Yes |
Built-in processor | Yes |
Cable length detection | Yes |
Cables included | AC |
Certification | UL (UL 60950), CSA (CSA 22.2), CE, FCC 15 (CFR 47) |
Depth | 202 |
DHCP features | DHCP server,DHCP client |
Firmware upgradeable | Yes |
Flash memory | 256 |
Flow control support | Yes |
Forwarding rate | 41.66 |
Harmonized System (HS) code | 85176990 |
Head-of-line (HOL) blocking | Yes |
Heat dissipation | 67.9 |
Height | 44 |
IGMP snooping | Yes |
Installed SFP modules quantity | 2 |
Installed SFP+ modules quantity | 2 |
Internal memory | 512 |
IP-MAC-Port binding | Yes |
Jumbo frames | 9216 |
Jumbo frames support | Yes |
Link aggregation | Yes |
MAC address filtering | Yes |
MAC address table | 16384 |
Management | CLI - Command Line Interface, By cloud – cloud management, By web browser, |
Management protocols | SNMP v1/2c/3, HTTP/HTTPS, MIB, RMON, IPv4/IPv6 |
Mean time between failures (MTBF) | 367209 |
Mounting brackets included | Yes |
Multicast support | Yes |
Networking standards | IEEE 802.1D,IEEE 802.1Q,IEEE 802.1p,IEEE 802.1s,IEEE 802.1w,IEEE 802.1x,IEEE 802.3ab,IEEE 802.3ad,IEEE 802.3az,IEEE 802.3u,IEEE 802.3z |
Number of multicast groups filtered | 1000 |
Number of queues | 8 |
Number of VLANs | 4096 |
Operating relative humidity (H-H) | 10 - 90 |
Operating temperature (T-T) | 0 - 50 |
Packet buffer memory | 12 |
Port mirroring | Yes |
Power consumption (typical) | 19.7 |
Power over Ethernet (PoE) | No |
Processor frequency | 800 |
Product colour | Black |
Quality of Service (QoS) support | Yes |
Quick start guide | Yes |
Rate limiting | Yes |
Reset button | Yes |
Security algorithms | 802.1x RADIUS,SNMP,SSH,SSL/TLS |
Spanning tree protocol | Yes |
SSH/SSL support | Yes |
Storage relative humidity (H-H) | 10 - 90 |
Storage temperature (T-T) | -20 - 70 |
Switch layer | L3 |
Switch type | Managed |
Switching capacity | 56 |
Switching layer | 2, 3, |
Type of case | Rack (1U) |
Virtual LAN features | Private VLAN,Tagged VLAN,Port-based VLAN |
VLAN support | Yes |
Web-based management | Yes |
Weight | 2.75 |
Width | 440 |
Power over Ethernet (PoE) | |
PoE | The switches support 802.3at PoE+, 802.3af, 60 W PoE and Cisco prestandard PoE Maximum power 60 W to any 10/100 or Gigabit Ethernet port for PoE+ supported devices and 15.4 W for PoE supported devices until the PoE budget for the switch is reached The total power available for PoE for the switch is as follows: |
Power dedicated to PoE | None |
Number of ports supporting PoE | None |
Electricity consumption | |
Green Power | EEE, Energy Detect, Short Reach |
Energy consumption of the system | 19.9 W |
Energy consumption (with PoE) | N/A |
Heat distribution (BTU/hr) | 67.9 |
Ports | |
Total number of ports | 28 x Gigabit Ethernet |
Ports RJ-45 | 24 x Gigabit Ethernet |
Combo ports (RJ-45 + SFP) | 2 x Gigabit Ethernet Combo + 2 x Gigabit SFP |
Buttons | Reset button |
Other | |
Package buffer | 12 Mb |
LEDs | System, Link/Act, PoE, Speed, LED power saving option |
Flash Memory | 256 MB |
CPU memory | 512 MB |
Supported SFP modules | MGBSX1, MGBLH1, MGBT1 |
Environmental features | |
Dimensions (W x H x D) | 440 mm x 44 mm x 202 mm |
Weight | 2.75 kg |
Power supply | 100-240 V, 50-60 Hz, internal |
Certification | UL (UL 60950), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A |
Ambient temperature during operation | 0°C to 50°C |
Ambient temperature during storage | -20°C to 70°C |
Humidity during operation | 10% to 90%, relative, non-condensing |
Humidity during storage | 10% to 90%, relative, non-condensing |
Acoustic noise and MTBF | |
Fan (quantity) | None |
Acoustic noise | N/A |
MTBF @ 40C (hours) | 367,209 |
Guarantee | |
Guarantee period | Limited Lifetime Warranty, with exchange in advance the next business day (if available) |
Package | |
Package contents | Cisco switch 350 series Power cord or power supply Mounting kit Console cable Operating instructions |
Performance | |
Capacity in millions of packets per second (mpps), 64-byte packets | 41.66 |
Switching capacity in gigabits per second (Gbps) | 56.0 |
USB connector | The USB port is used to manage files |
Switching - layer 2 | |
Spanning Tree Protocol | 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default 8 instances are supported Multiple instances of Spanning Tree using 802.1s (MSTP) |
Grouping of ports | Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) ● up to 8 groups up to 8 ports per group with 16 candidate ports for each aggregated dynamic link 802.3ad LAG |
VLAN | Supports up to 4096 VLANs simultaneously VLANs based on ports and tags 802.1Q VLANs based on MAC VLAN management Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks VLAN guest Uncertified VLAN Dynamic VLAN assignment via RADIUS server with client authentication 802.1x CPE VLAN |
Voice VLAN | Voice traffic is automatically assigned to a voice specific VLAN and processed using the appropriate levels of voice QoS Auto |
Multicast TV VLAN | Multicast TV VLANs allow a single VLAN to be shared in a network, while subscribers remain in separate VLANs (also known as MVRs). |
Q-in-Q VLAN | VLANs transparently intersect the network of service providers while isolating traffic among customers |
Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) | Protocols for automatic expansion and configuration of VLANs in a bridged domain |
Unidirectional Link Detection (UDLD) | The UDLD monitors the physical connection to detect one-way connections caused by incorrect wiring or cable/port errors to prevent redirection loops and blocked traffic in networks |
DHCP Relay in Layer 2 | Forwarding DHCP traffic to a DHCP server in different VLANs; works with DHCP option 82 |
Internet Group Management Protocol (IGMP) versions 1, 2, 3 and snooping | IGMP limits bandwidth-intensive multicast traffic to requesters only; supports up to 1K multicast groups (source-specific multicasting is also supported) |
IGMP Querier | Querier IGMP is used to operate the Layer 2 snooping switches multicast domain in the absence of a multicast router |
HOL lock (Head-Of-Line) | Prevention of HOL blockades |
Feedback loop detection | Feedback loop detection provides loop protection by transmitting loop protocol packets from ports where loop protection has been enabled Works independently of STP |
Jumbo frames | Up to 9216 bytes |
MAC board | Up to 16K (16384) MAC addresses |
Layer 3 functions | |
Routing IPv4 | IPv4 packet forwarding at link speed Up to 1K static routes and up to 128 IP interfaces |
Routing IPv6 | IPv6 packet forwarding at Internet connection speed |
Classless Inter-Domain Routing (CIDR) | CIDR support |
Layer 3 interface | Layer 3 interface configuration on physical port, LGD, VLAN or loopback interface |
DHCP relay on layer 3 | Transmission of DHCP traffic in different IP domains |
User Datagram Protocol (UDP) relay | Transferring transmission information between layer 3 domains to detect applications or transfer bootP/DHCP packets |
DHCP server | Switch to act as an IPv4 DHCP server supporting IP addresses for multiple DHCP pools Support for DHCP options |
Safeguards | |
Secure Shell Protocol (SSH) | SSH is a safe replacement for Telnet traffic SCP also uses SSH SSH v1 and v2 are supported |
Secure Sockets Layer (SSL) | SSL support: encrypts all HTTPS traffic, allowing highly secure access to the browser-based graphical management interface on the switch |
IEEE 802.1X (Authenticator roles) | 802.1X: RADIUS authentication and reporting Checksum MD5 VLAN for guests Uncertified VLAN Single/multiple host mode and single/multiple sessions Supports temporary handling 802.1X Dynamic VLAN assignment |
Authorisation via Internet | Network-based authentication provides control of network access via a web browser to any device or operating system |
STP Bridge Protocol Data Unit (BPDU) Guard | Safety mechanism to protect the network against incorrect configurations The port with the BPDU Guard enabled is disabled if a BPDU message is received on this port |
STP Root Guard | This prevents edge devices not under the control of the network administrator from becoming Spanning Tree Protocol root nodes |
DHCP snooping | Filters DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces This prevents malicious devices from acting as DHCP servers |
IP Source Guard (IPSG) | When the IP Source Guard feature is enabled on a port, the switch filters the IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping This prevents the spoofing of IP addresses |
Dynamic ARP Control (DAI) | The switch rejects ARP packets from the port if there are no static or dynamic IP/MAC bindings, or if there is a discrepancy between the source or destination addresses in the ARP packet This prevents man-in-the-middle attacks |
IP/MAC/Port Binding (IPMB) | Previous features (DHCP Snooping, IP Source Guard and Dynamic ARP Inspection) work together to prevent DOS attacks on the network, thereby increasing network availability |
Secure Core Technology (SCT) | Ensure that the switch will receive and manage processes and protocol traffic regardless of the amount of traffic received |
Secure Sensitive Data (SSD) | Mechanism for secure management of sensitive data (such as passwords, keys, etc.) on the switch, filling in this data on other devices and protecting against self-configuration Access to view confidential data in plain or encrypted text is provided according to the user configured access level and user access method |
Layer 2 isolation Private VLAN Edge (PVE) with community VLAN | PVE (also known as protected ports) provides layer 2 isolation between devices in the same VLAN, supports multiple uplink links |
Port security | Possibility to block source MAC addresses to ports and limit the number of known MAC addresses |
RADIUS/TACACS+ | Supports RADIUS and TACACS authentication The switch acts as a customer |
Storm protection | Broadcasting, multicast and unknown unicast |
RADIUS accounting | RADIUS reporting functions allow sending data at the beginning and end of the service, indicating the amount of resources (such as time, packets, bytes, etc.) used during the session |
Prevention of DoS | Prevention of Denial-Of-Service (DOS) attacks |
Quality of Service | |
ACL Access Control Lists | Support for up to 512 rules Packet rejection or bandwidth restriction based on source and destination MAC, VLAN ID or IP address, protocol, port, DSCP/IP priority, source and destination ports TCP/UDP, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag, time-supported ACL |
Priority levels | 8 queues |
Schedules | Strict priority and Weighted Round-Robin (WRR) Queue assignment based on DSCP and service class (802.1p/CoS) |
Class of service - Class of service | Port based; 802.1p VLAN based on VLAN priority; based on IPv4/v6 IP precedence/Type of Service (ToS)/DSCP; Differentiated Services (DiffServ); ACLs classification and remarking, trusted QoS |
Capacity limitations - Rate limiting | Ingress policer; outbound traffic control and speed control; on VLAN, on port and based on data flow |
Avoiding congestion | TCP congestion avoidance algorithm is required to minimize and avoid global synchronization of TCP losses |
IPv6 | |
IPv6 | IPv6 host mode IPv6 over Ethernet Dual IPv6/IPv4 stack Detection of neighbor and IPv6 (ND) router Auto-configuration of the IPv6 address Path Maximum Transmission Unit (MTU) discovery Double address detection (DAD) ICMP version 6 IPv6 over IPv4 with support for Intrasite Automatic Tunnel Addressing Protocol (ISATAP) Gold certificate USGv6 and IPv6 logo |
IPv6 QoS | Prioritization of IPv6 packets |
IPv6 ACL | Speed limit or IPv6 rejection |
IPv6 First Hop Security | RA guard ND inspection DHCPv6 guard Table of adjacent bonds (snooping and static entries) Control of the integrity of adjacent bonds |
Multicast Listener Discovery (MLD v1/2) snooping | Delivering IPv6 multicast packets only to the right recipients |
Management | |
IPv6 applications | Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, DNS client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, TACACS |
Graphical user interface | Built-in switch configuration tool for easy browser-based device configuration (HTTP/HTTPS) Supports configuration, system desktop, system maintenance and monitoring |
Smart Network Application (SNA) | Smart Network Application (SNA) is an innovative network level monitoring and management tool built into the Cisco 100 to 500 series switches. Can detect network topology, display link status, monitor events, apply configurations and update software images using multiple switches on the network (Note: Network management with Smart Network Application requires the use of the 350, 350X or 550X series switch as part of the network) |
SNMP | SNMP versions 1, 2c and 3 with SNMP trap support and SNMP version 3 User based security model (USM) |
Remote monitoring (RMON) | RMON embedded software supports 4 RMON groups (history, statistics, alarms and events) for monitoring, analysis and better traffic management |
Dual IPv4 and IPv6 stack | Coexistence of both piles of protocols to facilitate migration |
Firmware update | Updated via web browser (HTTP/HTTPS) and TFTP and updated by SCP launched by SSH. The update can also be initiated by the console port Dual images for flexible firmware updates |
Port mirroring | Traffic at a port can be reflected in another port for analysis using a network analyser or RMON probe Up to 8 source ports can be mirrored to one destination port A single session is supported |
VLAN mirroring | Traffic from the VLAN can be reflected in the port for analysis using a network analyser or RMON probe Up to 8 source VLANs can be mirrored to one destination port A single session is supported |
DHCP (options 12, 66, 67, 82, 129 and 150) | DHCP options allow tighter control from a central point (DHCP server) to obtain the IP address, auto-configuration (with download of configuration file), DHCP relay and host name |
Secure copy (SCP) | Securely transfer files to and from the switch |
Auto-configuration with secure copying (SCP) | Enables secure, mass deployment with protection of sensitive data |
Text-based, editable configuration files | Configuration files can be edited with a text editor and downloaded to another switch to facilitate mass deployment |
Smartports | Simplified configuration of QoS and safety functions |
Auto Smartports | Uses intelligent solutions delivered through Smartport roles and applies them automatically to the port based on devices detected by Cisco Discovery Protocol or LLDP-MED |
CLI | Command line scripting interface The full CLI interface is supported, as well as the menu-based CLI interface User rights levels 1, 7 and 15 are supported for CLI |
Cloud services | Support for Cisco Small Business FindIT Network |
Other forms of management | Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP update; DHCP client; BOOTP; SNTP; Xmodem update; cable diagnostics; ping; syslog; Telnet client (secure SSH support) |
Temporary use of the port | Lifting or deactivating the port based on a user-defined schedule (when the port is administratively lifted) |
PoE based on a timetable | Power on/off capability based on a user-defined schedule |
Energy saving | |
Compliance with EEE (802.3az) | Support for 802.3az on all copper ports (SG350 models) |
Energy detection | The switch automatically turns off the power to the Gigabit Ethernet port and 10/100 RJ-45 port when no connection is detected. Power supply resumes without packet loss when the switch detects a connection |
Cable length detection | Adjusts signal strength depending on cable length for Gigabit Ethernet models, reduces power consumption for cables shorter than 10 m |
Switching off port LEDs | LEDs can be manually switched off to save energy |
Discovery | |
Bonjour | The switch is broadcast via Bonjour protocol |
Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions | LLDP allows the switch to broadcast its identification, configuration and capabilities to adjacent devices that store data in MIB LLDP-MED is an LLDP extension that adds extensions needed for IP phones |
Cisco Discovery Protocol | The switch is broadcast via the Cisco Discovery Protocol You also learn about the connected device and its properties using the Cisco Discovery Protocol |