Cisco SG350X-8PMD-K9-EU | Switch | 8x RJ45 2.5Gb/s, 4x PoE+, 2x RJ45/SFP+ Combo, 240W

Cisco SG350X-8PMD switch is equipped with 8 RJ45 ports of 1/2.5Gb/s throughput. The switch has also 2 Uplink ports of 10Gb/s throughput (2 Combo 10G RJ45/SFP ports). Cisco devices have several management options including GUIavailable through a web browser and text CLI console.
The switch features a throughput of 29.76 million packets per second (64-byte packets) and a switching performance of 80 Gbps. This model has 8 ports with PoE power support, 4 of the ports can power devices with a maximum of 60W. The total PoE power budget is 240W. The Cisco switch comes with a limited lifetime manufacturer's warranty.
Cisco® 350X Series Managed Switches - is a line of managed Ethernet switches that provide the rich capabilities needed to support more demanding network environments at a very affordable price. These switches are easy to deploy and manage without a large IT staff.
Unlike switches that can be stacked but have components that are administered and diagnosed separately, the Cisco 350X Series provides true switch stacking capabilities, allowing you to configure, manage, and troubleshoot multiple switches as if they were a single device, making network expansion much easier. The 350X Series can be combined with up to 4 switches and up to 208 managed ports as a single stacked system.
Cisco 350X Series switches offer the advanced feature set that growing businesses and high-bandwidth applications and technologies demand. These switches can improve the reliability of critical functions, protect sensitive business information, and optimize network bandwidth to more efficiently move data across the network.
- Easy to configure and manage - Cisco 350X Series switches are designed to be easy to use and manage.
- Power over Ethernet Plus (PoE ) and 60W Po E - PoE technology simplifies deployment of IP phones and wireless access points by allowing network endpoints to be connected and powered over a single Ethernet cable, without the need to install separate power supplies. The 350X Series switches support 15W Power over Ethernet (PoE) and 30W Power over Ethernet Plus (PoE ). The switches also support 60W Po E on select ports to power compact switches, wireless access points, or other power-hungry devices.
- High reliability and robustness - Stackable switches can play an important role in eliminating downtime and improving network resiliency. For example, if a Cisco 350X series stackable switch fails, another switch immediately takes over, keeping the network up and running.
- True Stacking - Cisco 350X Series switches provide physical stacking of switches, allowing you to configure, manage, and troubleshoot multiple physical switches on a single device, with a single IP address, for up to 4 devices and up to 208 ports.
- Strong security - Cisco 350X Series switches provide advanced security features that are essential to protect business data and prevent unauthorized users from accessing the network.
- IPv6 Support - Cisco 350X Series switches have successfully passed rigorous IPv6 testing and received USGv6 and IPv6 Gold certification.
- Advanced Layer 3 Traffic Management - The switches support Layer 3 static LAN routing, enabling you to partition your network into workgroups and communicate in VLANs without compromising application performance. These features can improve network performance by offloading internal traffic management tasks from the router and allowing it to manage primarily external traffic and network security.
- Energy Efficiency - The switches are designed to save energy by optimizing power consumption, helping to protect the environment and reduce energy costs.
- Networkwide Automatic Voice Deployment - Using a combination of Cisco Discovery Protocol, LLDP-MED, Auto Smartports, and Voice Services Discovery Protocol (or VSDP, a unique Cisco protocol), customers can dynamically deploy an end-to-end voice network.
Features / filters | |
LAN standard | 10 Gigabit Ethernet, Gigabit Ethernet 10/100/1000 Mb/s, |
Number of LAN ports | 8x [100/1000/2500M (RJ45)] |
Number of WAN ports | 2x 10G Combo (RJ45/SFP+) |
10G support | Yes |
AC input frequency | 47/63 |
AC input voltage | 100 - 240 |
Access Control List (ACL) | Yes |
Access Control List (ACL) rules | 2000 |
Active link detection | Yes |
ARP inspection | Yes |
Authentication | Guest VLAN, Port-based authentication, Web-based authentication |
Authentication type | IEEE 802.1x, RADIUS |
Basic switching RJ-45 Ethernet ports quantity | 8 |
Basic switching RJ-45 Ethernet ports type | Gigabit Ethernet (10/100/1000) |
BPDU filtering/protection | Yes |
Broadcast storm control | Yes |
Built-in processor | Yes |
Cable length detection | Yes |
Cables included | AC, Serial |
Certification | UL, CSA, CE, FCC |
Combo SFP ports quantity | 2 |
Console port | RJ-45 |
Copper ethernet cabling technology | 10BASE-T, 100BASE-T, 1000BASE-T |
Depth | 252.5 |
DHCP features | DHCP server, DHCP snooping, DHCP relay, DHCP client |
DoS attack prevention | Yes |
Fiber optic connector | SFP+ |
Firmware upgradeable | Yes |
Flash memory | 256 |
Flow control support | Yes |
Form factor | 1U |
Forwarding rate | 29.76 |
GARP VLAN Registration Protocol (GVRP) | Yes |
Harmonized System (HS) code | 85176990 |
Head-of-line (HOL) blocking | Yes |
Heat dissipation | 1065.9 |
Height | 44 |
IGMP snooping | Yes |
Internal memory | 512 |
Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) | Yes |
IP routing | Yes |
IP-MAC-Port binding | Yes |
IPv4 & IPv6 features | IPv6 ping, IPv6 Telnet, Dual stack IPv4/IPv6 |
Jumbo frames | 9000 |
Jumbo frames support | Yes |
LED indicators | Yes |
Link aggregation | Yes |
Loop protection | Yes |
MAC address table | 16000 |
Management | By web browser, CLI - Command Line Interface, By cloud – cloud management, |
Mean time between failures (MTBF) | 474265 |
Multicast support | Yes |
Networking standards | IEEE 802.1D, IEEE 802.1Q, IEEE 802.1ab, IEEE 802.1p, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3ae, IEEE 802.3af, IEEE 802.3an, IEEE 802.3at, IEEE 802.3az, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z |
Noise level | 42.9 |
Number of fans | 1 |
Number of IP interfaces | 256 |
Number of multicast groups filtered | 4000 |
Number of power supply units | 1 |
Number of queues | 8 |
Number of static routes | 8000 |
Number of VLANs | 4094 |
Operating relative humidity (H-H) | 10 - 90 |
Operating temperature (T-T) | 0 - 45 |
Packet buffer memory | 1.5 |
Physical stacking (units) | 4 |
Port mirroring | Yes |
Power (W) | 382, 240, |
Power over Ethernet (PoE) | Yes |
Power over Ethernet (PoE) power per port | 60 |
Power over Ethernet plus (PoE+) ports quantity | 8 |
Power supply included | Yes |
Processor frequency | 800 |
Product colour | Black |
Quality of Service (QoS) support | Yes |
Queue scheduling algorithms | SP, Weighted Round Robin (WRR) |
Quick start guide | Yes |
Rack mount kit | Yes |
Rack mounting | Yes |
Rate limiting | Yes |
Reset button | Yes |
Root protection | Yes |
Security algorithms | 802.1x RADIUS, HTTPS, MD5, SNMP, SSH, SSL/TLS |
sFlow | Yes |
Spanning tree protocol | Yes |
SSH/SSL support | Yes |
Stackable | Yes |
Stacking possible | Yes |
Static route | Yes |
Storage relative humidity (H-H) | 10 - 90 |
Storage temperature (T-T) | -20 - 70 |
Switch layer | L2/L3 |
Switch type | Managed |
Switching capacity | 80 |
Switching layer | 2, 3, |
System event log | Yes |
Performance - switching capacity and data rate | |
Throughput in Mpps (64-byte packets) | 29.76 |
Switching capacity (Gbps) | 80 |
PoE (Power over Ethernet) | |
The switches support 802.3at PoE , 802.3af PoE, and Cisco pre-standard (legacy) PoE on any RJ45 network port. 60W PoE on select RJ-45 network ports is also supported, with a maximum of 60W delivered to any of the PoE ports at 60W, and a maximum of 30W delivered to any of the other RJ45 network ports until the PoE budget for the switch is reached. The total power available for PoE for the switch is as follows: | |
Power dedicated for PoE | 240W |
Number of PoE-capable ports | 8 (4 ports support PoE 60W) |
Energy consumption | |
Green Power | EEE, Energy Detect, Short Reach |
Energy consumption of the system | 50.5W |
Power consumption (with PoE) | 307.3W |
Heat distribution (BTU/hour) | 1065.9 |
Ports | |
Total number of ports | 2x 10 Gigabit Ethernet 8 x 1/2.5Gb/s RJ45 |
LAN ports | 8x 1/2.5 Gigabit Ethernet |
Uplink ports | 2x 10GE RJ45/SFP Combo |
Packet buffer | 1.5 MB |
Product specifications | |
Jumbo frames | Frame sizes up to 9K bytes. The default MTU is 2K. |
MAC table | Up to 16K (16384) MAC addresses |
Console port | Cisco Standard console port - RJ45 |
OOB management port | Gigabit dedicated port for out-of-band management on SG350XG models. |
USB connector | A USB Type A socket on the front panel of the Switch makes it easy to manage files and images. |
Buttons | Reset button |
LEDs | System, master, stack ID, link/speed per port |
Flash Memory | 256 MB |
CPU | 800 MHz (dual-core) ARM |
CPU memory | 512 MB |
Environmental features | |
Device dimensions (W x H x D) | 344.4 mm x 44 mm x 252.5 mm |
Weight | 2.74 kg |
Power supply | 100 - 240V 47 - 63 Hz, internal |
Certification | UL (UL 60950), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A |
Operating temperature | 0° to 45°C |
Storage temperature | -20° to 70°C |
Operating humidity | 10% to 90%, relative, non-condensing |
Storage Humidity | 10% to 90%, relative, non-condensing |
Acoustic noise level and mean time between failures (MTBF) | |
Fan (quantity) | 1 |
Acoustic noise | 42.9 dB at 45°C |
MTBF at 50°C (hours) | 474,265 |
Warranty | |
Warranty | Limited lifetime warranty |
Contents of the package | - Cisco Small Business 350X Series Switch - Power Cable - Installation kit - Console cable - Quick user guide |
Layer 2 switching | |
Spanning Tree Protocol | 802.1d Spanning Tree support Rapid convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default. 8 instances are supported. Multiple Spanning Tree instances using 802.1s (MSTP) |
Port Grouping and Link Aggregation | Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) up to 8 groups up to 8 ports per group with 16 candidate ports for each aggregated 802.3ad LAG dynamic link |
VLAN | Supports up to 4096 VLANs simultaneously VLANs based on 802.1Q ports and tags. MAC-based VLANs VLAN Management Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks Guest VLAN Unauthenticated VLAN Dynamic VLAN assignment via RADIUS server along with 802.1x client authentication. CPE VLAN |
Voice VLAN | Voice traffic is automatically assigned to a voice-specific VLAN and processed using the appropriate voice QoS Auto feature levels |
Multicast TV VLAN | Multicast TV VLAN allows a single multicast VLAN to be shared across the network while subscribers remain in separate VLANs (also known as MVRs). |
Q-in-Q VLAN | VLANs transparently traverse the service provider network while isolating traffic among clients. |
Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) | Protocols for automatic propagation and configuration of VLANs in a bridged domain. |
Unidirectional Link Detection (UDLD) | UDLD monitors the physical connection to detect unidirectional connections caused by improper cabling or cable/port errors to prevent forwarding loops and blocking traffic in networks. |
DHCP Relay at Layer 2 | Forward DHCP traffic to a DHCP server on different VLANs; works with DHCP option 82. |
Internet Group Management Protocol (IGMP versions 1, 2, 3) snooping | IGMP limits bandwidth-intensive multicast traffic to requesters only; supports up to 1K multicast groups (source-specific multicasting is also supported). |
IGMP querier | Querier IGMP is used to support the Layer 2 multicast domain of snooping switches in the absence of a multicast router. |
HOL (Head-Of-Line) locking | Prevention of HOL locks |
Layer 3 functions | |
IPv4 Routing | Forwarding of IPv4 packets at wire-speed Up to 8K static routes and up to 256 IP interfaces |
Static IPv6 Routing at wire speed | Up to 4K static routes and up to 200 IPv6 interfaces |
Layer 3 interface | Layer 3 interface configuration on a physical port, LAG, VLAN interface, or loopback interface. |
Classless inter-domain routing (CIDR) | CIDR support |
DHCP server | The switch acts as an IPv4 DHCP server supporting IP addresses for multiple DHCP pools/scopes. DHCP option support |
DHCP relay at Layer 3 | Forwarding of DHCP traffic between IP domains |
User Datagram Protocol (UDP) relay | Passing transmission information between Layer 3 domains for application discovery or bootP/DHCP packet forwarding. |
Stacking - connecting switches into stacks | |
Hardware Stacking | Up to 4 switches in a stack. Up to 208 ports managed as a single system with hardware failover. |
Protection during machine failure | High-speed failover in the stack ensures minimal loss of network traffic. Supports link aggregation between multiple units in the stack. |
"Plug and Play" configuration/management. | Master/backup for flexible stack control Automatic numbering Hot Swap of units in a stack Ring and chain stacking options, automatic stacking port speed, flexible port options |
High-speed connections between stacks | Cost-effective, high-speed 10G fiber and copper interfaces. LAG support for interconnects for even more bandwidth. |
Security | |
Secure Shell Protocol (SSH) | SSH is a secure replacement for Telnet traffic. SCP also uses SSH. SSH v1 and v2 are supported. |
Secure Sockets Layer (SSL) | SSL Support: Encrypts all HTTPS traffic, enabling highly secure access to the browser-based graphical management interface on the switch. |
IEEE 802.1X (authenticator role) | 802.1X: RADIUS authentication and reporting MD5 checksum Guest VLAN Unauthenticated VLAN Single/multiple host mode and single/multiple sessions Supports 802.1X time-based support Dynamic VLAN assignment |
Authorization via Internet | Web-based authentication provides web browser-based access control to any device and operating system. |
STP Bridge Protocol Data Unit (BPDU) Guard | A security mechanism that protects the network from incorrect configurations. A port with BPDU Guard enabled is disabled if a BPDU message is received on that port. This avoids accidental topology loops. |
STP Root Guard | This prevents edge devices not under the control of the network administrator from becoming Spanning Tree Protocol root nodes. |
DHCP snooping | Filters DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents malicious devices from acting as DHCP servers. |
IP Source Guard (IPSG) | When IP Source Guard is enabled on a port, the switch filters IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. |
Dynamic ARP Inspection (DAI) | The switch discards ARP packets from the port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. |
IP/MAC/Port Binding (IPMB) | The previous features (DHCP Snooping, IP Source Guard and Dynamic ARP Inspection) work together to prevent DOS attacks on the network, thereby increasing network availability. |
Secure Core Technology (SCT) | Ensures that the switch will receive and manage process and protocol traffic regardless of the amount of traffic it receives. |
Secure Sensitive Data (SSD) | A mechanism for securely managing sensitive data (such as passwords, keys, etc.) on the switch, populating this data in other devices and protecting against auto configuration. Access to view sensitive data in plain text or encrypted form is provided according to the access level configured by the user and the user access method. |
Private VLAN | Private VLAN provides security and isolation between switching ports to help ensure that users cannot spy on other users' traffic; supports multiple uplinks. |
Port security | Ability to lock source MAC addresses to ports and limit the number of MAC addresses learned. |
RADIUS/TACACS | It supports RADIUS and TACACS authentication. The switch operates as a client. |
RADIUS accounting | RADIUS reporting features allow you to send data at the beginning and end of a service, indicating the amount of resources (such as time, packets, bytes, etc.) used during the session. |
Protection against thunderstorms | Broadcast, multicast and unknown unicast |
DoS prevention | Prevention of Denial-Of-Service (DOS) attacks |
Multiple user privilege levels in CLI | Allowance levels 1, 7 and 15 |
ACL access control lists | Support for up to 2000 policies Packet rejection or bandwidth limiting based on source and destination MAC, VLAN ID or IP address, protocol, port, DSCP/IP precedence, TCP/UDP source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag, supported time-based ACLs. |
Quality of service | |
Priority levels | 8 hardware queues |
Schedules | Strict Priority and Weighted Round-Robin (WRR) |
Classes of service | Port-based; 802.1p VLAN priority-based; IPv4/v6 IP precedence/Type of Service (ToS)/DSCP-based; Differentiated Services (DiffServ); classification and remarking ACLs, trusted QoS Queue assignment based on Differentiated Services Code Point (DSCP) and class of service (802.1p/CoS) |
Rate limiting | Ingress policer; outbound traffic control and rate control; per VLAN, per port and based on data flow, 2R3C policies |
Avoiding traffic congestion | A TCP congestion avoidance algorithm is required to minimize and avoid global synchronization TCP losses. |
IPv6 | |
IPv6 | IPv6 host mode IPv6 over Ethernet Dual stack IPv6/IPv4 IPv6 Neighbor and Router Detection (ND) IPv6 stateless address autoconfiguration Path Maximum Transmission Unit (MTU) discovery Double Address Detection (DAD) ICMP Version 6 IPv6 over IPv4 network with Intrasite Automatic Tunnel Addressing Protocol (ISATAP) support. USGv6 and IPv6 Gold Logo Certification |
IPv6 QoS | Prioritizing IPv6 packets |
IPv6 ACL | Rate limiting or discarding IPv6 packets |
IPv6 First Hop Security | RA guard ND inspection DHCPv6 guard Neighbor binding table (snooping and static entries) Neighbor binding integrity check |
Multicast listener discovery (MLD v1/2) snooping | Deliver IPv6 multicast packets only to the appropriate recipients. |
IPv6 applications | Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, DNS client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, TACACS |
Management | |
Graphical user interface | Built-in switch configuration utility for easy browser-based device configuration (HTTP/HTTPS). Supports simple and advanced mode, configuration, wizards, configurable dashboard, system maintenance, monitoring, online help and universal search engine. |
Smart Network Application (SNA) | Smart Network Application (SNA) is an innovative network-level monitoring and management tool built into Cisco 100 to 500 series switches. It can detect network topology, display link status, monitor events, apply configurations, and update software images across multiple switches in the network. (Note: Network management with Smart Network Application requires a 350, 350X, or 550X series switch as part of the network.) |
SNMP | SNMP versions 1, 2c and 3 with SNMP trap support and SNMP version 3 User-based security model (USM) |
Remote monitoring (RMON) | The built-in RMON software supports 4 RMON groups (history, statistics, alarms and events) for better traffic management, monitoring and analysis. |
Dual stack IPv4 and IPv6 | Coexistence of both protocol stacks to facilitate migration |
Firmware Update | Update via web browser (HTTP/HTTPS) and TFTP and SCP. Updates can also be initiated via the console port. Dual images for flexible firmware updates |
Port mirroring | Traffic on a port or LAG can be mirrored to another port for analysis using a network analyzer or RMON probe. Up to 8 source ports can be mirrored to a single destination port. |
VLAN mirroring | Traffic on a port can be mirrored to another port for analysis using a network analyzer or RMON probe. Up to 8 source ports can be mirrored to a single destination port. A single session is supported. |
Flow-based redirection and mirroring | Redirect or mirror traffic to a destination port or mirror session based on flow. |
Remote Switch Port Analyzer (RSPAN) | Traffic can be mirrored through the Layer 2 domain to a remote port on another switch for easy troubleshooting. |
sFlow agent | The switch can export the sFlow sample to external collectors. sFlow provides visibility of network traffic to the flow level. |
DHCP (options 12, 66, 67, 82, 129, and 150) | The DHCP options allow tighter control from a central point (the DHCP server) for IP address, autoconfiguration (with configuration file download), DHCP relay, and hostname. |
Self-configuration with Secure Copy (SCP) | Enables secure, mass deployment with sensitive data protection. |
Text-based, editable configuration files | Configuration files can be edited with a text editor and downloaded to another switch, facilitating mass deployment |
Smartports | Simplified configuration of QoS and security features |
Auto Smartports | Applies intelligence provided through Smartport roles and applies it automatically to the port based on devices discovered using Cisco Discovery Protocol or LLDP-MED. |
Secure copy (SCP) | Securely transfer files to and from the switch. |
Text-based CLI command line | Scriptable CLI. Full CLI and menu CLI are supported. |
Cloud services | Support for Cisco Active Advisor |
Temporary operation of the port | Raise or lower the port based on a user-defined schedule (when the port is administratively raised) |
Other forms of management | Traceroute; Single IP Management; HTTP/HTTPS; SSH; RADIUS; Port Mirroring; TFTP Update; DHCP Client; Simple Network Time Protocol (SNTP); Xmodem Update; Cable Diagnostics; Ping; Syslog; Telnet Client; SSH Client; Automatic Time Setting from Management Station |
Energy efficiency | |
Energy detection | The switch automatically shuts down power to the RJ-45 port when no connection is detected. Power is resumed without packet loss when the switch detects a connection. |
Cable length detection | Adjusts signal strength according to cable length. Reduces power consumption for shorter cables. |
EEE (802.3az) compliant | 802.3az support on all 10Gb/s copper ports |
Disabling the port LEDs | The LEDs can be manually switched off to save energy. |
Discovery | |
Bonjour | The switch broadcasts using the Bonjour protocol. |
Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions | LLDP enables a switch to broadcast its identification, configuration, and capabilities to neighboring devices that store data in the MIB. LLDP-MED is an extension to LLDP that adds the extensions needed for IP phones. |
Cisco Discovery Protocol | The switch broadcasts itself using Cisco Discovery Protocol. It also learns the connected device and its properties using Cisco Discovery Protocol. |