
Cisco Catalyst 3560-CX and
2960-CX Series Compact
© 2020 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 20

Contents
Product Overview 3
Features and Benefits 4
Product Details 7
Licensing and Software Policy 9
Cisco DNA Licensing 9
Product Specifications 10
Ordering Information 17
Warranty Information 18
Cisco and Partner Services 19
Cisco Capital 20
Learn More 20
© 2020 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 2 of 20

The Cisco® Catalyst® Compact Switches easily expand your Ethernet and Multigigabit
Ethernet infrastructure outside the wiring closet to enable new workspaces, extend
wireless LANs, and connect PoE devices. These fanless, small form-factor switches are
ideal for space-constrained deployments where multiple cable runs would be
challenging. With speeds that reach 10Gbps, the Cisco Catalyst 3560CX Multigigabit
Ethernet Switches support current and next-generation wireless speeds and standards
(including 802.11ac Wave 2) on existing cabling infrastructure.
Figure 1.
Cisco Catalyst 3560-CX and 2960-CX Switch Family.
Product Overview
The Cisco Catalyst 3560-CX and 2960-CX Series Compact Switches help optimize network deployments.
These Gigabit Ethernet (GbE) and Multigigabit Ethernet (mGig) managed switches are ideal for high-speed
data connectivity, Wi-Fi backhaul, and Power over Ethernet (PoE+) connectivity in places where space is at
a premium. With a single copper or fiber cable from the wiring closet, Cisco Catalyst compact switches
enable IP connectivity for devices such as IP phones, wireless access points, surveillance cameras, PCs,
and video endpoints.
With their quiet, fanless design and compact footprint, these switches can come out of the data closet and
be placed closer to the users. This means shorter cable runs and greater flexibility as you grow your
network.
Cisco Catalyst 3560-CX and 2960-CX Series Compact Switch Highlights
●
8 or 12 Gigabit Ethernet ports with line rate forwarding performance
●
6 Gigabit Ethernet plus 2 Multigigabit Ethernet (100 Mbps/1/2.5/5/10 Gbps) ports with line rate
forwarding performance (selected model)
●
Gigabit and Multigigabit (100 Mbps/1/2.5/5/10 Gbps) copper, small form-factor pluggable (SFP) or
10G SFP+ uplinks
●
Power over Ethernet Plus (PoE+) support with up to 240W of PoE budget
●
Power over Ethernet (PoE) pass-through enables the compact switch to draw Cisco Universal PoE
●
(Cisco UPOE™) power from the wiring closet and pass it to end devices (selected model) with the
additional option to be powered by auxiliary AC-DC or DC-DC power adapter
© 2020 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 3 of 20

Small form factor; fanless
design; silent operation
The switch can be used in open workspaces and other areas that cannot tolerate equipment
noise and where multiple cable runs could be difficult, expensive, and intrusive.
Flexible mounting options
The switch can be mounted on the wall, under a desk, rack, DIN rail, or practically anywhere
they are needed.
Cisco Multigigabit
Ethernet
With the enormous growth of 802.11ac and new wireless applications, wireless devices are
driving the demand for more network bandwidth. This creates a need for a technology that
supports speeds higher than 1 Gbps on all cabling infrastructure. Cisco Multigigabit Ethernet
technology is a unique Cisco innovation that allows you to achieve bandwidth between speeds
of 100Mbps and 10 Gbps over traditional Cat 5e cabling or above. In addition, the Multigigabit
ports on the Cisco Catalyst Compact switch support PoE+, which is increasingly important for
next-generation workspaces and Internet of Things (IoT) ecosystems. The Multigigabit
Ethernet ports can also be used as uplinks to connect to traditional access switches such as
the Cisco Catalyst 3850/4500 switches.
Cisco Multigigabit technology offers significant benefits for a diverse range of speeds, cable
types, and PoE power. The benefits can be grouped into three different areas:
● Multiple speeds: Cisco Multigigabit technology supports autonegotiation of multiple speeds on switch
ports. The supported speeds are 100 Mbps, 1 Gbps, 2.5 Gbps, and 5 Gbps on Cat 5e cable and up to
10 Gbps over Cat 6a cabling.
● Cable type: The technology supports a wide range of cable types, including Cat 5e, Cat 6, and Cat 6a
or above.
● PoE power: The technology supports PoE and PoE+ for all the supported speeds and cable types.
Accommodates business growth and increased traffic, such as aggregate upstream gigabit
traffic loads from 802.11ac Wi-Fi access points.
Provides up to 240W of PoE+ budget (twice the power per switch than previous series).
Provides uninterrupted power to a powered-down device even when the switch is booting.
This eliminates the need for a backup power source.
●
Cisco Instant Access mode to enable single point of management and simplify operation
(selected models)
●
Advanced Layer 2 (LAN Base) and Layer 3 (IP Base) support with an option to upgrade to IP services
●
Fanless design and silent operation
●
Enhanced Limited Lifetime Warranty (E-LLW)
Features and Benefits
Like the larger Cisco Catalyst switches typically used in wiring closets, the Cisco Catalyst Compact
switches are
a managed option for consistency across your LAN switching network. Unlike unmanaged switches and
hubs, they provide advanced networking features for flexibility, security, and scale.
Table 1 lists many of the Cisco Catalyst 3560-CX and 2960-CX switch features and benefits.
Table 1. Compact Switch Features and Benefits Summary
© 2020 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 20

PoE pass-through gives the ability to power PoE end devices through drawing Cisco UPOE
from the wiring closet. The Cisco Catalyst WS-C3560CX-8PT-S has eight downlink ports with
two Cisco UPOE input ports that allow it to be powered by another switch. These switches do
not need a power supply and receive power over the uplink from an upstream PoE or Cisco
UPOE device, providing deployment flexibility and availability. These switches are ideal for
wiring-constrained and space-constrained applications.
Management and Operations
SDA Extended Node provides Cisco DNA Center Automation and Assurance for C3560CX
switches. It also extends Fabric Benefits (e.g. stretch subnet) to end points connected to the
switches, allowing consistent segmentation and policy-based access.
SDA Extended Node requires Cisco DNA-A license on the C3560CX switches, and a FabricEdge Capable switch at the upstream.
Cisco Network Plug ‘n
Play (PnP)
Network Plug-n-Play (PnP) is a secure, scalable solution that accelerates network device
deployments by automating the installation and configuration of Cisco IOS software. The
Cisco Catalyst 3560-CX and 2960-CX switches are ‘Network-PnP Ready’ and can be used as
part of the APIC-EM solution for automated switch deployments. This feature helps improve
productivity, cut costs, reduce downtime, and enhance the user experience.
Cisco Catalyst Smart
Operations
This comprehensive set of Cisco Catalyst technologies and Cisco IOS Software features
simplify LAN deployment, configuration, and troubleshooting.
● Cisco Smart Install enables the configuration of the Cisco IOS Software image and switch without
user intervention.
● Cisco Auto Smartports provides automatic configuration as end devices connect to the switch port,
allowing autodetection and plug-and-play of the device onto the network. Interface templates
containing configurations or policies that can be applied to ports are also supported.
● Cisco Smart Troubleshooting is an extensive array of debug diagnostic commands and system health
checks, including Generic Online Diagnostics (GOLD) and Onboard Failure Logging (OBFL).
● Embedded Event Manager (EEM), supported on the Cisco Catalyst 3560-CX, provides real-time
network event detection and onboard automation. You can adapt the behavior of your network devices
to align with business needs.
Cloud and System
Management
● Cisco Prime
®
Infrastructure provides comprehensive network lifecycle management with an extensive
library of features that automate initial and day-to-day management. Cisco Prime integrates hardware
and software platform expertise and operational experience into a powerful set of workflow-driven
configuration, monitoring, troubleshooting, reporting, and administrative tools.
● Cisco Network Assistant is a PC-based, centralized network management and configuration
application for small and medium-sized business (SMB) with up to 250 users. An intuitive GUI lets you
easily apply common services across Cisco switches, routers, and access points.
● Cisco Active Advisor is a cloud-based service that provides essential lifecycle information about your
network inventory. Available by itself or as a component of other Cisco network management
applications, it helps you reduce your network’s overall risk by keeping you up-to-date on the status of
your products.
© 2020 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 5 of 20

● Link Aggregation Control Protocol (LACP) for creating Ethernet channeling with devices that conform
to IEEE 802.3ad. Similar to Cisco EtherChannel technology and PAgP.
● Dynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot
server.
● Multicast VLAN Registration (MVR) continuously sends multicast streams in a multicast VLAN. Isolates
streams from subscriber VLANs for bandwidth and security reasons.
● Voice VLAN keeps voice traffic on a separate VLAN for easier administration and troubleshooting.
● Cisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration
across all switches.
● Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2
switch network from any other switch in the same network.
● For enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring
(RMON) software agent supports four RMON groups (history, statistics, alarms, and events).
A suite of components that secures networks, data, and resources with policy-based access
control, identity, and role-aware networking with the following elements:
● Cisco TrustSec SXP support to simplify security and policy enforcement throughout the network. For
more information about Cisco TrustSec security solutions, visit cisco.com/go/TrustSec.
● Hardware on the Cisco Catalyst 3560-CX for IEEE 802.1AE MACsec for Layer 2, line-rate Ethernet
data confidentiality and integrity on host-facing ports. Protects against man-in-the-middle attacks
(snooping, tampering, and replay).
● Flexible authentication that supports multiple authentication mechanisms including 802.1X, MAC
Authentication Bypass, and web authentication using a single, consistent configuration.
● Monitor mode that creates a user-friendly environment for 802.1X operations.
● RADIUS change of authorization and downloadable ACLs for comprehensive policy management.
● 802.1X supplicant with Network Edge Access Transport (NEAT) for extended secure access;
compact switches in the conference rooms have the same level of security as switches inside a locked
wiring closet.
Advanced, integrated security features that provide threat defense capabilities for mitigating
man-in-the-middle attacks and protecting your critical network infrastructure.
● Superior Layer 2 capabilities for mitigating MAC, IP, and ARP spoofing risks. Also protects port
security, guards against DHCP snooping, and supports Dynamic ARP Inspection and IP Source Guard.
● Ipv6 first-hop security with Binding Integrity Guard, RA Guard, and DHCP Guard.
● Private VLAN provides security and isolation between switch ports.
● Multidomain Authentication allows an IP phone and a PC to authenticate on the same switch port
while placing them on appropriate voice and data VLAN.
● Secure Shell (SSH), Kerberos, and Simple Network Management Protocol Version 3 (SNMPv3) that
encrypt administrator traffic during Telnet and SNMP sessions to keep access credentials secure.
● Port-based Access Control List (ACL) to let the switch automatically allow or block packets based on
policies for source and destination IP addresses. Rules can be set up differently on a port-by-port
basis.
● Secure Boot to make sure that only signed and authorized images can load on the switch.
● Cisco AutoSecure to simplify security configurations with a single-line CLI.
Power Management and Energy Efficiency
Innovative technology that puts the switch in an ultra-low power mode during periods of
nonoperation such as nights and weekends. The switch can be configured to be in the
hibernate mode using the Cisco Energy Management Suite.
IEEE 802.3az or EnergyEfficient Ethernet (EEE)
Ports dynamically sense idle periods between traffic bursts and quickly switch the interfaces
into a low-power idle mode, reducing power consumption.
© 2020 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 20