The Cisco SG350X-24PD switch is equipped with 20 RJ45 ports with a throughput of 1000Mbps and 4 RJ45 ports with a throughput of 1/2.5Gbps. The switch also has 4 Uplink ports with a throughput of 10Gb/s (2 Combo 10G RJ45/SFP+ ports and 2 SFP+ ports). Cisco devices have several management capabilities, including graphic user interface available through a web browser and text CLI. console.
The switch has a throughput of 104.14 million packets per second (64-byte packets) and a switching capacity of 140 Gb/s. This model has 24 ports with PoE support, 4 of the ports can power devices up to 60W. The total PoE power budget is 375W. The Cisco switch has a limited manufacturer's lifetime warranty.
Cisco® 350X Managable Switches is a line of managed Ethernet switches that provide the rich capabilities needed for more demanding network environments at a very affordable price. These switches are easy to deploy and manage without large IT staff.
Unlike switches that can be stacked, but have components that are administered and diagnosed separately, the Cisco 350X Series provides true stacking capabilities, allowing you to configure, manage and troubleshoot multiple switches as if they were a single device, making network expansion much easier. The 350X Series can combine up to 4 switches and up to 208 ports managed as one system in a stack.
The Cisco 350X series of switches offers an advanced set of features required by growing companies and high-bandwidth applications and technologies. These switches can improve the reliability of key features, protect sensitive business information, and optimize network bandwidth for more efficient data transfer over the network.
- High performance 10 Gigabit Ethernet switches - The Cisco 350X series switches allow you to use up to 10Gbit/s, over Ethernet cable networks, providing sufficient performance for growing networks of small and medium enterprises.
- Multigabit Performance - Traditional Ethernet infrastructures can handle speeds up to 1 Gigabit per second (Gbps), the 350X Series switches allow you to cross this barrier.
- Easy configuration and management - The Cisco 350X Series Switches are designed to be easy to use and manage.
- Power over Ethernet Plus (PoE+) and 60W PoE - PoE technology simplifies the deployment of IP phones and wireless access points by enabling connecting and powering network endpoints with a single Ethernet cable, without having to install separate power supplies. The 350X series switches support 15W Power over Ethernet (PoE) and 30W Power over Ethernet Plus (PoE+). The switches also support PoE 60W on selected ports to power compact switches, wireless access points, or other high power devices.
- High reliability and robustness - switches with packing capability can play an important role in eliminating downtime and improving network resistance. For example, if a Cisco 350X Series switch connected in a stack fails, another switch immediately takes control of the network, keeping it running.
- True Stacking - The Cisco 350X Series provides physical stacking of switches, allowing you to configure, manage, and troubleshoot multiple physical switches on a single device, with a single IP address, for a maximum of 4 devices and up to 208 ports.
- High Security - The Cisco 350X series switches provide advanced security features that are essential to protect business data and protect against unauthorized access to networks.
- Env6Service - Cisco 350X series switches have successfully passed rigorous IPv6 tests and received USGv6 and IPv6 Gold certificates.
- Advanced Layer 3 Traffic Management - Switches support Static Layer 3 LAN routing, enabling workgroup division and VLAN communication without compromising application performance. With these features, you can increase network performance by relieving the router of internal traffic management tasks and allowing it to manage external traffic and network security in particular.
- Energy efficiency - The switches are designed to save energy by optimizing energy consumption, which helps protect the environment and reduce energy costs.
- Networkwide Automatic Voice Deployment - Using a combination of Cisco Discovery Protocol, LLDP-MED, Auto Smartports and Voice Services Discovery Protocol (or VSDP, Cisco's unique protocol), customers can dynamically deploy an end-to-end voice network.
Features / filters | |
LAN standard | 10 Gigabit Ethernet, Gigabit Ethernet 10/100/1000 Mb/s, |
Number of LAN ports | 20x [1/10G (RJ45)] , 4x [1/2,5G (RJ45)] , 2x [10G Combo (RJ45/SFP+)] , 2x [10G (SFP+)] , |
Number of PoE ports | 24x [802.3af/at (1G)] |
10G support | Yes |
AC input frequency | 47/63 |
AC input voltage | 100 - 240 |
Access Control List (ACL) | Yes |
Access Control List (ACL) rules | 2000 |
Active link detection | Yes |
ARP inspection | Yes |
Authentication | Guest VLAN, Port-based authentication, Web-based authentication |
Authentication type | IEEE 802.1x,RADIUS |
Basic switching RJ-45 Ethernet ports quantity | 24 |
Basic switching RJ-45 Ethernet ports type | Gigabit Ethernet (10/100/1000) |
BPDU filtering/protection | Yes |
Broadcast storm control | Yes |
Built-in processor | Yes |
Cable length detection | Yes |
Cables included | AC, Serial |
Certification | UL, CSA, CE, FCC |
Combo SFP ports quantity | 2 |
Console port | RJ-45 |
Copper ethernet cabling technology | 10BASE-T,100BASE-T,1000BASE-T |
Depth | 257 |
DHCP features | DHCP server,DHCP snooping,DHCP relay,DHCP client |
DoS attack prevention | Yes |
Fiber optic connector | SFP+ |
Firmware upgradeable | Yes |
Flash memory | 256 |
Flow control support | Yes |
Form factor | 1U |
Forwarding rate | 104.16 |
GARP VLAN Registration Protocol (GVRP) | Yes |
Gigabit Ethernet (copper) ports quantity | 20 |
Harmonized System (HS) code | 85176990 |
Head-of-line (HOL) blocking | Yes |
Heat dissipation | 1626.2 |
Height | 44 |
IGMP snooping | Yes |
Internal memory | 512 |
Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) | Yes |
IP routing | Yes |
IP-MAC-Port binding | Yes |
IPv4 & IPv6 features | IPv6 ping,IPv6 Telnet,Dual stack IPv4/IPv6 |
Jumbo frames | 9000 |
Jumbo frames support | Yes |
LED indicators | Yes |
Link aggregation | Yes |
Loop protection | Yes |
MAC address table | 16000 |
Management | CLI - Command Line Interface, By cloud – cloud management, By web browser, |
Mean time between failures (MTBF) | 426741 |
Multicast support | Yes |
Networking standards | IEEE 802.1D,IEEE 802.1Q,IEEE 802.1ab,IEEE 802.1p,IEEE 802.1s,IEEE 802.1w,IEEE 802.1x,IEEE 802.3,IEEE 802.3ab,IEEE 802.3ad,IEEE 802.3ae,IEEE 802.3af,IEEE 802.3an,IEEE 802.3at,IEEE 802.3az,IEEE 802.3u,IEEE 802.3x,IEEE 802.3z |
Noise level | 45.1 |
Number of fans | 3 |
Number of IP interfaces | 256 |
Number of multicast groups filtered | 4000 |
Number of power supply units | 1 |
Number of queues | 8 |
Number of static routes | 8000 |
Number of VLANs | 4094 |
Operating relative humidity (H-H) | 10 - 90 |
Operating temperature (T-T) | 0 - 50 |
Packet buffer memory | 3 |
Physical stacking (units) | 4 |
Port mirroring | Yes |
Power (W) | 375 |
Power consumption (max) | 476.6 |
Power over Ethernet (PoE) | Yes |
Power over Ethernet (PoE) power per port | 60 |
Power over Ethernet plus (PoE+) ports quantity | 24 |
Power supply included | Yes |
Processor frequency | 800 |
Product colour | Black |
Quality of Service (QoS) support | Yes |
Queue scheduling algorithms | SP, Weighted Round Robin (WRR) |
Quick start guide | Yes |
Rack mount kit | Yes |
Rack mounting | Yes |
Rate limiting | Yes |
Reset button | Yes |
Root protection | Yes |
Security algorithms | 802.1x RADIUS,HTTPS,MD5,SNMP,SSH,SSL/TLS |
sFlow | Yes |
SFP+ module slots quantity | 2 |
Spanning tree protocol | Yes |
SSH/SSL support | Yes |
Stackable | Yes |
Stacking possible | Yes |
Static route | Yes |
Storage relative humidity (H-H) | 10 - 90 |
Storage temperature (T-T) | -20 - 70 |
Switch layer | L2/L3 |
Efficiency - switching capacity and data transfer rate | |
Switching capacity (Gbps) | 140 |
Capacity in Mpps (64-byte packs) | 104.16 |
PoE (Power over Ethernet) | |
The switches support 802.3at PoE+, 802.3af PoE and Cisco pre-standard (legacy) PoE on any RJ45 network port. PoE 60W is also supported on selected RJ-45 network ports. 60W maximum power is delivered to any of the PoE ports with 60W and 30W maximum power is delivered to any of the other RJ45 network ports until the PoE budget for the switch is reached. The total available PoE power for the switch is as follows: | |
Power dedicated to PoE | 375W |
Number of ports supporting PoE | 24 (4 ports support PoE 60W) |
Energy consumption | |
Green Power | EEE, Energy Detect, Short Reach |
Energy consumption of the system | 49.3W |
Energy consumption (with PoE) | 424W |
Heat distribution (BTU/hr) | 1625.3 |
Ports | |
Total number of ports | 20x Gigabit Ethernet + 4x 10 Gigabit Ethernet + 4 x 1/2.5Gb/s RJ45 |
LAN ports | 20x Gigabit Ethernet, 4x 1/2.5 Gigabit Ethernet, |
Uplink ports | 2x 10GE RJ45/SFP+ Combo + 2x SFP+ |
Package buffer | 24 MB |
Product specifications | |
Jumbo frames | Frame sizes up to 9K bytes. The default MTU is 2K. |
MAC board | Up to 16K (16384) MAC addresses |
Console port | Cisco Standard console port - RJ45 |
CAB management port | Gigabit dedicated port for out-of-band management on SG350XG models. |
USB connector | The USB Type A socket on the front panel of the switch makes it easy to manage files and images. |
Buttons | Reset button |
LEDs | System, master, stack ID, link/speed for each port |
Flash Memory | 256 MB |
CPU | 800 MHz (dual-core) ARM |
CPU memory | 512 MB |
Environmental features | |
Dimensions (W x H x D) | 440 x 44 x 257 mm |
Weight | 3.99 kg |
Power supply | 100 - 240V 47 - 63 Hz, internal |
Certification | UL (UL 60950), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A |
Operating temperature | 0° to 50°C |
Storage temperature | -20° to 70°C |
Moisture | 10% to 90%, relative, non-condensing. |
Storage humidity | 10% to 90%, relative, non-condensing. |
Acoustic noise level and average time between failures (MTBF) | |
Fan (quantity) | 3 |
Acoustic noise | 45.1dB at 45°C |
MTBF at 50°C (hours) | 426741 |
Guarantee | |
Guarantee | Limited Lifetime Warranty |
Package contents | - Cisco Small Business 350X Series switch - Power Cable - Mounting kit - Console cable - Brief instruction manual |
Switching layer 2 | |
Spanning Tree Protocol | 802.1d Spanning Tree support Fast convergence using 802.1w (Rapid Spanning Tree [RSTP]), enabled by default. 8 instances are supported. Multiple instances of Spanning Tree using 802.1s (MSTP) |
Port grouping and aggregated links | Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) ● up to 8 groups up to 8 ports per group with 16 candidate ports for each aggregated dynamic link 802.3ad LAG |
VLAN | Supports up to 4096 VLANs simultaneously VLANs based on ports and 802.1Q tags. VLANs based on MAC VLAN management Private VLAN Edge (PVE), also known as protected ports, with multiple uplinks VLAN guest Uncertified VLAN Dynamic VLAN assignment via RADIUS server with 802.1x client authentication. CPE VLAN |
Voice VLAN | Voice traffic is automatically assigned to a voice specific VLAN and processed using the appropriate levels of voice QoS Auto |
Multicast TV VLAN | Multicast TV VLANs enable a single VLAN to be shared in a network, while subscribers remain in separate VLANs (also known as MVRs). |
Q-in-Q VLAN | VLANs transparently cut through the network of service providers while isolating traffic among customers. |
Generic VLAN Registration Protocol (GVRP)/Generic Attribute Registration Protocol (GARP) | Protocols for automatic expansion and configuration of VLANs in a bridged domain. |
Unidirectional Link Detection (UDLD) | The UDLD monitors the physical connection to detect one-way connections caused by incorrect wiring or cable/port errors to prevent redirection loops and blocked traffic in networks. |
DHCP Relay in Layer 2 | Forwarding DHCP traffic to a DHCP server in different VLANs; it works with DHCP option 82. |
Internet Group Management Protocol (IGMP versions 1, 2, 3) snooping | IGMP limits bandwidth-intensive multicast traffic to requesters only; it supports up to 1K multicast groups (source-specific multicasting is also supported). |
IGMP querier | Querier IGMP is used to operate the Layer 2 snooping switches multicast domain in the absence of a multicast router. |
HOL (Head-Of-Line) blocking | Prevention of HOL blockades |
Layer 3 functions | |
Routing IPv4 | IPv4 packet forwarding at link speed Up to 8K static routes and up to 256 IP interfaces |
Static IPv6 routing at link speed | Up to 4K static routes and up to 200 IPv6 interfaces |
Layer 3 interface | Configure the Layer 3 interface on a physical port, LGD, VLAN, or loopback interface. |
Classless Domain Routing (CIDR) | CIDR support |
DHCP server | The switch works as an IPv4 DHCP server supporting IP addresses for multiple DHCP pools/scopes. Support for DHCP options |
DHCP relay on layer 3 | Transmission of DHCP traffic between IP domains |
User Datagram Protocol (UDP) relay | Forwarding transmission information between layer 3 domains to detect applications or forward bootP/DHCP packets. |
Stacking - stacking switches | |
Hardware packaging | Up to 4 switches in a stack. Up to 208 ports managed as one system with hardware emergency switching. |
Protection during device failure | Fast emergency switching in the stack ensures minimal loss of network traffic. Support for aggregation of links between multiple units in a stack. |
Configure/manage "Plug and Play". | Master/backup for flexible stack control Automatic numbering Hot Swap stack replacement Ring and chain stacking options, automatic port stacking speed, flexible port options |
High-speed connections between stacks | Economical, fast 10G fiber optic and copper interface. LAG support for interconnection for even more bandwidth. |
Safeguards | |
Secure Shell Protocol (SSH) | SSH is a safe replacement for Telnet traffic. SCP also uses SSH. SSH v1 and v2 are supported. |
Secure Sockets Layer (SSL) | Support for SSL protocol: Encrypts all HTTPS traffic, allowing highly secure access to the browser-based graphical management interface in the switch. |
IEEE 802.1X (authenticator roles) | 802.1X: Authentication and reporting of RADIUS Checksum MD5 VLAN for guests Uncertified VLAN Single/multiple host mode and single/multiple sessions Supports temporary handling 802.1X Dynamic VLAN assignment |
Authorisation via Internet | Network-based authentication provides control of network access via a web browser to any device or operating system. |
STP Bridge Protocol Data Unit (BPDU) Guard | A safety mechanism to protect the network against incorrect configurations. The port with BPDU Guard enabled is disabled if a BPDU message is received on this port. This prevents accidental topology loops. |
STP Root Guard | This prevents edge devices that are not under the control of the network administrator from becoming Spanning Tree Protocol root nodes. |
DHCP snooping | Filters DHCP messages with unregistered IP addresses and/or from unexpected or untrusted interfaces. This prevents malicious devices from acting as DHCP servers. |
IP Source Guard (IPSG) | When the IP Source Guard feature is enabled on a port, the switch filters the IP packets received from the port if the source IP addresses of the packets have not been statically configured or dynamically learned from DHCP snooping. This prevents IP address spoofing. |
Dynamic ARP Control (DAI) | The switch rejects ARP packets from the port if there are no static or dynamic IP/MAC bindings or if there is a discrepancy between the source or destination addresses in the ARP packet. This prevents man-in-the-middle attacks. |
IP/MAC/Port Binding (IPMB) | Previous features (DHCP Snooping, IP Source Guard and Dynamic ARP Inspection) work together to prevent DOS attacks on the network, thereby increasing network availability. |
Secure Core Technology (SCT) | It makes sure that the switch will receive and manage processes and protocol traffic regardless of the amount of traffic received. |
Secure Sensitive Data (SSD) | A mechanism for secure management of sensitive data (such as passwords, keys, etc.) on the switch, filling in this data on other devices and protecting against auto setup. Access to view confidential data in plain or encrypted text is provided according to user-configured access level and user access method. |
Private VLAN | Private VLAN provides security and isolation between switching ports, helping to ensure that users cannot spy on other users' traffic; it supports multiple uplink links. |
Port security | Possibility to block source MAC addresses to ports and limit the number of known MAC addresses. |
RADIUS/TACACS+ | Supports RADIUS and TACACS authentication. The switch works as a client. |
RADIUS accounting | RADIUS reporting functions allow sending data at the beginning and the end of the service, indicating the amount of resources (such as time, packets, bytes, etc.) used during the session. |
Storm protection | Broadcasting, multicast and unknown unicast |
Prevention of DoS | Prevention of Denial-Of-Service (DOS) attacks |
Multiple user rights levels in the CLI | Allocation levels 1, 7 and 15 |
Quality of service | |
ACL Access Control Lists | Support for a maximum of 2000 rules Packet rejection or bandwidth restriction based on source and destination MAC, VLAN ID or IP address, protocol, port, DSCP/IP priority, source and destination ports TCP/UDP, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, IGMP packets, TCP flag, time-supported ACL. |
Priority levels | 8 queues |
Schedules | Strict priority and Weighted Round-Robin (WRR) |
Class of service - Class of service | Port based; 802.1p VLAN based on VLAN priority; based on IPv4/v6 IP precedence/Type of Service (ToS)/DSCP; Differentiated Services (DiffServ); ACLs classification and remarking, trusted QoS Queue assignment based on Differentiated Services Code Point (DSCP) and service class (802.1p/CoS) |
Capacity limitations - Rate limiting | Ingress policer; outbound traffic control and speed control; on VLAN, port and based on data flow, 2R3C policies |
Avoiding congestion | A TCP congestion avoidance algorithm is required to minimize and avoid global synchronization of TCP losses. |
IPv6 | |
IPv6 | IPv6 host mode IPv6 over Ethernet Dual IPv6/IPv4 stack Detection of neighbor and IPv6 (ND) router Auto-configuration of the IPv6 address Path Maximum Transmission Unit (MTU) discovery Double address detection (DAD) ICMP version 6 IPv6 over IPv4 with support for Intrasite Automatic Tunnel Addressing Protocol (ISATAP). Gold certification of USGv6 and IPv6 logos |
IPv6 QoS | Prioritization of IPv6 packets |
IPv6 ACL | Speed limit or IPv6 rejection |
IPv6 First Hop Security | RA guard ND inspection DHCPv6 guard Table of adjacent bonds (snooping and static entries) Checking the integrity of adjacent bonds |
Multicast listener discovery (MLD v1/2) snooping | Delivering IPv6 multicast packets only to the right recipients. |
Management | |
IPv6 applications | Web/SSL, Telnet server/SSH, ping, traceroute, Simple Network Time Protocol (SNTP), Trivial File Transfer Protocol (TFTP), SNMP, RADIUS, syslog, DNS client, Telnet Client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, TACACS |
Graphical user interface | Built-in switch configuration tool for easy configuration of devices in the browser (HTTP/HTTPS). Supports simple and advanced modes of operation, configuration, wizards, configurable dashboard, system maintenance, monitoring, online help and universal search engine. |
Smart Network Application (SNA) | Smart Network Application (SNA) is an innovative network level monitoring and management tool built into the Cisco 100 to 500 series switches. It can detect network topology, display link status, monitor events, apply configurations, and update software images with multiple switches on the network. (Note: Network management with Smart Network Application requires the use of the 350, 350X or 550X series switches as part of the network.) |
SNMP | SNMP versions 1, 2c and 3 with SNMP trap support and SNMP version 3 User based security model (USM) |
Remote monitoring (RMON) | The embedded RMON software supports 4 RMON groups (history, statistics, alarms and events) for better traffic management, monitoring and analysis. |
Dual IPv4 and IPv6 stack | Coexistence of both piles of protocols to facilitate migration |
Firmware update | Updated via web browser (HTTP/HTTPS) and TFTP and SCP. The update can also be initiated via the console port. Dual images for flexible firmware updates |
Port mirroring | Traffic on a port or in a LAG can be reflected in another port for analysis using a network analyser or RMON probe. Up to 8 source ports can be mirrored to one destination port. |
VLAN mirroring | Traffic at a port can be reflected in another port for analysis by means of a network analyser or RMON probe. Up to 8 source ports can be mirrored to one destination port. A single session is supported. |
Flow and mirroring based redirection | Redirecting or mirroring traffic to a destination port or a mirror session based on flow. |
Remote Switch Port Analyzer (RSPAN) | Traffic can be reflected by the Layer 2 domain to a remote port on another switch for easy troubleshooting. |
sFlow agent | The switch can export the sFlow sample to external collectors. The sFlow provides visibility of network traffic up to the flow level. |
DHCP (options 12, 66, 67, 82, 129, and 150) | DHCP options allow tighter control from a central point (DHCP server) to obtain the IP address, auto-configuration (with download of the configuration file), DHCP relay and host name. |
Auto-configuration with secure copying (SCP) | Enables secure, mass deployment with sensitive data protection. |
Text-based, editable configuration files | Configuration files can be edited with a text editor and downloaded to another switch to facilitate mass deployment |
Smartports | Simplified configuration of QoS and safety functions |
Auto Smartports | It uses intelligent solutions delivered through Smartport roles and applies them automatically to the port based on devices detected by Cisco Discovery Protocol or LLDP-MED. |
Secure copy (SCP) | Securely transfer files to and from the switch. |
CLI command line text | Scriptable CLI. The full CLI and CLI menu are supported. |
Cloud services | Support for Cisco Active Advisor |
Temporary use of the port | Lifting or deactivating the port based on a user-defined schedule (when the port is administratively lifted) |
Energy saving | |
Other forms of management | Traceroute; single IP management; HTTP/HTTPS; SSH; RADIUS; port mirroring; TFTP update; DHCP client; Simple Network Time Protocol (SNTP); Xmodem update; cable diagnostics; Ping; syslog; Telnet client; SSH client; automatic time settings from Management Station |
Energy detection | The switch automatically turns off the power to the RJ-45 port when a connection is detected. Power is restored without packet loss when the switch detects a connection. |
Cable length detection | Adjusts the signal strength according to the cable length. Reduces energy consumption for shorter cables. |
Compliance with EEE (802.3az) | Support for 802.3az on all 10Gb/s copper ports |
Switching off port LEDs | The LEDs can be switched off manually to save energy. |
Discovery | |
Bonjour | The switch is broadcast via Bonjour protocol. |
Link Layer Discovery Protocol (LLDP) (802.1ab) with LLDP-MED extensions | The LLDP allows the switch to broadcast its identification, configuration and capabilities to adjacent devices that store data in MIB. LLDP-MED is an LLDP extension that adds extensions needed for IP phones. |
Cisco Discovery Protocol | The switch is broadcast via the Cisco Discovery Protocol. The connected device and its properties are also learned using Cisco Discovery Protocol. |