Cisco Catalyst 2960-SF Series User manual

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 17
Data Sheet
Cisco Catalyst 2960-SF Series Switches
The Cisco®Catalyst®2960-SF Series of Fast Ethernet switches (Figure 1) provides
enterprise-class Layer 2 switching for branch and midsized campus access
applications. They enable reliable and secure business operations and lower total
cost of ownership through a range of innovative features including FlexStack, Power
over Ethernet Plus (PoE+), and Cisco Catalyst SmartOperations.
Cisco Catalyst 2960-SF LAN Base models feature:
Ɣ2 or 4 Small Form-Factor Pluggable (SFP) uplinks for Gigabit performance and business continuity
Ɣ24 or 48 Fast Ethernet ports
ƔCisco FlexStack for simplified management with 20 Gbps of stack throughput, when deployed with the
FlexStack stacking module
ƔIEEE 802.3at-compliant PoE+ for up to 30W of power per port
ƔModels offering 370W or 740W of combined POE/POE+ budget
ƔEnhanced troubleshooting for problem solving, including link connectivity and cable diagnostics
ƔUSB storage for file transfers, backups, and simplified operations
ƔSupport for Cisco Catalyst SmartOperations features including Smart Install and Auto Smartports
ƔExtended limited lifetime hardware warranty, including next-business-day replacement with 90-day service
and support
Cisco Catalyst 2960-SF LAN Lite models feature:
Ɣ2 SFP uplinks for Gigabit performance and business continuity
Ɣ24 or 48 Fast Ethernet ports
ƔEnhanced troubleshooting for problem solving, including link connectivity and cable diagnostics
ƔUSB storage for file transfers, backups, and simplified operations
ƔSupport for Cisco Catalyst SmartOperations features, including Smart Install and Auto Smartports
ƔExtended limited lifetime hardware warranty

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 2 of 17
Figure 1. Cisco Catalyst 2960-SF Series Switches
Switch Configurations
Table 1. Cisco Catalyst 2960-SF Series Switches with LAN Base Software
Switch Model Description Uplinks Available PoE Power
Cisco Catalyst 2960S-F48FPS-L 48 Ethernet 10/100 ports with PoE+ 4 SFP 740W
Cisco Catalyst 2960S-F48LPS-L 48 Ethernet 10/100 ports with PoE+ 4 SFP 370W
Cisco Catalyst 2960S-F24PS-L 24 Ethernet 10/100 ports with PoE+ 2 SFP 370W
Cisco Catalyst 2960S-F48TS-L 48 Ethernet 10/100 ports 4 SFP -
Cisco Catalyst 2960S-F24TS-L 24 Ethernet 10/100 ports 2 SFP -
Cisco Catalyst 2960S-F-STACK Hot-swappable FlexStack stacking
module for 2960-SF Series switches - -
LAN Base models support the optional Cisco FlexStack stacking module.
Table 2. Cisco Catalyst 2960-SF Series Switches with LAN Lite Software
Switch Model Description Uplinks Available PoE Power
Cisco Catalyst 2960S-F48TS-S 48 Ethernet 10/100 ports 2 SFP -
Cisco Catalyst 2960S-F24TS-S 24 Ethernet 10/100 ports 2 SFP -
Cisco FlexStack Stacking
Cisco FlexStack and IOS software provide true stacking, with all switches in a stack acting as a single switch unit.
FlexStack provides a unified data plane, unified configuration, and single IP address for switch management. The
advantages of true stacking include lower total cost of ownership through simplified management, and higher
availability. FlexStack supports cross-stack features including EtherChannel, SPAN, and FlexLink.
The FlexStack stack module is hot-swappable and can be added to any Cisco Catalyst 2960-SF switch with LAN
Base software, even while the switch is operating. Switches connected to a stack will upgrade to the correct Cisco
IOS®Software version and transparently become a stack member. The FlexStack module also enables mixed
stacking: 2960-SF series switches and 2960-S series switches can be combined in a single stack.

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 3 of 17
Power over Ethernet Plus - PoE+
Cisco Catalyst 2960-SF switches support both IEEE 802.3af Power over Ethernet and IEEE 802.3at PoE+, which
provides up to 30W of power per port. The Cisco Catalyst 2960-SF Series Switches lower total cost of ownership
for deployments that incorporate Cisco IP phones, Cisco Aironet®wireless access points, or other standards-
compliant PoE/PoE+ end devices. PoE removes the need to supply wall power to PoE-enabled devices and
eliminates the cost of adding electrical cabling and circuits that would otherwise be necessary in IP phone and
WLAN deployments. Table 3 shows the total PoE/PoE+ power available in each 2960-SF model.
Table 3. Switch PoE and PoE+ Power Capacity
Switch Model PoE+ (IEEE 802.3at) Budget*PoE (IEEE 802.3af) Budget* Total PoE/PoE+ Budget*
Cisco Catalyst 2960S-48FPS-L 24 ports up to 30W 48 ports up to 15.4W 740W
Cisco Catalyst 2960S-48LPS-L 12 ports up to 30W 24 ports up to 15.4W or
48 ports up to 7.7W 370W
Cisco Catalyst 2960S-F24PS-L 12 ports up to 30W 24 ports up to 15.4W 370W
*Intelligent power management allows flexible power allocation across all ports.
Cisco EnergyWise
Cisco EnergyWise is an innovative architecture, added to fixed configuration switches, promoting companywide
sustainability by reducing energy consumption across an entire corporate infrastructure and affecting more than
50 percent of global greenhouse gas emissions created by worldwide building infrastructure, a much greater effect
than the 2 percent generated by the IT industry. Cisco EnergyWise enables companies to measure the power
consumption of network infrastructure and network-attached devices and manage power consumption with
specific policies, reducing power consumption to realize increased cost savings, potentially affecting any powered
device.
EnergyWise encompasses a highly intelligent network-based approach to communicate messages that measure
and control energy between network devices and endpoints. The network discovers Cisco EnergyWise-
manageable devices, monitors their power consumption, and takes action based on business rules to reduce
power consumption. EnergyWise uses a unique domain-naming system to query and summarize information from
large sets of devices, making it simpler than traditional network management capabilities. Cisco EnergyWise’s
management interfaces allow facilities and network management applications to communicate with endpoints and
each other using the network as a unifying fabric. The management interface uses standard SNMP or TCP to
integrate Cisco and third-party management systems.
Cisco Catalyst SmartOperations
Cisco Catalyst SmartOperations is a comprehensive set of capabilities that simplify LAN planning, deployment,
monitoring, and troubleshooting.
ƔCisco Smart Install is a transparent plug-and-play technology to configure the Cisco IOS Software image
and switch configuration without user intervention. Smart Install utilizes dynamic IP address allocation and
the assistance of other switches to facilitate installation providing transparent network plug and play.
ƔCisco Auto Smartports enables automatic configuration of switch ports as devices connect to the switch,
with settings optimized for the device type.
ƔCisco Smart Troubleshooting is an extensive array of diagnostic commands and system health checks
within the switch, including Smart Call Home.

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 17
For more information about Cisco Catalyst SmartOperations, visit http://www.cisco.com/go/smartoperations.
Ease-of-Use Features
ƔAutomatic QoS (AutoQoS) simplifies QoS configuration in voice over IP (VoIP) networks by issuing
interface and global switch commands to detect Cisco IP phones, classify traffic, and help enable egress
queue configuration.
ƔStacking Master configuration management and Cisco FlexStack stacking helps ensure that all switches
are automatically upgraded when the master switch receives a new software version. Automatic software
version checking and updating help ensure that all stack members have the same software version.
ƔDynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot
server eases switch deployment.
ƔAuto-negotiation on all ports automatically selects half- or full-duplex transmission mode to optimize
bandwidth.
ƔDynamic Trunking Protocol (DTP) facilitates dynamic trunk configuration across all switch ports.
ƔPort Aggregation Protocol (PAgP) automates the creation of Cisco Fast EtherChannel®groups or Gigabit
EtherChannel groups to link to another switch, router, or server.
ƔLink Aggregation Control Protocol (LACP) allows the creation of Ethernet channeling with devices that
conform to IEEE 802.3ad. This feature is similar to Cisco EtherChannel technology and PAgP.
ƔAutomatic media-dependent interface crossover (MDIX) automatically adjusts transmit and receive
pairs if an incorrect cable type (crossover or straight-through) is installed.
ƔUnidirectional Link Detection Protocol (UDLD) and Aggressive UDLD allow unidirectional links caused
by incorrect fiber-optic wiring or port faults to be detected and disabled on fiber-optic interfaces.
ƔSwitching Database Manager (SDM) templates for access, routing, and VLAN deployment allow the
administrator to easily maximize memory allocation to the desired features based on deployment-specific
requirements.
ƔLocal Proxy Address Resolution Protocol (ARP) works in conjunction with Private VLAN Edge to
minimize broadcasts and maximize available bandwidth.
ƔInternet Group Management Protocol (IGMP) Snooping for IPv4 and IPv6 MLD v1 and v2 Snooping
provide fast client joins and leaves of multicast streams and limit bandwidth-intensive video traffic to only
the requestors.
ƔMulticast VLAN Registration (MVR) continuously sends multicast streams in a multicast VLAN while
isolating the streams from subscriber VLANs for bandwidth and security reasons.
ƔPer-port broadcast, multicast, and unicast storm control prevents faulty end stations from degrading
overall systems performance.
ƔVoice VLAN simplifies telephony installations by keeping voice traffic on a separate VLAN for easier
administration and troubleshooting.
ƔCisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration across
all switches.
ƔRemote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2
switch network from any other switch in the same network.

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 5 of 17
ƔFor enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON)
software agent supports four RMON groups (history, statistics, alarms, and events).
ƔLayer 2 traceroute eases troubleshooting by identifying the physical path that a packet takes from source
to destination.
ƔTrivial File Transfer Protocol (TFTP) reduces the cost of administering software upgrades by
downloading from a centralized location.
ƔNetwork Time Protocol (NTP) provides switches with accurate and consistent time of day.
Network Management
The Cisco Catalyst 2960-SF Series Switches offer a superior CLI for detailed configuration and administration.
2960-SF switches can also be managed with Cisco Network Assistant, a PC-based tool for quick configuration
based on preset templates, or the Cisco Prime™enterprise network management suite.
Cisco Network Assistant
A PC-based network management application designed for small and medium-sized business (SMB) networks
with up to 250 users, Cisco Network Assistant offers centralized network management and configuration
capabilities. Cisco Network Assistant uses Cisco Smartports technology to simplify both initial deployment and
ongoing maintenance. This application also features an intuitive GUI where users can easily apply common
services across Cisco switches, routers, and access points, such as:
ƔConfiguration management
ƔTroubleshooting advice
ƔInventory reports
ƔEvent notification
ƔNetwork security settings
ƔPassword synchronization
ƔDrag-and-drop Cisco IOS Software upgrades
ƔSecure wireless
For detailed information about Cisco Network Assistant, visit http://www.cisco.com/go/cna.
Cisco Prime Network Management
Cisco Prime network management solutions provide comprehensive network lifecycle management. Prime
provides an extensive library of easy-to-use features to automate the initial and day-to-day management of your
Cisco network. Cisco Prime integrates hardware and software platform expertise and operational experience into a
powerful set of workflow-driven configuration, monitoring, troubleshooting, reporting, and administrative tools.
Including:
ƔSupport for new Cisco hardware platforms the day they ship
ƔConfiguration management tools built from Cisco experience and Cisco Validated Design
recommendations
ƔMonitoring and troubleshooting capabilities that incorporates Cisco hardware best practices and
diagnostics features

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 17
ƔAutomation in managing hardware inventories, security vulnerabilities (PSIRTS) and platform end-of-life
and support cycles
For detailed information about Cisco Prime, visit http://www.cisco.com/go/prime.
Security Features
The Cisco Catalyst 2960-SF Series Switches provide superior Layer 2 threat defense capabilities for mitigating
man-in-the-middle attacks (such as MAC, IP, and ARP spoofing). TrustSec, a primary element of Borderless
Security Architecture, helps enterprise customers secure their networks, data and resources with policy-based
access control, identity and role-aware networking, pervasive integrity, and confidentiality. Borderless security is
enabled by the following feature sets in the Cisco Catalyst 2960-SF Series Switches:
ƔThreat defense
ƔCisco TrustSec
ƔOther advanced security features
Threat Defense
Cisco Integrated Security Features is an industry-leading solution available on Cisco Catalyst Switches that
proactively protects your critical network infrastructure. Delivering powerful, easy-to-use tools to effectively prevent
the most common and potentially damaging Layer 2 security threats, Cisco Integrated Security Features provides
robust security throughout the network. Cisco Integrated Security Features include Port Security, DHCP Snooping,
Dynamic ARP Inspection, and IP Source guard.
ƔPort Security secures the access to an access or trunk port based on MAC address. It limits the number of
learned MAC addresses to deny MAC address flooding.
ƔDHCP Snooping prevents malicious users from spoofing a DHCP server and sending out bogus
addresses. This feature is used by other primary security features to prevent a number of other attacks
such as ARP poisoning.
ƔDynamic ARP Inspection (DAI) helps ensure user integrity by preventing malicious users from exploiting
the insecure nature of the ARP protocol.
ƔIP source guard prevents a malicious user from spoofing or taking over another user’s IP address by
creating a binding table between the client’s IP and MAC address, port, and VLAN.
Cisco TrustSec
TrustSec secures access to the network, enforces security policies, and delivers standard based security solutions
such as 802.1X enabling secure collaboration and policy compliance. TrustSec capabilities reflect Cisco thought
leadership, innovations, and commitment to customer success. These new capabilities include:
ƔFlexible authentication that supports multiple authentication mechanisms including 802.1X, MAC
Authentication Bypass and web authentication using a single, consistent configuration.
ƔOpen mode that creates a user friendly environment for 802.1X operations.
ƔIntegration of device profiling technology and guest access handling with Cisco switching to
significantly improve security while reducing deployment and operational challenges.
ƔRADIUS Change of Authorization and downloadable calls for comprehensive policy management
capabilities.

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 7 of 17
Ɣ802.1X Supplicant with Network Edge Access Transport (NEAT) enables extended secure access
where compact switches in the conference rooms have the same level of security as switches inside the
locked wiring closet.
Other Advanced Security Features
Other Advanced Security features include but are not limited to:
ƔPrivate VLAN Edge provides security and isolation between switch ports, which helps ensure that users
cannot snoop on other users’ traffic.
ƔMultidomain Authentication allows an IP phone and a PC to authenticate on the same switch port while
placing them on appropriate voice and data VLAN.
ƔPort-based ACLs for Layer 2 interfaces allow security policies to be applied on individual switch ports.
ƔSecure Shell (SSH) Protocol, Kerberos, and Simple Network Management Protocol Version 3
(SNMPv3) provide network security by encrypting administrator traffic during Telnet and SNMP sessions.
SSH Protocol, Kerberos, and the cryptographic version of SNMPv3 require a special cryptographic
software image because of U.S. export restrictions.
ƔBidirectional data support on the Switched Port Analyzer (SPAN) port allows Cisco Intrusion Detection
System (IDS) to take action when an intruder is detected.
ƔTACACS+ and RADIUS authentication facilitates centralized control of the switch and restricts
unauthorized users from altering the configuration.
ƔMAC Address Notification allows administrators to be notified of users added to or removed from the
network.
ƔMultilevel security on console access prevents unauthorized users from altering the switch
configuration.
ƔBridge protocol data unit (BPDU) Guard shuts down Spanning Tree PortFast-enabled interfaces when
BPDUs are received to avoid accidental topology loops.
ƔSpanning Tree Root Guard (STRG) prevents edge devices not in the network administrator’s control from
becoming Spanning Tree Protocol root nodes.
ƔIGMP filtering provides multicast authentication by filtering out nonsubscribers and limits the number of
concurrent multicast streams available per port.
ƔDynamic VLAN assignment is supported through implementation of VLAN Membership Policy Server
client capability to provide flexibility in assigning ports to VLANs. Dynamic VLAN facilitates the fast
assignment of IP addresses.
High Availability
Cisco Catalyst 2960-SF Series Switches provide Cisco FlexStack stacking to support increased resiliency and
availability. Other high-availability features include:
ƔCross-Stack EtherChannel provides the ability to configure Cisco EtherChannel technology across
different members of the Cisco FlexStack for high resiliency.
ƔFlexlink provides link redundancy with convergence time less than 100 ms.

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 8 of 17
ƔIEEE 802.1s/w Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP)
provide rapid spanning-tree convergence independent of spanning-tree timers and also offer the benefit of
Layer 2 load balancing and distributed processing. Stacked units behave as a single spanning-tree node.
ƔPer-VLAN Rapid Spanning Tree (PVRST+) allows rapid spanning-tree reconvergence on a per-VLAN
spanning-tree basis, without requiring the implementation of spanning-tree instances.
ƔSwitch-port autorecovery (Errdisable) automatically attempts to reactivate a link that is disabled because
of a network error.
Enhanced Quality of Service
The Cisco 2960-SF Series Switches offers intelligent services that keep everything flowing smoothly. Industry-
leading mechanisms for marking, classification, and scheduling deliver superior performance for data, voice, and
video traffic, all at wire speed.
QoS features supported in the Cisco 2960-SF Series Switches include:
ƔCross-stack QoS allows QoS to be configured across the entire FlexStack stack.
Ɣ802.1p class of service (CoS) and differentiated services code point (DSCP) field classification are
provided, using marking and reclassification on a per-packet basis by source and destination IP address,
MAC address, or Layer 4 TCP/UDP port number.
ƔCisco control-plane and data-plane QoS ACLs on all ports help ensure proper marking on a per-packet
basis.
ƔFour egress queues per port help enable differentiated management of different traffic types across the
stack.
ƔShaped Round Robin (SRR) scheduling helps ensure differential prioritization of packet flows by
intelligently servicing the ingress queues and egress queues.
ƔWeighted Tail Drop (WTD) provides congestion avoidance at the ingress and egress queues before a
disruption occurs.
ƔStrict priority queuing helps ensure that the highest-priority packets are serviced ahead of all other traffic.
ƔTrusted Boundary provides the ability to trust the QoS priority settings if an IP phone is present and to
disable the trust setting if the IP phone is removed, thereby preventing a malicious user.
ƔRate limiting is provided based on source and destination IP address, source and destination MAC
address, Layer 4 TCP/UDP information, or any combination of these fields, using QoS ACLs (IP ACLs or
MAC ACLs), class maps, and policy maps.
ƔUp to 64 aggregate or individual policers are available per Fast Ethernet or GbE port.
Location Awareness and Mobility
In order to provide delivery of a best-in-class network experience to end users, it’s critical for network access to be
location aware. A wide variety of devices can appear on the network, both wired (switches, routers, IP phones,
PCs, access points, controllers, video digital media players, and so on) and wireless (mobile devices, wireless
tags, rogues, and so on). In many industries, locating assets is primarily a manual process and is time consuming
and error prone. The inability to locate assets in real time and to help ensure their availability when and where they
are needed limits reaction time and efficiency.

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 9 of 17
Location services answer business-critical questions about both mobile assets and the users of those assets
regardless of whether those assets are connecting using wired or wireless, and hence directly improve their
organization’s profitability. Network Location Services also improve security and accelerate client troubleshooting
by locating an asset, user, or device on the network.
ƔNetwork visibility and control provide centralized visibility into wired and wireless devices on the network
and their location.
ƔLocation-assisted client troubleshooting enables tracking of wired or wireless clients for quick problem
resolution.
ƔAsset tracking and improved security provide centralized inventory of wired and wireless devices and
asset management for improved business processes.
ƔLocation based policy allows greater control and visibility. With EnergyWise, power policies can be set up
(to reduce the power or shut down the power from a port) based on the location.
ƔCisco Emergency Responder (CER) enhances emergency calling from Cisco Unified CallManager. It
helps assure that Cisco Unified CallManager sends emergency calls to the appropriate Public Safety
Answering Point (PSAP) for the caller’s location.
Specifications
Tables 4 through 9 provide hardware features, power specifications, management and standards support, and
safety and compliance information for the Cisco Catalyst 2960-SF Series Switches with LAN Base Software.
Table 4. Cisco Catalyst 2960-SF Series Switches Performance and Scalability
Performance and Scalability Numbers for All Switch Models
Forwarding bandwidth 88 Gbps
Switching bandwidth* 176 Gbps
Flash memory 64 MB
Memory DRAM 128 MB
Max VLANs 255
VLAN IDs 4000
Maximum transmission unit (MTU) 9198 bytes
Jumbo frames 9216 bytes
Resource Default QoS Dual
Unicast MAC addresses 8000 8000 8000
IPv4 IGMP groups 255 255 255
IPv4 MAC QoS access control entries (ACEs) 128 384 0
IPv4 MAC security ACEs 384 128 256
*Switching bandwidth is full-duplex capacity.

© 2012-2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 10 of 17
Table 5. Dimensions, Weight, Acoustic, MTBF, and Environmental Range
Dimensions (H x W x D)
Model Inches Centimeters
Cisco Catalyst 2960S-F48FPS-L
Cisco Catalyst 2960S-F48LPS-L
Cisco Catalyst 2960S-F24PS-L
1.75 x 17.5 x 15.2 4.5 x 44.5 x 38.6
Cisco Catalyst 2960S-F48TS-L
Cisco Catalyst 2960S-F24TS-L
Cisco Catalyst 2960S-F48TS-S
Cisco Catalyst 2960S-F24TS-S
1.75 x 17.5 x 12.37 4.5 x 44.5 x 31.4
Weight
Model Pounds Kilograms
Cisco Catalyst 2960S-F48FPS-L 13 5.9
Cisco Catalyst 2960S-F48LPS-L 12.5 5.7
Cisco Catalyst 2960S-F24PS-L 12.5 5.7
Cisco Catalyst 2960S-F48TS-L 10.5 4.8
Cisco Catalyst 2960S-F24TS-L 10 4.5
Cisco Catalyst 2960S-F48TS-S 10.5 4.8
Cisco Catalyst 2960S-F24TS-S 10 4.5
Environmental Ranges
Parameter Fahrenheit Centigrade
Operating temperature up to 5000 ft (1500 m) 23º to 113ºF -5º to 45ºC
Operating temperature up to 10,000 ft (3000 m) 23º to 104ºF -5º to 40ºC
Storage temperature up to 15,000 feet (4573 m) -13º to 158ºF -25º to 70ºC
Parameter Feet Meters
Operating altitude Up to 10,000 Up to 3000
Storage altitude Up to 13,000 Up to 4000
Operating relative humidity 10% to 95% noncondensing
Storage relative humidity 10% to 95% noncondensing
Acoustic Noise
Measured per ISO 7779 and declared per ISO 9296.
Bystander positions operating mode at 25°C ambient.
Sound Pressure Sound Power
Model LpA (Typical) LpAD (Maximum) LwA (Typical) LwAD (Maximum)
Cisco Catalyst 2960S-F48FPS-L
Cisco Catalyst 2960S-F48LPS-L
Cisco Catalyst 2960S-F24PS-L
42 dB 45 dB 5.2 B 5.5 B
Cisco Catalyst 2960S-F48TS-L
Cisco Catalyst 2960S-F24TS-L
Cisco Catalyst 2960S-F48TS-S
Cisco Catalyst 2960S-F24TS-S
44 dB 47 dB 5.4 B 5.7 B